Find any Indian legal document in one search.

Board-approved governance and compliance charter with full global frameworks register. ISO certifications (27001, 27701, 27017, 27018, 42001, 9001, 22301, 20000, 14001), SOC 1/2/3, 19 privacy regimes (DPDP, GDPR, UK GDPR, CCPA, LGPD, Singapore PDPA, UAE PDPL, Saudi PDPL, Qatar, Bahrain, Egypt, Morocco, POPIA, Kenya, Nigeria, Ghana, Australia, Japan APPI, Canada PIPEDA), and sector frameworks (PCI DSS, HIPAA, NIST CSF, NIS2, DORA, EU AI Act, GLBA, CMMC, FedRAMP, APRA CPS 234, RBI, Cyber Essentials, FCA Resilience, POSH), plus governance bodies, risk ownership, policy stack and review cadence.

Self-assessment of readiness under the Digital Personal Data Protection Act, 2023, covering data inventory, lawful basis and consent, data-principal rights, retention, cross-border transfers, breach response and processor agreements, with a readiness score and a gap list.

Board-approved policy governing how the organisation builds and uses AI: an AI inventory, EU AI Act risk classification, human oversight, transparency, data governance, prohibited uses, accountability and review. Aligns to the EU AI Act, NIST AI RMF and ISO/IEC 42001.

A board-approved incident response plan: severity tiers, roles, detection, containment and recovery, and regulator and data-principal notification timelines (GDPR 72 hours, India CERT-In 6 hours, DPDP breach reporting). Supports ISO 27001, SOC 2 and DPDP readiness.

A board-ready risk register with impact and likelihood scoring, treatment, owner and review cadence, plus a computed risk heat summary. Supports ISO 31000, ISO 27001 and SOC 2 risk-assessment requirements.

A data retention and disposal schedule: record types, categories, retention periods, lawful basis and disposal method. Supports the storage-limitation principle under GDPR and the erasure duty under the DPDP Act, plus ISO 27001 records control.

A business continuity and disaster recovery plan: critical functions, recovery objectives (RTO and RPO), backups, alternate site, and testing. Aligns to ISO 22301 and supports SOC 2 availability and DORA resilience expectations.

An acceptable use policy governing how staff and contractors use the organisation's systems, devices and data: permitted and prohibited use, BYOD, monitoring notice and enforcement. Supports ISO 27001 acceptable-use control and SOC 2 access expectations.

A policy governing logical and physical access to systems and data: least privilege, role-based access, multi-factor authentication, joiner-mover-leaver, privileged access and access reviews. Aligns to ISO 27001 A.5.15 to A.5.18 and SOC 2 CC6.

A policy that defines data classification levels and the handling, storage, sharing and disposal rules for each. Aligns to ISO 27001 information classification (A.5.12 and A.5.13) and supports DPDP and GDPR data-handling obligations.

A policy governing how changes to systems, infrastructure and software are requested, reviewed, tested, approved, released and rolled back, including emergency changes. Aligns to SOC 2 CC8 and ISO 27001 change-control expectations.

The ISO 27001 Statement of Applicability, assessed control-by-control across all 93 ISO/IEC 27002:2022 Annex A controls — applicability, justification, and recorded exclusions. A mandatory ISMS document under ISO 27001 clause 6.1.3.

A policy for logging and monitoring system and access activity: what is logged, log protection and retention, monitoring and alerting, and review. Aligns to ISO 27001 logging controls, SOC 2 monitoring (CC7) and PCI DSS logging.

A policy for identifying, prioritising and remediating vulnerabilities: scanning, patching cadence, severity-based remediation SLAs and penetration testing. Aligns to ISO 27001, SOC 2 and PCI DSS vulnerability requirements.

A policy for managing information and technology assets: inventory, ownership, classification, acceptable use, secure configuration and end-of-life disposal. Aligns to ISO 27001 asset-management controls and SOC 2.

