Posh Audit in India
Independent POSH compliance audit, Internal Committee documentation review, employee training verification, annual report filing support, multi-location gap analysis, and board-ready risk assessment report — for companies, institutions, PSUs, and multi-branch organizations.
📊 Typical POSH Compliance Status Found in Audit
If your organization cannot produce audit-ready POSH documentation, you face a penalty of ₹50,000 on first offense and license cancellation on repeated non-compliance.
The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 makes it legally mandatory for every organization with 10 or more employees to maintain full POSH compliance. This is not a recommendation. This is enforceable law.
Mandatory under Section 4 · Every workplace with 10+ employees
What the Law Requires:
Risk: If IC is not properly constituted, any complaint received cannot be legally processed — exposing company to direct liability and legal scrutiny.
Mandatory under Section 21 · Every calendar year · District Officer submission
Mandatory Annual Report Must Include:
Risk: Failure to file annual report = direct non-compliance. District Officer can initiate action suo motu even without any complaint.
Mandatory under Section 19(c) · Regular intervals · All employee categories
Training Requirements:
Risk: Courts treat lack of training documentation as employer negligence. "We conducted training" without proof equals no training in legal terms.
Mandatory under Section 19 · All workplace locations · All employees
Employer Must Ensure:
Risk: Without proper complaint mechanism, any complaint goes directly to Local Committee (District level) and employer faces public legal scrutiny.
Civil & Legal Liability — Company and directors can face personal liability in case of complaint if compliance is absent
Reputation Damage — Non-compliance cases can become public, damaging brand value and employee trust permanently
Client Contract Risk — Enterprise clients (IT, manufacturing) now require vendor POSH compliance as part of contracts
ESG & Rating Impact — POSH compliance is now part of ESG assessments affecting investor confidence and credit ratings
Insurance Complications — D&O and employment liability insurance claims can be rejected if basic compliance is absent
Most companies have a POSH policy document. But 8 out of 10 organizations are NOT audit-ready when checked against actual legal requirements. The question is not IF you have gaps — it's HOW MANY and HOW CRITICAL.
No exemption based on industry, sector, size, or location. If you have 10 or more employees — the POSH Act applies to you.
Missing these timelines creates legal exposure — know them and track them.
As soon as your organization reaches 10 employees, IC must be constituted via formal written order. There is no grace period. Non-constitution from Day 1 = non-compliance from Day 1. IC tenure must be reviewed and renewed every 3 years.
An employee must file their POSH complaint within 3 months of the incident. IC has the power to extend this by another 3 months if there are sufficient reasons. Your company's complaint mechanism must clearly communicate this timeline to all employees.
From the date of receiving a complaint, the IC must complete its inquiry within 90 days. Cases pending beyond 90 days must be reported in the annual report. If IC is not properly constituted, this entire inquiry timeline becomes void legally.
IC prepares annual report after every calendar year. Submitted to employer first, then employer forwards to District Officer. Even if ZERO complaints were received, a NIL report must be filed. Failure to file = direct legal non-compliance regardless of actual harassment incidents.
Section 19(c) mandates workshops and awareness programs at "regular intervals" — interpreted as minimum annually. New employees must be oriented during onboarding. All sessions must have documented attendance, content records, and feedback forms to be considered legally valid proof of compliance.
Don't wait for a complaint or government inspection to discover your gaps. Non-compliance is a legal liability every single day. Book a confidential assessment call and know exactly where you stand.
Having a POSH policy PDF in your HR folder is not compliance. True compliance means documented evidence across 47+ checkpoints — from IC constitution to training records to annual filings. Here is where most organizations fail — silently, until a complaint or inspection exposes everything.
These gaps are not rare exceptions. These are the most common, most critical compliance failures we find in 8 out of 10 organizations we review — including well-known companies with dedicated HR teams. The policy exists. The compliance infrastructure does not.
📋 What We Find in Audits
🚨 Why This Is Critical
If IC is not properly constituted, any complaint received cannot be legally processed. The entire inquiry becomes invalid and company faces direct liability.
📋 What We Find in Audits
🚨 Why This Is Critical
Even with ZERO complaints, NIL report must be filed. District Officer can initiate suo motu action without any complaint. Multi-year backlog = compounded risk.
📋 What We Find in Audits
🚨 Why This Is Critical
Courts specifically examine training documentation. "We conducted training" without proof equals no training in legal terms = employer negligence.
📋 What We Find in Audits
🚨 Why This Is Critical
External member is MANDATORY under Section 4. Without valid external member, IC constitution is incomplete. Any inquiry can be legally challenged and declared void.
