Audit AssuranceThe Process, Start to Finishdepth

PF, Payroll & Labour Law Audit India: The Process, Start to Finish

PNPC Global·

Key takeaways

  • How far back does the audit typically look? For a routine assurance or governance exercise, 2–3 years is common.
  • Does this audit cover TDS on salary, or just PF/ESI/labour law? The core scope is PF, ESI, and labour law compliance — wage classification, contribution accuracy, filing timeliness, contract labour exposure, and statutory registers.
  • How do the Labour Codes change PF and gratuity calculations? The Code on Wages 2019, in force nationally since 21 November 2025, applies a uniform definition of 'wages' that requires excludable components (allowances such as HRA, conveyance, and similar items not treated as wages) to be capped at 50% of an employee's total remuneration.
  • We use a third-party payroll processing vendor. Doesn't that mean compliance is already their responsibility? A payroll vendor processes what it is instructed to process, based on the wage structure and inputs the client provides — it does not independently audit whether the CTC structure is legally compliant, whether contract labour exposure exists, or whether historical filings were accurate.
  • How long does the audit take? A full audit covering 2–3 years for a mid-sized establishment (roughly 100–500 employees) typically takes 5–6 weeks from data receipt to final report.

PF, Payroll & Labour Law Audit India: The Process, Start to Finish

The mechanics of PF, Payroll & Labour Law Audit India are what clients ask about once they have decided to proceed. The questions below are the ones raised most often in practice; the full scope of the service is on the PF, Payroll & Labour Law Audit India page.

How far back does the audit typically look?

It depends on the purpose. For a routine assurance or governance exercise, 2–3 years is common. For pre-transaction due diligence, the buyer's or investor's legal team often specifies the look-back period, sometimes matching the limitation period relevant to potential EPFO recovery action, which in practice can extend well beyond a typical 3-year statutory audit cycle since EPFO recovery proceedings are not always time-barred in the same way as other claims. For a notice-response engagement, the audit period matches the specific period under departmental inquiry.

In practice: We recommend clients not artificially truncate the look-back period to make the exercise faster or the finding smaller — an undiscovered gap outside the tested window does not disappear; it simply surfaces later, usually at a worse time.

Does this audit cover TDS on salary, or just PF/ESI/labour law?

The core scope is PF, ESI, and labour law compliance — wage classification, contribution accuracy, filing timeliness, contract labour exposure, and statutory registers. TDS on salary under Section 192 of the Income-tax Act is a related but distinct compliance area, generally covered under a separate TDS compliance review, though PNPC can combine both into a single payroll compliance engagement where that is more efficient for the client.

In practice: It can make sense to combine the two reviews when the underlying data — the payroll register — is identical. Ask us to scope a combined engagement if TDS-on-salary assurance is also a concern.

How do the Labour Codes change PF and gratuity calculations?

The Code on Wages 2019, in force nationally since 21 November 2025, applies a uniform definition of 'wages' that requires excludable components (allowances such as HRA, conveyance, and similar items not treated as wages) to be capped at 50% of an employee's total remuneration. If excluded components exceed that cap, the excess is added back to 'wages' for the purpose of computing gratuity and bonus — meaning many CTC structures with a low basic-to-gross ratio now carry a materially higher gratuity and bonus cost than before the Codes took effect. Provident Fund has now also moved to the Code on Social Security framework: the Employees' Provident Funds Scheme, 2026 was notified under the Code on 29 June 2026 and replaced the 1952 Scheme. How the Code's wage definition, including its 50% test, applies to the PF contribution base should be confirmed against the current EPFO position at the time of the audit, and the earlier wage-classification standard (including the Vivekananda Vidyamandir test) remains relevant for periods before the change.

In practice: This is now current, live compliance — not a forward-looking planning exercise. We test CTC structures against the 50% cap for gratuity and bonus purposes as part of every audit, and separately flag clients whose PF wage base may also need remodelling depending on how the Code's wage definition is applied to the PF wage base, so that restructuring is not left to the last minute a second time.

We use a third-party payroll processing vendor. Doesn't that mean compliance is already their responsibility?

A payroll vendor processes what it is instructed to process, based on the wage structure and inputs the client provides — it does not independently audit whether the CTC structure is legally compliant, whether contract labour exposure exists, or whether historical filings were accurate. Statutory liability for PF, ESI, and labour law compliance rests with the establishment and its officers in default, not the payroll vendor, regardless of the vendor's own service-level commitments.

