India has become one of the most preferred countries for setting up Global Capability Centres, also known as GCCs. Many global companies are now building their own teams in India for technology, finance, research, data analytics, HR, legal support, product development and shared services.
But setting up a GCC in India is not only about opening an office and hiring employees. A GCC has to be structured properly from the legal, FEMA, tax, labour and compliance side. If the setup is not done correctly in the beginning, the foreign parent company may face issues with RBI reporting, tax authorities, employment laws, data protection, contracts and intellectual property ownership.
What Is a GCC in India?
A Global Capability Centre, or GCC, is an Indian office or Indian company set up by a foreign company to support its global business.
In simple words, it works like the foreign company’s own team in India. For example, a company based in the USA may set up an Indian subsidiary to manage software development, customer support, finance operations or HR support for its global offices. That Indian entity becomes the company’s GCC.
A GCC may work on different functions such as IT services, product engineering, finance and accounting, payroll support, legal operations, data analytics, research and development, cybersecurity, customer service and back-office operations. The main point is that a GCC is generally owned or controlled by the foreign parent company. It is not the same as hiring an outside vendor.
GCC vs Outsourcing: Key Difference
Many people confuse a GCC with outsourcing because both may involve work being done from India. But legally and operationally, they are different.
In outsourcing, the foreign company gives work to an external service provider.
In a GCC model, the foreign company creates its own Indian entity or Indian team to do the work internally.
| Point of Difference | GCC in India | Outsourcing |
| Ownership | Owned or controlled by the foreign parent company | Work is given to an external vendor |
| Control | Parent company has direct control over people, process and quality | Vendor manages its own team and process |
| Employees | Employees usually work for the Indian GCC entity | Employees work for the vendor |
| Data handling | Data remains within the group structure, subject to proper safeguards | Data is shared with a third-party service provider |
| IP ownership | IP can be structured within the parent-GCC group | IP depends on the outsourcing contract |
| Best suited for | Long-term, sensitive and strategic work | Short-term or non-core work |
| Compliance responsibility | Indian GCC handles company, tax, FEMA, labour and data compliance | Vendor handles its own business compliance |
| Example | A UK company forms an Indian subsidiary for product development | A UK company hires an Indian IT agency |
A GCC is usually preferred when the work involves sensitive data, source code, customer information, research, technology, finance or long-term business operations.
Legal Structures Available for Setting Up a GCC in India
Choosing the right legal structure is the first major step.
This decision affects ownership, foreign investment rules, tax treatment, RBI reporting, hiring, contracts and future expansion.
A foreign company can usually set up its GCC in India through a wholly owned subsidiary, LLP, branch office, liaison office or project office.
Wholly Owned Subsidiary
A wholly owned subsidiary in India is the most preferred structure for setting up a GCC in India.
In this model, the foreign parent company incorporates a private limited company in India and owns 100% of its shares, subject to FDI rules.
This structure is suitable for long-term GCC operations because it gives the foreign parent company better control over the Indian entity. The Indian company can hire employees, open a bank account, lease office space, sign agreements, raise capital from the parent company, obtain tax registrations and operate as a proper legal entity.
For most GCCs working in IT, software development, finance support, analytics, consulting, product support and shared services, a private limited company is usually the most practical option.
Limited Liability Partnership
A Limited Liability Partnership, or LLP, may also be considered in limited cases.
An LLP has a simpler structure compared to a company, but it may not be suitable for every GCC. Foreign investment in LLPs is allowed only where the sector permits 100% FDI under the automatic route and there are no FDI-linked performance conditions.
For larger or long-term GCCs, foreign companies usually prefer a private limited company because it is better for ownership, governance, employee planning, ESOPs, investor reporting and group-level structuring.
Branch Office, Liaison Office or Project Office
A foreign company may also consider a branch office, liaison office or project office in India.
However, these structures are more restricted.
A liaison office can mainly act as a communication or representative office. It cannot normally carry out commercial business activities in India.
A branch office can carry out only permitted activities and may require RBI approval depending on the business activity and country of the parent company.
A project office is usually created for a specific project in India.
For a full-scale GCC that wants to hire employees, deliver services, manage data and operate for the long term, a private limited company is usually a better structure.
FEMA and FDI Rules for GCC Setup in India
FEMA stands for Foreign Exchange Management Act.
FEMA controls foreign investment, foreign remittance, share allotment, RBI reporting, cross-border payments and other foreign exchange transactions.
