The customer
A multi-state retail group with 11 legal entities across 6 states. Each entity has its own Shop & Establishment, Fire NOC, Pollution consent (where applicable), Professional Tax registration, and GST. The group's company secretary's office, which sits at HoldCo, is responsible for keeping all of this current.
The problem
Pre-Sahayak, compliance was tracked in a master spreadsheet maintained by a junior in the CS team. It had ~180 line items across the 11 entities. In the trailing 12 months: a Fire NOC lapsed for two months in one store (caught on a routine fire-department visit; ₹75K penalty and reinstatement scramble), a Pollution CTO expired in another state (₹50K + show-cause), a state PT return was missed for 5 months (₹25K late fee + interest), and one entity's DIR-3-KYC went undone for a director (DIN deactivated; ₹5K reinstatement + paperwork).
More painful than the rupee number was the audit-committee meeting where the head of internal audit had to spend 40 minutes explaining each miss. The board was patient but pointed: "Why don't we have a system?"
The solution
The group onboarded onto Enterprise, with 11 entities and the full 12-regulator surface. Onboarding ran 3 weeks: week 1 to plug in the 11 auto-portal credentials (GST × 11, TDS × 11, PF/ESI × 11, ROC × 11), week 2 to enter the 7 manual-portal dates (Shop Act × 11, Fire NOC × 11, Pollution × applicable, etc.), week 3 to configure owners and alert routing.
Owner-routing took the longest to get right. The first version sent every alert to the company secretary; the CS team rebelled inside 2 weeks. The second version routed by regulator class: GST/TDS to Finance, PF/ESI to HR, Pollution/Fire to Plant/Store managers, ROC to CS. That stuck.
The results
- • 11 entities tracked; ~198 active filings monitored at any time.
- • Audit committee now opens with the Sahayak board-pack (PDF), not a spreadsheet.
- • Quarterly DPDP attestation, ISO 27001 recert, and DIR-3-KYC for 14 directors all run on cadence with no surprises.
- • The CS team uses the reclaimed time for transaction work (M&A diligence, related-party reviews) rather than calendar babysitting.
In their words
[Customer quote pending — Group Company Secretary, approved verbatim text once group name is cleared.]
— Group Company Secretary, anonymised; attribution will be added when permission lands.
What we'd do differently
We onboarded the entities in alphabetical order. The pain points were front-loaded on the entities with the most state-portal-dependent manual data. In hindsight we should have onboarded the cleanest 2–3 entities first, demonstrated value, then tackled the messy long-tail. The playbook now reflects this.