Unlisted status is not an exemption
An unlisted company must test the prescribed classes under Rule 7 of the Companies (Meetings of Board and its Powers) Rules, 2014. Public-deposit acceptance is one trigger; money borrowed from banks and public financial institutions in excess of ₹50 crore is another. Every listed company is separately covered by the rule. Exactly ₹50 crore does not exceed the borrowing threshold, but it does not neutralise another applicable trigger.
Statutory purpose and current framework
Under Companies Act, 2013, section 177(9)–(10), the mechanism is for directors and employees to report genuine concerns. It must contain safeguards against victimisation and provide direct access to the Audit Committee chairperson in appropriate or exceptional cases. Details of its establishment must appear on the company’s website, if any, and in the Board’s report. ICSI’s official reproduction of Rule 7 specifies covered classes and the oversight alternatives. This guide addresses that Companies Act framework as checked on 26 October 2026; listed entities must additionally assess their applicable securities-law obligations.
Build a lender-based borrowing reconciliation
For the borrowing limb, separate amounts owed to banks and public financial institutions from other funding. Establish lender identity and legal status before aggregation. A finance-company name alone is not proof that the lender is a public financial institution. Similarly, borrowings from a director or an ordinary group company are not automatically borrowings from one of the specified lender classes. Record qualifying borrowed amounts without replacing the test with total balance-sheet liabilities.
Rule 7 does not express this trigger as a turnover, profit or paid-up-capital threshold. Nor does its text supply a general preceding-year-end safe harbour. Monitor material changes in qualifying funding and document the actual position; do not invent a grace period or assume a temporary balance movement eliminates a continuing compliance obligation. Questions about a facility’s legal character, undrawn commitments or a disputed lender category should be resolved from its facts and documents before concluding that the threshold is crossed or avoided.
Choose the legally appropriate oversight route
Where the company is required to constitute an Audit Committee, Rule 7(2) places oversight with that committee. A member with a conflict in a particular matter should recuse, leaving the others to deal with it. Where the company falls in the other category, Rule 7(3) requires the Board to nominate a director to perform the Audit Committee role for the mechanism. Merely identifying an HR inbox does not establish that nominated-director arrangement.
The two routes should not be confused with a claim that every vigil-mechanism company must create an Audit Committee solely for that reason. Determine the Audit Committee requirement separately, then route vigil oversight accordingly. Document responsibility for receiving concerns, secure access to records, conflict escalation and reporting to the proper oversight person or committee.
Make the protection operational
Rule 7(4) requires safeguards against victimisation and direct access to the Audit Committee chairperson or nominated director in exceptional cases. A useful implementation states how a concern about the normal recipient reaches an independent decision-maker, who can see identifying information and how retaliation concerns will be handled. Access permissions, case records and oversight minutes help demonstrate operation. These are recommended controls, not a statutory promise of absolute anonymity or a fixed investigation deadline.
Rule 7(5) permits suitable action, including reprimand, for repeated frivolous complaints. Do not turn that power into automatic punishment whenever an allegation is unproved. An inconclusive investigation and a repeated frivolous complaint are different findings; record the basis for any action without undermining the mechanism’s purpose.
Disclose establishment without publishing case files
The section 177(10) disclosure is about establishment of the mechanism. Prepare a Board-report disclosure and, where the company has a website, an appropriate website disclosure. Review the public contact route for continued operation. Avoid treating publication of a policy as evidence that conflicts, retaliation or complaints are actually handled. Conversely, disclosure does not require indiscriminate publication of complainants’ identities or confidential investigation records.
Six worked illustrations
All facts and amounts below are fictional. Assumptions describe the model, not additional statutory rules.
Illustrative example 1: Banks and PFIs together cross the threshold
An unlisted company with no public deposits has ₹30 crore borrowed from banks and ₹21 crore from a lender established to be a public financial institution. Qualifying borrowings total ₹51 crore, exceeding ₹50 crore by ₹1 crore. The borrowing limb applies on these assumed facts.
Illustrative example 2: Exactly at ₹50 crore
An unlisted company has qualifying borrowed money of ₹50 crore, accepts no public deposits and has no other applicable trigger. ₹50 crore minus ₹50 crore is zero: the borrowing amount is not in excess of the threshold. Do not describe the rule as “₹50 crore or more”.
