A ₹30 lakh compliance gap discovered three weeks before DRHP filing cost a Bangalore-based SaaS company its entire IPO window in late 2025. The merchant banker’s due diligence flagged unresolved FEMA compounding, missing independent directors, and two years of unfiled secretarial audit reports. SEBI returned the DRHP with 47 observations. The company spent the next six months — and an additional ₹45 lakh in advisory fees — just getting back to where it should have been 12 months earlier. This is not an edge case. According to market data, roughly 30% of DRHPs filed with SEBI receive material observations related to corporate governance and compliance gaps. Every one of those observations costs time, money, and market confidence.
Quick Summary
Who this is for: Companies planning a mainboard or SME IPO within the next 12-24 months
What you will get: A month-by-month pre-IPO compliance checklist covering SEBI ICDR eligibility, LODR governance requirements, board restructuring, secretarial audit, ESOP cleanup, FEMA remediation, and DRHP preparation
Key risk: Unresolved compliance gaps delay SEBI approval by 3-6 months and cost ₹30-75 lakh in remediation
Time to act: If you are targeting a 2027 listing, the 12-month clock starts NOW
What Is a Pre-IPO Compliance Audit?
A pre-IPO compliance audit is a systematic, end-to-end review of your company’s regulatory, governance, financial, and secretarial health — measured against the standards that SEBI, the stock exchanges (NSE/BSE), and the Companies Act 2013 will enforce once you are listed. It is not a one-time event. It is a 12-month programme that transforms a privately held company into a listing-ready entity.
The audit covers five pillars: corporate governance structure (board composition, committees, policies), regulatory compliance history (ROC filings, FEMA compliance, past penalties), financial readiness (restated financials, auditor qualifications), secretarial health (secretarial audit trail, statutory registers, resolutions), and capital structure integrity (cap table, ESOP, dematerialisation, share transfers).
The reason this matters in 2026 more than ever: SEBI has progressively tightened disclosure requirements through the SEBI ICDR (Amendment) Regulations, 2025 and the SEBI LODR Master Circular of January 2026. Merchant bankers now face stricter personal liability for due diligence failures. The bar for IPO-readiness has never been higher.
Why Start 12 Months Before?
The instinct is to treat IPO compliance as a “last 90 days” sprint. That instinct is expensive. Here is what actually takes time:
Appointing independent directors who meet the “independence” criteria under Section 149(6) of the Companies Act 2013 and have no disqualification under Section 164 — finding qualified candidates, conducting due diligence on their other directorships, and getting shareholder approval — takes 2-4 months. Preparing restated financial statements under IndAS for the last 3-5 financial years takes 3-6 months depending on the complexity of your corporate structure. Resolving past FEMA non-compliances through RBI compounding can take 6-12 months. Filing overdue ROC forms and paying accumulated penalties under Section 403 of the Companies Act — at ₹100 per day per form with no cap — requires early identification.
If you compress all of this into 3-4 months, something breaks. Either you pay a premium for rush advisory work, or you ship a DRHP with disclosed risk factors that institutional investors will use to negotiate your valuation down.
SEBI ICDR Eligibility: Which Route Are You Taking?
Before building your compliance roadmap, you need to know which eligibility route applies to your company under the SEBI (Issue of Capital and Disclosure Requirements) Regulations, 2018.
| Criterion | Profitability Route Regulation 6(1) |
QIB Route Regulation 6(2) |
SME IPO Chapter IX |
|---|---|---|---|
| Net Tangible Assets | ≥ ₹3 Cr (each of last 3 years) | No specific threshold | ≥ ₹3 Cr (last year) |
| Operating Profit | ≥ ₹15 Cr avg (3 of last 5 years) | Not required | ≥ ₹1 Cr EBITDA (2 of last 3 years) |
| Net Worth | ≥ ₹1 Cr (each of last 3 years) | Positive (at least 1 of last 3 years) | ≥ ₹1 Cr |
| QIB Allotment | Standard (50% in book building) | Minimum 75% to QIBs | Not applicable |
| Post-Issue Capital | ≥ ₹10 Cr | ≥ ₹10 Cr | ≤ ₹25 Cr |
| Best For | Profitable, established companies | High-growth startups (Zomato model) | Smaller companies, early growth |
Your eligibility route determines the financial track record you need to present and the depth of restated financials required. Identify your route at Month 12 — it shapes every decision that follows.
The 12-Month Pre-IPO Compliance Countdown
This is the month-by-month action plan. Each phase builds on the previous one. Skipping a phase means compressing work into later months — which always costs more and produces weaker outcomes.
