The Ministry of Corporate Affairs (MCA) issued a landmark notification dated 5 August 2022 introducing the Companies (Accounts) Fourth Amendment Rules, 2022. These amendments have far-reaching implications for companies that maintain their books of accounts in electronic form — which today includes virtually every company in India. Understanding these amendments is critical for compliance with the Companies Act, 2013.
Background: Rule 3 and Electronic Books of Accounts
Rule 3 of the Companies (Accounts) Rules, 2014 governs the manner in which books of accounts can be maintained in electronic form. The original rule permitted companies to maintain books electronically, subject to certain conditions including the requirement that such books must remain accessible in India.
The Fourth Amendment Rules 2022 significantly tightened these requirements, introducing new sub-rules and modifying existing provisions to bring greater accountability and accessibility to electronically maintained financial records.
Key Amendments to Rule 3(1) — Electronic Books of Accounts
The amended Rule 3(1) now mandates that where books of accounts and other books and papers are maintained in electronic form:
- The books must remain accessible in India at all times — this is an absolute requirement with no exceptions
- A back-up of books of accounts must be kept on servers physically located in India on a daily basis
- Where the server is located outside India, the company must maintain a real-time back-up on servers in India
- The company must intimate the Registrar of Companies (ROC) on an annual basis about the name of the service provider, the internet protocol (IP) address of the service provider, and the location of the server(s)
- Where books are maintained outside India, the financial year dates of the country where the server is located must also be reported
New Requirements Introduced: Form AOC-4 Disclosure
Companies must now disclose in their Board Report and financial statements:
- Whether books of accounts are maintained electronically
- Name and location of the service provider/cloud provider
- Confirmation that back-ups are maintained on Indian servers
- IP address details of servers used
This disclosure requirement has been incorporated into the annual filing forms submitted to the MCA.
Impact on Companies Using Cloud-Based Accounting Software
The amendment has significant practical implications for companies using popular cloud-based accounting software and ERP systems:
- Companies using international SaaS platforms (such as SAP, Oracle NetSuite, QuickBooks Online, Zoho Books hosted abroad) must ensure these platforms maintain data servers in India or arrange for real-time data back-up to India-based servers
- Domestic cloud providers hosting accounting data are generally compliant, but companies must verify their service agreements
- Companies must review their cloud service agreements to ensure contractual compliance with the India server requirement
- Multi-national companies operating in India through subsidiaries must ensure their global ERP systems meet Indian subsidiary compliance requirements
Practical Compliance Steps for Companies
- Audit current infrastructure: Identify where your accounting data is stored — cloud or on-premise, and in which country
- Verify service provider location: Get written confirmation from your software/cloud provider about server locations
- Arrange India-based backup: If servers are outside India, set up automated daily or real-time backup to an India-based cloud storage solution
- Update Board Report: Ensure the current year’s Board Report includes all required disclosures about electronic books
- Intimation to ROC: File the required annual intimation about service provider details with the ROC
- Update SLAs: Revise service-level agreements with technology vendors to ensure compliance warranties
Penalties for Non-Compliance
Non-compliance with books of accounts requirements under the Companies Act, 2013 attracts significant penalties:
- Under Section 128, failure to maintain proper books of accounts can lead to imprisonment of up to one year or fine between ₹50,000 and ₹5 lakh, or both
- This applies to the MD, WTD, CFO, or any other person responsible for maintaining books of accounts
- The company itself can also be penalised
What This Means for Startups and SMEs
While large corporates typically have dedicated IT and compliance teams to address such amendments, startups and SMEs must be equally vigilant. Many small companies use international SaaS accounting tools without considering data sovereignty requirements. This amendment makes it mandatory to review and potentially migrate accounting data infrastructure.
Conclusion
The Companies (Accounts) Fourth Amendment Rules 2022 represent a significant strengthening of India’s digital data sovereignty requirements for corporate financial records. All companies — large or small — must conduct an immediate review of their electronic book-keeping infrastructure, verify server locations, arrange India-based backups where necessary, and ensure annual disclosures are made correctly.
Given the complexity of technology infrastructure and corporate law requirements, it is strongly recommended to engage a Company Secretary and Chartered Accountant to conduct a compliance audit and implement necessary changes.