How to Design an ESOP for Startups in 2025: A Founder's Ultimate Guide

Let’s face it, the Startup India Rules, Regulations, and Legal Framework can be overwhelming when that first notice hits your inbox.
Maybe it’s a missed GST return or an investor asks for your DPIIT recognition certificate. And you’re left wondering, what now?
You're not alone. Many founders excel at building their business but miss key filings or tax updates and pay the price later.
Here’s your quick, conversational guide to the Startup India Rules, Regulations, and Legal Framework for 2025.
Getting recognised by the Department for Promotion of Industry and Internal Trade (DPIIT) is one of the most strategic moves a startup can make. It’s not just a formality, it unlocks real, tangible benefits that can accelerate your growth.
Here’s what DPIIT recognition brings to the table under Startup laws:
And the best part? The process is completely online, free, and paperless making it easily accessible for founders across India.
To understand the full scope of benefits, explore our blog on startup India registration benefits for startups.
You could be missing out on funding perks, tax breaks, and more. Fix that today.
Get recognisedBefore you start fundraising or applying for DPIIT recognition, your business must be legally incorporated.
Your legal structure not only defines your identity, it also determines your tax exposure, compliance requirements, and eligibility under Startup India Rules and regulations.
Eligible structures include:
Not sure what makes your startup eligible? Read our Startup India registration: A Step-by-Step Guide for a complete breakdown.
Getting your structure right lays the foundation for future legal compliance and filings.
Once your legal structure is set, the next layer of legal compliances includes taxation, filings, and regulatory disclosures that form the core of your startup’s legal framework in India
If your startup is recognised by DPIIT, you may be eligible for a 100% income tax exemption for any 3 consecutive assessment years out of the first 10 years since incorporation.
This benefit is provided under Section 80-IAC of the Income Tax Act, 1961, subject to the startup Eligibility under Startup India.
📌 Note: The application is to be applied through Form-1 at Startup India portal which is later to be reviewed and approved by Inter-Ministerial Board (IMB). Without approval, the exemption cannot be claimed.
Angel Tax refers to Section 56(2)(viib) of the Income Tax Act. It taxes the excess premium received on the issue of shares over the fair market value (FMV) as “income from other sources.”
Until recently, this provision applied only to investments from Indian resident investors.
But starting April 2024, the scope has widened. As per Finance Act, 2023, non-resident investors are also covered under Angel Tax provisions, meaning foreign VC funds and angels must now ensure that share issuances are backed by justifiable valuations.
DPIIT-recognised startups, however, remain exempt from this provision, provided they comply with:
Indian Resident Investors
B. Non-Resident Investors (NRIs, Foreign VCs)
It’s equally important that the startup maintains:
These not only satisfy investor audits but also streamline future due diligence.
In 2025, Indian startups are increasingly global, whether it's receiving foreign investment or expanding overseas. But with international operations comes RBI scrutiny.
Let’s decode the two key areas where RBI guidelines for startups come into play:
Startups in India can receive 100% Foreign Direct Investment (FDI) under the automatic route in most sectors (i.e., without prior government approval). This is governed by FEMA (Non-Debt Instruments) Rules, 2019, and RBI circulars, forming a key part of FEMA and FDI compliances for startups.
Here’s what you must do when raising FDI:
⚠️ Non-compliance with these rules can attract compounding penalties under FEMA.
If you’re planning to incorporate a subsidiary, JV, or branch office outside India, say in the US, Singapore, or UAE, your startup must comply with the Overseas Investment Rules and Regulations, 2022, issued by RBI under FEMA.
This is not as simple as setting up a Delaware entity and wiring funds.
Here’s what your startup needs to do for ODI:
Depending on the nature of your investment, you may need to choose between:
⚠️ Even one missed filing (like APR or delayed ODI registration) can block future remittances or draw RBI scrutiny.
Expansion Tip: Create a checklist before wiring any money abroad. You’ll save yourself months of back-and-forth later.
Stay ahead on tax exemptions, Angel Tax, FDI, and ODI compliance, without the last-minute scramble.
Get compliantThe Goods and Services Tax (GST) is governed under the CGST Act, 2017, and it's a key compliance area for startups.
If your annual revenue crosses ₹40 lakh (goods) or ₹20 lakh (services), GST registration is mandatory. For special category states, the limit is ₹10 lakh. Even if you’re below the limit, voluntary GST registration helps you:
Monthly compliance includes:
🚨 Non-compliance can lead to late fees (₹50/day) and interest (18% p.a.).
While GSTR-1, GSTR-3B, and GSTR-9 are the most common, GST compliance doesn’t end there, many other forms also exist in order to comply with GST provisions.
Startups making specified payments such as salary, rent, contractor fees, or professional fees must deduct tax at source (TDS) as per Chapter XVII-B of the Income Tax Act, 1961.
Here’s your monthly TDS checklist:
Late payment?
You’re liable for interest at 1.5% per month plus penalty under Section 234E.
If your startup is registered as a Private Limited Company or LLP, you must file annual returns with the Registrar of Companies (ROC) under the Companies Act, 2013.
Here are the essential forms and when they’re due:
Pro Tip: Missing even one filing triggers a ₹100/day penalty per form, with no upper limit.
As a founder, your code, brand, content, even the product name, are assets.But unless protected, they’re vulnerable to being copied, cloned, or contested.
Let’s break down the two core compliance areas every startup must cover:
If you’ve built it, brand it. If you’ve designed it, patent it. If you’ve written it, copyright it. That’s the golden rule in a fast-paced startup ecosystem.