Board resolution and self-declaration undertaking for DPIIT Startup India recognition. Covers eligibility declarations, innovation description, authorisation to apply on the DPIIT portal, and s.80-IAC tax exemption intent. Generates the formal undertaking letter required for DPIIT recognition.

Per-employee Employee Stock Option grant letter under SEBI (SBEB) Regulations 2021 + Companies Act 2013 s.62. Vesting, cliff, exercise price, change-of-control accelerator.

Investor-grade Shareholders Agreement with reserved matters, ROFR, drag/tag, anti-dilution, founder vesting, board composition, info rights, exit mechanics. Aligned with Companies Act 2013.

Comprehensive co-founders agreement governing equity, roles, vesting, and dispute resolution under Indian law

Agreement for investors to subscribe to new shares including equity, CCPS, or CCD instruments under Indian company law

ESOP document under Companies Act 2013 Rule 12 for employee equity incentivization with vesting and exercise mechanics

Term sheet for Series A/Seed/Pre-seed investment with valuation, investor rights, and deal structure

IP assignment agreement for founder IP vesting into the company, including prior IP and future work product

Mutual or one-way confidentiality agreement drafted under the Indian Contract Act, 1872 with state-specific stamp duty and DPDP Act-aligned data-protection carve-outs.

Demand notice, eviction notice, cheque bounce notice (Section 138 NI Act), or breach-of-contract notice.

Freelance / consultant / contractor services with scope, IP, confidentiality, payment, and termination.

Partnership firm deed with capital contributions, profit sharing, management, and dissolution terms under the Indian Partnership Act, 1932.

Consultancy and advisory agreement appointing an individual consultant or consulting firm to provide specialist, strategic, or advisory services. Covers retainer or project-based fee structures, TDS u/s 194J, GST, independent contractor status (no employer-employee relationship), IP assignment, non-solicitation, and confidentiality.

Distribution and reseller agreement appointing a distributor or reseller for products in a defined territory. Covers exclusive and non-exclusive distribution, minimum purchase commitments, pricing and margins, prohibited resale price maintenance (Competition Act 2002 s.3(4)(e)), IP licence, warranty, product liability, stock buyback on termination, and dispute resolution.

Franchise agreement granting a franchisee the right to operate under the franchisor's brand, trade marks, and business system. Covers upfront franchise fee, ongoing royalty, territory exclusivity, operations manual compliance, quality audits, training, IP licence, renewal, and termination provisions. Applicable to F&B, retail, services, education, and healthcare franchise models.

Project-based or ongoing freelancer agreement between a client and an individual freelancer or independent contractor. Covers project scope, milestones and deliverables, flat or milestone-based payment, TDS u/s 194J at 10%, GST applicability, IP/work-product ownership assigned to client, confidentiality, and revision policy. Lighter than a full MSA — ideal for creative, technical, and professional freelance work.

Joint venture agreement between two or more parties, either as a contractual (unincorporated) JV or through a special purpose company/LLP. Covers equity split and capital contributions, management and governance (board composition, reserved matters), profit distribution, FEMA/FDI compliance for foreign JV partners, non-compete, deadlock resolution, exit mechanisms (tag-along, drag-along, put/call options), and CCI combination notification threshold note.

No Objection Certificate (NOC) letter for employment/visa applications, property transactions, bank loan closure, educational institutions, and general business purposes. Covers employer NOC for employee travel/visa/higher studies, property NOC from landlord or bank, and company NOC for third-party dealings.

Board Resolution for common corporate actions — bank account opening, borrowing authority, investment approval, office lease, vendor contract, and general purpose resolutions. Complies with Companies Act 2013.

Board resolution for allotment of equity shares, CCPS, CCDs, or ESOP shares. Covers fresh issue on rights/private placement/ESOP exercise basis. Includes PAS-3 filing authority, share certificate issuance authority, and FEMA/FC-GPR flag for foreign investors.