Illustrative example 3: Other borrowing does not automatically join the pool
Bank borrowing is ₹49 crore and an ordinary director loan is ₹20 crore. Total funding is ₹69 crore, but the assumed qualifying pool is ₹49 crore, ₹1 crore below the threshold. This example does not assess other triggers or recharacterise a director as a bank/PFI.
Illustrative example 4: Public deposits independently trigger coverage
An unlisted company accepts ₹10 lakh of public deposits and has ₹0 bank/PFI borrowing. The ₹50 crore borrowing comparison is not the controlling test: public-deposit acceptance is an independent Rule 7 category. This is not a statement that the deposits were lawfully accepted.
Illustrative example 5: Listed status independently triggers coverage
A listed company has ₹0 bank/PFI borrowing and ₹0 public deposits. Those balances do not remove listed-company coverage. The two monetary balances sum to ₹0, but Rule 7’s listed-status branch still applies.
Illustrative example 6: Funding change requires a fresh check
An unlisted company’s qualifying borrowed balance moves from ₹48 crore to ₹53 crore after a further ₹5 crore drawdown, with no repayment in the model. The new balance exceeds ₹50 crore by ₹3 crore. Update the applicability record and implementation response rather than relying on the earlier ₹48 crore worksheet.
Ten-step verification table
| Step | Action | Evidence |
|---|---|---|
| 1 | Record company status | Listing status and entity identity. |
| 2 | Check deposit trigger | Public-deposit records and legal classification. |
| 3 | Identify lenders | Contracts and bank/PFI status evidence. |
| 4 | Aggregate qualifying borrowing | Reconciliation to actual borrowed balances. |
| 5 | Document the threshold conclusion | Strict greater-than comparison and other-trigger review. |
| 6 | Determine oversight route | Separate Audit Committee applicability assessment. |
| 7 | Establish responsible oversight | Committee mandate or Board-nominated director record. |
| 8 | Implement safeguards and access | Reporting channels, recusal and retaliation procedures. |
| 9 | Complete disclosures | Website, if any, and Board-report establishment details. |
| 10 | Test operation and changes | Access test, controlled case records and funding/status monitoring. |
Sixteen practitioner FAQs
1. Does the rule apply only to public companies?
Rule 7’s prescribed classes are not phrased as a blanket exemption for unlisted private companies. Test the actual class and any applicable legal exemption.
2. Is ₹50 crore enough by itself?
The borrowing limb says in excess of ₹50 crore. Exactly that amount does not satisfy that limb.
3. Can public deposits trigger it below ₹50 crore?
Yes. Public-deposit acceptance is an independent prescribed category.
4. Does turnover determine the Rule 7 borrowing test?
No turnover threshold appears in this test. Other governance requirements may use different criteria.
5. Should banks and PFIs be checked together?
Prepare an aggregate qualifying-lender reconciliation; do not examine each qualifying lender in isolation to avoid the threshold.
6. Is every NBFC a public financial institution?
Do not assume that. Verify whether the particular lender is a bank or legally qualifies as a public financial institution.
7. Are director loans automatically included?
Not merely because they are borrowings. The borrowing limb identifies banks and public financial institutions.
8. Does an unused sanction equal borrowed money?
Do not substitute sanction limits without analysing actual borrowing and the facility’s legal facts. Retain the basis of the conclusion.
9. Can the company rely only on the last audited balance?
The rule does not state a general prior-year-end safe harbour. Monitor material funding changes and reassess documented facts.
10. Does coverage itself require a new Audit Committee?
Determine that committee requirement separately. Rule 7 provides a nominated-director route for other companies.
11. Who appoints that alternative oversight person?
The Board nominates a director to play the specified Audit Committee role for the mechanism.
12. How is a conflicted committee member handled?
Rule 7(2) calls for recusal in the given case, with the others handling the matter.
13. Must the normal line manager always receive the concern first?
An implementation must preserve the required direct access in exceptional cases; an inflexible line-management barrier can frustrate it.
14. May every unsuccessful complainant be reprimanded?
No. Rule 7(5) concerns repeated frivolous complaints. Document the actual finding rather than equating lack of proof with frivolity.
15. Where must establishment be disclosed?
In the Board’s report and on the company’s website, if any, under section 177(10).
16. What distinguishes an operating mechanism from a policy file?
Accessible reporting, appropriate oversight, conflict handling, safeguards and controlled records showing how concerns are dealt with.
Conclusion
An unlisted company can require a vigil mechanism because it accepts public deposits or has qualifying borrowings above ₹50 crore. Rule 7 also determines oversight, conflict handling and protection against victimisation.