📋 What We Find in Audits
🚨 Why This Is Critical
If an employee proves they didn't know how to file a complaint, employer is directly at fault for not providing accessible mechanism.
📋 What We Find in Audits
🚨 Why This Is Critical
Each location with 10+ employees needs its own IC. One branch's non-compliance = company's non-compliance. Complaint at any branch exposes entire organization.
📋 What We Find in Audits
🚨 Why This Is Critical
During any legal proceeding or audit, you need evidence, not explanations. A policy PDF alone proves nothing. No organized evidence file = non-compliant in that moment.
📋 What We Find in Audits
🚨 Why This Is Critical
POSH compliance is not a one-time setup. Without calendar and ownership, gaps accumulate silently until a complaint or inspection exposes everything at once.
Most organizations confuse having a policy with being compliant.
Frequency of each gap type found across organizations
78% of organizations have never filed annual report or have significant backlog
71% of organizations have no external member or tenure expired without renewal
85% of organizations cannot produce compiled compliance evidence file when asked
64% of organizations have no attendance records, certificates, or training archive
89% of multi-location orgs have compliance at HQ only — branches have zero setup
58% of organizations haven't reconstituted IC after mandatory 3-year tenure
Typical chain of events when complaint is filed at non-compliant organization
The question is NOT "Do we have a POSH policy?"
The question is — "Can we prove compliance
across every requirement, right now, today?"
Most organizations cannot. That's the gap. That's the risk. And that's what our audit identifies, documents, and helps you fix — before it becomes a legal emergency.
🔴 Most Common Critical Gaps Found
Book a confidential discovery call. We'll tell you exactly where your legal exposure is — before anyone else finds out.
Many organizations think conducting one training session per year means they are POSH compliant. That's a dangerous misconception. The POSH Act requires a complete ecosystem of policy, process, people, documentation, and reporting — all working together, all documented, all provable.
Training is just 1 of 8 pillars of POSH compliance. Even if you conducted training, without IC constitution, annual report filing, complaint mechanism, documentation evidence, and policy display — you are legally non-compliant. Training without documentation doesn't count. Compliance without proof doesn't exist.
A POSH audit examines ALL these pillars — not just one or two. Each pillar must be functional, documented, and legally sound.
📋 What It Must Include
🔧 How It Must Be Maintained
📌 Evidence Required in Audit
📋 Constitution Requirements
🔧 Key Rules
📌 Evidence Required in Audit
📋 Must Include
🔧 Inquiry Process
📌 Evidence Required in Audit
📋 Types of Training Required
🔧 Documentation Required
📌 Evidence Required in Audit
📋 Mandatory Report Contents
🔧 Filing Process
📌 Evidence Required in Audit
📋 Legal Requirement
🔧 Must Document
📌 Evidence Required in Audit
📋 Evidence File Must Include
🔧 Also Required
📌 Evidence Required in Audit
📋 Requirements
🔧 Best Practices
📌 Evidence Required in Audit
All 8 pillars must work together. A gap in any one pillar weakens the entire compliance infrastructure.
Our POSH compliance audit examines your organization against 47+ checkpoints covering every pillar. We don't just check if a policy exists — we verify whether the entire ecosystem is functional, documented, and legally defensible.
Internal reviews miss critical gaps. Here's what only an independent audit uncovers.
Internal teams often don't realize that an expired IC tenure makes every previous inquiry potentially void. An audit catches these silent legal bombs.
Many organizations have never filed annual reports thinking NIL complaints mean no filing needed. Audit quantifies the exact backlog and penalty exposure.
HR teams believe they have documentation, but audit reveals unsigned policies, missing attendance sheets, and evidence files that don't meet legal standards.
Head office may be compliant, but 89% of multi-location organizations have zero compliance infrastructure at branch level. Audit maps every location's status.
Training may have happened, but was it legally adequate? Did IC members receive inquiry training? Were managers sensitized? Audit checks training quality, not just occurrence.
If a complaint comes tomorrow, can your IC actually process it legally? Audit tests the entire complaint-to-resolution process for legal validity and completeness.
Don't guess your compliance status. Know it with certainty through an independent, evidence-based audit that covers every legal requirement.
We don't just point out gaps — we help you fix them. 10 specialized services covering every aspect of POSH compliance, from initial audit to evidence file creation to ongoing retainer support.
Comprehensive 47-point review of your entire POSH compliance infrastructure across all legal requirements.