In practice: We have conducted several of these audits precisely because a company assumed vendor-processed payroll meant compliance was assured, only to discover wage misclassification the vendor had simply replicated month after month exactly as configured at onboarding.

How long does the audit take?

The time a full audit takes depends on the period covered, the size of the establishment and the completeness of the records, and is confirmed at scoping. A narrower pre-transaction diligence scope, covering a shorter period with headline findings only, generally takes less time than a full audit. Multi-location establishments, larger contract labour populations, or incomplete historical records extend the timeline.

In practice: If you have a hard deadline — a term sheet closing date, a notice response date — tell us upfront. We scope the audit depth to fit the deadline rather than compress a full-depth audit into an unrealistic window, which risks missing material findings.

Does the audit cover bonus and gratuity compliance as well?

Yes, as part of the broader labour law scope. We test bonus computation against the eligibility and minimum percentage requirements now carried under the Code on Wages 2019 (which has consolidated and repealed the erstwhile Payment of Bonus Act 1965), verify the applicable annual return filing, and review gratuity provisioning under the Code on Social Security 2020 (which has consolidated and repealed the erstwhile Payment of Gratuity Act 1972) — including whether an actuarial valuation is being obtained where required and whether the gratuity fund (if maintained through a trust) is being managed correctly.

In practice: Gratuity is frequently under-provisioned in growing companies that have not yet had a regular employee cross the 5-year eligibility threshold (fixed-term employees qualify after one year of service under the Code on Social Security) — the liability is real and accruing even before the first payout, and lenders/investors increasingly expect it to appear correctly in the financial statements.

What is a Section 7A inquiry and how is it different from this audit?

A Section 7A inquiry is a formal, quasi-judicial proceeding initiated by the EPFO Regional Provident Fund Commissioner to determine the amount of PF dues payable by an establishment — it is an adversarial, department-led process with statutory notice, hearing, and appeal rights. PNPC's audit is a voluntary, client-commissioned, non-adversarial review conducted before any such proceeding begins (or, if a Section 7A notice has already been received, to prepare a considered response to it).

In practice: An establishment that has already conducted its own audit and knows its numbers walks into a Section 7A hearing in a fundamentally different position than one encountering the department's assessment for the first time at the hearing itself.

How does PNPC's audit differ from what an EPFO/ESIC department inspector would check?

A department inspection is adversarial by design — its purpose is to identify recoverable dues on behalf of the fund, not to advise the establishment. PNPC's audit applies the same statutory tests an inspector would apply, but from an advisory posture: we identify gaps before the department does, quantify exposure honestly (including items an inspector might miss), and — critically — help design the remediation and disclosure strategy, which a department inspector has no role or incentive to do.

In practice: We tell clients plainly: our job is to find every issue an inspector would find, and several an inspector typically would not — because our incentive is to protect you from the worst-case discovery, not to minimise the finding to make the report look better.

Can PNPC conduct this audit for our UAE branch or group entity as well as the India entity?

PF, ESI, and the Indian labour law framework tested in this audit apply specifically to establishments operating in India under Indian statute — the UAE has its own distinct labour law, WPS (Wage Protection System), and end-of-service gratuity framework governed by UAE Labour Law and, for Free Zone entities, the relevant Free Zone Authority's employment regulations. PNPC's Dubai office conducts an analogous payroll and labour compliance review under UAE rules, coordinated with the India-side audit for group entities operating in both jurisdictions.

In practice: For clients with both an Indian entity and a UAE entity, we scope both reviews together so the group gets a single consolidated payroll and labour compliance picture rather than two disconnected reports from two different advisors.

Where this sits in the wider engagement

PF, Payroll & Labour Law Audit India rarely arrives on its own. The statutory basis and the current requirements are set out on the PF, Payroll & Labour Law Audit India service page, and the related services are grouped under Audit Assurance.

What PNPC does

PNPC Global has practised since 1986 across India and the UAE. On PF, Payroll & Labour Law Audit India we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.

Related service · Audit & Assurance

Provident Fund, Payroll & Labour Law Audit

Audit PF, payroll, and labour law compliance for manufacturing and services companies.

Explore this service →View all Audit & Assurance services

Related reading

Continue exploring

Need expert guidance?

Our chartered accountants in India and UAE handle exactly what you've read about. Get a direct answer — not generic advice.

India TeamUAE Team← Back to Blog