Vendor & Contractor Labour Compliance Audit Checklist for Principal Employers in India

Executive answers

A Principal Employer (PE) cannot contract out statutory liability. The Contract Labour (Regulation and Abolition) Act, 1970 (CLRA), the Employees' Provident Funds and Miscellaneous Provisions Act, 1952 (EPF Act) and the Employees' State Insurance Act, 1948 (ESI Act) each place a secondary, enforceable liability on the establishment that engages a contractor. If the vendor defaults, the PE pays first and recovers later, assuming the contract and the invoice process preserved the right of recovery.

Four liability layers attach to the PE:

1. Registration and licence: The PE must be registered under Section 7 of the CLRA, and may not employ contract labour through an unlicensed contractor (Sections 9 and 12). Engaging an unlicensed contractor, or a licensed contractor beyond the licensed workman strength or scope of work, is the PE's contravention as well.
2. Wages (Section 21): The contractor is responsible for payment of wages. The PE must nominate a representative to be present at disbursement and certify the amount paid. Where the contractor fails to pay, or pays short, the PE is liable to pay the wages in full and may recover the amount from the contractor, by deduction from bills or otherwise (Section 21(4)).
3. Amenities (Sections 16 to 20): Canteen, rest rooms, drinking water, latrines, urinals, washing facilities and first aid are the contractor's duty in the first instance. Under Section 20, if the contractor fails, the PE must provide them and may recover the cost.
4. Social security (EPF Act Section 8A; ESI Act Section 41): The PE pays contributions in the first instance for workers employed by or through the contractor, and recovers from the contractor. EPFO and ESIC issue demand, damages and recovery proceedings against the PE's establishment code and bank accounts.

Direct financial exposure from a defaulting vendor comprises unpaid wages (including minimum wage differentials, overtime and bonus), EPF contributions with interest under Section 7Q and damages under Section 14B, ESI contributions with interest and damages, and the cost of statutory amenities. These sums are recoverable as arrears of land revenue, and the PE's bank accounts can be attached.

Sham contracting converts a vendor arrangement into direct employment. Where the contractor is an intermediary with no real control over the workers, and the PE controls and supervises the work, deploys workers in core, perennial activity, or the contract is a camouflage, the Supreme Court has held that the workers may be treated as the PE's employees (Balwant Rai Saluja v. Air India Ltd., 2014). Consequences include claims for regularisation, parity of wages, gratuity, bonus, back wages and social security from the date of engagement. Section 10 of the CLRA also allows the appropriate government to prohibit contract labour in notified processes, operations or work. Steel Authority of India Ltd. v. National Union Waterfront Workers (2001) holds that prohibition does not by itself mean automatic absorption, but the litigation exposure arises where the contract is found to be a sham.

The control point is invoice approval. A PE that releases payment on a vendor's compliance certificate, without matching raw EPF ECR, ESIC challans and bank-credited wages to the billed headcount, has no evidential defence and a weakened right of recovery.

Penal exposure. Contravention of the CLRA provisions on employment of contract labour (Section 23) and other offences (Section 24) carry imprisonment and fines, and under Section 25 every person in charge of the company at the time of the offence can be prosecuted. The CLRA fine amounts are low, but the EPF Act (Section 14) and ESI Act (Section 85) offences carry imprisonment, and the arrears-related financial exposure is the larger risk.

Scope and applicability

Who is covered

• Establishment (Section 2(1)(e)): Any office or department of the Government or a local authority, or any place where an industry, trade, business, manufacture or occupation is carried on.
• Principal Employer (Section 2(1)(g)): In a factory, the owner or occupier or the manager named under the Factories Act. In a mine, the owner or agent. In other establishments, any person responsible for the supervision and control of the establishment. For corporate offices, this is the company acting through the person in control.
• Contractor (Section 2(1)(c)): A person who undertakes to produce a given result for the establishment, other than by mere supply of goods or articles, through contract labour, or who supplies contract labour for any work. A manpower staffing agency is a contractor for this purpose.
• Contract labour (Section 2(1)(b)): A workman is deemed to be employed as contract labour when hired in or in connection with the work of an establishment by or through a contractor, with or without the knowledge of the PE.

