Pre-IPO Legal & Governance Readiness in India: Corporate, SEBI, Contracts, Litigation & Compliance Checklist 2026

An IPO is not simply a financing event. It changes the company’s governance environment, disclosure discipline, investor base, internal controls and regulatory exposure. A business that has grown successfully through promoter-led decision-making may still be legally unprepared for the scrutiny that accompanies an initial public offering.

Pre-IPO legal readiness therefore begins before the draft offer document is prepared. The objective is to find weaknesses while management still has time to correct them: defective corporate records, inconsistent cap tables, undocumented related-party arrangements, missing IP assignments, material contracts with problematic change-of-control provisions, unresolved litigation, informal promoter transactions, workforce gaps, regulatory licences nearing expiry, weak Board processes and disclosures that cannot be supported by evidence.

1. Start with the current 2026 capital-markets framework

For a proposed public issue, the principal securities-law reference is the SEBI (Issue of Capital and Disclosure Requirements) Regulations, 2018, last amended on 21 March 2026. SEBI also issued its Master Circular for Issue of Capital and Disclosure Requirements on 9 February 2026.

Once listed, the governance and disclosure environment is substantially shaped by the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, last amended on 14 July 2026, alongside the Companies Act, 2013, stock-exchange requirements and other applicable securities laws.

A pre-IPO review should therefore work backwards from the governance and disclosure standard the company will be expected to meet, rather than merely asking whether yesterday’s private-company filings were completed.

2. Private-company habits must be replaced before the IPO process

Promoter-led companies often operate with informal approvals, oral understandings, overlapping group-company arrangements and undocumented exceptions. Those practices become problematic when public-market diligence asks for a complete and internally consistent record.

Typical pre-IPO warning signs include:

• material decisions taken over messages without proper Board records;
• historic share issuances that do not reconcile across registers, certificates and filings;
• related-party transactions supported only by invoices or ledger entries;
• promoter-owned assets used by the company without robust agreements;
• key employees promised equity informally;
• customer contracts signed by persons whose authority is unclear;
• regulatory licences held in a different entity from the operating business;
• group-company transactions without a documented commercial rationale;
• material litigation tracked by external lawyers but not centrally by management.

A broader preventive review can begin with our Corporate Legal Risk Audit in India.

3. Corporate form, constitutional documents and restructuring

If the issuer is currently a private company, the public-issue path ordinarily requires corporate restructuring consistent with the Companies Act and proposed listing structure. The Memorandum and Articles should be reviewed for obsolete promoter arrangements, transfer restrictions, private-company limitations, investor rights and provisions inconsistent with the intended public-company governance framework.

Review:

• certificate of incorporation and subsequent name/status changes;
• Memorandum and Articles;
• registered office history;
• subsidiary and group structure;
• objects and business activities;
• historic schemes, mergers, demergers or restructurings;
• shareholder agreements and rights that must terminate, survive or be amended;
• capital structure required for the proposed issue.

The governing corporate statute remains the Companies Act, 2013, subject to applicable rules, notifications and exemptions.

4. Reconcile the cap table before any public-issue diligence

The capital table must reconcile with legally operative documents. Test it against:

• register of members;
• share certificates and demat records where applicable;
• allotment records;
• historic returns of allotment;
• share-transfer documents;
• rights, bonus and preferential issues;
• convertible instruments;
• ESOPs, warrants and other rights;
• pledges or encumbrances;
• beneficial ownership records;
• shareholder agreements and side letters.

A spreadsheet prepared for investors is not itself evidence of title. Every material historic issuance and transfer should be traceable.

5. Promoter and promoter-group readiness

Promoter classification, shareholding, group relationships, related interests, litigation, guarantees, business dependencies and historic transactions may become important disclosure and diligence issues. The company should map these matters early rather than wait for offer-document verification.

Review promoter loans, guarantees, related entities, personal assets used by the company, company assets used personally, common employees, shared brands, common premises, inter-company receivables and unusual historic transfers.

Where the promoter background itself is a material transaction risk, see our Promoter Due Diligence in India.

6. Board composition and governance architecture

Do not wait until filing-stage pressure to design the listed-company governance structure. Map the future Board and committee framework early. Review:

• director eligibility and independence questions;
• skills and Board composition;
• Audit Committee readiness;
• Nomination and Remuneration Committee readiness;
• Stakeholders Relationship Committee and other applicable committees;
• Risk Management Committee applicability;
• related-party oversight;
• director disclosures and conflicts;
• Board evaluation and policy architecture;
• secretarial support and information flow.

For directors, the legal question is not only whether the statutory minimum can be met. The company should also demonstrate credible Board information systems, risk escalation and documented decision-making. See our Quarterly Board Compliance Dashboard and Independent Director Liability Guide.

7. Material contracts and revenue concentration

Public-issue diligence is likely to focus closely on the contracts that support revenue, supply, technology and business continuity. Review:

• largest customer agreements;
• largest supplier and vendor agreements;
• government and public-sector contracts;
• technology and software licences;
• distribution, dealership and franchise agreements;
• leases and facility agreements;
• financing documents;
• IP licences;
• outsourcing and critical-service contracts.

Flag assignment restrictions, change-of-control rights, termination rights, exclusivity, price-reset mechanisms, uncapped liability, unusual indemnities, SLA exposure, minimum commitments, long-overdue receivables and dependence on unsigned or expired agreements.