When a foreign parent company invests money into an Indian GCC, FDI and FEMA compliance in India becomes very important.
Even if the Indian company is properly incorporated, missing FEMA filings can create problems later during audit, restructuring, share transfer, due diligence or future funding.
Is 100% FDI Allowed for GCCs in India?
In many common GCC activities, 100% foreign direct investment is allowed under the automatic route.
This means the foreign parent company can usually own 100% of the Indian GCC if the activity is permitted under the FDI policy.
Common GCC activities such as software development, IT services, consulting, analytics, back-office support, finance support, product engineering and shared services generally fall under permitted sectors, subject to sector-specific conditions.
However, the activity should always be checked before incorporation.
If the GCC is connected with a regulated sector such as financial services, insurance, telecom, defence, media, healthcare, education or any sensitive sector, additional conditions or approvals may apply.
What Does Automatic Route Mean?
Automatic route means the foreign investor does not need prior approval from the RBI or the Central Government for making the investment.
But this does not mean there is no compliance.
The Indian GCC still has to complete reporting after receiving foreign investment and issuing shares.
So the simple rule is: Automatic route means no prior approval, but FEMA reporting is still required.
When Is Government or RBI Approval Required?
Approval may be required if the GCC’s activity falls under a restricted or regulated sector.
Approval may also be needed if the entity is being set up as a branch office or liaison office, if the investor is from a country covered under special FDI rules, or if the Indian entity is involved in regulated financial services.
Approval can also become relevant if the Indian GCC makes downstream investment into another Indian company.
This is why the activity and structure should be checked before the company is incorporated.
A wrong classification at the beginning can create legal and FEMA issues later.
FEMA Reporting and RBI Filings
FEMA reporting is one of the most important parts of setting up a GCC in India.
When the foreign parent company sends capital to India and the Indian company issues shares, the transaction must be reported properly.
Common FEMA filings and documents may include Form FC-GPR, FLA Return, foreign inward remittance certificate, KYC report from the bank, valuation certificate, board resolution, share allotment documents and RBI portal records.
Form FC-GPR is generally filed when an Indian company issues shares to a foreign investor.
FLA Return is an annual return for foreign liabilities and assets. It may apply where the Indian entity has received foreign investment or made overseas investment.
FC-TRS may apply where shares are transferred between a resident and non-resident.
If the Indian GCC invests in another Indian company, downstream investment rules may also apply.
These filings should not be treated as a formality. They are important records that may be checked during audit, acquisition, restructuring, funding or exit.
Step-by-Step Process to Set Up a GCC in India
Setting up a GCC should be done in a planned manner. The legal, tax, FEMA and HR work should move together with the business plan.
Step 1: Decide the GCC Activity and Operating Model
The first step is to decide what the Indian GCC will actually do.
The parent company should clearly define whether the GCC will handle software development, accounting, payroll, HR support, legal support, customer service, product engineering, research, data processing or any other function.
This is important because the activity decides the legal structure, FDI route, GST position, transfer pricing model, employment contracts and data protection requirements.
For example, a GCC doing product development will need strong intellectual property clauses. A GCC handling customer or employee data will need stronger data protection and cybersecurity policies.
Step 2: Choose the Right Legal Entity
After the activity is clear, the company must choose the legal entity.
For most GCCs, a private limited company is the preferred structure. It gives the foreign parent company ownership, control and flexibility.
For foreign companies planning a long-term India presence, Indian subsidiary registration is usually more suitable than restricted structures like liaison office or branch office.
An LLP may be considered in limited cases.
A branch office, liaison office or project office should be selected only where the activity fits that structure and the approval requirement is clear.
Step 3: Incorporate the Indian Entity
If the GCC is being set up as a private limited company, it must be incorporated with the Ministry of Corporate Affairs.
The basic requirements include name approval, Digital Signature Certificate, Director Identification Number, registered office address, Memorandum of Association, Articles of Association, director documents and shareholder documents.
A private limited company must have at least two directors. It must also satisfy the resident director requirement under the Companies Act.
The company must have a registered office in India. This may be an owned office, rented office or legally permitted co-working space, depending on documents.
After approval, the company receives its Certificate of Incorporation, PAN and TAN.
Step 4: Bring Foreign Investment into India
After incorporation, the foreign parent company can bring capital into India.
The money should come through proper banking channels. The Indian company should collect the foreign inward remittance certificate and KYC documents from the authorised dealer bank.