Headcount triggers

Exclusions (Section 1(5)): The Act does not apply to establishments where the work is of an intermittent or casual nature. Work is intermittent if it is not performed for more than 120 days in the preceding 12 months, and seasonal work is not performed for more than 60 days. Treat these exclusions narrowly, because a recurring housekeeping, security or loading contract is perennial.

Statutes that apply regardless of the CLRA threshold: EPF Act, ESI Act, minimum wage law, the Payment of Bonus Act, the Employees' Compensation Act, and State Professional Tax and Labour Welfare Fund laws apply on their own thresholds. A PE below the CLRA threshold still carries Section 8A (EPF) and Section 41 (ESI) liabilities for workers engaged through contractors.

Facility types

• Manufacturing units: Housekeeping, loading and unloading, packing, maintenance, machine operation and canteen workers. Contract workers count as workers under the Factories Act, and the factory Occupier's duties to them on safety and welfare run in parallel.
• Corporate office hubs: Facility management, security, housekeeping, front office, pantry, driver and mailroom contractors. Registration is triggered by the number of contract workmen on the premises, aggregated across all vendors.
• IT and ITES facilities: Facility, security, transport and cafeteria vendors, plus project staffing vendors. Distinguish a professional services or outcome-based contract from a manpower supply contract, because the latter is contract labour regardless of the skill level, subject to the applicable wage ceiling for the Act's coverage of workmen.
• Logistics parks and warehouses: Loaders, pickers, packers, sorters, drivers and helpers, often with seasonal peaks and migrant workers. The Inter-State Migrant Workmen Act, 1979 (subsumed by the OSH Code) applies where the contractor recruits from another State.
• Multi-vendor sites: The PE threshold is the aggregate of contract workmen across all vendors. Each vendor holds its own licence for its own scope of work and maximum workmen. A PE registered at one site is not registered at another.

Detailed guide

Registration and licensing verification

PE registration (Section 7):

• Verify the Form II certificate of registration for each site, the registration number, issue and amendment dates, and the nature of work and maximum contract workmen declared.
• Confirm the registration is current for the actual number of contract workmen, and that amendments were filed on change of PE, address, nature of work or increase in strength.
• Check that the registering authority is the competent central or State Labour Officer for the establishment.

Contractor licence (Sections 12 and 13):

• Obtain the Form VI licence for each contractor and confirm the licence number, licensing officer, date of issue, validity and renewal.
• Validate the establishment name and address (the licence is establishment-specific), the nature of work (the licence lists the work), the maximum number of workmen on any day, and the period of the licence.
• Cross-check the licence's maximum workmen against the headcount billed in each monthly invoice. A bill above the licensed number is evidence of unlicensed deployment.
• Check licence conditions on wages, hours, welfare and the contractor's security deposit.
• Verify that the licence belongs to the legal entity that signed the contract. Sub-contracting by the contractor to another firm requires that firm's own licence and the PE's written consent under the contract.
• Under the OSH Code, a contractor licence has pan-India validity for the prescribed term, subject to the work areas declared in the licence. Confirm the current rule position and the licence class.

Statutory remittance auditing

The test is whether each billed worker appears in the statutory returns for the invoice month, with the correct wage base. Do not accept a vendor-signed compliance certificate in place of the underlying documents.

EPF (Section 8A of the EPF Act and the EPF Scheme, 1952):

• Obtain the Electronic Challan cum Return (ECR) for the invoice month with the Transaction Reference Number (TRRN), the payment confirmation, and the member-wise list with UAN, name, gross wages, EPF wages, EPS wages, EDLI wages and contributions.
• Reconcile ECR member count and UAN list to the muster roll and the invoice headcount. Variances in either direction are findings: a billed worker with no UAN is a non-coverage risk, and an ECR member who is not billed is a deployment or ghost-name risk.
• Check the wage base. Contribution is 12 per cent of PF wages from the employee and the employer. Contributions on a capped base of Rs 15,000 where actual wages are higher, split or manipulated basic and allowances, and contribution on the minimum wage only, are standard findings. Confirm the base against the Supreme Court's and the Code's treatment of allowances in the wage definition.
• Check the due date of the 15th of the following month, the payment date, and any interest and damages paid. Late payment attracts interest under Section 7Q and damages under Section 14B (rates under Paragraph 32A of the Scheme escalate with the period of delay).
• Confirm that the contractor's establishment code covers the workers, or that the PE's code is used where the contractor has no coverage.

