Annexures · Founder resources

The checklists we run with clients, published.

Nothing here is gated. Read each one on the page, print it, or ask for the PDF. The reason is simple: a founder who finds the gap before it costs money is a better client conversation than a form fill.

DPDP Act compliance checklist and timeline for startups

The DPDP Rules 2025 commencement dates and twelve items in build order, each tied to its section or rule: scope, data map, notice and consent before 13 November 2026, then safeguards, the 72-hour breach report, erasure, children and transfers for 13 May 2027.

The Web3 founder’s legal-readiness checklist

Eight items in the order they have to be done: entity, classification, licensing, AML, fiat, tax, data, IP. You cannot reclassify a token after the sale.

The founder’s India compliance calendar

The recurring statutory dates a private limited company should not miss, on one page: DPT-3, FLA, DIR-3 KYC, AOC-4, MGT-7 and the rest, in order.

The founder’s SHA exit-rights checklist

Seven clauses written at entry that decide what you walk away with at exit: drag, tag, ROFR, reserved matters, the waterfall, board control, vesting.

The UAE VASP licensing-readiness checklist

Seven steps to a UAE virtual-asset licence: choose the regime, map your activities, substance, capital, the compliance function, banking, the dossier. Pairs with VARA vs ADGM vs DIFC.

The founder’s entity-selection decision sheet

Six questions that decide whether you start as a Private Limited company, an LLP, or a US C-corp, with a recommendation for each answer.

The early-stage fundraising instrument cheat-sheet

When to use a SAFE, a CCD or CCPS, or a priced round, what each means for FEMA and valuation, and the filings that follow.

The ESOP pool sizing worksheet

Size a pool bottom-up from your hiring plan, decide pre-money versus post-money, and model the dilution before you sign.

The FEMA and FC-GPR compliance checklist

Seven checks before and after foreign money enters an Indian company: the route, beneficial ownership, pricing, FC-GPR, the FLA return, staying diligence-clean.

The MiCA CASP authorisation readiness checklist

Seven steps to CASP authorisation readiness: the class, the member state, capital and the insurance route, governance, the policy set, and the 40-working-day clock. Pairs with MiCA vs VARA.

The FIU-IND registration checklist for VDA service providers

Seven steps from the VDA service provider test under the PMLA to registration, the AML programme, reporting, and the 30% tax and 1% TDS to model alongside.

The joint-venture term checklist

Nine terms to fix before signing: the vehicle, control, contributions, IP in and out, exclusivity, deadlock, exit pricing, cross-border money, and governing law.

The ODI regularisation checklist

Seven steps to fix missed ODI filings: map the holdings, list the forms that were due, price the late submission fee, check the three-year window, sequence the fix with the bank. Pairs with LRS vs ODI.

The MiCA readiness self-assessment

An interactive readiness self-assessment: does MiCA reach you, which parts apply, and where your activity, token, terms, marketing and disclosures would fail. Tick as you go, get a live read, and send it to us for a discovery call. Pairs with the CASP readiness checklist.

The self-custody compliance controls checklist

Twelve controls in build order for wallet and self-custody platforms, each tied to the rule that asks for it under FinCEN, MiCA and DORA, VARA and FIU-IND, with a Schedule A crosswalk to SOC 2.

The crypto exchange listing legal opinion checklist

Nine documents in preparation order for a token listing, each tied to the venue duty that asks for it under MiCA, VARA, the DFSA, FIU-IND and the US Howey test, with a Schedule A of what the opinion must address and cannot say.

The sample token legal opinion letter

A specimen non-security opinion on invented facts for India, the UAE, the US and the EU, with a note on each part saying what it does and what to check, and nine red flags to look for before you pay for an opinion. Nobody signed it; nobody may rely on it.

One step further

A checklist finds the gap. A call closes it.

Send us your structure, your SHA or your entity type, and we will mark up what actually applies to you. The reading is free.

Thirty minutes with Prashant Sharma, the founder, who does the work himself. You leave with next steps either way. Email is read by the founder and answered within one working day.