Month 12-11: The Baseline Compliance Audit
Owner: Company Secretary + External PCS
This is the diagnostic phase. You cannot fix what you have not measured. Conduct a full-spectrum compliance audit covering:
Corporate governance check: Map your current board composition against Regulation 17 of SEBI LODR. Count your independent directors, check if you have a woman director (Section 149(1)), verify no director is disqualified under Section 164. If your chairperson is a non-executive director, you need at least one-third independents. If you have no regular non-executive chairperson, you need at least half the board as independents.
ROC compliance check: Pull your MCA filing history. Identify every unfiled annual return (MGT-7), unfiled financial statements (AOC-4), overdue DIR-3 KYC, missing ADT-1, or unfiled resolutions (MGT-14). Each unfiled form attracts ₹100/day additional fees under Section 403 — and these accumulate retroactively. A company that missed 3 annual returns over 3 years could face ₹1+ lakh in penalties per form.
FEMA compliance check: If you have foreign shareholders (FDI rounds), verify every FC-GPR was filed within 30 days, every FLA return was submitted, and no FEMA compounding is pending. FEMA non-compliance requires RBI compounding, which takes 6-12 months and must be disclosed in the DRHP.
Deliverable: A comprehensive gap analysis report with every non-compliance categorised as Critical (blocks DRHP), Major (disclosed as risk factor), or Minor (fixable pre-filing).
Month 10-9: Board Restructuring and Committee Formation
Owner: Company Secretary + Nomination Committee (if exists)
This is where most companies discover they are dramatically under-prepared. The board of a private company — typically 2-3 directors, all executive — must transform into an IPO-ready governance structure.
| Requirement | Minimum | Legal Basis |
|---|---|---|
| Independent Directors | 1/3rd or 1/2 of board | Reg. 17(1)(b), S.149(4) |
| Woman Director | At least 1 | S.149(1), Reg. 17(1)(a) |
| Audit Committee | 3 members (2/3 independent) | Reg. 18, S.177 |
| NRC | 3 members (all non-exec, 1/2 independent) | Reg. 19, S.178 |
| Stakeholders Relationship Committee | 3 members (1 independent chair) | Reg. 20, S.178 |
| Risk Management Committee | 3 members (top 1000) | Reg. 21 |
| KMP (CS, CFO, MD/CEO) | All three mandatory | S.203, Reg. 6(1) |
| Compliance Officer | Qualified CS | SEBI ICDR Reg. 6(1) |
Action steps: Identify and shortlist independent director candidates. Conduct due diligence — verify they do not hold directorships in more than 7 listed companies, check Section 164 disqualification status, confirm “independence” under Section 149(6). Pass board and shareholder resolutions for each appointment. File DIR-12 with ROC. Constitute all four committees with proper terms of reference. Appoint a full-time Company Secretary as KMP if you do not already have one (Section 203 threshold: paid-up share capital of ₹5 crore or more).
Month 8-7: Financial and Legal Housekeeping
Owner: CFO + Statutory Auditor + Company Secretary
This is the heavy-lifting phase. Three workstreams run in parallel:
Workstream 1 — Restated Financial Statements: Your statutory auditor (or a separate reporting accountant) must prepare restated financials under IndAS for the relevant period — 5 years for the profitability route, 3 years for the QIB route. This involves recasting past financials, making IndAS adjustments, and ensuring the auditor’s report is unqualified. Any qualification in the restated financials becomes a red flag for institutional investors.
Workstream 2 — Past Non-Compliance Remediation: File every overdue ROC form. Pay all accumulated additional fees. If there are compoundable offences (under Section 441 of the Companies Act), initiate compounding applications with NCLT — these take 3-6 months. If there are ongoing litigations, get legal opinions on their materiality for DRHP disclosure.
Workstream 3 — Related Party Transaction Cleanup: Review all related party transactions (RPTs) under Section 188 of the Companies Act for the last 3-5 years. Post-listing, RPTs above materiality thresholds require prior Audit Committee and shareholder approval under Regulation 23 of SEBI LODR. Ensure your RPT policy is drafted and board-approved. Identify any RPTs that were conducted without proper approval — these must be ratified or disclosed as past non-compliances.
Month 6-5: Capital Structure and ESOP Cleanup
Owner: Company Secretary + Legal Counsel
Cap table hygiene: Verify that every share allotment in company history has the required board/shareholder resolution, correct Form PAS-3 filing with ROC, and proper share certificates. If your company had foreign investment rounds, verify FC-GPR filings, pricing compliance under FEMA Rule 21, and FDI sectoral cap compliance.