ESIC (Section 41 of the ESI Act):

• Obtain the monthly contribution challan or portal receipt, the employee-wise contribution statement and the IP numbers. Contribution is 3.25 per cent from the employer and 0.75 per cent from the employee on wages, for employees earning up to the wage ceiling (Rs 21,000 per month at the time of writing). Verify the current rates and ceiling.
• Match IP numbers and wage periods to the muster roll and the invoice. Confirm that new joiners are enrolled from the date of joining, and that workers above the ceiling are not erroneously dropped.
• Check the due date of the 15th of the following month and any interest, damages and benefit-period gaps.

Professional Tax and Labour Welfare Fund:

• Professional Tax is a State levy on employees, deducted by the employer and deposited per the State schedule. Obtain the registration, the monthly or annual payment proof and the return, in each State of operation.
• LWF contributions are collected from employer and employee under State statutes at periodic intervals (monthly, half-yearly or annual by State). Obtain the payment receipt.

Matching to the invoice. The wage bill, the ECR, the ESIC challan, the PT payment and the bank credit file for the same month must reconcile on headcount and wages. Pay the vendor's management fee on the verified base only, and hold the statutory component in a controlled manner until verification.

Wage verification and register controls

Minimum wage verification:

• Identify the applicable minimum wage schedule by State, zone, scheduled employment and skill category (unskilled, semi-skilled, skilled, highly skilled), including the variable dearness allowance revision for the period. Under the Code on Wages, the floor wage and the State notifications govern.
• Compare the minimum wage to the wage in the Form XVII wage register and the bank credit, and add overtime, weekly off, bonus and leave wages.
• Confirm that the CLRA licence condition and Rule 25 on the wage rates and, where applicable, the equal wages for the same or similar work as regular workmen are met.

Registers and forms (Central Rules, 1971, State variations apply):

• Form XII, Register of Contractors (PE, Rule 74): The PE maintains this register with the contractor's name and address, the nature of work, the location, the period of the contract and the maximum number of workmen. It is the PE's own document, so verify it is complete and current for every vendor.
• Form XIII, Register of Workmen Employed (contractor, Rule 75): Name, age, sex, father's name, nature of employment, permanent home address, date of commencement and termination. Cross-check against the UAN and IP records.
• Form XVI, Muster Roll (contractor): The attendance record. Note that the muster roll is Form XVI, not Form XIII.
• Form XVII, Register of Wages (contractor): Wage period, rates, days worked, gross wages, deductions, net wages, and the signature or bank credit reference. The PE's authorised representative certifies payment.
• Form XIX, Wage Slip (contractor): Issued to each workman, showing the wages, deductions and the contractor's name. Confirm issuance, not just a template.
• Other registers: Employment card (Form XIV), service certificate (Form XV), registers of deductions, fines, advances and overtime, and the prescribed returns. Confirm that the contractor files its returns with the licensing officer.

Wage disbursement and the PE representative (Section 21(2) and (3)): The PE must nominate a representative duly authorised to be present at the time of disbursement. The contractor pays in his presence, and the representative certifies the amount paid in the prescribed manner. Where wages are paid by bank transfer, define the equivalent control: the PE's representative reviews the bank advice and the credit file and certifies the register. Nomination must be in writing, by name and designation, and the nominee needs a trained checklist.

Statutory welfare and on-site amenities (Sections 16 to 20)

• Canteen (Section 16): Where 100 or more contract labour are ordinarily employed in work likely to continue for the prescribed period, a canteen of the prescribed standard.
• Rest rooms (Section 17): Suitable rest rooms or alternative accommodation where contract labour is required to halt at night in connection with the work.
• Other facilities (Section 18): Sufficient supply of wholesome drinking water at convenient places, sufficient latrines and urinals, and washing facilities.
• First aid (Section 19): First-aid facilities as prescribed.
• PE liability (Section 20): If the contractor fails to provide any of these within the prescribed time, the PE must provide them, and the expenses are recoverable from the contractor by deduction or as a debt.

