Annual ROC Compliance Checklist for Private Limited Companies
Incorporation isn't the finish line — it's the start of a yearly ROC filing cycle. Here's a realistic month-by-month checklist private limited companies can actually follow.
Key takeaways
- AOC-4, MGT-7/MGT-7A, ADT-1, and DIR-3 KYC are the four recurring filings every private limited company must track annually.
- All ROC deadlines count from the AGM date, so a delayed AGM delays everything downstream.
- Late filing fees accrue per day, and three consecutive years of default can disqualify directors company-wide.
- DIR-3 KYC applies to every DIN holder every year, even with zero changes to report.
- A dormant or loss-making company still has to file — only formal closure stops the annual filing clock.
Most founders treat incorporation as the finish line. In reality, it's the starting gun for a yearly cycle of ROC filings that runs for as long as the company exists — whether it's turning a profit, sitting idle, or barely operating. Skip a filing or two, thinking you'll catch up later, and the additional fees stack up fast, directors can find themselves disqualified from holding office in any company, and the business ends up flagged as non-compliant on the MCA portal, which investors and lenders notice immediately. Take a founder who incorporated quietly in one year, ran a handful of transactions, and assumed that low activity meant the paperwork could wait — by the time they logged into the MCA portal two years later, three annual filings were overdue and the accumulated late fees had crossed the original incorporation cost several times over. This checklist lays out what actually needs to be filed, when, and how to build a calendar you can realistically stick to.
The Core Annual Filings to Track
Company law compliance splits into two broad buckets: event-based filings triggered by something happening — a director resigning, the registered office shifting, shares being allotted — and annual filings that fall due every single year regardless of what happened in the business. It's the annual bucket that trips up most small companies, because there's no obvious trigger reminding you it's due. Four filings make up the core of this annual cycle for a private limited company.
- AOC-4 (financial statements): filed within 30 days of the AGM, this uploads the board report, balance sheet, profit and loss statement, and auditor's report to the MCA registry. Companies that must prepare consolidated financials file AOC-4 CFS separately.
- MGT-7 or MGT-7A (annual return): filed within 60 days of the AGM, this captures shareholding pattern, director details, and key corporate changes during the year. Small companies and one-person companies use the simplified MGT-7A; everyone else files MGT-7.
- DIR-3 KYC: every individual holding a Director Identification Number must confirm their KYC details every financial year. Miss it and the DIN gets deactivated until the KYC is filed along with a late fee.
- ADT-1 (auditor appointment): filed within 15 days of the AGM whenever a statutory auditor is appointed or reappointed, most commonly for a five-year block appointment made at the first AGM.
Board Meetings and AGM: The Governance Backbone
None of these filings mean much if the underlying governance hasn't actually happened. A private limited company must hold a minimum number of board meetings through the year, with a cap on the gap between two consecutive meetings, and the financial statements that go into AOC-4 need to be approved by the board before they're filed — not after. The Annual General Meeting has to be held within six months of the financial year closing, which in practice means by the end of September for companies following an April-to-March year, and the first AGM after incorporation gets a slightly longer runway. Miss the AGM date and every downstream filing that depends on it — AOC-4, MGT-7, ADT-1 — is automatically late too, even if the forms themselves are ready to go. For a small company that mostly coordinates over calls and messages, the fix isn't to hold longer meetings — it's to formalise even a short quarterly discussion into a proper minute book, since it's the paper trail, not the length of the meeting, that actually satisfies this requirement.