📋 What We Do
📦 Deliverables
Review existing IC constitution for legal validity or help set up a new IC from scratch.
📋 What We Do
📦 Deliverables
Review existing policy against the Act or draft a new comprehensive POSH policy customized for your organization.
📋 What We Do
📦 Deliverables
Help IC/HR prepare the mandatory annual report as required under Section 21 and support filing with District Officer.
📋 What We Do
📦 Deliverables
Interactive POSH awareness training for all employees — online, offline, or hybrid — with complete documentation.
📋 What We Cover
📦 Deliverables
Specialized training for IC members on inquiry process, evidence handling and for managers on their POSH responsibilities.
📋 What We Cover
📦 Deliverables
Help identify, verify, and appoint qualified external member for your IC — with ongoing availability on retainer.
📋 What We Provide
📦 Deliverables
Location-wise compliance assessment for organizations with multiple offices, branches, factories, or sites across India.
📋 What We Cover
📦 Deliverables
Create a complete, organized POSH compliance evidence file ready for any audit, inspection, or legal proceeding.
📋 What Goes In
📦 Deliverables
Detailed risk-scored gap report with prioritized action items and a 30/60/90 day compliance roadmap after audit.
📋 Report Sections
📦 Deliverables
See which services are included in different engagement models
Choose the model that fits your organization's needs and compliance maturity
Comprehensive single audit with report, gap analysis, and roadmap. Ideal for organizations wanting a compliance health check.
Full audit plus hands-on support to fix gaps — IC setup, training, annual report, evidence file. 3-6 month engagement.
Ongoing monthly/quarterly compliance support — monitoring, training, annual filing, evidence maintenance, re-audit.
Most audit firms give you a report full of gaps and walk away. We stay with you — helping fix each gap, building documentation, training your teams, and ensuring your organization is genuinely compliant — not just on paper, but in practice.
📋 Our Service Flow
Not sure which services you need? Book a 15-minute call. We'll understand your current compliance status and recommend exactly what fits your organization.
Every audit follows a standardized process designed for enterprise-grade organizations. Here's exactly what happens from Day 1 to final report delivery.
We understand your organization structure, current POSH compliance status, employee count, locations, specific concerns, and define the audit scope together.
📋 What Happens
✅ Outcome
We share a comprehensive document checklist and your team provides all available POSH-related documents through secure encrypted channels.
📋 What We Request
✅ Outcome
Your POSH policy is reviewed provision-by-provision against the Act's requirements. Each provision scored as Present, Absent, or Partial.
📋 What We Check
✅ Outcome
Complete verification of IC composition, validity, tenure, external member, and branch-level requirements against Section 4 of the POSH Act.
📋 What We Check
✅ Outcome
Verification of training frequency, coverage percentage, documentation quality, and all training types — employee, IC, manager, and onboarding.
📋 What We Check
✅ Outcome
Assessment of complaint filing channels, accessibility, confidentiality protocols, inquiry process documentation, and employee awareness of complaint process.
📋 What We Check
✅ Outcome
Verification of annual report preparation for all years, format compliance with Section 21, and filing proof with District Officer — including NIL report status.
📋 What We Check
✅ Outcome
All findings compiled and scored. Each compliance area gets individual score. Overall POSH Readiness Score calculated out of 100 with risk categorization.
📊 Scoring Model
✅ Outcome
Complete audit report prepared with executive summary, detailed findings, risk scores, gap analysis, and 30/60/90 day compliance roadmap. Report walkthrough call conducted.
📋 Report Includes
✅ Outcome
Optional ongoing engagement to help implement audit recommendations — IC setup, training delivery, annual report filing, evidence file maintenance, and periodic re-audit to ensure sustained compliance.
📋 What We Offer
✅ Outcome
Every document is handled through encrypted channels. Team members sign individual confidentiality undertakings. Data deleted after engagement plus agreed retention period.
30-minute confidential call. Understand scope, timeline, and process. No commitment required. NDA signed before any document sharing.
Any organization with 10 or more employees — whether private, public, NGO, or educational institution — is legally required to comply with the POSH Act. No exemption based on industry, sector, size, or location.
TCS, Infosys-level to mid-size IT firms
Multiple offices, remote workers, client-site employees, and large distributed teams across India and globally.
📋 Key Compliance Needs
Client audit requirements now include POSH compliance verification — non-compliance can affect vendor contracts.
24x7 operations, diverse workforce
Round-the-clock operations, night shifts, mixed-gender teams, high employee turnover requiring frequent compliance updates.
