Don’t Wait for a Complaint: Why Startups Need PoSH Compliance Now

Every founder remembers their first sexual-harassment complaint, the unread email that changes the week, the investor call postponed, the sudden silence in the team Slack. In that moment, everything else, funding updates, product deadlines, and customer goals, takes a back seat.

We’ve sat across from the founders in that exact freeze. One CEO in Bengaluru had just announced his first major funding round; two days later, a junior engineer’s screenshot landed in HR’s inbox. Another Delhi logistics founder got a 2 a.m. WhatsApp from a warehouse contractor alleging a supervisor’s “joke” during a night shift. Both asked the same three questions: Public apology or private fix? Tell investors now or after we “handle” it? Fire fast, or investigate and risk leaks?

What we keep seeing isn’t indifference, it’s unpreparedness. Teams grow faster than systems, and a risk quietly building in the background suddenly becomes the only thing anyone can think about.

Beyond Compliance: Protecting Your Startup From Hidden Risks

Workplace sexual harassment in startups isn’t just a legal checkbox under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 (PoSH). It’s a business risk that can quietly undo everything you’ve built. India doesn’t yet have startup-specific data linking harassment to business loss, but the direction is unmistakable. According to an Economic Times analysis, sexual-harassment complaints in India Inc have risen 79 percent between FY20 and FY24, showing that reporting is increasing faster than organisations’ ability to respond. A study found that 68 percent of employers admitted morale, trust, and productivity were directly affected when harassment occurred. These numbers only confirm what founders discover too late, that compliance isn’t bureaucracy; it’s business protection.

Over the last few years, the Indian startup ecosystem has offered enough public lessons on what happens when safety systems lag behind scale. In one widely shared video, a woman in Bengaluru accused her Rapido driver of trying to grab her legs mid-ride. The incident went viral, sparking outrage over safety practices at the bike-taxi platform and raising a simple question: when work happens in distributed, app-based models, who ensures protection under PoSH?

A few months ago, the Karnataka High Court, in another case involving Ola, ruled that its driver could be treated as an “employee” under the PoSH Act after a woman passenger was harassed, directing the company to compensate her. The judgment sent a clear message,  the “gig” label doesn’t exempt you from the law. For founders operating through delivery riders, driver partners, or warehouse associates, compliance begins where your workforce begins. If your workers operate outside a formal office, they fall under the jurisdiction of the Local Complaints Committee (LCC), the district-level body under the PoSH Act that receives complaints from employees in the unorganised sector, home-based work, or establishments without an Internal Committee.

Few founders realise this. An LCC is not optional support,  it is the legal fallback for every workplace without a ten-person threshold or for any woman working offsite or through third-party contracts. Founders can proactively build partnerships with local authorities or District Officers to ensure that contract workers and gig partners know where to go if they face harassment. Ignorance of this mechanism doesn’t exempt liability; it only exposes risk.

At Urban Company, hundreds of women beauticians staged protests over pay cuts, unsafe hours, and the lack of trustworthy complaint channels. While they were classified as “partners” rather than employees, the question of recourse remained. Had the company integrated a link to the LCC in their onboarding process, a simple QR code, a contact sheet, a visible access route, these protests could have taken a very different course.

The delivery sector saw its own reckoning when Swiggy’s women delivery partners spoke about night-shift risks, leading the company to partner with Red Dot Foundation (Safecity) for safety awareness programs. Meanwhile, dark-store and quick-commerce warehouses across Pune and Mumbai faced repeated regulatory actions, not for harassment, but for poor working conditions and unmonitored night shifts. These spaces, though informal in setup, are workplaces under the law. Once you have ten or more workers, an Internal Committee is mandatory; below that, your workers should be informed and enabled to reach the LCC.

Startups aren’t exempt at leadership levels either. The ScoopWhoop case in 2017, involving harassment allegations against co-founders, demonstrated how even media startups built on progressive branding can crumble when internal systems fail. In another case from Mumbai, a former co-founder of an e-commerce startup was accused by a colleague of sexual harassment and stalking. And when a Bengaluru intern went public about sexist remarks from her CEO, it reminded founders that harassment doesn’t begin with scale, it begins with silence.

Through all these stories, from app-based rides to warehouses, offices, and virtual startups , one truth keeps resurfacing: teams are scaling faster than safeguards.

Build Safety Before Scale

Founders address customer trust and investor diligence, yet overlook the single infrastructure that protects both , a functional, compliant PoSH system.

Even legally, the architecture is clear. Every workplace with ten or more people, including full-time staff, interns, and contractors, must have an Internal Committee (IC) to receive and investigate complaints. Where that number is not met, or where employees work remotely, on client sites, or through aggregators, the Local Complaints Committee steps in. Every District Officer is required to maintain one, and founders can display LCC details prominently as part of compliance communication. For gig or hybrid models, this is not just good practice,  it’s how you close the protection gap between “formal” and “field.”

This expectation is only intensifying with Gen Z entering the workforce. Studies show over half of Gen Z employees have witnessed misconduct, and nearly half would only report if anonymity is guaranteed. Culture Amp’s India benchmarks show high engagement levels, but also highlight that for this generation, trust and fairness outweigh pay in deciding where they stay. A workplace that handles misconduct poorly will not just lose talent, it will lose its future leaders.

When complaints arise, most startups still rely on WhatsApp groups, scattered emails, or half-trained HR managers to respond. By then, it’s too late. Confidentiality leaks, emotions run high, and compliance timelines collapse. That’s why we built Conduct, a secure, centralised platform that makes readiness part of daily work. Employees can raise concerns safely, even anonymously. IC members can manage cases, documents, and timelines without chasing threads. Regular pulse polls and learning nudges make culture visible long before issues surface. Startups using Conduct meet their PoSH deadlines, maintain trust, and project credibility to investors and employees alike. Because effective leadership isn’t about reacting to a crisis, it’s about preventing one.

The government also runs a national online reporting mechanism called SHe-Box (Sexual Harassment Electronic Box), managed by the Ministry of Women and Child Development. It allows any woman, whether employed in the public or private sector, to file a sexual-harassment complaint directly with the Ministry. Once submitted, it is electronically forwarded to the relevant Internal Committee or Local Committee for action. For an aggrieved person, this platform provides a direct route to escalate complaints when an organisation fails to act. But for a founder, that escalation represents the moment of loss,  loss of trust, control, and credibility. A woman turning to SHe-Box means your internal systems have failed her. It’s far better to have her speak safely to you,  through a trained, confidential, and credible internal channel,  than to the Ministry after silence or inaction.

For founders wondering where to begin, the path is simple: check your count, if you have ten or more people, set up your Internal Committee today. If you don’t, identify your Local Complaints Committee and make that information accessible to every worker and contractor in your network. Map your actual workplace, not just your office but every virtual, on-ground, and contractual site where work happens. Hold one honest conversation with your team about dignity and reporting. Audit your current channel, would someone actually use it at two a.m.? And finally, centralise it. Replace fragmented processes with a single, transparent system.

The startup world rewards speed, but culture moves at the pace of intention. After working with thousands of founders, one truth stands out: it’s easier to build systems early than to rebuild trust later. If you’re scaling fast, make culture your first compliance, because safety isn’t the opposite of growth; it’s what sustains it. See how Conduct helps startups stay ready from day one.