Audit these on a site walk, with photographs, headcount and a dated register. A PE that inspects and records the contractor's failure, and then provides the facility and claims the cost, is within the statute. A PE that has no record is in default.

Sham contract test

Before renewing any manpower contract, test for the markers that courts examine:

• Control and supervision: Who assigns tasks, sets hours, grants leave, supervises and disciplines the worker? PE supervisors directing contract workers day to day is the strongest marker.
• Core and perennial work: Are the workers employed on work that is integral to the PE's main activity and continues year-round? Check any Section 10 notification and the State rules, and the OSH Code restriction on core activities.
• Genuine contractor: Does the contractor have its own capital, supervisors, equipment, other clients and the ability to pay wages, or is it a payroll conduit?
• Pricing: Is the contract price a cost plus management fee on headcount, or an outcome-based rate?
• Continuity: Are the same workers retained across contractor changes, with the PE choosing them?

A contract with two or more of these markers needs a restructuring decision before an audit or a workmen's claim forces one.

Recovery rights

Section 21(4) of the CLRA, Section 8A of the EPF Act and Section 41 of the ESI Act allow the PE to recover amounts paid from the contractor. The right is only as strong as the contract, so provide for: set-off against any bill, retention and a security deposit, a bank guarantee, an indemnity covering wages, contributions, interest, damages, penalties and legal costs, audit rights, and termination for non-production of documents.

Checklist

Audit matrix for Principal Employers. Statutory references use the CLRA, EPF Act and ESI Act. Check the equivalent provision of the Labour Codes and the State rules for each site.

Common mistakes

1. Accepting a vendor compliance certificate instead of raw statutory proof. Procurement releases payment on a signed declaration, or on a monthly checklist ticked by the vendor. Consequence: the PE cannot show that it verified remittance, loses the equitable position in EPFO and ESIC proceedings, and has no evidence for recovery from the contractor. Require the ECR with TRRN, the ESIC challan and the bank credit file for the invoice month.
2. Deploying contract workmen in core, perennial activity. Production-line operators, core support roles or functions run under PE supervision are staffed through a contractor. Consequence: a sham or camouflage finding, claims for regularisation and wage parity, gratuity and bonus exposure from the date of engagement, and prohibition under Section 10 or the OSH Code restriction on core activities.
3. Failing to nominate a PE representative for wage disbursement. No written nomination, or a nominee who never attends or certifies. Consequence: breach of Section 21(2) and (3), a defect in the wage register certification, and weaker defence when workmen claim unpaid wages.
4. Ignoring the vendor's licence limits. The invoice headcount exceeds the maximum workmen in the Form VI licence, the licence has expired, or the work done falls outside the licensed nature of work. Consequence: the PE has engaged an unlicensed contractor in contravention of the Act (Section 23), and the PE and its persons in charge are exposed to prosecution under Section 25.
5. Not registering the PE, or not amending the registration. The establishment crosses the threshold through the aggregate of several vendors, or adds a site, and nobody files. Consequence: employment of contract labour without registration is prohibited under Section 9, and every contract worker on the site becomes an exposure.
6. Reconciling headcount but not wage base. The ECR member count matches, but contributions run on a capped or split wage, or on the minimum wage alone. Consequence: a Section 7A inquiry, interest and damages on the shortfall, and a determination against the PE's code.
7. Treating a below-threshold site as outside the law. The PE concludes that a site with fewer than 20 or 50 contract workmen has no obligations. Consequence: EPF Section 8A, ESI Section 41, minimum wage, bonus and compensation liabilities apply regardless of the CLRA threshold.
8. Weak contract language. The agreement lacks set-off, retention, bank guarantee, indemnity for statutory and penal liability, audit rights and a termination right for non-production. Consequence: the PE has the right of recovery in statute but not the means, and ends up litigating against an insolvent vendor.
9. Paying the vendor in full, then discovering the default. The PE settles the final invoice, releases the security deposit and then receives an EPFO or ESIC notice. Consequence: the PE pays the arrears, interest and damages, and recovery against a vendor that has been paid and exited is slow and uncertain.
10. Ignoring amenities. The PE assumes that canteen, rest rooms, drinking water and first aid are the vendor's responsibility and never inspects. Consequence: Section 20 places the duty on the PE on default, and an inspection finding is recorded against the PE.
11. Letting the vendor sub-contract. Work moves to a second-tier contractor with no licence and no PE consent. Consequence: unlicensed deployment inside the PE's premises, with no record on the PE's Form XII and no verified statutory remittance.
12. Poor records. Vendor documents sit in email threads and site folders, with no index by vendor, site and month. Consequence: the PE cannot produce records on an inspection, a notice or an audit, and the burden falls on the PE in proceedings.

