Corporate & Commercial Law

Corporate & Commercial Law

Running a business in India requires ongoing legal compliance, from incorporation through each contract, regulatory filing, and evolving compliance requirements. For startups and growing companies, gaps between legal requirements and actual practices are common and often remain unnoticed until issues arise.

This page provides general legal information on corporate and commercial law matters under Indian law.

Who Encounters Corporate & Commercial Legal Issues

Corporate and commercial legal matters arise throughout a business’s lifecycle. They are especially relevant for:

  • Startups and early-stage companies navigating incorporation, founder agreements, and initial compliance obligations
  • Small and medium businesses operating under contracts that have never been legally reviewed.
  • Technology companies that handle data, digital platforms, or software, resulting in compliance obligations under both corporate law and the DPDP Act, 2023
  • Companies receiving legal notices relating to contract disputes, regulatory non-compliance, or governance failures
  • Business owners who require commercial documentation, such as vendor agreements, service contracts, NDAs, and similar instruments

Corporate Structuring & Statutory Compliance

Choosing the Right Legal Structure

The legal structure of a business, whether a private limited company, LLP, OPC, or partnership, determines its regulatory framework, compliance obligations, and the personal liability of its owners. This decision is more than administrative; it fundamentally affects taxation, fundraising, governance, and exit options.

Legal advisory on corporate structuring requires a review of the business’s specific operational and regulatory context, rather than applying a standard template.

Ongoing Statutory Compliance Under the Companies Act

Once incorporated, companies in India are subject to ongoing statutory obligations under the Companies Act, 2013, including annual filings with the ROC, board meeting requirements, maintenance of statutory registers, and compliance with applicable rules and notifications. Non-compliance can attract penalties and, in some cases, personal liability for directors.

For technology-driven companies, compliance obligations now extend beyond company law to include the DPDP Act, 2023, and DPDP Rules, 2025, creating an intersection between corporate compliance and data protection that many businesses are currently unprepared for, with a compliance deadline of May 13, 2027.

Commercial Contracts: Drafting & Review

A poorly drafted contract is not only a legal issue but also an operational risk. Ambiguous payment terms, undefined deliverables, missing termination clauses, and uncapped liabilities can lead to costly and time-consuming disputes. Most of these disputes are preventable with proper contract drafting from the outset.

Common Commercial Contracts

Legal advisory and drafting in this area covers the following categories of commercial agreements:

  • Vendor and supplier agreements: terms of supply, payment, liability, and dispute resolution
  • Service agreements: scope of work, timelines, deliverables, and termination rights
  • Non-Disclosure Agreements (NDAs): protecting confidential information in business relationships
  • Founders’ agreements: equity, roles, vesting, and exit provisions for co-founders
  • Technology and SaaS contracts: licensing, data handling, uptime obligations, and IP ownership
  • Consultancy and freelancer agreements: engagement terms, IP assignment, and payment structure

Contract Review

Businesses often sign contracts prepared by the other party, such as suppliers, clients, platforms, or investors. Reviewing these contracts before signing helps identify terms that create disproportionate risk, inadequate liability caps, and inconvenient governing law or jurisdiction clauses.

Legal Advisory for Startups & Growing Businesses

Startups in India often postpone legal work in the early stages due to resource constraints. However, delaying legal matters increases risk. Cap table errors, undocumented founder arrangements, data compliance gaps, and unreviewed vendor contracts become much harder and more expensive to address as the business grows.

Common legal issues that early-stage and growing startups encounter include:

  • No founders’ agreement, or an informal arrangement that becomes contentious
  • Contracts with clients or vendors that were never reviewed
  • Employee agreements that do not include proper IP assignment clauses
  • Data collection without adequate privacy documentation, which is an increasing risk under the DPDP Rules, 2025, with the compliance deadline approaching in May 2027
  • Regulatory filings were missed or delayed, resulting in compounding penalties.

Seeking legal advice at the appropriate stage, rather than after a problem arises, is significantly more cost-effective.

Applicable Laws

  • Companies Act, 2013
  • Limited Liability Partnership Act, 2008
  • Indian Contract Act, 1872
  • Digital Personal Data Protection Act, 2023, and DPDP Rules, 2025 (for technology businesses)
  • Relevant MCA rules, notifications, and judicial precedents

Frequently Asked Questions (FAQs)

Yes. A founders' agreement is one of the most important legal documents for an early-stage startup. It covers equity split, roles and responsibilities, vesting schedules, exit scenarios, and decision-making processes. Without it, common disputes between founders lack a clear resolution framework and may lead to the company's dissolution.

A contract is enforceable in India if it meets the requirements of the Indian Contract Act, 1872, such as free consent, lawful consideration, and a lawful object. However, enforceability does not guarantee that the contract is appropriate for managing risk. Many enforceable contracts include terms that create disproportionate liability, unlimited indemnity, or unfavorable dispute resolution clauses. Legal review helps identify and address these issues early.

A private limited company in India must meet several annual requirements under the Companies Act, 2013. These include filing financial statements and annual returns with the ROC, holding annual general meetings, maintaining statutory registers, and meeting board meeting requirements. Additional obligations may apply based on the company's activities, turnover, and sector regulations. Penalties for non-compliance increase over time.

Yes. If your company collects any digital personal data, such as names, contact numbers, email addresses, device identifiers, or location, from individuals in India, the Digital Personal Data Protection Act, 2023 applies. The DPDP Rules, 2025, notified on November 13, 2025, set out specific requirements: a plain-language consent notice before data collection, minimum security safeguards including encryption and access controls, a 72-hour breach notification to the Data Protection Board, and grievance redressal within 90 days. Full compliance is required by May 13, 2027. For technology companies, corporate compliance and data protection compliance are now closely linked.

Discuss a Corporate or Commercial Legal Matter

Please contact us to request an appointment regarding corporate compliance, commercial contracts, startup legal advisory, or regulatory obligations.