Board resolution for appointment of a new director (including additional director or independent director), acceptance of resignation, or removal under s.169. Covers DIR-2 consent, s.184 interest disclosure, DIR-12 filing authority, and DIN requirement.

Formal share certificate in the form prescribed under the Companies Act 2013 (Schedule I Table F / Rule 5). Issued to a member on allotment or transfer. Includes all statutory fields, duplicate certificate provisions, and a transmission/split record table.

Minutes of a company's Annual General Meeting recording attendance and quorum, the ordinary and special business transacted, and the resolutions passed — maintained as the statutory record under the Companies Act, 2013 and Secretarial Standard SS-2.

Directors' report narrative accompanying the financial statements filed in Form AOC-4 with the Registrar of Companies, covering the disclosures and responsibility statement required of the Board under Section 134 of the Companies Act, 2013.

Narrative supporting a company's annual return (Form MGT-7) filed with the Registrar of Companies under the Companies Act, 2013, summarising shareholding pattern, changes in directors and key managerial personnel, meetings held, and compliance during the financial year.

DPT-3 Return of Deposits and Outstanding Loans under Companies Act 2013 Section 73

Annual director KYC declaration (Form DIR-3 KYC) that every person holding a Director Identification Number (DIN) files with the Ministry of Corporate Affairs to keep their identity, address and contact details current; non-filing deactivates the DIN until a late fee is paid.

Board Resolution for Bank Account Opening & Banking Operations under Companies Act, 2013

Board Resolution for Private Placement of Shares under Section 42 of Companies Act, 2013

Declaration for commencement of business (Form INC-20A) that a company having share capital must file within 180 days of incorporation, confirming that every subscriber has paid the value of the shares agreed to be taken, under Section 10A of the Companies Act, 2013.

First Board Meeting Minutes after Company Incorporation under Companies Act, 2013

Notice and Form ADT-1 intimation filed with the Registrar of Companies recording the appointment of a company's statutory auditor under Section 139 of the Companies Act, 2013, together with the auditor's written consent and eligibility certificate.

Share Certificate in Form SH-1 as per the Companies Act 2013 and DPIIT guidelines

Statutory audit engagement letter compliant with Standard on Auditing 210, ICAI — scope, responsibilities, fees, deliverables.

GST-compliant tax invoice with HSN/SAC, GSTIN, place of supply, and CGST/SGST/IGST split — Rule 46 CGST Rules.

Monthly salary slip itemising an employee's earnings and statutory deductions — provident fund, ESI, professional tax and TDS — giving a clear, compliant record of pay for the wage period under Indian payroll and labour rules.

Pre-joining offer with CTC breakdown, probation, notice, non-compete, and standard terms.

Formal appointment letter issued on or after joining, with full CTC breakdown, probation, leave policy, confidentiality and notice terms.

Service / experience certificate confirming employment period, role, and conduct.

Employment termination letter covering performance, misconduct, redundancy, or with-cause scenarios, with notice and settlement terms.

Resignation acceptance and relieving letter confirming clearance and last working day.

Formal salary revision / increment letter with revised CTC breakup. Covers performance-based increment, effective date, and revised pay components.

Formal written warning to an employee for misconduct, policy violation, or poor performance. Covers first warning, final warning, and show-cause notice variants.

Exit settlement letter with leave encashment, gratuity calculation, notice pay, and deductions. Generates itemised settlement statement for departing employees.

Company leave policy covering Casual Leave, Sick Leave, Earned/Privilege Leave, Maternity, Paternity, and Bereavement leave. Configurable leave days and carry-forward rules.

Internship offer letter with stipend, project details, duration, confidentiality clause, and IP assignment. Suitable for college students and fresh graduates.

Confirmation of probation completion letter. Formally confirms permanent employment status, revised benefits, and salary revision (if any) on successful completion of the probationary period.

Employee code of conduct and ethics policy. Covers professional behaviour, conflicts of interest, anti-bribery, data protection, social media, disciplinary process, and reporting obligations.