After receiving the money, the Indian company must allot shares to the foreign parent company and complete FEMA reporting.
This step should be handled carefully because many companies receive money correctly but miss RBI reporting timelines.
Step 5: Obtain Tax and Business Registrations
After incorporation, the GCC must obtain required tax and business registrations.
These may include PAN, TAN, GST registration, Shops and Establishments registration, Professional Tax registration, EPFO registration, ESIC registration and other state-specific registrations.
GST registration depends on the nature of services, turnover, place of supply and whether the service qualifies as export of services.
Professional Tax and Shops and Establishments registration depend on the state where the office is located.
PF, ESIC and payroll compliances depend on employee count, salary structure and applicable rules.
Step 6: Open Bank Account and Set Up Accounting Systems
The Indian GCC must open a corporate bank account and maintain proper books of accounts.
It should also set up systems for payroll, vendor payments, employee reimbursements, inter-company invoices, GST records, TDS deduction, statutory registers, audit records and financial statements.
This is important because a GCC usually works with its foreign parent company or group companies.
Every inter-company transaction should be supported by agreements, invoices and proper records.
Step 7: Hire Employees and Put HR Policies in Place
A GCC needs proper employment documentation from the beginning.
The company should prepare offer letters, employment agreements, confidentiality clauses, IP assignment clauses, data protection clauses, employee handbook, leave policy, work-from-home policy, code of conduct and exit process.
For companies that want support with employee documentation, payroll processing and compliance, HR outsourcing services in India can help manage the operational side of hiring.
Employees may work on confidential data, software code, financial records, client data, product designs or internal business processes.
That is why the employment agreement should clearly mention confidentiality, data protection and ownership of work created during employment.
Step 8: Start Operations with a Compliance Calendar
Once operations begin, the GCC should follow a compliance calendar.
This calendar should cover monthly, quarterly and annual compliances.
It should include ROC filings, board meetings, GST returns, TDS returns, payroll compliance, FEMA filings, labour filings, transfer pricing documents, accounting records and annual financial statements.
A GCC should not wait until year-end to check compliance. Compliance should be part of monthly operations.
Tax Compliance for GCCs in India
Tax compliance is a major part of GCC setup.
The Indian GCC and the foreign parent company should decide the tax model before operations begin.
Corporate Tax and GST
The Indian GCC may be liable to pay corporate income tax on its profits in India.
It may also need GST registration depending on the services it provides.
Many GCCs provide services to their foreign parent company or group companies. In such cases, GST treatment must be checked carefully.
A service may qualify as export of services if the supplier is in India, the recipient is outside India, the place of supply is outside India, payment is received in convertible foreign exchange or permitted Indian rupees, and other GST conditions are satisfied.
The company must also deduct TDS on applicable payments such as salaries, rent, professional fees, contractor payments and vendor invoices.
Transfer Pricing Compliance
Transfer pricing is very important for GCCs.
Most GCCs provide services to their foreign parent company or group companies. These are related-party transactions.
Indian tax law requires these transactions to be at arm’s length price.
In simple words, the Indian GCC should charge a fair price for its services, similar to what an independent company would charge in a similar situation.
The Indian GCC may need an inter-company service agreement, transfer pricing study, benchmarking report, Form 3CEB, cost records, markup calculation and proper invoices.
For example, if the Indian GCC provides software development support to its US parent company, the service fee should be properly documented.
If transfer pricing is not handled correctly, the tax department may question the profit shown in India.
Permanent Establishment Risk
A poorly planned GCC may create permanent establishment risk for the foreign parent company.
Permanent establishment means the foreign company may be treated as having a taxable presence in India.
This risk can arise if the Indian team starts signing contracts, negotiating final business terms, taking key decisions or acting like the foreign company itself.
To reduce this risk, the roles of the Indian GCC and the foreign parent company should be clearly separated.
The inter-company agreement should clearly mention what the Indian entity can do and what it cannot do.
Labour Law and Employment Compliance
A GCC usually hires employees in India. That makes labour law compliance important from the first hiring stage.
In 2026, employers must consider India’s labour law framework, including the four Labour Codes and applicable state rules.
The four Labour Codes cover wages, social security, industrial relations and occupational safety/working conditions.
For a detailed employer-focused explanation, you can also refer to LegalJini’s guide on payroll compliance in India.
Key Labour Laws Applicable to GCCs
A GCC may need to comply with wage rules, social security rules, Shops and Establishments law, PF, ESIC, Professional Tax, gratuity, maternity benefit, leave rules and state-specific employment laws.
