PoSH for Startups: A First-Time Founder's Checklist

The most common thing first-time founders say when they first hear about PoSH compliance is: "I thought that only applied to big companies." It does not. If you have 10 or more employees — full-time, part-time, contract, intern, or remote — the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 applies to you. The threshold is 10 people. Not 50. Not 100. Ten.

"Seed stage or Series C — the Act doesn't care. 10 employees is the threshold. No exceptions."

When Does PoSH Apply to You?

Section 4 of the PoSH Act requires every employer with 10 or more employees to constitute an Internal Complaints Committee. This obligation arises the moment your headcount crosses that number — not when you raise your Series A, not when you start generating revenue, not when your investor asks you to get compliant during due diligence.

The headcount count is broader than your payroll. Under Section 2(e), "employee" includes any person employed at a workplace for any work on a regular, temporary, ad hoc, or daily-wage basis, whether directly or through an agent, including contract workers, interns, research scholars, and apprentices. If you have five full-time employees, four contractors, and two long-term interns — you have 11 employees for PoSH purposes, and the Act applies.

What You Need: The Five Elements

PoSH compliance has five distinct components, all of which are mandatory:

IC constitution. A formally constituted Internal Complaints Committee with a woman Presiding Officer, at least two other members, and one qualified External Member. Constituted by a formal written order from the employer.
Qualified External Member. Someone from an NGO or with documented experience in women's causes or employment law — not a friend, a CA, or a generic legal retainer who agreed to put their name on the document.
PoSH policy document. A written policy covering the definition of sexual harassment, the IC's composition and contact details, the complaint process, confidentiality obligations, and consequences. Distributed to all employees and displayed in the workplace.
Annual training. Documented training for all employees covering the mandatory modules — conducted at least once a year, with attendance records.
Annual report. Filed with the district officer every year, covering complaints received, disposed of, and pending. Even if no complaints were received, a nil-report must be filed.

The Founder's Compliance Checklist

PoSH Compliance Checklist — 8 Action Items

Count your actual headcount Include full-time employees, part-time staff, contractors on retainer, long-term interns, and remote workers. If you are at or above 10, you are in scope.

Identify your Presiding Officer Must be a woman employed at a senior level in your organisation. Discuss the role with her before assuming she will accept — it carries responsibilities and deserves proper briefing.

Source a qualified External IC Member This is typically the hardest step for startups. The member must have documented credentials — not just willingness. POSH360's network provides pre-vetted External Members with credentials on file.

Issue a formal IC constitution order Signed by the employer or authorised signatory. Names all members, their designations, and the duration of their appointment. This is the founding legal document of your IC.

Draft and distribute a PoSH policy Tailored to your specific workplace structure, including any remote or digital components. Sent to all employees with a read-acknowledgement. Pinned in your primary communication channel if remote-first.

Hold your IC's inaugural meeting Confirm IC member appointments, review the policy, establish operating procedures, and document everything in signed minutes. File the minutes digitally.

Conduct your first annual training All employees including contractors and interns. Cover all five mandatory modules. Collect signed attendance records. Schedule a separate IC member training session.

File your annual report with the district officer Even if no complaints were received, a nil report must be filed. Set a calendar reminder for 31 January each year. File for prior years where applicable.

The Cost Reality

One of the most persistent misconceptions is that PoSH compliance requires a dedicated legal team or a prohibitively expensive retainer. It does not. For a 10-25 person startup, the practical costs are: a one-time policy drafting fee, an External IC Member's annual retainer (typically between ₹15,000 and ₹40,000 per year depending on qualifications and involvement), and an annual training session. POSH360's plans are structured specifically for startups and cover all five elements from ₹7,999 per year.

The cost of non-compliance is substantially higher. Beyond the direct fines (up to ₹1,00,000 under the 2024 amendment), non-compliance during a funding due diligence is increasingly a red flag with institutional investors. Several VC firms have begun adding PoSH compliance certification as a condition precedent to investment in Seed and Series A rounds.

The Timeline: How Long Does It Take?

Most startups can achieve full PoSH compliance within two weeks if they work with a structured partner. The critical path is typically the External IC Member sourcing — which, without a pre-vetted network, can take four to six weeks. With POSH360's network, it takes 24 to 48 hours. Everything else — policy drafting, IC constitution, training, and annual report — can be done in parallel once the External Member is secured.

What This Means for You

Work through the eight-item checklist above. For each item you cannot tick off, you have a compliance gap. Identify the gaps, prioritise the External Member sourcing (since it is the longest-lead item), and start the process this week. If you have been non-compliant since your headcount crossed 10, earlier action reduces your exposure — waiting makes it worse.