Employee confidentiality and non-disclosure agreement. Covers proprietary information, IP assignment, non-solicitation, return of materials, and post-employment obligations.

Remote work and Work-from-Home (WFH) policy. Covers eligibility, equipment, data security, core hours, performance expectations, and home workspace requirements.

Complete POSH policy plus Internal Committee (IC) constitution under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — definitions, complaint procedure, inquiry process, penalties, and return format. Already have a policy and only need to constitute the committee? Use the short ICC Constitution instead.

Short-form Internal Complaints Committee (ICC) constitution document under the POSH Act 2013 — committee composition, complaint procedure, inquiry process, and confidentiality, for employers that already have a POSH policy in place. Need the full policy text as well? Use the POSH Policy & IC Charter (18 pages) instead. Mandatory for all employers with 10 or more employees.

Formal appointment letter / offer letter issued to a new employee. Includes CTC breakup, joining date, probation terms, notice period, confidentiality, IP assignment, and key conditions of employment. Suitable for full-time and fixed-term employment.

Confidentiality and non-disclosure agreement between employer and employee or contractor. Covers trade secrets, source code, customer data, business strategies, DPDP Act obligations, work-for-hire IP assignment, and post-employment obligations. Standalone or attached to appointment letter.

Relieving letter confirming the employee's last working day and clearance from all duties, combined with an experience certificate. Issued on or after the last working day. Covers all separation types: resignation, mutual separation, end of contract, and retirement.

Policy addressing prevention of bribery and corruption under the Prevention of Corruption Act 1988

Consent form for background verification and screening of job applicants or existing employees

Structured exit-interview and feedback form that captures a departing employee's reasons for leaving, honest feedback on their role and manager, and knowledge-transfer notes — helping HR spot attrition trends and close the separation out cleanly.

Full and Final settlement statement for employee separation and compensation calculation

Whistleblower policy for internal reporting of unethical and unlawful conduct, aligned with SEBI LODR and best practices

Data Processing Agreement between a Data Fiduciary and its Data Processor. Compliant with India's DPDP Act 2023 and optionally EU GDPR Article 28. Covers sub-processors, security measures, breach notification, and audit rights.

Information Security Policy aligned with ISO 27001:2022 and SOC 2 Trust Services Criteria. Covers access control, asset management, incident response, BCDR, cryptography, and security awareness.

Security policy for electronic protected health information aligned to the HIPAA Security Rule, 45 CFR Part 164 Subpart C.

HIPAA Notice of Privacy Practices (NPP) for a covered entity under the HIPAA Privacy Rule, 45 CFR §164.520. Describes how protected health information (PHI) is used and disclosed, uses requiring authorization, individual rights, the entity's duties, and how to complain to the entity and to HHS OCR.

HIPAA Business Associate Agreement between a Covered Entity and a Business Associate under 45 CFR §164.502(e) and §164.504(e). Covers permitted and required uses and disclosures of PHI, safeguards including Security Rule compliance for ePHI, breach and security-incident reporting, subcontractor flow-down, individual access/amendment/accounting support, HHS access, and return or destruction of PHI on termination.

HIPAA Breach Notification Policy aligned with the HIPAA Breach Notification Rule (45 CFR §§164.400–414). Covers the definition of breach and its exceptions, the four-factor risk assessment, notification to individuals, HHS, and media, business-associate reporting, and the documentation and burden-of-proof requirements.

AI Management System (AIMS) Policy aligned with ISO/IEC 42001:2023. Establishes a full management system — not a plain AI-use policy — covering the AI policy and objectives, context and interested parties, leadership and roles, AI risk management and the AI system impact assessment process (Clause 6.1.4 / Annex A.5, guided by ISO/IEC 42005), the Annex A control areas (A.2–A.10), responsible-AI principles, and continual improvement. Optionally aligns to the EU AI Act and NIST AI RMF.