A Realistic Annual Compliance Calendar
Instead of tracking each form's deadline in isolation, it helps to see the whole year laid out as one calendar. Here's how a typical financial-year cycle looks for a company following the April to March year:
| Period | What's Due | Typical Form | Why It Matters |
|---|---|---|---|
| April – May | Board meeting to approve previous year's financial statements | Board resolution (internal) | Financials must be board-approved before going to shareholders |
| June – September | Annual General Meeting | AGM notice & minutes (internal) | Must be held within 6 months of financial year-end |
| Within 15 days of AGM | Auditor appointment or reappointment | ADT-1 | Confirms who audits the company for the coming term |
| Within 30 days of AGM | Filing of financial statements | AOC-4 | Puts the balance sheet and P&L on public record |
| Within 60 days of AGM | Filing of annual return | MGT-7 / MGT-7A | Records shareholding and director details for the year |
| By the notified September deadline | Director KYC confirmation | DIR-3 KYC | Keeps every director's DIN active |
| Ongoing through the year | Minimum board meetings, statutory registers updated | Internal records | The governance backbone the filings rely on |
What Happens If You Miss a Deadline
The immediate cost of a late filing is an additional fee charged per day of delay, and unlike a flat penalty, this keeps growing the longer a company waits — a form that's ninety days late can end up costing several times its normal filing fee. The bigger risk shows up later: directors of a company that has failed to file financial statements or annual returns for three consecutive years can be disqualified from being appointed or continuing as a director in any company, not just the defaulting one. A single missed AOC-4 rarely stays a single default for long either — by the time the next AGM comes around, MGT-7 and DIR-3 KYC deadlines often slip along with it, turning one oversight into three separate defaults sitting on the company's record. On top of that, a company with pending annual filings gets tagged as non-compliant on the MCA's public records, which surfaces the moment a bank, investor, or acquirer runs due diligence. Building a simple habit — a calendar reminder for each date above, a digital signature renewed before it expires, and a CA or company secretary who flags the AGM date early — is far cheaper than untangling a multi-year default later.
Frequently asked questions
Do I need to file ROC returns if my company had no business activity during the year?
Yes. AOC-4 and MGT-7/MGT-7A are due every financial year regardless of whether the company traded, made a profit, or stayed completely dormant. The only way to stop this obligation is to formally close the company through strike-off or another exit route — simply not operating doesn't pause the filing requirement.
What is the difference between MGT-7 and MGT-7A?
MGT-7A is a simplified annual return form for small companies and one-person companies, asking for less detail than the standard MGT-7. Whether a company qualifies as 'small' depends on its paid-up capital and turnover falling under the thresholds defined in the Companies Act, so it's worth checking eligibility each year rather than assuming it carries over.
Can the AGM be held after the six-month deadline if the company needs more time?
A company can apply to the Registrar for an extension in genuine cases, but this needs to be requested before the original deadline lapses, not after. Routinely relying on extensions is a red flag during due diligence, so it's best treated as an exception rather than a planning tool.
Does a private limited company need a full statutory audit every year regardless of size?
Yes — unlike LLPs, every private limited company must get its accounts audited annually by a chartered accountant regardless of turnover, and the audited financials feed directly into AOC-4. There's no turnover-based exemption from a statutory audit the way there is for tax audit under income tax law.
What happens to DIR-3 KYC if a director already filed it last year?
DIR-3 KYC has to be filed every financial year for every DIN holder, even if nothing about the director's details has changed. Directors who filed in a prior year without any change can typically use the simpler web-based route rather than the full e-form, but the filing itself can't be skipped.
Who is actually responsible if the company misses a ROC filing deadline?
The company and its officers in default — typically the directors, and specifically the company secretary where one is required — are jointly responsible under the Companies Act. In a small founder-run company without a dedicated CS, this responsibility usually rests on the directors, which is exactly why disqualification risk is personal, not just corporate.
This article is for general informational purposes only and does not constitute professional tax, legal, or financial advice. Rules and rates change, so consult a qualified Chartered Accountant for advice specific to your situation.
Related reading
How to Strike Off a Defunct Company Without Future Liability
Letting a defunct company go quiet doesn't close it — it just racks up penalties and disqualification risk. Here's how to strike it off properly under STK-2.
DIR-3 KYC and Director Compliance: Deadlines You Cannot Miss
DIR-3 KYC isn't a one-time step at DIN allotment — it's an annual filing every director must repeat, or risk waking up to a deactivated DIN overnight.
LLP vs Private Limited Company: Compliance Burden Compared
LLP or private limited company isn't just a setup-cost decision — it shapes your audit bill, filing calendar, and ability to raise funding for years to come.