ESOP restructuring: If your company has an ESOP scheme, it must be restructured to comply with the SEBI (Share Based Employee Benefits and Sweat Equity) Regulations, 2021 before listing. Common issues include: ESOP schemes that were never formally approved by shareholders, exercise prices that do not meet Companies Act requirements, missing Form SH-7 for authorised capital increases to cover ESOP pools, and vesting schedules that conflict with SEBI’s minimum vesting period of one year.
Dematerialisation: All shares must be in dematerialised form before listing. If any promoter or early-stage shares are still in physical form, initiate dematerialisation immediately. Under the SEBI LODR Master Circular (January 2026), credit of securities must be completed within 30 days of the request.
Share transfer audit: Review every share transfer in the company’s history. Verify proper stamp duty was paid on each transfer (Form SH-4), transfer deeds were executed, and the register of members is accurate and up to date.
Month 4-3: Merchant Banker Engagement and Due Diligence
Owner: Promoters + Company Secretary + Merchant Banker
This is when external scrutiny begins. The merchant banker’s due diligence team will audit everything you have done in the previous 8 months — and find things you missed.
Intermediary appointments: Appoint the merchant banker (SEBI-registered Category I), legal counsel (issuer side and banker side), registrar to the issue (RTA), bankers to the issue, and underwriters. Each appointment requires a board resolution.
Legal due diligence: The legal counsel will review your Memorandum and Articles of Association for restrictive clauses, all material contracts, intellectual property registrations, litigation history, regulatory approvals, labour law compliance, environmental clearances, and property titles. Any material finding becomes a risk factor in the DRHP.
Secretarial due diligence: The PCS (Practising Company Secretary) will issue certificates on compliance history. According to CS Sapna Malpani, “The secretarial due diligence is where hidden non-compliances surface — director appointments made without proper resolution, annual returns filed with incorrect data, charge registrations missed under Section 77.”
Website compliance: Under SEBI LODR and ICDR requirements, your company website must host specific disclosures including financial results, annual reports, shareholding patterns, corporate governance reports, policies (RPT, CSR, whistleblower, dividend distribution), contact details of compliance officer, and a functional investor grievance redressal mechanism.
Month 2-1: DRHP Preparation and SEBI Filing
Owner: Merchant Banker + Company Secretary + Legal Counsel
DRHP drafting: The Draft Red Herring Prospectus is a 400-700 page document that includes the complete compliance history of the company. Every non-compliance, every penalty paid, every compounding order, every litigation — it all goes in. The Company Secretary is responsible for ensuring the corporate governance and secretarial sections are accurate.
Board approval: The DRHP must be approved by a board resolution. All directors — including newly appointed independent directors — must have read and understood the document. Schedule a dedicated board meeting for DRHP approval.
Filing options: Since November 2022, SEBI allows a confidential pre-filing route under SEBI ICDR Regulations. This lets you file the DRHP without immediate public disclosure, giving you time to address SEBI observations privately before the public filing. For companies with complex compliance histories, this route is strongly recommended.
SEBI observation period: SEBI has 30 days to issue observations on the DRHP. In practice, companies with clean compliance records receive observations within 30-45 days. Companies with material non-disclosures or governance gaps face extended review periods of 60-90 days or a complete return of the DRHP.
The Deeper Implication: Why Pre-IPO Compliance Is a Valuation Driver
Pre-IPO compliance is not just a regulatory checkbox. It directly affects your IPO valuation. According to CS Sapna Malpani, “Institutional investors — mutual funds, insurance companies, sovereign wealth funds — run their own compliance due diligence before bidding in an IPO. A company that demonstrates clean governance, zero pending litigation, compliant board structure, and a spotless ROC filing history commands a premium in the bidding process. Conversely, a company with pages of risk factors related to past non-compliances sees its QIB subscription ratios drop, which depresses the issue price.”
The 2026 IPO landscape has an additional wrinkle: SEBI’s LODR Amendment Regulations (January 2026) have restructured the HVDLE framework and refined governance provisions for listed entities. Companies that proactively adopt these enhanced governance standards before listing — rather than scrambling to comply post-listing — signal maturity to institutional investors.
Forward prediction: as SEBI continues tightening disclosure and governance norms, the gap between “IPO-ready” and “not yet ready” companies will widen. Companies that invest in a structured 12-month compliance programme will have a measurable advantage over those that attempt last-minute remediation.