AI System Impact Assessment record aligned with ISO/IEC 42001:2023 (Clauses 6.1.4 and 8.4) and ISO/IEC 42005:2025 guidance. Documents system description, intended purpose, affected individuals and groups, potential harms (bias, safety, privacy, security, transparency, autonomy, environmental), likelihood and severity, mitigations, human oversight, residual impact and the acceptability decision. Supports EU AI Act fundamental-rights and conformity context.

Central register of every AI system with owner, provider, EU AI Act risk tier, impact-assessment status and review dates.

Governs how the organisation collects, analyses and disseminates cyber threat intelligence, aligned to ISO/IEC 27001:2022 Annex A control 5.7.

Policy for embedding information security into every project, aligned with ISO/IEC 27001:2022 Annex A 5.8. Covers security-by-design from initiation, per-project risk assessment, security requirements and acceptance criteria at project gates, roles, and post-project review.

Configuration & Hardening Management Policy aligned with ISO/IEC 27001:2022 Annex A 8.9 (new control), SOC 2 CC7.1, and PCI DSS Requirement 2. Covers secure baseline configurations, hardening standards (CIS Benchmarks), configuration control and approval, drift detection and monitoring, documentation and inventory, and periodic review.

A control standard covering secure information deletion, data masking / pseudonymisation / anonymisation for non-production and display, and data leakage prevention across email, web, endpoint and cloud. Maps to ISO/IEC 27001:2022 A.8.10, A.8.11 and A.8.12, SOC 2 CC6.7 and the DPDP Act, 2023.

Capacity Management Policy aligned with ISO/IEC 27001:2022 A.8.6 (Capacity management) and SOC 2 Availability (A1.1). Covers monitoring of compute, storage, network and personnel capacity; forecasting and trend analysis; utilisation thresholds and alerting; performance tuning and scaling (including auto-scaling); and linkage to availability RTO/RPO targets and the Business Continuity Plan.

A living register of the legal, statutory, regulatory and contractual requirements the organisation must meet, aligned with ISO/IEC 27001:2022 controls A.5.31–A.5.34. India-first coverage of the DPDP Act 2023, IT Act 2000 with CERT-In Directions, Copyright Act 1957, and sectoral rules, plus GDPR where operating abroad.

Joiner-Mover-Leaver access lifecycle procedure covering approval-based provisioning, role changes, SLA-bound de-provisioning, least privilege, privileged access, recertification and break-glass.

A modern authentication and password standard aligning credential, MFA, session and account controls to ISO 27001, SOC 2, PCI DSS v4.0.1 and NIST SP 800-63B.

Endpoint hardening, EDR/anti-malware, disk encryption, patch SLAs, MDM/BYOD and removable-media controls mapped to ISO 27001, SOC 2 and PCI DSS.

Network segmentation and trust zones, default-deny firewalls / network security controls reviewed every six months, secure remote access and VPN, wireless security, DMZ, web/DNS filtering and IDS/IPS aligned to ISO 27001 A.8.20–A.8.23, SOC 2 and PCI DSS.

Formal security awareness, competence and role-based training programme with phishing simulations, completion tracking, attestation and sanctions, mapped to ISO 27001, SOC 2 and PCI DSS.

Information Security Risk Management Methodology defining risk and acceptance criteria, an asset/threat/vulnerability approach, 5x5 likelihood and impact scales, risk ownership, treatment options and the link to the Statement of Applicability and Risk Treatment Plan. Aligned with ISO/IEC 27001:2022 Clause 6.1.2 and SOC 2 CC3.1-CC3.4.

A controlled register of SMART, measurable information security objectives set at relevant functions and levels, each with an owner, metric/KPI, baseline, target, deadline, resources, monitoring method and status — linked to the Information Security Policy and risk-assessment results per ISO/IEC 27001:2022 Clause 6.2.

Defines the information security governance structure, role-by-role responsibilities, a RACI matrix for key security activities, and segregation-of-duties principles. Aligned with ISO/IEC 27001:2022 Clause 5.3, Annex A.5.2 & A.5.3, and SOC 2 CC1.3.