For office-based GCCs, Shops and Establishments registration is usually important because it covers working hours, holidays, leave, opening and closing hours and employment conditions.
PF may apply depending on employee strength and applicable rules. If the establishment becomes eligible, the employer should complete PF registration and follow monthly contribution and return filing requirements.
ESIC may apply depending on employee count, salary limits and location.
Professional Tax depends on the state.
Gratuity, leave encashment, bonus and full-and-final settlement should also be managed properly through payroll.
POSH Compliance
POSH means Prevention of Sexual Harassment at Workplace.
Every workplace with 10 or more employees must form an Internal Committee under the POSH law.
A GCC should have a POSH policy, Internal Committee, employee awareness sessions, complaint process, annual POSH report and confidential record-keeping.
This is not only an HR policy. It is a legal requirement.
Employment Contracts, IP and Confidentiality
GCC employees may work on sensitive business information.
This may include source code, product designs, financial records, customer data, employee data, AI models, research documents and internal reports.
The employment agreement should include clear clauses on confidentiality, intellectual property, data protection, use of company systems, return of company property, notice period, conflict of interest and exit obligations.
Without these clauses, the company may face issues if an employee leaves with confidential information or claims ownership over work created during employment.
Data Protection, Cybersecurity and Cross-Border Data Transfers
A GCC often handles data of customers, employees, vendors and global business teams.
This makes data protection and cybersecurity very important.
In 2026, GCCs must consider the Digital Personal Data Protection Act, 2023, the DPDP Rules, 2025, IT Act requirements and CERT-In cybersecurity directions.
DPDP Act and DPDP Rules Compliance
If the GCC collects, stores or processes personal data, it must follow India’s data protection framework.
Personal data means any data that can identify a person.
This may include employee details, customer records, email IDs, phone numbers, payroll data, user data, identity documents and login details.
A GCC should maintain proper privacy notices, consent systems where required, data security measures, data retention rules, access controls and a process to handle data rights requests.
It should also have proper contracts with vendors or processors who handle personal data on its behalf.
Cross-Border Data Transfer Considerations
Many GCCs process data for foreign parent companies.
This means data may move between India and other countries.
Before starting operations, the GCC should check what type of data will be processed, whose data will be processed, whether foreign laws like GDPR apply, whether data will move outside India and whether proper contracts are in place.
Cross-border data transfer should not be treated as only an IT decision. It is also a legal and contractual decision.
CERT-In and Cybersecurity Requirements
CERT-In is India’s national cybersecurity agency.
Certain cybersecurity incidents must be reported to CERT-In within the prescribed timeline.
A GCC should have a cybersecurity policy, incident response plan, access control system, log retention process, data backup system, password policy, device policy and employee security training.
This is especially important for GCCs handling technology, customer data, financial information, product systems or global business data.
Intellectual Property Ownership in GCC Operations
Intellectual property is a very important part of a GCC setup.
A GCC may create software code, product documents, databases, algorithms, AI models, designs, training material, business reports and technical processes.
The company must clearly decide who owns this intellectual property.
Employee and Contractor IP Assignment
Employees and contractors should sign proper IP assignment clauses.
This means any work created during employment or engagement should belong to the company or the foreign parent company, depending on the group structure.
Contractors should never be engaged without a proper written agreement.
If a contractor creates code, design or technical work without an IP assignment clause, ownership may become unclear.
Parent Company vs Indian GCC Ownership
In some cases, the Indian GCC owns the IP and licenses it to the foreign parent company.
In other cases, the foreign parent company owns the IP and the Indian GCC only provides development or support services.
Both models can work, but the documents must match the tax and transfer pricing structure.
The inter-company agreement, employment agreements and contractor agreements should all follow the same IP position.
Ongoing Compliance Checklist for GCCs in India
Setting up the GCC is only the first step.
After incorporation, the Indian GCC must follow regular compliance.
ROC and Companies Act Compliance
A private limited company must comply with Companies Act requirements.
This may include board meetings, shareholder meetings, auditor appointment, statutory registers, financial statements, annual return, director disclosures and ROC filings.
For annual ROC compliance, companies usually need to file financial statements through AOC-4 filing and annual return details through MGT-7 filing, wherever applicable.
If the company has foreign shareholding, the shareholding records should be maintained carefully.
These records are important during audit, funding, restructuring or sale of shares.
