Corporate Governance in India — What Every Growing Company Must Get Right

Why Governance Is Confused With Compliance

Ask a founder or CFO of a fast-growing Indian private company what "corporate governance" means to their business, and the answer usually arrives in the language of compliance: annual returns filed with the Registrar of Companies, statutory audits closed on time, board meetings held at the required frequency. All of that is necessary. None of it is governance.

Compliance asks whether a form was filed. Governance asks whether the decision behind that form was made properly — with the right people in the room, the right disclosures on the table, and the right process followed before money moved, a related party was paid, or a director was appointed. A company can be fully compliant on paper and still be governed badly enough to lose a funding round, trigger a shareholder dispute, or expose its directors to personal liability.

This distinction matters more than most Indian businesses realise, because governance failures rarely announce themselves early. A related party transaction that was never placed before the audit committee. A board resolution passed by circulation without the quorum the articles actually require. A related-party lease renewed on the same terms for six years without anyone asking whether it still reflects market value. Individually, each looks like a minor procedural gap. Collectively, they are exactly the pattern that due diligence teams, auditors, and eventually courts are trained to find.

The Indian Governance Framework, Briefly

Corporate governance in India rests on a layered set of obligations, and which layers apply to a given company depends entirely on its structure and status.

Every company incorporated under the Companies Act, 2013 — private or public, small or large — is subject to a baseline governance framework: a validly constituted board, minimum meeting frequency, maintenance of statutory registers, director disclosure obligations, and rules governing related party transactions. This baseline applies whether or not the company has ever thought of itself as needing "governance" in the corporate-governance-report sense of the word.

Listed companies carry an additional and considerably heavier layer under the SEBI (Listing Obligations and Disclosure Requirements) Regulations — independent director quorums, mandatory board committees, related party transaction approval thresholds tied to turnover, and public disclosure timelines measured in hours, not weeks.

Companies crossing specified thresholds of paid-up capital, turnover, or borrowings — a category that includes many well-funded private companies and most large private limited companies — pick up obligations that founders frequently do not anticipate: mandatory independent directors, a functioning Audit Committee, a Nomination and Remuneration Committee, secretarial audit, and CSR compliance if the profitability threshold is met. A company can cross these thresholds mid-year, simply by growing, and the governance obligations activate automatically — irrespective of whether anyone in the business noticed.

These thresholds are not abstract. A company that raises a round taking its paid-up capital past the prescribed limit, or that closes a financial year with turnover or borrowings above the specified level, moves from the light-touch baseline framework into the heavier bracket overnight — the trigger is the balance sheet, not a regulatory notification. Independent director appointment, once triggered, typically has to be completed within a defined window from the end of the relevant financial year, and a company that misses that window is technically non-compliant from the day the deadline passes, whether or not anyone has flagged it internally. This is precisely why a governance review timed to the annual financial close, rather than left to whenever someone remembers, is one of the simplest risk controls a growing company can put in place.

This is the structural reality LexWin sees most often: a private company that has scaled past its original governance design, still operating with the informal decision-making habits of its five-person-founding-team days, while quietly carrying obligations that were designed for a considerably more formal organisation. The company usually discovers this not through an internal audit, but through an external party — an investor's legal team, a bank's credit committee, or a statutory auditor — asking a question the company was not prepared to answer.

The Board — Composition, Duties, and the Committees That Matter

The board of directors is the legal and practical centre of corporate governance. Under Indian law, directors owe the company — not any single shareholder, founder, or investor — fiduciary duties of care, loyalty, and independent judgment. This is a frequently misunderstood point: a nominee director appointed by an investor still owes their primary duty to the company, not to the investor who nominated them.

This creates a genuine tension in practice. A nominee director sits on the board partly to protect the interests of the investor who appointed them, yet the law requires that director to exercise independent judgment in the interest of the company as a whole — which may not always align with what their appointing investor prefers. Boards that fail to appreciate this distinction often see it surface at the worst possible moment: during a down round, a restructuring, or a dispute between founders and investors, when a nominee director's dual loyalty is suddenly tested and the minutes of that meeting become critical evidence of whether the director acted properly.

A properly governed board in India typically requires attention to the following, in escalating order of formality as the company grows:

Minimal Compliance vs. Real Governance

The distance between a company that merely files its returns on time and one that is genuinely well governed shows up clearly when the two are placed side by side.

Related Party Transactions — Where Boards Get Hurt

If there is a single governance failure point that recurs most often in LexWin's advisory work, it is related party transactions — payments, leases, loans, or service arrangements between the company and its promoters, directors, their relatives, or entities they control.

The law does not prohibit related party transactions. Many are entirely legitimate — a promoter-owned property leased to the company at fair market rent, for instance. What the law requires is that such transactions be identified, disclosed, and approved through the correct process — Audit Committee approval where applicable, board approval, and shareholder approval by ordinary or special resolution once transaction value crosses prescribed thresholds. It is the absence of process, not the existence of the transaction, that creates exposure.

The practical mechanics matter here. A related party transaction that is not in the ordinary course of business, or is not on an arm's length basis, generally requires prior approval of the board — and, once value crosses the prescribed thresholds, the prior approval of shareholders by ordinary resolution, with interested shareholders excluded from voting. Companies that transact repeatedly with the same related party — a recurring management services fee, for instance — can put an omnibus approval in place through the Audit Committee, which removes the need to seek fresh approval for every individual instance while still keeping the arrangement within a pre-approved, monitored framework. The absence of such a framework is usually what forces a company into reactive, transaction-by-transaction scrambling once a related party relationship is finally identified.