Comparison: Mainboard IPO vs SME IPO Pre-Compliance Requirements
A common confusion among growing companies is whether to pursue a mainboard IPO or an SME IPO. While the compliance framework overlaps substantially, the key differences affect your pre-IPO preparation timeline and cost.
Mainboard IPOs require full SEBI LODR compliance from Day 1 of listing — all four committees, the full set of governance policies, quarterly financial disclosures, and an annual secretarial audit under Regulation 24A. SME IPOs have a lighter governance framework — the Nomination and Remuneration Committee and Stakeholders Relationship Committee are recommended but not mandatory at the time of listing, and quarterly compliance is less onerous. However, the gap is narrowing: once an SME entity migrates to the mainboard (which SEBI encourages at ₹25 crore post-issue capital), it must adopt full LODR compliance within the prescribed timeline.
The practical takeaway: even if you are planning an SME IPO, building mainboard-grade governance from the start avoids a second round of restructuring during migration. The incremental cost is minimal; the time saved is significant.
By The Numbers: Pre-IPO Compliance
Typical pre-IPO compliance cost
Delay from unresolved gaps
DRHPs receiving material SEBI observations
Typical DRHP document length
What You Must Do Now — Step-by-Step Action Items
If your company is targeting a 2027-28 listing, here are the immediate action items for this quarter:
Step 1: Appoint a Practising Company Secretary to conduct a baseline compliance audit. This should be an external PCS — not your in-house CS alone — to ensure objectivity. Timeline: 3-4 weeks. Cost: ₹2-5 lakh.
Step 2: Pull your complete MCA filing history from the V3 portal. List every form filed, every form missed, and every additional fee paid. This is your ROC compliance scorecard.
Step 3: Map your current board composition against the SEBI LODR Regulation 17 requirements table above. Identify how many independent directors you need to appoint and whether you need a woman director.
Step 4: If you have foreign shareholders, engage a FEMA specialist to review your FC-GPR filings, FLA returns, and pricing compliance. Any gap identified here requires immediate remediation — FEMA compounding timelines are the longest in the pre-IPO process.
Step 5: Begin the independent director search. Use professional networks, ICSI’s directory of practising Company Secretaries, and specialised board advisory firms. Do not compromise on quality — an independent director who lacks genuine independence will be flagged by SEBI.
Step 6: Instruct your statutory auditor to begin preparing restated financials. If your company has changed auditors in the last 5 years, you will need a reporting accountant to consolidate the audit history.
Step 7: Draft and get board approval for mandatory policies — Related Party Transaction policy, Whistleblower/Vigil Mechanism policy, Code of Conduct for Board and Senior Management, and Insider Trading Code (SEBI PIT Regulations, 2015).
Step 8: If you have an ESOP scheme, get legal advice on restructuring it to comply with SEBI (Share Based Employee Benefits) Regulations, 2021. Common fixes include: proper shareholder approval, authorised capital increase (Form SH-7), and vesting schedule adjustments.
Step 9: Build your IPO compliance war room — a shared workspace where the Company Secretary, CFO, legal counsel, and merchant banker can track every compliance item, deadline, and deliverable across the 12-month countdown.
Step 10: Set a monthly governance review cadence. The board should receive a compliance status update at every board meeting from now until listing — tracking gap closure, pending actions, and timeline adherence.
Key Takeaways
- ✓ Start your pre-IPO compliance audit at least 12 months before the planned DRHP filing — earlier if you have FEMA or litigation issues
- ✓ SEBI ICDR offers two mainboard routes: Profitability (Reg. 6(1)) requires ₹15 Cr avg operating profit; QIB route (Reg. 6(2)) requires 75% allotment to institutional buyers
- ✓ Board restructuring — independent directors, woman director, four statutory committees — takes 2-4 months and should start at Month 10
- ✓ Every unresolved compliance gap becomes either a penalty or a risk factor in your DRHP — both hurt your IPO valuation
- ✓ FEMA compounding with RBI takes 6-12 months — the single longest remediation timeline in the pre-IPO process
- ✓ The Company Secretary is the compliance backbone of the IPO process — SEBI ICDR mandates a qualified CS as Compliance Officer
- ✓ Typical pre-IPO compliance cost: ₹30-75 lakh excluding merchant banker fees; rushing it in 3 months can double the cost
- ✓ The SEBI LODR Master Circular (January 2026) has raised governance standards — adopt them proactively for a valuation premium
Sources and References
- SEBI (Issue of Capital and Disclosure Requirements) Regulations, 2018 — SEBI.gov.in
- SEBI LODR Master Circular, January 2026 — SEBI.gov.in
- Companies Act, 2013 — Sections 149, 164, 177, 178, 188, 203, 403, 441 — MCA.gov.in
- Regulation 17, SEBI LODR — Board Composition Requirements — CAIRR
- RBI FEMA Compounding Orders — RBI.org.in
- IPO Process: Role of Company Secretary — ICSI.edu
- SEBI LODR Amendment Regulations, 2026 — MMJC
- Composition of Board of Directors under SEBI LODR — TaxGuru
Planning an IPO? Start With a Compliance Audit.