Action Plan: 30-60-90 Day Vendor Governance Framework

Days 1 to 30: Vendor Master Audit and Licence and Registration Reconciliation

1. Build the vendor master. For every site, list each contractor and sub-contractor, the legal entity, the nature of work, the contract period, the billed headcount by month for the last 12 months, and the contract value.
2. Reconcile registration and licences. Confirm the PE's Form II certificate for each site. For each vendor, collect the Form VI licence and test entity, establishment, nature of work, maximum workmen and validity against the billed headcount.
3. Classify roles. Map every contract role as core or non-core, perennial or intermittent, supervised by the PE or by the vendor, and run the sham contract test set out above.
4. Collect the last 6 to 12 months of statutory proof. ECR with TRRN, ESIC challans, PT and LWF receipts, wage registers, muster rolls, wage slips and bank credit files, by vendor.
5. Run a first-pass reconciliation on headcount, UAN and IP coverage, and wage base. Identify vendors with gaps and compute the exposure.
6. Triage. Rank vendors by risk: unlicensed or lapsed licence, ECR and ESIC mismatch, minimum wage shortfall, core activity deployment. Open recovery and retention steps for the high-risk group.

Days 31 to 60: Pre-Invoice Verification and ECR Reconciliation Protocols

1. Install a pre-invoice gate. No invoice is approved without the statutory pack for the previous month: ECR and TRRN, ESIC challan, wage register certified by the PE representative, bank credit file, and licence and registration status.
2. Define the reconciliation steps. Match invoice headcount to muster roll, ECR member list, ESIC statement and bank file. Record variances, a tolerance and an escalation route. Check wage base and minimum wage compliance each month.
3. Segregate the statutory component. Where commercially feasible, pay statutory contributions and net wages against verified evidence, and hold the vendor fee until verification is complete.
4. Nominate PE representatives in writing for each site, train them on Section 21, and issue a disbursement checklist and certificate format.
5. Remediate the high-risk vendors. Cure notices, correction of ECR and ESIC filings, payment of shortfalls, licence regularisation, and replacement where the vendor cannot cure.
6. Fix registration gaps. File PE registration or amendments, and require licence amendments from vendors.

Days 61 to 90: On-Site Verification, Contractual Indemnity Amendments and Escalation Matrix

1. On-site verification. Conduct unannounced attendance checks against the muster roll, interviews with a sample of workmen on wages, wage slips and UAN and IP cards, a review of amenities, and safety induction records.
2. Amend the contracts. Add statutory compliance warranties, monthly document delivery with deadlines, audit and inspection rights, set-off and retention, security deposit and bank guarantee, indemnity for wages, contributions, interest, damages, penalties and legal costs, a prohibition on sub-contracting without consent and licence, and termination rights.
3. Set the escalation matrix. Level 1: site HR and facility head for missing documents within 3 working days. Level 2: procurement and the compliance lead for continued default within 7 days, with payment hold. Level 3: Legal Head and CHRO for notices, recovery and replacement. Level 4: Audit Committee reporting for sham contract findings and unresolved material exposure.
4. Deploy the digital vendor compliance register with documents indexed by vendor, site and month, expiry alerts for licences, and an audit trail.
5. Report to leadership and the Audit Committee. A dashboard of vendor status, open findings, exposure, recoveries made and registration status by site, and a quarterly independent sample audit.

Frequently asked questions