Periodic monitoring, measurement, analysis and evaluation report for an Information Security Management System, aligned with ISO/IEC 27001:2022 Clause 9.1 and SOC 2 CC4.1. Presents the security metrics programme — what is measured, method, frequency, owner — and a target-vs-actual metrics table with trend and analysis for management review.

ISMS procedure governing how documents and records are identified, versioned, approved, distributed, classified, retained and retired, aligned to ISO/IEC 27001:2022 Clause 7.5.

Human Resources security policy covering the full employment lifecycle — pre-employment background verification, security terms of employment, onboarding, disciplinary process, offboarding, post-employment obligations, and contractor screening. Aligned with ISO/IEC 27001:2022 people controls, SOC 2, and PCI DSS.

Defines how the organisation continuously monitors internal controls, classifies deficiencies by severity, and tracks remediation to closure under SOC 2 CC4.1 and CC4.2.

Defines the cardholder data environment, in-scope system components, account-data flows and the annual PCI DSS scoping-confirmation process.

Determines the correct PCI DSS v4.0.1 Self-Assessment Questionnaire type and produces a merchant Attestation-of-Compliance style record.

Approved algorithms, full key lifecycle, HSM/KMS storage, rotation, split knowledge and dual control, and certificate management aligned to ISO 27001 A.8.24, SOC 2 and PCI DSS.

Secure Software Development Lifecycle (Secure SDLC) Policy aligned with ISO 27001:2022 A.8.25–A.8.31, SOC 2 CC8.1, and PCI DSS v4.0.1 Req 6.2–6.3. Covers threat modelling, secure coding (OWASP Top 10), SAST/DAST/SCA, code review, dependency and patch management, environment separation, change approval, and use of production data in test.

Supplier & Third-Party Security Policy aligned with ISO 27001:2022 (A.5.19-A.5.23), SOC 2 CC9.2, and PCI DSS v4.0.1 Req 12.8. Covers supplier risk tiering, due diligence, security clauses, DPAs, right-to-audit, SOC 2/ISO evidence, ongoing monitoring, and offboarding.

Physical zones, access control, visitor management, CCTV, environmental controls, media handling and secure disposal — aligned to ISO 27001 A.7, SOC 2 CC6.4/CC6.5 and PCI DSS Req 9.

Information Backup Policy aligned with ISO 27001:2022 A.8.13, SOC 2 Availability (A1.2), and PCI DSS v4.0.1 Req. 12.10. Covers backup scope, the 3-2-1 rule, encryption, geographic separation, retention, restore-testing cadence, RTO/RPO alignment, and immutability / ransomware protection.

Documented ISO 27001 scope statement defining ISMS boundaries, context, interested parties, interfaces and justified exclusions.

ISO 27001 risk treatment plan linking the risk register and SoA to per-risk treatment options, Annex A controls, owners, target dates and residual-risk sign-off.

ISO/IEC 27001:2022 Clause 9.2 internal audit report recording scope, methodology, classified findings, per-clause and Annex A results, conclusions and the link to corrective action.

Minutes of the top-management review of the ISMS, capturing the mandatory Clause 9.3.2 inputs and 9.3.3 decisions as audit evidence.

A controlled register recording each ISMS nonconformity, its root cause, correction, corrective action, owner, due date and effectiveness verification.

Standard Operating Procedure for mandatory 6-hour cyber incident reporting to CERT-In under s.70B(6) IT Act 2000 (Directions dated 28.04.2022).

Management's Description of the System for a SOC 2 report, built to the AICPA 2018 Description Criteria (DC section 200, DC1-DC9, with revised implementation guidance 2022). Covers services, service commitments and system requirements, the five system components, boundaries, control environment, the applicable Trust Services Criteria, system incidents, complementary user-entity controls (CUECs), subservice organisations (carve-out / inclusive) and CSOCs.

Privacy Notice compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act). Covers categories of data collected, purposes, consent, data principals' rights, and grievance redressal.

