Vigil Mechanism Applicability explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
A vigil mechanism is the channel through which directors and employees report genuine concerns or grievances. Rule 7 of the Companies (Meetings of Board and its Powers) Rules, 2014 says which companies must set one up, who oversees it and what safeguards it must carry. This article reads rule 7 as amended up to G.S.R. 811(E) dated 3 November 2025 per the MCA e-book; later amendments should be checked. For a written policy that fits your company, see our compliance documentation service.
Rule 7(1) requires every listed company and companies in two further classes to establish a vigil mechanism for directors and employees to report genuine concerns or grievances: companies that accept deposits from the public, and companies that have borrowed money from banks and public financial institutions in excess of fifty crore rupees. A company that must have an Audit Committee uses the committee to oversee it; other companies have the Board nominate a director to play that role (rule 7(2) and (3)). The mechanism must protect against victimisation and give direct access to the chairperson in exceptional cases (rule 7(4)).
Who must set one up: rule 7(1)
| Class | Rule 7(1) wording |
|---|---|
| Listed companies | "Every listed company" |
| Deposit-taking companies | Companies which accept deposits from the public (clause (a)) |
| Borrowing companies | Companies which have borrowed money from banks and public financial institutions in excess of fifty crore rupees (clause (b)) |
The rule is addressed to these three classes. A company outside them is not required by rule 7 to set up a mechanism, though it may do so by choice. Note the figure in clause (b): the rule says "in excess of fifty crore rupees", and the rule text does not say on which date the borrowing is measured. It prints no look-back year and no test date, so the company should read the clause as printed and keep a record of the basis it used.
Who oversees it: rule 7(2) and (3)
- Companies that must constitute an Audit Committee oversee the vigil mechanism through the committee. If any member of the committee has a conflict of interest in a given case, that member should recuse himself and the others on the committee deal with the matter (rule 7(2)).
- Other companies: the Board of directors shall nominate a director to play the role of the audit committee for the purpose of the vigil mechanism, to whom other directors and employees may report their concerns (rule 7(3)).
For the committee side, see Section 177: audit committee.
What the mechanism must provide: rule 7(4) and (5)
Rule 7(4) says the vigil mechanism shall provide for adequate safeguards against victimisation of employees and directors who avail of it. It shall also provide for direct access to the Chairperson of the Audit Committee, or to the director nominated to play the role of Audit Committee, as the case may be, in exceptional cases. The rule prints no definition of "exceptional cases"; the policy should say how the company will treat them.
Rule 7(5) deals with misuse. In the case of repeated frivolous complaints being filed by a director or an employee, the audit committee or the nominated director may take suitable action against the concerned director or employee, including reprimand. The rule says "repeated" and "frivolous"; one unfounded complaint is not described as frivolous by the rule.
A checklist for the policy
| Element | Source in rule 7 |
|---|---|
| Who can report: directors and employees | 7(1) |
| Which concerns: genuine concerns or grievances | 7(1) |
| Oversight: Audit Committee or nominated director | 7(2), 7(3) |
| Recusal for conflict of interest | 7(2) |
| Safeguards against victimisation | 7(4) |
| Direct access to the Chairperson or nominated director in exceptional cases | 7(4) |
| Action on repeated frivolous complaints | 7(5) |
How the rule fits with other provisions
The Meetings of Board Rules also deal with powers that only the Board can exercise and with disclosure of directors' interests; see our article on rules 8 and 9 and on rule 15 on related party transactions. The auditor's report may comment on whistle-blower complaints; see CARO 2020 clauses xi to xvi. Committees of the Board are covered in rules 5, 6 and 6A. The rule prints no form, no fee and no penalty.
Example
Kaveri Polymers Limited is an unlisted public company with no deposits, but it has borrowed from banks and public financial institutions an amount above fifty crore rupees. Clause (b) of rule 7(1) applies. As it is required to have an Audit Committee, the committee oversees the mechanism. When a complaint names one committee member, that member steps aside and the other members deal with it, as rule 7(2) says. A private company with borrowings below the figure and no deposits would have no obligation under rule 7(1), though it could adopt the mechanism voluntarily.
Common mistakes
- Treating the fifty crore rupees figure as "or more". The rule says "in excess of".
- Forgetting that accepting deposits from the public brings a company in regardless of size.
- Having a policy but no named person to receive concerns in a company with no Audit Committee. Rule 7(3) needs a nominated director.
- Omitting the safeguard against victimisation or the direct-access route.
- Using the policy to punish a single complaint. Rule 7(5) speaks of repeated frivolous complaints.
- Not recording the member's recusal where there is a conflict of interest.
Need help drafting the policy?
A vigil mechanism works when the policy, the reporting route and the Board's record all line up with rule 7. Our team can draft the policy and the Board resolution and check that the oversight arrangement matches your committee structure.
Key takeaways
- Three classes: listed companies, companies accepting public deposits, and companies with bank and public financial institution borrowings in excess of fifty crore rupees.
- Audit Committee oversees where one is required; otherwise the Board nominates a director.
- Safeguards against victimisation and direct access to the chairperson are required.
- Action is possible only on repeated frivolous complaints.
- Check later amendments before adopting the policy.
Read next
- Section 177: audit committee
- Board committees and circulation (rules 5, 6 and 6A)
- Related party transactions (rule 15)
- CARO 2020 clauses xi to xvi
Disclaimer: This article is general information, not legal advice. It reads the rule as printed in the MCA consolidated text, as amended up to the notification named above; later amendments should be checked on the official MCA site before you file or act.