Whistleblower & POSH Framework
Whistleblower policy and Internal Committee (IC) setup under the POSH Act - mandatory governance frameworks, drafted and actually implemented, not just filed away.
Any establishment with 10 or more employees must constitute an Internal Committee under the POSH Act.
The IC must include an external member with relevant experience - an internal-only committee doesn't comply.
Companies must file an annual POSH compliance report, even in years with zero complaints.
A whistleblower mechanism is increasingly expected as part of standard investor and board governance requirements.
Policies that are actually implemented.
Policy drafted and Internal Committee formally constituted with the required external member.
Reporting mechanism, protections, and escalation process defined clearly.
Training sessions so employees actually know the policy exists and how to use it.
Annual POSH report prepared and filed with the required authority.
Part of Layer 3 - ComplianceStack, for both setup tracks.
We flag the 10-employee threshold as you scale, so the IC is constituted before you legally need it, not after.
Start your setup →No IC in place despite crossing the threshold? This is one of the most common gaps we find in compliance health checks.
Run your diagnostic →A framework people actually know how to use.
We run awareness sessions so employees know the mechanism exists and trust it.
We help identify a qualified external member to satisfy the statutory requirement.
The annual POSH report sits on the same compliance calendar as everything else we manage.
Common questions
Yes - the requirement to constitute an IC is based on employee count, not complaint history.
Non-compliance can attract penalties and, on repeat violation, cancellation of business licenses in some cases.
It's mandatory for listed companies; for private companies it's increasingly expected as governance best practice and often required by investors.