Digital signatures (DSC) for Foreign Nationals Setting up Indian Companies

Why Digital Signatures (DSC) Matter for Foreign Nationals in Indian Companies

• Mandatory for MCA Filings

1. The forms to be signed online by the Ministry of Corporate Affairs (MCA) are numerous and are company-filing forms. Key e-forms are not accepted using physical signatures.
2. The foreign directors (or other signatories) are required to use Indian DSCs issued by a certifying authority identified by MCA.

• Link to Director Identification Number (DIN)

1. A proper DSC is regularly applied together with the application of a Director Identification Number (DIN) through Form DIR-3 or through SPICe+ during the incorporation process.
2. Through the DSC, the foreign director is able to sign and certify electronic filings of his/her identification and consent safely.

• Compliance & Security

1. With DSC, there is a secure, non-repudiable electronic signing that is very important in governance, audit trail and compliance with regulations.
2. Recent changes in regulations (e.g. according to Hello Auditor) require the foreign directors to have DSCs registered by Indian certifying agencies; this is one of the attempts of MCA to enhance identity checking and electronic management.

• Validity & Renewals

1. DSCs are generally limited in validity (1-2 years).
2. The DSC should be re-registered on the MCA portal after renewal.

Regulatory & Procedural Requirements for Foreign Nationals Getting a DSC

The following are the most important regulatory procedures and practical conditions of a foreign national to get a DSC in India:

• Class of DSC

1. The foreign directors usually require a Class 3 DSC to MCA e-filings.
2. Certifying Authorities (CAs) in India issue these DSCs (e.g., eMudhra, n-Code, etc.).

• Documentation Required

1. Valid passport (as identity proof)
2. Proof of address: may be a utility bill, driver's license, bank statement, etc; may need to be notarised or apostilled by the country.
3. Photograph.
4. Visa/resident permit: to indicate the legal status (depends on CA)
5. The written documents might have to be notarised/apostilled in case they are in foreign countries.

• Verification Process

1. Video-KYC / video verification is mandatory in most CAs with foreign DSC applicants.
2. There are certifying authorities that aid in attestation or apostille of foreign documents in the form of embassies.
3. After validation, CA issues the DSC, which is usually in the form of a USB token (cryptographic device) in which the certificate can be safely stored.

• Registering DSC on the MCA Portal

1. Once a DSC is received, it has to be registered on the MCA21 portal (currently called MCA V3).
2. At the stage of registration, you should choose the appropriate role (e.g., the position of a Director) and have to enter such data as DIN / DIR application data.
3. Unregistered e-forms signed with DSC could be rejected by MCA.
4. Invest India states that DIN should be granted first and then register DSC.

• New Regulatory Mandate

1. According to Hello Auditor, beginning 1 June 2025, the foreign directors of private companies should be registered under DSC through Indian certifying agencies (i.e., overseas DSCs are not accepted).
2. This will make DSC registration equal to DIN and enhance security/traceability of foreign directors on the MCA system.

• Costs & Validity Options

1. It can provide various validity options (1, 2, 3 years) to the DSC providers (to foreigners) based on necessity.
2. Fees depend on the provider. As an illustration, certain providers have priced a 2-year DSC of NRIs / foreign nationals at about 2,499 + taxes in AllIndiaITR per year.

Practical Challenges & Risks

Some of the practical challenges to be faced in acquiring DSC in India are noted by foreign nationals/companies:

• Document Authentication

1. The process of foreign document notarization and apostille is time-consuming, expensive, and complex.
2. In case the documents are non-English, translation might be needed.

• Verification Delays

1. There is the risk that video-KYC will have time zone problems.
2. It can require 1-3 (or more) business days to issue DSC by some CAs after verification.

• Token Delivery

1. The physical token (USB) can be required to be shipped abroad which increases cost and time lag.
2. The token must be safely handled, since the loss of the token involves a security risk.

• MCA Portal Registration

1. Any mistakes in the registration of the DSC (incorrect role, incorrect DIN) may lead to failure to submit an e-form.
2. Following renewal of the DSC, you should re-register the DSC on the MCA portal.

• Regulatory Non-compliance

1. Failure to adhere to the new rule of incorporating the new rule of CA only (where applicable) which is not India,n might result in a delay in incorporation or compliance.
2. The failure to obtain registration of DSC before the filing of e-forms may result in rejection of essential incorporation or regulatory documents.

Best Practices for Foreign Nationals / Startups

The following are best practices that are suggested to streamline the DSC process and make it compliant:

• Plan Ahead

1. Activate the DSC application before incorporation of the company or application of DIN application - it may be a determinant of when to file SPICe+ or DIR-3.
2. Maximum time required to apostille/notarize documents.

• Choose a Trusted Certifying Authority

1. Employ CA experienced in issuing foreign DSCs (eSolutions, other popular issuers). eSolutions, specifically, can work with foreign users and guide them on matters of attestation/apostille.
2. Make sure that the CA promotes video-KYC and overseas delivery of tokens.

• Ensure Document Accuracy

1. Present current address evidence (utility bill, bank statement) and make sure that it is in a form acceptable by the Indian CA.
2. If not in English, translate and apostille via recognized authority.

• Record DSC Correctly on MCA.

1. Once DSC is received, register it on MCA’s portal with the right “role” (e.g., Director) and link it with your DIN details.
2. Make sure that registration is validated by logging in and that it is linked to the right account/role.

• Maintain Security

1. Store the USB token securely; treat it like a physical certificate.
2. Backup your certificate (if allowed) and keep recovery options in mind (in case of loss).

• Renew On Time

1. Reminders on DSC renewal (1 or 2 years based on validity).
2. After renewal, re-register the DSC on the MCA portal to avoid disruptions in filing.

• Stay Informed About Regulatory Updates

1. Follow MCA / CA news, e.g. the June 2025 requirement of foreign DSC registration.
2. Seek advice of legal / company-secretary gurus in India to keep afloat.

Strategic Implications for Startups & Foreign Directors

• Easier Compliance: With a duly issued and registered DSC, foreign directors can sign incorporation forms, board resolutions and other compliance documents electronically which hastens formation and continued operations.

• Investor Confidence: A system that has been appropriately digitally signed will be an indication of credibility to investors who may be foreign and/or institutional due to the sign of good governance and regulatory preparedness.

• Long-Term Scalability: Once DSC is configured in a clean way, it becomes easy to renew it and manage it, and it will assist in future fundraising, board transitions, or compliance.

• Risk Mitigation: DSC issuers adopted by Indian CA would reduce regulatory risk (particularly at this time when more rigorous DSC registration standards have been proposed), and save the possibility of discounted filings or identity problems.

Disclaimer

The information provided in this blog is purely for general informational purposes only. While every effort has been made to ensure the accuracy, reliability and completeness of the content presented, we make no representations or warranties of any kind, express or implied, for the same. 

We expressly disclaim any and all liability for any loss, damage or injury arising from or in connection with the use of or reliance on this information. This includes, but is not limited to, any direct, indirect, incidental, consequential or punitive damage.

Further, we reserve the right to make changes to the content at any time without prior notice. For specific advice tailored to your situation, we request you to get in touch with us.