FEMA Compliance
FEMA compliance continues after the first investment.
The company may need to complete FC-GPR filing, FLA Return, FC-TRS for share transfers, downstream investment reporting and foreign remittance documentation.
It should also maintain valuation reports, board approvals, bank KYC records and RBI portal records.
FEMA issues usually come up during due diligence, funding, group restructuring or exit. So it is better to maintain records properly from day one.
Tax and GST Compliance
The GCC must comply with income tax, GST and TDS requirements.
This may include income tax return, tax audit if applicable, GST returns, TDS returns, advance tax, transfer pricing report, Form 3CEB and payroll tax compliance.
If the GCC exports services, GST documentation should be maintained carefully.
If it provides services to foreign group companies, transfer pricing documents should be prepared every year.
Labour and Payroll Compliance
Payroll compliance should be handled every month.
This may include salary processing, TDS on salary, PF contribution, ESIC contribution where applicable, Professional Tax, leave records, attendance records, gratuity tracking and full-and-final settlement.
As the GCC grows, labour compliance also grows.
A small 15-member GCC and a 500-member GCC will not have the same compliance requirements.
Data and IT Compliance
Data and IT compliance should be reviewed regularly.
The GCC should maintain privacy notices, data processing agreements, cybersecurity controls, access records, breach response plans, vendor contracts and employee IT policies.
It should also decide how long data will be stored and when it will be deleted.
For modern GCCs, data compliance is as important as tax and company law compliance.
How LegalJini Can Help with GCC Setup in India
Setting up a GCC in India needs legal, FEMA, tax, labour and compliance planning from the beginning.
LegalJini helps foreign companies and Indian teams with end-to-end GCC setup support.
This includes choosing the right legal structure, incorporating a private limited company, setting up a wholly owned subsidiary, FDI advisory, RBI reporting support, tax and GST registration, employment agreement drafting, inter-company agreement drafting, IP protection, POSH compliance, labour compliance, ROC filings and ongoing compliance support.
With the right legal support, a GCC can start smoothly, stay compliant and scale without avoidable legal issues.
Conclusion
Setting up a GCC in India is a strong business decision, but it must be done with proper legal planning.
A foreign company must choose the right structure, check FEMA and FDI rules, complete incorporation, bring foreign investment correctly, hire employees with proper contracts, follow tax and transfer pricing rules, protect data and maintain ongoing compliance.
A GCC should not be treated as only an office setup.
It is a legal entity, employer, service provider, data processor and compliance-driven business unit.
When the structure is correct from the beginning, the GCC can operate smoothly, support the global parent company and reduce legal and regulatory risk in India.
FAQs
What is the best legal structure for setting up a GCC in India?
A private limited company, usually as a wholly owned subsidiary, is the most preferred structure for setting up a GCC in India. It gives the foreign parent company better control, ownership, hiring flexibility and long-term scalability.
Is 100% foreign ownership allowed for a GCC in India?
In many common GCC activities, 100% foreign ownership is allowed under the automatic route. However, the exact business activity must be checked because some sectors have restrictions, conditions or approval requirements.
Does a GCC in India need RBI approval?
If the GCC is set up as a private limited company in a sector covered under the automatic route, prior RBI approval is usually not required. But FEMA reporting is still required after receiving foreign investment and issuing shares.
What FEMA filings are required for a GCC in India?
Common FEMA filings include FC-GPR for share allotment to a foreign investor, FLA Return for annual foreign liabilities and assets, FC-TRS for share transfers and downstream investment reporting, if applicable.
What tax compliances apply to GCCs in India?
A GCC may need to comply with corporate income tax, GST, TDS, payroll tax, tax audit and transfer pricing rules. If it provides services to foreign group companies, transfer pricing compliance becomes very important.
Do GCCs need transfer pricing documentation?
Yes. If the Indian GCC provides services to a foreign parent or group company, the transactions must follow arm’s length pricing. The company may need a transfer pricing study, inter-company agreement and Form 3CEB.
Which labour laws apply to GCC employees in India?
GCCs must follow applicable labour and employment laws, including wage rules, social security rules, Shops and Establishments law, PF, ESIC, gratuity, Professional Tax, POSH and state-specific employment rules.
Is data protection compliance required for GCCs in India?
Yes. If the GCC handles personal data, employee data, customer data, vendor data or global business data, it must follow applicable data protection and cybersecurity requirements, including the DPDP framework and IT security rules.