📋 Key Compliance Needs
High employee turnover requires frequent onboarding POSH orientation — missing this creates continuous compliance gaps.
Factories, plants, production units
Factory floor workers, mixed-gender workforce, contractual labor involvement, multiple shifts and production sites.
📋 Key Compliance Needs
Worker committees may overlap with IC — needs clear distinction and specific training for shop-floor dynamics.
Doctors, nurses, admin, patients
Close interactions between doctors, nurses, admin staff, patients, visitors, and vendors in high-pressure environments.
📋 Key Compliance Needs
Power dynamics between senior doctors and junior staff require specific attention in training and complaint mechanisms.
Educational institutions at all levels
Teaching staff, administrative employees, visiting faculty, students in higher education, and parent interactions.
📋 Key Compliance Needs
UGC/AICTE regulations have additional POSH requirements for educational institutions beyond the base Act.
Growing teams, informal culture
Fast-growing teams, informal culture, founders wearing multiple hats, often no dedicated HR or compliance function.
📋 Key Compliance Needs
Investor due diligence now checks POSH compliance — early setup prevents costly remediation during funding rounds.
Multi-floor offices, global standards
Multi-floor offices, diverse workforce, international reporting requirements, ESG compliance, and board governance.
📋 Key Compliance Needs
MNCs need POSH aligned with global anti-harassment policies — dual compliance across Indian law and global standards.
Retail chains, franchises, regional offices
Retail chains, bank branches, franchise operations, regional offices spread across multiple cities and states.
📋 Key Compliance Needs
Each branch with 10+ employees needs its own IC — this is the most commonly missed requirement in multi-location setups.
Public sector, government contractors
Public Sector Undertakings, government contractors, organizations doing business with government require compliance verification.
📋 Key Compliance Needs
Government audits and RTI may require production of POSH compliance records — documentation must be audit-grade.
Banks, NBFCs, insurance, fintech
Large branch networks, corporate offices, customer-facing staff, regulatory compliance requirements from RBI and SEBI.
📋 Key Compliance Needs
RBI/SEBI compliance frameworks increasingly include workplace safety — POSH is now part of regulatory expectations.
Site workers, office staff, project teams
Site workers, office staff, project-based teams, contractual workforce with multiple locations and temporary setups.
📋 Key Compliance Needs
Construction sites with 10+ workers need IC — even temporary project sites fall under the POSH Act's definition of workplace.
R&D, manufacturing, field force
R&D teams, manufacturing facilities, sales force spread across regions, medical representatives, and lab staff.
📋 Key Compliance Needs
FDA and regulatory audits increasingly check workplace safety compliance — POSH documentation is now part of the review.
Creative teams, freelancers, events
Creative teams, freelancers, event staff, irregular hours, power dynamics, and non-traditional work arrangements.
📋 Key Compliance Needs
Policy must cover non-traditional work arrangements — freelancers, event staff, and temporary workers all need POSH protection.
Warehouse, delivery, call center, office
Warehouse workers, delivery staff, call center agents, office teams — multi-category workforce across cities.
📋 Key Compliance Needs
Warehouse and delivery operations need POSH coverage in local languages — often the most overlooked segment in e-commerce compliance.
Professionals managing POSH compliance
HR heads, legal counsel, compliance officers who manage POSH as part of their portfolio but need expert support and independent validation.
📋 Key Compliance Needs
Internal teams know requirements but need external validation and bandwidth support — our audit validates their efforts independently.
From 10 employees to 100,000+ — your obligations are the same under law
Check which situations apply to your organization
Whether you're an IT company with 50 employees or a manufacturing unit with 5,000 — the compliance requirements are the same. Let us check where you stand.
When enterprise clients choose a POSH compliance audit partner, they need more than expertise — they need absolute confidentiality, structured documentation, and professional reporting that meets board-level standards.
Every engagement begins with NDA — no exceptions
Every finding is evidence-backed and legally referenced
Reports both Legal and HR teams can use immediately
Leadership gets the critical picture in 2 pages
Enterprise-grade data handling throughout engagement
Consistent audit quality across all your locations
Enterprise timelines respected — commitments honored
No opinions — only verifiable, documented findings
Enterprise-grade security from first call to final report
What you can expect from every engagement — guaranteed
Every enquiry gets a response within 24 hours. No form goes unanswered.
One point of contact for your entire engagement. No handoffs between teams.
Regular status updates during audit. You always know exactly where things stand.
Timeline agreed upfront and honored. Delays communicated proactively if any.
