GST, TDS and Compliance: Financial Regulations Every Indian Startup Must Follow in 2026
The Year Compliance Got Harder to Ignore
For most of India's startup ecosystem, compliance has historically been treated as something to manage on the side. File the returns, pay the taxes, hope nothing gets flagged. The assumption was that the system was slow and forgiving enough that errors would surface eventually but rarely urgently.
That assumption no longer holds in 2026.
The GST portal now uses AI-based matching to compare filings in real time and flag errors automatically. From December 1, 2025, the GSTN enforced hard cutoffs on older return periods, permanently blocking certain filings. From April 1, 2026, new rules on e-invoicing, ITC reconciliation, TDS correction windows, and invoice numbering all came into effect simultaneously. The Income Tax Act 2025, replacing the 1961 Act, tightened penalty structures across TDS, TCS, and information reporting. India's compliance environment is no longer slow and forgiving. It is fast, automated, and increasingly unforgiving of procedural failures.
For a startup navigating this environment for the first time, the stakes are real. A blocked GSTIN prevents e-way bill generation, which means goods cannot move. Blocked ITC reduces the cash available in the business. TDS defaults create penalties that compound. And a compliance record with visible gaps affects financing and investment decisions at exactly the stage when a startup needs those options to be open.
GST Registration: When It Applies and What It Requires
GST registration is mandatory for any business with an aggregate annual turnover above Rs. 40 lakhs for goods and Rs. 20 lakhs for services. For businesses operating in special category states, the threshold is lower. For e-commerce operators, registration is mandatory regardless of turnover.
The registration gives the business a GSTIN, which is required to issue tax invoices, collect GST from customers, and claim Input Tax Credit on purchases.
From April 1, 2026, the GST portal requires fresh invoice numbering series at the start of each financial year. Continuing the previous year's series creates reconciliation issues in GSTR-1 and can invite departmental scrutiny. New exporters must also file a fresh Letter of Undertaking in Form RFD-11 before generating any export invoice, since the LUT filed for FY 2025-26 expired on March 31, 2026.
The composition scheme remains available for eligible small businesses with turnover below Rs. 1.5 crore for goods and Rs. 50 lakhs for services. It simplifies compliance by replacing multiple returns with a quarterly filing and a flat tax rate, but it restricts the business from charging GST to customers and blocks ITC claims. For a startup selling primarily to other businesses, the composition scheme is usually the wrong choice.
GST Returns: The Filing Calendar and What Happens When You Miss It
The GSTR-1 filing deadline for monthly filers is the 11th of the following month. GSTR-3B, which reports the net tax liability and ITC claims, is due by the 20th for most taxpayers. Annual returns in GSTR-9 are due by December 31 following the end of the financial year.
Missing GSTR-3B costs Rs. 50 per day in late fees and, more critically, blocks the startup's buyers from claiming ITC on invoices issued by the startup. When a buyer cannot claim ITC because the supplier has not filed, the buyer tends to switch suppliers. For a startup building early customer relationships, this is a reputational and commercial problem, not just a compliance one.
From 2026, the GSTN portal has implemented a three-year time bar on return filing. Periods older than three years can no longer be filed or amended, meaning compliance gaps from earlier years that were intended to be fixed later are now permanently frozen.
The e-invoicing mandate has been progressively expanding. Businesses with an aggregate annual turnover above Rs. 10 crore must generate Invoice Reference Numbers through the IRP portal within 30 days. Non-compliance blocks ITC for the buyer and attracts penalties of up to Rs. 10,000 per invoice or 100 percent of the tax amount, whichever is higher.
TDS: What Startups Are Required to Deduct and When
TDS, or Tax Deducted at Source, is a mechanism under the Income Tax Act whereby the payer deducts a specified percentage of tax at the point of payment and remits it to the government.
Startups are required to deduct TDS on salaries paid to employees under Section 192, on professional fees above Rs. 30,000 under Section 194J, on rent above Rs. 2.4 lakh per year under Section 194I, on contractor payments under Section 194C, and on several other payment categories.
TDS deducted must be deposited by the 7th of the following month. Quarterly TDS returns must be filed in Form 24Q for salaries and Form 26Q for non-salary payments.
Under the Income Tax Act 2025, effective from April 1, 2026, Sections 448 to 468 reorganize all TDS and TCS default penalties into a single enforcement chapter. The Act treats withholding failures as central enforcement points rather than peripheral administrative matters. Importantly, the Act separately penalises the failure to deduct, the failure to deposit after deduction, and the failure to file the return, which means a startup that deducted TDS but filed the return late faces penalties on the filing failure even though the tax was deducted correctly. The correction statement window has also been tightened from April 1, 2026, with the filing window reduced to two years from the end of the financial year in which the original statement was due.
MCA Compliance and the Companies Act
Private limited companies registered under the Companies Act, 2013, have annual filing obligations with the Ministry of Corporate Affairs that are separate from tax compliance.
Form AOC-4, which contains the financial statements, must be filed within 60 days of the Annual General Meeting. Form MGT-7, the annual return, must be filed within 60 days of the AGM. Directors must file their KYC in Form DIR-3 KYC annually. Failure to file AOC-4 attracts penalties of Rs. 100 per day per form.
The Company Compliance Facilitation Scheme 2026, which opened from April 1, 2026, allows companies with overdue ROC forms to file with reduced additional fees and obtain relief from prosecution. Defunct companies can obtain a concessional route for strike-off via Form STK-2, protecting directors from disqualification. This is a time-limited window, and startups with historical filing gaps should consider acting on it promptly.
PF, ESI and Payroll Compliance
Once a startup has 20 or more employees, Provident Fund registration under the Employees' Provident Fund and Miscellaneous Provisions Act, 1952, becomes mandatory. The employer contribution is 12 percent of basic salary. ESI registration is required once the workforce exceeds 10 employees and wages are below Rs. 21,000 per month, with employer contributions at 3.25 percent.
Missing PF contributions attracts damages of up to 25 percent of the arrears, in addition to interest. These obligations begin the moment the employee threshold is crossed, not when the company decides to register.
Building a Compliance System That Does Not Break
The startups that handle compliance well in 2026 are not the ones with the largest compliance budgets. They are the ones who built the system early and maintained it consistently.
That means GST registration at the right time, not after the threshold is crossed and a retrospective liability has already accumulated. It means TDS deductions are tracked at the point of payment, not reconciled at year's end when the returns are due. It means MCA filings are done within the deadline rather than relying on condonation schemes that may not always be available.
SPKG & Co. LLP works with startups and growing businesses across Mumbai on end-to-end compliance management, covering GST registration and return filing, TDS computation and returns, MCA filings, and payroll compliance. The firm's partners bring eight years of practice across direct and indirect taxation, corporate law, and regulatory advisory, which means compliance advice is given with an understanding of how different obligations interact rather than in isolation. For a startup that needs to get compliance right from the start and keep it right as it grows, that breadth of expertise matters more than a narrow specialisation in any one area.