Here’s how to protect your creations under Indian IP laws:
IP Right |
What it Protects |
Governing Law |
Trademark |
Brand names, logos, taglines |
Trademark Act, 1999 |
Patent |
Novel inventions, processes, technology |
Patents Act, 1970 |
Copyright |
Code, creative works, product designs |
Copyright Act, 1957 |
DPIIT-recognised startups can claim:
Don’t wait until you go viral, start the application process early. Once your work is out in the public domain, it becomes vulnerable.
Also, ensure you:
The Digital Personal Data Protection (DPDP) Act, 2023 is India’s most comprehensive privacy law to date. If your startup collects personal data, whether via website, app, or API, you are classified as a Data Fiduciary under this Act.
Here are your core obligations:
⚠️ Penalties under DPDP Act can go up to ₹250 crores for non-compliance.
Startups scale fast but skipping HR compliance isn’t worth the risk. Even with a lean team, ignoring labour laws can lead to penalties and reputational harm.
Here’s what you must cover to stay compliant.
Whether you're hiring a senior developer or an intern, India’s labour laws apply. Under the Minimum Wages Act, 1948, startups must pay at least the minimum wage notified by their respective State Government, depending on:
In addition to wages, the following statutory contributions may apply:
Compliance Item |
Applicability |
Relevant Law |
Provident Fund (PF) |
Mandatory if 20+ employees |
Employees’ Provident Fund & Miscellaneous Provisions Act, 1952 |
Employees’ State Insurance (ESI) |
If salary < ₹21,000/month and 10+ employees |
Employees’ State Insurance Act, 1948 |
Professional Tax |
Varies by state |
State-specific laws (e.g., Maharashtra, Karnataka) |
Payroll Requirements:
📌 Even if you only have interns or contract staff, ensure you’ve documented contracts and paid stipends transparently.
Under the Maternity Benefit (Amendment) Act, 2017, startups must offer:
Also, maternity benefits are applicable from day one of employment, there is no minimum tenure requirement.
📋 Startups must not terminate or deny promotions during maternity periods. Doing so may result in legal action.
As for paternity leave, Indian labour law does not mandate it. But many progressive startups voluntarily offer 10–15 days of paid paternity leave to encourage workplace equity and boost employee retention.
When it comes to termination, retrenchment, or layoffs, startups must comply with the Industrial Disputes Act, 1947.
Key requirements include:
Startups must also issue:
⚠️ Avoid arbitrary or verbal terminations. They’re not just unprofessional, they’re legally risky.
A labour dispute can land you in conciliation or labour court, damaging your brand and investor trust.
If your startup operates in electronics, hardware, or manufacturing, you must comply with the Environment (Protection) Act, 1986 and CPCB guidelines.
Key requirements include:
Non-compliance can lead to penalties and risk your funding eligibility.
Environmental, Social, and Governance (ESG) metrics are becoming investor essentials.
While not mandatory for private startups yet, SEBI’s BRSR norms are already shaping funding and IPO readiness.
Track metrics like:
🌱 ESG-focused startups attract global VCs, climate grants, and government support.
Streamline your startup compliance with our easy-to-follow action plan.
Simplify nowEven beyond tax and labour laws, startups must follow a few essential legal requirements that often go unnoticed:
Mandatory for companies with 10 or more employees.Startups must:
All offices, including home offices and coworking spaces, must be registered under the state-specific law within 30 days of starting operations.
All business agreements, vendor, cofounder, freelancer, should be legally binding and clearly documented with scope, payment terms, and timelines.
Include arbitration in contracts to avoid legal disputes. It enables faster, private resolution under the Arbitration and Conciliation Act, 1996.
These small legal steps go a long way in protecting your startup’s foundation.
India is one of the world’s fastest-growing startup ecosystems. But legal non-compliance? It can pull the brakes fast.
From DPIIT registration and RBI filings to POSH and environmental laws, every regulation adds a layer of protection, not just paperwork.
By aligning with the legal compliances required under India's startup policy, you're not just avoiding penalties, you’re building trust, transparency, and a robust legal framework for sustainable growth
Avoid penalties, delays, and investor red flags. Start with the right compliances today.
Get startedQ. Which regulatory body in India is responsible for regulating and promoting startups?
The Department for Promotion of Industry and Internal Trade (DPIIT) under the Ministry of Commerce and Industry is the key regulatory body promoting startups in India. It manages the Startup India initiative and grants official recognition to eligible startups.
Q.Why is DPIIT recognition important for startups in India?
DPIIT recognition offers tax benefits, Angel Tax exemption, fast-track IP support, and access to government tenders, making it a key part of the Startup India rules and regulations.
Q. What is included in a startup compliance checklist?
A startup compliance checklist includes DPIIT recognition, GST filings, income tax returns, MCA filings, PF/ESI registrations, IP protection, and data privacy compliance.
Q. What are RBI guidelines for startups?
RBI guidelines for startups cover FDI and ODI compliance. Startups must file FC-GPR, maintain valuation reports, and follow FEMA rules for foreign investments.
Q. Can a startup raise foreign funding without RBI compliance?
No. As per RBI guidelines for startups, all foreign investments must be reported via FC-GPR, with proper valuation and adherence to FEMA norms.
Q. Are all startups eligible for tax benefits in India?
Only DPIIT-recognised startups that meet Section 80-IAC conditions can claim a 3-year tax holiday. This is a major part of the Startup India legal framework.
Q. What is Form FC-GPR in startup compliance?
Form FC-GPR is filed with RBI to report the allotment of shares to foreign investors. It’s mandatory under RBI guidelines for startups.
Q.Why is DPIIT recognition important for startups in India?
DPIIT recognition offers tax benefits, Angel Tax exemption, fast-track IP support, and access to government tenders, making it a key part of the Startup India rules and regulations..
Every startup is different. Get a checklist tailored to your structure, stage, and goals.
Get on a 1:1 call with us