Use the MCA Penalty Calculator to estimate your current non-compliance exposure before building your 12-month roadmap.
For a confidential pre-IPO compliance review: Contact CS Sapna Malpani | WhatsApp
Frequently Asked Questions
What is a pre-IPO compliance checklist and why does my company need one?
A pre-IPO compliance checklist is a structured roadmap of every regulatory, governance, financial, and secretarial requirement your company must satisfy before filing a Draft Red Herring Prospectus (DRHP) with SEBI. Without completing this checklist, your merchant banker cannot certify IPO readiness, SEBI may return your DRHP with observations, and the listing timeline gets pushed by 3-6 months — costing lakhs in advisory fees and market timing risk.
How early should a company start preparing for an IPO in India?
Ideally, 18-24 months before the intended DRHP filing. However, the critical compliance window is 12 months. During this period, you must restructure your board, appoint independent directors, constitute statutory committees, complete secretarial audits, resolve past non-compliances, clean up related party transactions, and prepare restated financial statements. Starting later than 12 months severely compresses timelines and increases costs.
What are the SEBI ICDR eligibility conditions for a mainboard IPO in 2026?
Under Regulation 6(1) of SEBI ICDR Regulations 2018, a company must have net tangible assets of at least ₹3 crore in each of the preceding three years (with not more than 50% in cash for fresh issues), average pre-tax operating profit of at least ₹15 crore in any three of the last five years, and a net worth of at least ₹1 crore in each of the three preceding years. Companies not meeting these criteria can use the QIB route under Regulation 6(2), allotting at least 75% of the net offer to Qualified Institutional Buyers.
What board composition is required before an IPO under SEBI LODR?
Under Regulation 17 of SEBI LODR, the board must have at least one-third independent directors if the chairperson is a non-executive director, or at least half independent directors if there is no regular non-executive chairperson. At least one woman director is mandatory under Section 149 of the Companies Act 2013. You also need an Audit Committee (minimum 3 members, two-thirds independent), Nomination and Remuneration Committee, Stakeholders Relationship Committee, and a Risk Management Committee.
Is a secretarial audit mandatory before an IPO?
Under Regulation 24A of SEBI LODR, every listed entity must undertake a secretarial audit and annex the secretarial audit report with its annual report. While this applies post-listing, merchant bankers conduct due diligence on your secretarial compliance history pre-IPO. Any adverse observations in past secretarial audits will be flagged in the DRHP and can delay SEBI approval.
What is the role of a Company Secretary in an IPO?
The Company Secretary is the backbone of IPO compliance. Responsibilities include ensuring board and committee composition meets SEBI LODR requirements, coordinating secretarial audit and due diligence, drafting board and shareholder resolutions, managing ESOP restructuring, ensuring FEMA compliance for foreign shareholding, filing all pending forms with ROC, issuing compliance certificates, and acting as Compliance Officer post-listing. SEBI ICDR Regulations mandate that the compliance officer be qualified as a Company Secretary.
What happens if pre-IPO compliance gaps are found during due diligence?
Every unresolved compliance gap must be disclosed as a “risk factor” in the DRHP. Material gaps — such as missing secretarial audits, unresolved ROC penalties, pending FEMA compounding applications, or incorrect board composition — can trigger SEBI observations that delay approval by 30-90 days. In severe cases, SEBI may return the DRHP entirely, forcing the company to restart the filing process after remediation.
How much does pre-IPO compliance preparation typically cost?
The compliance preparation cost varies based on your corporate structure complexity. A ballpark range: Secretarial audit (₹2-5 lakh per year), legal due diligence (₹10-25 lakh), independent director search (₹1-3 lakh), ESOP restructuring advisory (₹5-15 lakh), restated financials (₹10-20 lakh), and past non-compliance remediation (variable — ₹50,000 to ₹10 lakh+). Total pre-IPO compliance cost typically ranges from ₹30 lakh to ₹75 lakh, excluding merchant banker fees.