Use our Contract Risk Audit for deeper testing.

8. Related-party transactions and group-company dependencies

Related-party arrangements need more than accounting disclosure. The company should establish legal basis, approvals, pricing rationale, documentation, continuity and whether the arrangement would remain acceptable after listing.

Particular attention should be given to:

• promoter-owned premises;
• group-company supply and service arrangements;
• management fees;
• common employees;
• shared technology or trademarks;
• loans, guarantees and advances;
• customer or vendor concentration within the group;
• personal expenses or assets passing through the company.

Public-market readiness usually requires these relationships to be transparent, documented and governable under the post-listing framework.

9. Litigation, regulatory proceedings and claims

Create a single verified litigation universe. It should include courts, tribunals, arbitration, tax proceedings, labour matters, regulatory notices, consumer claims, police matters, environmental proceedings and material threatened claims.

For each matter record:

• parties and forum;
• case number;
• claim, demand or exposure amount;
• current procedural stage;
• material interim orders;
• next date and deadline;
• external counsel;
• management assessment;
• provision or contingent-liability treatment;
• business continuity or licence impact.

For a transaction-style dispute framework, see our Litigation & Regulatory Due Diligence Checklist.

10. Licences, approvals and regulatory dependency

Prepare a complete licence matrix by entity, location and business line. The key question is not merely whether licences exist; it is whether they are held by the correct entity, remain valid, cover the current activity and can continue through the proposed transaction and listing process.

Track authority, licence number, activity, location, issue and expiry dates, renewal status, conditions, inspections, notices, transfer/change-of-control issues and business consequence of lapse.

11. Intellectual property and technology ownership

Where valuation depends on brand, software, data, proprietary process or content, verify that the issuer actually owns or validly licenses the relevant rights. Review founder-created IP, employee assignments, consultant assignments, trademarks, domains, patents, designs, copyright, open-source software, source-code arrangements and third-party licences.

An IPO process is a poor time to discover that critical software belongs to a founder personally or to a different group company.

12. Employment, ESOP and key-management readiness

Review employment terms for promoters, senior management and key employees. Reconcile ESOP grants, Board/shareholder approvals, scheme documents, vesting, exercise history, tax treatment and cap-table impact.

Also test confidentiality, IP assignment, consultant classification, disciplinary matters, material employee disputes and statutory workforce compliance. Since India’s four Labour Codes became effective on 21 November 2025, 2026 workforce review should reflect the operative Code framework together with applicable rules and state requirements. The Ministry of Labour maintains its official Labour Codes resource.

13. Data protection and cyber governance

Public-market diligence increasingly examines cyber incidents, customer-data exposure, privileged access, vendor processing, privacy notices and resilience. A pre-IPO file should include data inventory, security governance, incident history, vendor terms, employee offboarding, retention controls and material customer security commitments.

MeitY notified the Digital Personal Data Protection Rules, 2025 with staged commencement. The company should distinguish operative obligations from transition-readiness items and document its implementation programme.

14. Policies should operate in practice, not only exist on paper

Companies often create policies rapidly before a transaction. Diligence can expose the gap between written policy and actual control. Test whether the company can evidence operation of policies on related parties, whistleblowing, POSH, data, insider-sensitive information, code of conduct, delegation, document retention, vendor onboarding, conflicts and risk escalation.

A policy that management routinely overrides without records may create more concern than an acknowledged gap with a credible remediation plan.

15. Build an IPO-readiness risk register

Every material finding should be recorded, scored and assigned. Use four practical classes:

The register should show issue, legal basis, evidence, owner, due date, current status, disclosure implication and closure evidence. For the underlying framework, see our Corporate Risk Register in India.

16. Verification discipline: can every material statement be proved?

IPO readiness is ultimately an evidence exercise. Management should be able to support material statements about ownership, revenue concentration, licences, litigation, contracts, IP, employee numbers, related parties, indebtedness and regulatory status.

Create a verification repository that maps important factual assertions to source documents. If management repeatedly depends on oral explanations, the issue should be fixed before formal diligence intensifies.

17. Pre-IPO clean-up should not become retrospective fabrication

Missing documentation should be regularised only through legally permissible processes. Do not backdate approvals, manufacture historic records or create false evidence to make the diligence file look complete. The safer approach is to identify the gap, determine whether it can lawfully be rectified, document the remediation and prepare transparent disclosure where it cannot be cured.

18. 90-day pre-IPO legal readiness plan

Days 1–30: map entity structure, cap table, promoters, contracts, licences, litigation, IP, workforce, data and related parties. Build a complete data-room index and risk register.

Days 31–60: correct curable corporate and contractual defects, align key policies, resolve documentation gaps, update Board processes and obtain missing licences or renewals where possible.

Days 61–90: conduct verification testing, finalise unresolved-risk memoranda, prepare disclosure positions, test committee/reporting architecture and hand over an organised diligence repository to transaction counsel and merchant bankers.

Frequently asked questions

Related resources

• Legal Risk Audit Before Fundraising in India
• Corporate Risk & Compliance Resources
• Corporate Legal Health Check
• Quarterly Board Compliance Dashboard

Author: Adv. Govind Bali, Fastrack Legal Solutions LLP.