By a Corporate Lawyer Sadia Javed at SJ Law Experts, Islamabad
Introduction
After incorporation, startups in Pakistan enter a critical compliance phase. The SECP requires ongoing filings, policies, and governance mechanisms to ensure legal and financial transparency. This blog outlines a comprehensive post-incorporation compliance checklist designed to guide startups through SECP obligations, reduce legal risks, and maintain investor confidence.
Why PostIncorporation Compliance Matters
Startups often focus on product development and marketing—but neglecting SECP compliance brings serious risks:
- 🚨 Daily fines on late filings
- 🛑 Legal notices & reputational damage
- 💰 Personal disqualification of directors
- ⚠️ Loss of funding credibility
Governance and statutory adherence aren’t just legal requirements—they are vital for sustainable growth.
Legal Framework under Companies Act, 2017
SECP enforces compliance through the Companies Act, 2017, relevant regulations, and SECP circulars. Key provisions include:
Statutory timelines for annual returns and corporate changes
UBO register under AML/CFT rules
Risk, audit, and compliance frameworks under SECP guidelines
Startup Classification and Obligations
Startups may register as:
- Private Limited Company
- Single Member Company (SMC)
- Section 42 Company (Non-Profit/REIT)
Each structure influences compliance—for instance, SMCs and private companies with under PKR 1 million paid-up capital are exempt from audited statements.
Statutory Filing Schedule & Mandatory Documents
Post-Incorporation Forms (within 15–60 days):
- Form 28 (Consent of Director/CEO) – 15 days
- Form 29 (Particulars of Directors/Officers) – 15 days as directors are appointed or change
- Form 21 (Registered Office) – 15 days if address changes
- Form 3 (Allotment of Shares) – 30–45 days after share issuance
Annual Requirements:
- First AGM within 16 months of incorporation (then within 120 days of FY-end)
- Audited/Unaudited Financial Statements file before or within 30 days post-AGM
- Form A (Annual Return) – within 30 days post-AGM
Event-Triggered Forms:
- Director/auditor/secretary appointment or change – Form 28/29 within 15 days
- Issue/removal/modification of charges (Form 10–17 series) – 30 days
- A complete timetable appears in SECP’s Post Incorporation Procedure & Schedule
Ongoing Governance & Internal Controls
To sustain investor confidence and compliance:
- Maintain Register of Members, Directors, Officers, UBO, and Mortgages/Charges
- Conduct and record Board and AGM meetings, with proper minutes
- Form an Audit & Risk Committee (especially for startups raising capital)
- Enforce internal policies on loans, conflicts of interest, travel, etc.
- Sturdy governance is increasingly demanded by SECP and modern investors.
- Policies & Registries (UBO, AML/CFT, Risk)
Startups must also implement:
- UBO Register: Identify and update information on individuals with 25%+ beneficial ownership, a SECP and FATF compliance requirement.
- AML/CFT Framework: Apply a risk assessment and compliance forms by June 30 each year, using May 31 cut-off data.
- Compliance Assessment & Risk Framework: Submit annual compliance assessment checklists as per SECP AML/CFT rules.
Annual Audit, Risk & Compliance Filing
Depending on paid-up capital and type of company:
A private company < PKR 1 million pays only unaudited statements
Larger or venture-backed startups require full audit by SECP-registered auditors
Certain startups will need quarterly filings if public or RoC advanced-stage
Additionally, the AML/CFT framework, auditing, and compliance reports must be filed annually.
Governance Best Practices for Startups
To not just comply, but excel:
- Define clear board roles with independent directors and formal meeting charters
- Implement compliance policies — anti-harassment, DE&I, whistleblower
- Ensure transparent minute-keeping, board oversight, and documented decisions
- Collaborate with legal counsel for charter drafting, contract review, and compliance training
- Undergo annual compliance reviews with legal experts before filings
Consequences of NonCompliance
Failing to adhere to SECP requirements leads to:
Fines from PKR 500 to over PKR 10,000 per day for delays
Risk of director disqualification, blacklisting, or SECP enforcement action
Legal exposure for negligence, conflicts, or fraud
Decline in investor/partner confidence
Possible winding-up proceedings or deregistration
Proactive compliance is essential to avoid irreversible damage.
Role of a Corporate Lawyer
- As a corporate lawyer in Islamabad, SJ Law Experts provides vital support:
- Prepare and file all mandatory SECP forms on schedule
- Draft legal policies and registers (UBO, AML, governance charters)
- Conduct compliance audits and internal risk reviews
- Maintain statutory books and minute records
- Represent clients in SECP inquiries and defense
- Advise on SEC filings and regulatory updates to ensure future-proof compliance
StepbyStep Checklist
| Activity | Timeline | Responsibility |
| File Form 28 & Form 29 (directors) | Within 15 days of appointment | Legal counsel |
| File Form 3 (share allotment) | Within 30–45 days | Company secretary |
| File Form 21 (registered office change) | Within 15 days | Company secretary |
| Hold first AGM | Within 16 months of incorporation | Board |
| Submit Financials & Form A | 30 days post-AGM | Legal counsel |
| Maintain registers & policies | Ongoing | Management/legal |
| UBO & AML/CFT submission | By Jun 30 annually | Legal/compliance |
| Audit & Risk framework | By Jun 30 annually | Auditor/legal |
Post-incorporation compliance under SECP is not optional, it’s indispensable for startups’ legal standing and investor credibility. By following this comprehensive checklist and partnering with legal advisors like SJ Law Experts, startups pave the way for trustworthy growth, financial safety, and strong governance culture.
📞 Contact SJ Law Experts
Office No. 1, First Floor, Al Anayat Mall, Above Faysal Bank Ltd., G-11 Markaz, Islamabad
Call/WhatsApp: +92 3354112288
Email: SJLawExperts@gmail.com