Every deliverable is actionable — not theoretical. You can act on Day 1 after receiving report.
60-90 minute walkthrough call to explain every finding, answer every question.
We understand that POSH compliance documents contain sensitive organizational information. That's why we've built our process around enterprise-grade data protection from Day 1.
NDA signed before any document sharing. Board-ready reports. Evidence-backed findings. Complete confidentiality from Day 1 to final report.
Answers to the most common questions from HR heads, legal teams, and senior management about POSH audit requirements in India.
Under the POSH Act 2013, non-compliance can attract a monetary penalty of
₹50,000 for the first offense. On repeated non-compliance,
the government can cancel, withdraw, or revoke the business license
of the organization. In cases where authorities determine willful neglect,
courts may also impose double the penalty amount.
Beyond the statutory fine, organizations face serious reputational damage,
employee trust erosion, and litigation risk — especially when a complaint
is raised and the Internal Committee is found to be non-functional or improperly constituted.
Any organization — private or public — with 10 or more employees
is legally required to comply with the POSH Act 2013. This includes:
Corporate companies, startups, NGOs, educational institutions,
hospitals, PSUs, manufacturing units, retail chains, IT firms, and
multi-location businesses.
Even organizations with temporary, contractual, or third-party employees
must count them while calculating the headcount threshold.
Organizations with fewer than 10 employees fall under the purview of
the District Local Committee (DLC) instead.
Our structured 47-point audit framework covers every critical dimension
of POSH compliance, including:
• Internal Committee: Constitution, composition, term validity, quorum requirements, external member appointment verification.
• Policy Documentation: POSH policy existence, accessibility, gender-neutrality review, multilingual availability.
• Annual Report: Filing status with District Officer, report format compliance, data accuracy.
• Training Records: Employee awareness programmes, IC member training, training frequency verification.
• Complaint Handling: Complaint mechanism availability, inquiry process documentation, timeline compliance.
• Multi-location Compliance: Branch-level IC setup, local policy dissemination, regional reporting structures.
Under Section 4 of the POSH Act, a legally valid Internal Committee must have:
1. Presiding Officer: A woman employed at a senior level. If no senior woman is available, she may be nominated from another office or administrative unit.
2. Minimum two members from among the employees, preferably committed to women's causes or with legal background.
3. External Member: One member from an NGO, association committed to women's causes, or a person familiar with POSH-related issues. This is the most commonly missed requirement.
At least 50% of the IC members must be women.
The term of the IC is 3 years and must be renewed.
Non-compliance in IC constitution renders the entire framework void.
Under Section 21 of the POSH Act, the Internal Committee must prepare and submit
an Annual Report to the employer and the District Officer
at the end of each calendar year.
The report must include:
• Number of complaints received during the year
• Number of complaints disposed of
• Number of cases pending for more than 90 days
• Number of workshops and awareness programmes conducted
• Nature of action taken by the employer
Many organizations either skip this filing entirely or submit an
incomplete report — both of which constitute non-compliance.
Our audit identifies gaps and assists in proper filing.
Confidentiality is the foundation of our engagement. Before any document
sharing or data exchange begins, we execute a bilateral Non-Disclosure
Agreement (NDA) that legally binds both parties.
Our process ensures:
• All documents are reviewed under strict access controls
• No employee-specific complaint data is disclosed in final reports
• Audit findings are shared only with designated senior stakeholders
• Digital files are handled through encrypted channels only
We operate as a completely independent third party — our audit is not shared
with any regulatory body unless you initiate that step. Your data never leaves
the engagement boundary.
For a standard single-location engagement, the audit is typically completed
within 7 to 10 business days from the date of document submission.
Multi-location or enterprise-scale audits may require 15–21 days depending on
the number of branches and volume of documentation.
Final deliverables include:
• Executive Summary Report — board-ready, decision-focused
• 47-Point Compliance Scorecard — color-coded gap analysis
• Priority Action Plan — ranked by legal risk severity
• IC Documentation Checklist — ready-to-use templates
• Annual Report Draft — ready for employer and DO submission
Yes. Under the POSH Act, the term "workplace" is broadly defined
to include every branch, office, unit, or location where employees work.
If each location employs 10 or more people, a separate Internal Committee
must be constituted for that specific location.
A centralized or head-office IC cannot represent branch employees
who face harassment at a different location. This is one of the most
frequently overlooked gaps in multi-branch organizations.
Our audit specifically reviews branch-level IC constitution, local policy
display, and region-wise training records as part of the 47-point framework.