How to Pass an India Compliance Audit When Your Employees Sit on an EOR’s Payroll

You can pass an India compliance audit with employees on an EOR’s payroll if three things are true. Your EOR files every statutory return on time. You can produce records within days. Your contract says who answers the inspector. Inspections are now mostly online and risk-driven, so clean digital records matter more than ever. This guide explains who is responsible, what auditors ask for, and how to prepare with EOR services India providers under the 2026 Labour Codes.

Who Is Responsible in an India Compliance Audit When You Use an Employer of Record India?

The EOR carries the legal responsibility for statutory compliance, because it is the registered employer. You remain responsible for the facts only you control: what work people do, how closely you direct them, and whether your payroll inputs reach the EOR on time.

Under an Employer of Record India model, the EOR files PF, ESIC, professional tax and TDS returns in its own name. Inspectors will usually write to the EOR first. But a late attendance file, a wrong job title or an unrecorded overtime week can still trace back to you. Treat the audit as shared work. The EOR holds the statutory file, and you hold the operating evidence. Agree this split in writing before an inspection notice arrives, not after.

How Do Labour Inspections Work in India After the New Labour Codes?

Inspections now run mostly online, and software selects them by risk. The Codes created a web-based system where a central computer allots inspections, information is requested electronically, and the inspector uploads a report within a set timeline. Employers can also self-assess and self-certify. The old inspector role became the Inspector-cum-Facilitator, who is expected to advise as well as check.

EPFO has said its new approach will rely on data analysis and risk profiling, with inspections mainly electronic and following repeated non-compliance. States keep their own inspection mechanisms too. The four Codes commenced on 21 November 2025, and one guide notes a one-year transition window to 20 November 2026, so confirm the current position with counsel. In practice, your filing history is your first audit. Late or mismatched filings can mark an establishment as higher risk.

What Records Will Auditors Ask For From Your EOR?

Auditors ask for proof that every employee was hired, paid and reported correctly. Your EOR should be able to produce these records quickly, in digital form. The Codes expect records such as attendance, wages, leave, ESI and EPF documents, and appointment letters to be kept electronically.

A strong audit file includes:

• Signed appointment letters and the India-compliant employment contract for each person
• A monthly employee-level payroll register and payslips
• PF challans and returns, plus ESIC contribution files with payment proof
• TDS deposits, quarterly returns and Form 16 certificates
• Attendance, leave and overtime records
• Professional tax and state registration certificates
• A payroll exception log and a payroll-to-invoice reconciliation

Sansovi GCC‘s own CFO guidance lists several of these as monthly evidence to request from an EOR, including the payroll register, ESIC payment proof and the exception log. Ask for the pack every month, not only when an inspector calls.

Which India Labour Compliance Areas Get Checked Most Often?

Auditors focus on money, coverage and paperwork. The areas below carry most of the risk for companies using EOR services in India.

• Wage structure. Basic pay must now be at least 50% of CTC, which raises PF and gratuity costs. Salary letters that predate the change need a review.
• PF and ESIC coverage. Every eligible employee must be enrolled, and contributions must be paid on the correct wage base.
• Gratuity and exits. Fixed-term employees can now qualify for gratuity after one year, and final settlement must be completed within 48 hours.
• State registrations. India’s framework combines central law with state Shops and Establishments rules across 28 states and 8 union territories, so each work location needs its own registration.
• Workplace policies. These include POSH, leave records and employee data handling.

Good India labour compliance means these items stay current all year, not only during an audit.

How Can You Prepare for an Audit With EOR Services India?

Start with a short internal review and book it every quarter. Preparation works best when it is routine. Use these six steps:

1. Ask for a compliance calendar that shows every filing, due date and who owns it.
2. Request a sample audit pack for two or three employees and check it for gaps.
3. Compare salary structures against the 50% basic pay rule.
4. Reconcile the EOR invoice to the payroll register each month.
5. Confirm state registrations for every city where your team sits.
6. Name one person on each side who handles inspection requests.

For a deeper list, see our Indian payroll compliance checklist for global CFOs and our EOR India 2026 guide.

What Should Your EOR Agreement Say About Audits and Penalties?

Your agreement should state who produces records, how fast, and who pays if something goes wrong. A vague contract turns a small notice into a dispute. Sansovi GCC’s guidance points to audit and document-access rights and the treatment of interest, penalties and compliance failures as terms to check.

Look for these clauses:

• A response time for inspection requests, such as 48 hours for first documents
• Your right to review statutory proof every month
• Clear allocation of penalties and interest caused by EOR errors
• Indemnity for compliance failures that sit with the EOR
• Data protection terms, since employee records fall under India’s data privacy rules

Our article on co-employment risk in India covers the wider contract protections.

Where Does HR Outsourcing India Help, and What Do You Still Own?

HR outsourcing India takes over the paperwork, but not the control of the work. The EOR runs payroll, filings and HR administration. You still decide roles, targets and daily direction, and that is where audit and tax questions often start.

If EOR-employed staff generate revenue or conclude contracts for the foreign company, tax authorities may argue that the company has a business presence in India. Scope roles carefully and keep a record of who decides what.

As the team grows, review whether an EOR is still the right structure. Signs it may be time to move include EOR costs exceeding entity costs, long-term IP creation in India, and India becoming a permanent delivery location. If that sounds familiar, read about GCC legal entity setup in India or our managed teams model.

Conclusion: Make Audit Readiness a Monthly Habit

Passing an India compliance audit is mostly about habits. Choose an EOR that shares evidence every month, write audit duties into the contract, and keep your own role records clean. SansoviGCC lists compliance audit readiness and compliance ownership among its core EOR services. Our team can review your current setup and show where the gaps are.