Start with applicability
Remove controls that genuinely do not apply, add state- or sector-specific requirements and record the basis for each decision.
Practical employer resource
This matrix helps HR, payroll, finance, legal and procurement teams identify the records that should support recurring payroll and statutory compliance. It is designed as an operational control aid—not as a substitute for reviewing the law applicable to a particular establishment, state, sector or workforce.
Evidence-retention matrix
The controls below are intentionally practical. Each employer should map them to its establishment registrations, workforce categories, internal approval structure, applicable law and contractual arrangements.
| Compliance area | Primary owner | Evidence to retain | Review point | Common gap |
|---|---|---|---|---|
| Establishment master | Legal / Compliance | Entity name, establishment address, registration numbers, coverage status, authorised signatories, applicable state and central laws, renewal dates and portal credentials register. | On onboarding and whenever a location or legal detail changes. | Payroll and return teams use different entity names, addresses or registration numbers. |
| Employee onboarding | HR / Payroll | Joining form, appointment terms, identity and bank documents, UAN/IP details where applicable, wage structure approval, skill/category mapping and work-location allocation. | Before first payroll. | Missing social-security identifiers or an unsupported skill classification. |
| Attendance and weekly off | Operations / HR | Daily attendance, shift or roster approval, weekly-off pattern, holiday-work approval, overtime or compensatory-off record and absence/leave authorisation. | Before payroll input is frozen. | Attendance is changed after payroll without a traceable approval. |
| Minimum-wage classification | HR / Compliance | Applicable notification, scheduled-employment mapping, zone, skill category, variable DA rate where relevant and an employee-wise comparison against payable wages. | At each wage revision and before monthly payroll close. | Designation is treated as skill category without reviewing the work actually performed. |
| Payroll approval | Payroll / Finance | Input checklist, change log, variance report, approved salary sheet, deduction authorisations, exception register and final bank-transfer or payment instruction. | Before salary release. | Late adjustments are made without version control or an approver. |
| EPF compliance | Payroll | Employee eligibility and coverage records, UAN status, wage basis, excluded-employee support, ECR working, challan, payment acknowledgement and wage-to-ECR reconciliation. | Before ECR upload and after payment. | Salary-sheet wages do not reconcile with the ECR population or contribution basis. |
| ESIC compliance | Payroll | Coverage assessment, IP registration, contribution working, wage exclusions where supportable, accident/intimation records where relevant, challan and wage-to-contribution reconciliation. | Before contribution filing and after payment. | New joiners or wage-threshold changes are not reviewed promptly. |
| Professional tax and LWF | Payroll / Compliance | State applicability, employee slab working, contribution period, enrolment/registration details, challan, return acknowledgement and payment reconciliation. | Monthly, half-yearly or annual as applicable. | A central payroll applies one state's slab or due date to another state. |
| Contractor master | Procurement / Legal | Agreement, scope, work location, licence/registration where applicable, statutory IDs, authorised contact, manpower ceiling, subcontracting approval and compliance obligations. | Before mobilisation and at renewal. | Commercial onboarding is completed before statutory-document review. |
| Contractor attendance and wages | Site HR / Audit | Deployed-worker list, attendance, wage register, bank-payment proof, minimum-wage comparison, overtime/holiday treatment and worker acknowledgement where prescribed. | Monthly before invoice certification. | Challans are accepted without linking them to the workers deployed at the site. |
| Contractor EPF/ESIC | Vendor Audit / Payroll | Worker-wise ECR or contribution support, challan, payment proof, excluded-worker reasons, UAN/IP mapping and reconciliation to attendance and wage records. | Monthly before invoice release. | Aggregate challans are reviewed without establishment- or site-level worker reconciliation. |
| Statutory registers | Compliance | Applicable register list, source data, prepared register, maker-checker evidence, nil notation where relevant and version/period control. | Monthly and before inspection. | Registers are generated but not reconciled to payroll, attendance or contractor records. |
| Returns and renewals | Compliance | Compliance calendar, source data, working papers, filing acknowledgement, payment proof, certificate/licence copy and next due date. | Before filing and after acceptance. | A filing acknowledgement is retained but the supporting working is not. |
| Bonus, gratuity and final settlement | HR / Payroll / Legal | Eligibility assessment, service and attendance record, wage basis, calculation sheet, approval, payment proof and employee communication. | At annual calculation or separation. | Service, wage or attendance assumptions are not documented. |
| Inspection and notice response | Legal / Compliance | Notice, chronology, document index, records supplied, authority submissions, hearing notes, internal approvals and corrective-action tracker. | Immediately on receipt and after each hearing. | Documents are sent through different channels without one indexed record. |
| Corrective actions | Business Owner / Compliance | Finding, risk level, root cause, action owner, target date, closure evidence and validation by an independent reviewer where appropriate. | Weekly until closure. | A finding is marked closed based on an email rather than evidence of implementation. |
| Change control | Legal / Payroll / HRIS | Notification or policy trigger, impact note, approved rule change, system configuration evidence, test cases, employee/client communication and effective-date record. | Before a statutory or policy change goes live. | Payroll settings change without a documented legal and testing trail. |
| Document access and retention | Compliance / IT | Folder structure, access list, naming convention, retention schedule, backup status, confidentiality controls and secure handover record. | Quarterly and on team/role changes. | Evidence exists only in individual mailboxes or local devices. |
A workable monthly rhythm
A reliable compliance process separates preparation, review, payment, filing and post-filing reconciliation. The same person should not silently change both source data and final evidence without a traceable review.
Freeze source data and record the approved version.
Run employee- and contractor-level exception checks.
Approve payroll and statutory workings before upload.
Retain challans, acknowledgements and payment evidence.
Reconcile filed populations and close exceptions.
How to use the resource
A useful implementation assigns one accountable owner, one evidence location and one review date to every required control.
Remove controls that genuinely do not apply, add state- or sector-specific requirements and record the basis for each decision.
Identify whether each record comes from HRIS, payroll, attendance, banking, a contractor, a statutory portal or a manual approval.
Sample new joiners, exits, wage changes, low-paid workers, holiday work, contractor deployments and late corrections.
Use maker-checker controls for payroll, contribution workings, registers, returns and corrective-action closure.
Do not treat a challan as complete evidence until the covered employees or workers reconcile to attendance and wages.
Preserve the final working, approval, filing acknowledgement, payment proof and exceptions in one period-controlled location.
For publications and associations
Editors, academic centres, employer associations and HR communities may link to this page or the downloadable CSV as a practical evidence-control resource. Please retain the page title and identify Sankhla & Co. as the source. Republishing the full matrix requires written permission.