Directors also carry a personal dimension to this obligation that is easy to overlook. A director who is a party to a related party transaction, or interested in one, is generally required to abstain from participating in the board's discussion and voting on that item. A board that routinely allows an interested director to remain in the room, participate in the discussion, and vote on their own transaction is not merely creating a procedural irregularity — it is creating a resolution that can be challenged as invalid, with consequences that extend well beyond the transaction itself.

What Happens When Governance Is Tested

Governance gaps rarely surface during ordinary operations. They surface at precisely the moments a company can least afford them.

India's Evolving Governance Landscape

Corporate governance obligations in India have been tightening steadily, and the trend shows no sign of reversing. SEBI has progressively lowered the materiality thresholds that trigger mandatory disclosure and shareholder approval for related party transactions among listed companies, and has increased scrutiny of promoter-linked entities. The Ministry of Corporate Affairs has expanded the scope of secretarial audit to cover a wider band of unlisted public and private companies, meaning governance practices that were once reviewed only informally are now subject to a formal, filed audit trail.

Beneficial ownership disclosure — identifying the individuals who ultimately control a company through layered shareholding structures — has also become significantly more rigorous, driven partly by anti-money-laundering obligations and partly by a broader regulatory push toward transparency in corporate structures. Companies with holding structures involving multiple layers, family trusts, or overseas entities are increasingly expected to demonstrate, on request, exactly who sits at the top of the ownership chain.

For companies planning a listing, a fundraise from institutional investors, or an acquisition, this direction of travel matters practically: governance standards that look adequate today are being assessed against a rising bar, and remediation is considerably cheaper when done proactively than when done under the time pressure of a transaction.

There is also a growing overlap between governance and data protection compliance. As boards increasingly oversee data-heavy businesses, questions about who approved a data-sharing arrangement with a related entity, or whether a data processing agreement with an affiliate was reviewed for arm's-length terms, are starting to appear in the same diligence checklists that once asked only about financial related party transactions. Governance and compliance functions that used to operate separately are converging, and companies that treat them as separate workstreams risk gaps at the seams.

Common Governance Mistakes We See

Across LexWin's advisory work with Indian companies, a small number of governance mistakes recur far more often than the range of possible errors would suggest. Recognising them is often enough to prevent them.

• Treating board resolutions as a formality after the decision is made, rather than as the mechanism through which the decision is actually authorised — creating a gap between what the company did and what it can prove it was authorised to do.
• Appointing independent directors on relationship rather than fit, resulting in a board that satisfies the numerical requirement but provides none of the independent scrutiny the requirement exists to create.
• Allowing related party transactions to accumulate informally — a shared service arrangement here, a promoter loan there — until untangling them retroactively becomes a significant diligence and disclosure exercise in itself.
• Confusing shareholder agreement obligations with statutory obligations, and assuming that satisfying an investor's contractual reporting requirements is the same as satisfying the company's obligations under the Companies Act — the two frequently diverge.
• Delaying governance formalisation until a transaction forces it, at which point remediation happens under time pressure, at higher cost, and with far less room to negotiate.

How LexWin Approaches Corporate Governance

LexWin's corporate governance advisory is built around the reality that most Indian companies do not need a governance overhaul — they need a small number of structural fixes, applied correctly and maintained consistently. Our engagement typically covers a governance health assessment against the company's actual statutory thresholds, board and committee restructuring where required, related party transaction identification and approval workflows, director disclosure and statutory register clean-up, and ongoing compliance calendar management so that governance discipline does not lapse the moment the initial engagement ends.

We work with founder-led private companies preparing for a fundraise, companies that have crossed governance thresholds without realising it, and boards that want a periodic independent check rather than waiting for a diligence exercise to surface the gaps for them.

A typical engagement starts with a threshold assessment against the company's current paid-up capital, turnover, and borrowings to establish exactly which obligations apply today and which are likely to apply within the next financial year. From there, we work through board and committee composition, review the last two to three years of minutes and resolutions for procedural defects, map existing related party relationships against the company's approval and disclosure trail, and put a related party transaction policy and an annual compliance calendar in place so that the fixes made during the engagement do not quietly lapse once it ends. Where gaps are found, we prioritise remediation by exposure — the resolutions most likely to be challenged, and the transactions most likely to surface in diligence, are addressed first.

Who Needs This — and When

Governance obligations scale with a company's size and structure, but the moments that most often trigger a governance review are predictable — and addressing them proactively is always less costly than addressing them reactively.

Governance Health Check — 10 Questions Every Board Should Ask

Before commissioning a full governance review, run this quick diagnostic. If the honest answer to more than three of these is "no" or "unsure," the company is carrying meaningful governance risk.

• Has every director filed a current disclosure of interest, updated within the last twelve months?
• Can the company produce, on request, a complete and accurately dated set of board minutes for the last two years?
• Are related party transactions identified and routed through Audit Committee or board approval before execution — not documented afterwards?
• Does the company know, precisely, which governance thresholds under the Companies Act it currently meets or is approaching?
• If independent directors are required, do they meet the statutory independence criteria in substance, not just on paper?
• Are statutory registers — members, directors, charges, related party transactions — maintained contemporaneously rather than reconstructed before an audit?
• Were the last three board resolutions involving a related party approved through the correct committee and disclosed correctly in the financial statements?
• Does the company have a documented related party transaction policy, and is it actually followed?
• If a shareholder or investor challenged the validity of a recent board resolution, could the company demonstrate proper notice and quorum?
• Was the company's governance structure last reviewed by someone with company law expertise — not only by the accounting or secretarial team?