GST-compliant tax invoice for supply of goods or services. Covers B2B and B2C transactions, IGST (inter-state) and CGST+SGST (intra-state), HSN/SAC codes, reverse charge mechanism, and e-invoicing IRN/QR code fields. Mandatory fields as per CGST Rules 2017 Rule 46.

Monthly professional tax deduction working sheet and challan summary for employers. Covers all major PT states — Maharashtra, Karnataka, West Bengal, AP/Telangana, Tamil Nadu, Gujarat, MP, Odisha, Kerala — with applicable salary slabs, deduction amounts, and payment due dates. Includes employee-wise register and Form III / annual return reference.

Form 16 working sheet — TDS certificate for salary income. Covers Part A (TDS deducted and deposited quarter-wise, TRACES-generated data) and Part B (detailed income computation: gross salary, exemptions, deductions, taxable income, tax under old and new regime). Mandatory issuance by employer by 15 June each year.

External confirmation letter requesting a bank to verify an entity's account balances, loan facilities and securities held, sent directly to the statutory auditor following the external-confirmation procedures in Standard on Auditing (SA) 505.

External confirmation letter asking a supplier (creditor) to confirm the balance payable by the entity directly to the auditor, supporting verification of trade payables under Standard on Auditing (SA) 505.

External confirmation letter asking a customer (debtor) to confirm the balance receivable by the entity directly to the auditor, supporting verification of trade receivables under Standard on Auditing (SA) 505.

Audit planning memorandum recording the overall audit strategy, assessed risk areas, materiality thresholds, timelines and team responsibilities for a statutory audit, in line with the risk-based planning approach set out in the Standards on Auditing.

Independent statutory auditor's report on a company's financial statements, expressing the audit opinion and reporting the matters required under Section 143 of the Companies Act, 2013 and the applicable Standards on Auditing.

Working checklist mapping each clause of the Companies (Auditor's Report) Order, 2020 (CARO 2020) to the auditor's verification steps and comments, helping ensure the statutory audit report addresses every reporting matter the Order requires.

Management representation letter in which a company's management confirms in writing to its auditors its responsibility for the financial statements and the completeness of the information provided, as contemplated by Standard on Auditing (SA) 580.

Annual compliance baseline checklist and report for corporate governance and statutory compliance tracking

Licence agreement for a patented invention in India. Covers exclusive, non-exclusive, or sole licence; royalty and milestone payments; field-of-use and territory restrictions; sub-licensing; improvements ownership; and compulsory licence awareness.

Deed of assignment of copyright under the Copyright Act 1957. Covers literary, artistic, musical, dramatic works, and software. Assigns full or limited copyright with or without moral rights waiver, includes future works provision, and covers royalty / nil consideration structures.

Deed of assignment of a registered or pending trademark in India. Covers complete or partial assignment, with or without goodwill, with recordal authority under Trade Marks Act 1999. Includes Form TM-P filing authority.

Agreement for assignment of copyrights in literary, artistic, musical, software or website works under the Indian Copyright Act 1957

Agreement for assignment of employee work product and inventions to the employer under Indian law

Policy governing the use of open source software within an organization to manage license compliance and IP risks

Deed of assignment transferring ownership of a patent or patent application from the assignor to the assignee for agreed consideration, with warranties of title, for recordal with the Patent Office under the Patents Act, 1970.

Software End User Licence Agreement (EULA) governing the use of software products and services

Agreement for assignment of trademark rights under the Indian Trade Marks Act 1999

A third-party risk assessment record for a vendor or subprocessor: certifications, data access, DPA, subprocessors, security controls and breach history, with a computed risk rating and a recommendation. Supports ISO 27001 supplier security and SOC 2 vendor due diligence.

Master Services Agreement framework for vendor / supplier engagements — SoW structure, IP, confidentiality, indemnities, termination, GST + TDS handling.

