Preparing for an HR or payroll audit in India
Reviewed by Mellow Editorial Team, HR & payroll content team
An HR or payroll audit in India means a systematic review of whether your employment records, statutory filings, and payment practices comply with central and state law. Pass it cleanly and you demonstrate good governance; fail it and you face back-payments, interest, penalties, and in serious cases, prosecution.
What auditors actually examine
Auditors — whether internal, external, or from a labour or tax authority — look for evidence that you have met your obligations, not just that you intend to. The core areas are:
Payroll and tax deductions. Every employer must deduct TDS from salary under the correct income tax slab, deposit it on time, file Form 24Q each quarter, and issue Form 16 to employees by the due date after the financial year closes. An auditor will check that your TDS calculations reflect the employee's chosen tax regime (old or new), that the 4% health and education cess has been applied, and that the section 87A rebate has been correctly factored in where applicable.
Provident Fund. Both the employee and employer contribute 12% of qualifying wages to EPF. An auditor will verify that contributions are calculated on the correct wage components, remitted by the due date each month, and matched to ECR (Electronic Challan cum Return) filings on the EPFO portal.
ESI. For employees whose wages fall below the applicable threshold, ESI contributions must be deducted and remitted. Auditors check that you have correctly identified covered employees, applied the right rates, filed returns on time, and maintained the required registers.
Gratuity. Gratuity becomes payable once an employee completes five years of continuous service. Auditors look at whether your gratuity liability is properly calculated, whether any gratuity fund or insurance arrangement is in place, and whether payments to departing employees were made within the statutory timeline.
Labour Code compliance. India's four consolidated Labour Codes — covering wages, industrial relations, social security, and occupational safety — have been in force from 2025. An auditor will check that your appointment letters, standing orders, leave policies, and wage payment records are aligned with the applicable Code provisions and the relevant state's rules, which often differ from the central rules.
Getting your records in order before the audit
The single most common reason audits go badly is missing or inconsistent documentation. Work through this checklist in the weeks before a scheduled audit, or maintain it as standard practice:
- Employee master data: confirmed joining dates, designation, PAN, UAN, and ESI number for every employee on the rolls and every employee who has left in the period under review.
- Salary registers: month-by-month records showing gross pay, each deduction, and net pay. These must match bank transfer records and Form 24Q filings exactly.
- Statutory challans and returns: EPF ECRs, ESI returns, TDS challans, and proof of payment for each period. Store these with acknowledgement receipts.
- Form 16 and Form 16A: issued to employees and traceable back to your 24Q filings.
- Appointment letters and contracts: signed copies for every employee, including those engaged through fixed-term contracts.
- Leave and attendance records: particularly relevant for wage payment compliance under the Labour Codes and for verifying service continuity in gratuity calculations.
- Separation records: full and final settlement workings for employees who left, including gratuity calculations where applicable.
Gaps in any of these trigger follow-up queries. The more complete your file, the shorter the audit.
Common compliance failures that surface in audits
A few problems come up repeatedly:
Wrong wage definition for PF. Employers sometimes exclude allowances that should form part of basic wages for PF calculation. EPFO has pursued companies on this point; auditors will reconstruct the correct base and calculate the shortfall.
TDS on non-cash perquisites. Perquisites such as rent-free accommodation or employer-provided vehicles carry a taxable value. If TDS has not been deducted on these, the shortfall lands with the employer.
Late remittance. Both PF and ESI have strict due dates. Even a single late payment can attract interest and damages, and these appear clearly in portal records.
Inconsistent headcount across filings. If your EPF return, ESI return, and TDS return show different employee counts for the same month, auditors will ask why. Legitimate reasons exist (different coverage thresholds, joiners mid-month), but you need to be ready to explain them with supporting data.
How to approach the audit itself
Designate one person — usually the HR lead or payroll manager — as the single point of contact with the auditor. Provide only what is requested, in an organised format, with an index. If a discrepancy is found, acknowledge it, present the corrected calculation, and show the remediation (a catch-up remittance, a revised return) rather than disputing the finding.
Where an audit covers multiple years, work backwards from the current year. Corrections to prior periods may require revised filings and interest payments, but voluntary disclosure before an audit finding is treated more favourably than a forced recovery.
---
Run HR and payroll in India with Mellow
Mellow brings HR, payroll and 12 AI agents into one platform — built to handle India properly, with payroll included, from £4 per employee per month. The AI agents don't just answer questions; they generate contracts, run cost estimates and draft letters for you.
[Start a free trial →](/register)