Corporate Retention Policy Template for India

Generate a bespoke document

What is a Corporate Retention Policy?

The Corporate Retention Policy serves as the fundamental framework for managing an organization's records and documents in accordance with Indian legal requirements. This policy becomes essential as organizations face increasing regulatory scrutiny and compliance obligations under various Indian laws, including the Companies Act 2013, Income Tax Act, and Information Technology Act. The policy outlines specific retention periods for different types of records, procedures for secure storage and disposal, and protocols for handling electronic records. It is particularly crucial for organizations operating in India to maintain this policy to ensure compliance with statutory requirements, facilitate audits, support litigation requirements, and promote efficient information management practices.

Frequently Asked Questions

Is a Corporate Retention Policy legally required for companies in India?

Yes, while there's no single law mandating a comprehensive retention policy, Indian companies are legally required to maintain specific records under various acts including the Companies Act 2013, Income Tax Act 1961, and GST Act 2017. A formal Corporate Retention Policy helps ensure compliance with these statutory requirements and demonstrates good corporate governance practices.

Can my company face penalties for not having a proper document retention policy in India?

Yes, companies can face significant penalties for failing to maintain required records. Under the Companies Act 2013, penalties can reach ₹1 lakh for officers and ₹10 lakh for companies. The Income Tax Act imposes penalties up to ₹25,000, while GST violations can result in fines up to ₹25,000 or 100% of tax due.

How long must Indian companies retain board meeting minutes and financial records?

Under the Companies Act 2013, board meeting minutes must be retained for at least 8 years from the date of the meeting. Books of accounts and financial statements must be kept for 8 financial years. However, Income Tax Act requirements may extend retention periods to 8 years from the end of the relevant assessment year.

How is a Corporate Retention Policy different from a Document Management Policy in India?

A Corporate Retention Policy specifically focuses on how long documents must be kept to comply with Indian legal requirements and when they can be destroyed. A Document Management Policy is broader, covering document creation, storage, access, security, and workflow processes throughout the document lifecycle, which may include but extends beyond retention requirements.

How long does it typically take to implement a Corporate Retention Policy for an Indian company?

Implementation typically takes 4-8 weeks for most companies. This includes 1-2 weeks for legal review and customization, 2-3 weeks for document categorization and retention schedule development, and 2-3 weeks for staff training and system setup. Complex organizations with multiple subsidiaries or extensive legacy documents may require 3-4 months.

Can destroying documents before the retention period expires get my Indian company in legal trouble?

Yes, premature destruction of statutorily required documents can result in serious legal consequences including prosecution under the Companies Act 2013, Income Tax Act, or other applicable laws. Companies may face penalties, prosecution of officers, and difficulties in legal proceedings where destroyed documents would have been crucial evidence.

Should my retention policy cover digital records and emails under Indian law?

Yes, Indian law treats digital records equally to physical documents for retention purposes. The Information Technology Act 2000 recognizes electronic records as legally valid. Your policy must address email retention, especially for financial communications, contracts, and regulatory correspondence, applying the same retention periods as required for equivalent paper documents.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

India

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Corporate Retention Policy

A Corporate Retention Policy is a comprehensive document that establishes systematic guidelines for managing, storing, and disposing of organizational records in compliance with Indian legal requirements. This policy serves as your organization's roadmap for maintaining proper documentation practices while meeting statutory obligations under multiple Indian laws including the Companies Act 2013, Income Tax Act 1961, and GST regulations.

When do you need this document?

You need a Corporate Retention Policy when establishing a new company in India, undergoing regulatory audits, or implementing compliance management systems. This document becomes crucial during legal proceedings where historical records may be required as evidence. Organizations also require this policy when transitioning to digital record-keeping systems or when facing scrutiny from tax authorities, company law tribunals, or other regulatory bodies. The policy is particularly essential for companies preparing for IPOs, mergers, or acquisitions where comprehensive documentation practices demonstrate governance maturity.

Key legal considerations

Your Corporate Retention Policy must address several critical legal aspects to ensure comprehensive compliance. The policy should clearly define record categories including financial documents, corporate governance records, employment files, and regulatory correspondence. You must establish minimum retention periods that meet or exceed statutory requirements, with provisions for legal holds during litigation or investigations. The policy should include secure disposal procedures that prevent unauthorized access to confidential information while ensuring compliance with data protection requirements. Additionally, your policy must address electronic record authentication, backup procedures, and disaster recovery protocols to maintain document integrity and accessibility throughout the retention period.

Legal requirements in India

Under the Companies Act 2013, your organization must retain board meeting minutes, shareholder records, and annual returns for at least eight years, while books of accounts require preservation for eight financial years. The Income Tax Act 1961 mandates retention of tax-related documents including returns, invoices, and financial statements for six years from the relevant assessment year. GST regulations under the GST Act 2017 require maintenance of tax records for 72 months from annual return filing dates. Employment-related documents must be preserved according to the Payment of Gratuity Act 1972 for gratuity calculations. The Information Technology Act 2000 imposes additional requirements for electronic record preservation, including digital signatures and secure storage protocols. Your policy must also consider industry-specific regulations that may impose longer retention periods for certain document types.

GOVERNING LAW

Applicable law

This Corporate Retention Policy is drafted to comply with India law. Key legislation includes:

Companies Act, 2013: Mandates retention of various corporate documents, including board meeting minutes, shareholder records, and annual returns for at least 8 years. Books of accounts must be maintained for 8 financial years.
Income Tax Act, 1961: Requires preservation of books of accounts and documents for 6 years from the end of the relevant assessment year. This includes tax returns, invoices, and financial statements.
Goods and Services Tax (GST) Act, 2017: Mandates retention of GST-related records for 72 months from the date of annual return filing, including invoices, bills, and supply records.
Payment of Gratuity Act, 1972: Requires maintenance of employment records necessary for gratuity calculations, including service records and wage details.
Information Technology Act, 2000: Governs electronic records maintenance and specifies requirements for digital record-keeping and electronic signatures.
The Limitation Act, 1963: Sets general limitation periods for legal actions, affecting how long certain documents should be retained for potential legal proceedings.
Shops and Establishments Acts: State-specific laws requiring maintenance of employee records, working hours, and other operational documents.
Reserve Bank of India Act, 1934: For financial transactions and banking records, specifies retention periods for various financial documents and records.
Prevention of Money Laundering Act, 2002: Requires maintenance of records of transactions for at least 5 years from the date of transaction.
Labour Laws (various): Including Factories Act, Industrial Disputes Act, and others requiring retention of employment, safety, and workplace-related records.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it