Statement of Work (SOW) document outlining scope, deliverables, timeline, and terms under a Master Services Agreement

11-month residential rental agreement with auto-computed state stamp duty, asset/inventory schedule, and applicable-Act citations.

General or Special Power of Attorney for property transactions, banking, or personal representation. Revocable.

Transfer of property as gift — with blood-relative stamp duty guidance under the Transfer of Property Act 1882 and state stamp duty laws.

Long-term lease deed (3+ years) for residential or commercial premises — registration required.

Agreement to sell immovable property with payment milestones, possession schedule, and default provisions. Precedes the registered Sale Deed. Complies with Transfer of Property Act 1882 and Registration Act 1908.

Sale deed / conveyance deed for transfer of immovable property (flat, house, plot, commercial premises). Compulsory registration required. Includes stamp duty note, TDS under s.194-IA, s.50C capital gains, RERA compliance, and NRI/FEMA flag.

Simple, English, or equitable mortgage deed formats. Covers loan amount, interest, repayment schedule, default provisions, and power of sale. Complies with Transfer of Property Act 1882.

Maharashtra Leave & License Agreement. Licensed premises for residential/commercial use. Complies with Maharashtra Rent Control Act 1999. Covers license fee, deposit, term, termination, and restrictions.

Deed of relinquishment by a co-owner releasing their undivided share in jointly owned immovable property in favour of another co-owner. Compulsory registration required. Covers consideration / nil consideration, family relinquishment, and IT Act capital gains note.

Residential or commercial rent agreement / lease deed. Generates an 11-month leave-and-licence (no registration required) or a registered lease for longer terms. Covers rent, security deposit, maintenance, lock-in period, termination, and pet/alteration restrictions.

General-purpose sworn affidavit — name change, address, date-of-birth, income, education gap, and custom declarations.

Last Will and Testament with executor, beneficiaries, specific bequests and residuary estate distribution.

Last will and testament for a Hindu / non-Muslim Indian testator distributing immovable property, bank accounts, investments, jewellery, and personal effects. Appoints executor(s) and guardian for minor children. Registration optional but recommended.

General-purpose sworn affidavit for personal or legal purposes. Covers name change / correction, address proof, income declaration, lost document, date of birth, single girl child declaration, character, undertaking, or any custom statement. To be sworn before a Notary / Magistrate / Commissioner.

Affidavit for proof of address for bank accounts, government documents, or other official purposes

Affidavit for legal name change for government documents, bank accounts, and official records

No Objection Certificate (NOC) from property society, bank, or authority for property transfer or sale

Public notice for newspaper publication (name change, lost document, property dispute, company announcements)

Rent receipt for HRA claims, tax deduction purposes, and rent payment documentation

General-purpose legal notice by an advocate on behalf of a client. Covers money recovery, breach of contract, service deficiency (consumer), property / possession, unpaid dues, fraud / misrepresentation, defamation, and custom disputes. Includes demand, timeline, and consequences clause.

Legal notice demanding cessation of infringing or unlawful conduct with specified deadline and consequences

Notice under Arbitration and Conciliation Act 1996 (India) invoking arbitration for contract disputes

Demand notice for cheque dishonour under Section 138 Negotiable Instruments Act 1881 with 15-day demand period

Consumer complaint notice under Consumer Protection Act 2019 for defective products/services

Notice for recovery of outstanding dues from loan/invoice/rent with interest calculations and legal consequences

Notice to vacate premises under Transfer of Property Act 1882 and applicable Rent Control Acts

Vakalatnama - Power of Attorney granted to an advocate for legal representation in court or before a tribunal

Right to Information (RTI) Act 2005 application for seeking public information from government authorities

First Appeal under Section 19 of the Right to Information Act 2005 for challenging RTI decision or non-disclosure

Formal memo filed by an advocate entering appearance in a civil or criminal matter before a court or tribunal

Attorney-client engagement letter setting out scope of representation, fees, retainer, and terms of engagement — compliant with Bar Council of India Rules