Compliance & Governance

The spine, as of mid-2026, is the annual return — the yearly snapshot of shareholders, directors and registered office — plus financial statements where the company's size requires filing them, and the event-based returns that report changes as they happen: new directors, share issues, registered office moves, charges on assets. The annual return is the filing companies most often miss because nothing external prompts it. A company that files only when SECP writes to it is already in arrears.

It is the prescribed form confirming the company's particulars — members, directors, chief executive, auditors where applicable, registered office — filed with the registrar every year, with the deadline keyed to the company's AGM or calendar under the Companies Act 2017 [CURRENT FORM AND DEADLINE FOR THE COMPANY'S CATEGORY — TO BE VERIFIED BY REVIEWING LAWYER]. It is a confirmation, not an accounts filing: even a dormant company with no activity owes one. Missed annual returns are the most common defect surfaced in due diligence on Pakistani companies.

It depends on size. The Companies Act 2017 requires every company to prepare financial statements, but the obligation to file them with the registrar is keyed to thresholds — smaller private companies are generally spared the filing while larger ones are not [CURRENT PAID-UP CAPITAL THRESHOLD FOR FILING — TO BE VERIFIED BY REVIEWING LAWYER], as of mid-2026. Preparation and audit obligations run on their own track regardless of whether the statements are filed. Confusing 'we do not file accounts' with 'we do not need accounts' is a frequent and expensive misunderstanding.

The Companies Act 2017 requires a company to keep registers recording its own anatomy: members, directors and officers, share transfers, debenture-holders where relevant, and charges over its assets, together with minute books of board and general meetings. These live at the registered office and must be kept current — they are the company's primary record, of which SECP filings are only the reflection. In practice the registers are the first thing an investor's diligence team asks for and the last thing many companies have actually maintained.

Companies are required to look through their shareholding to identify the ultimate beneficial owners — the natural persons who ultimately own or control the company at or above the prescribed threshold [25% — TO BE VERIFIED BY REVIEWING LAWYER] — record them in a register, and declare the information to SECP under the ultimate-beneficial-ownership provisions of the Companies Act 2017, as of mid-2026. The obligation bites hardest where corporate shareholders, trusts or layered structures sit in the chain. Getting UBO wrong is not a paperwork slip; it sits inside Pakistan's AML/CFT commitments and is policed accordingly.

An ordinary manufacturer or services company is not itself a reporting entity under the Anti-Money Laundering Act 2010 — those obligations attach to financial institutions and designated non-financial businesses and professions. What every company feels instead, as of mid-2026, is the framework's downstream pressure: banks apply customer due diligence to the company and its owners, UBO declarations feed the same system, and unexplained ownership or funds flows freeze accounts and transactions. Clean ownership records and documented money trails are the practical AML compliance of a normal business.

The designated non-financial businesses and professions include real estate agents and developers, dealers in precious metals and stones, and accountants and lawyers when they handle certain client transactions, under the Anti-Money Laundering Act 2010 framework as of mid-2026. A DNFBP carries genuine compliance machinery: customer due diligence, record-keeping, and suspicious transaction reporting, under supervision of the designated regulator for its sector. A business in these categories should treat AML registration and procedures as a licensing-grade obligation, not an administrative afterthought: [CURRENT SCOPE AND SUPERVISORY ARRANGEMENTS FOR THE RELEVANT CATEGORY — TO BE VERIFIED BY REVIEWING LAWYER].

The Companies Act 2017 sets minimum meeting frequency, and the company's articles can require more [STATUTORY MINIMUM AND ITS APPLICATION TO PRIVATE COMPANIES — TO BE VERIFIED BY REVIEWING LAWYER]; listed companies sit under additional code requirements. The governance point matters more than the arithmetic: decisions that belong to the board — issuing shares, approving accounts, borrowing — need actual board action, minuted, whenever they occur. A company whose board 'meets' only in the sense that documents get signed is building a record that will not survive scrutiny.

An ordinary resolution passes by simple majority of members voting; a special resolution needs a three-fourths majority and longer prior notice, and the Companies Act 2017 reserves the structural decisions for it — changing the name or articles, altering the memorandum, reducing capital, winding up voluntarily. Special resolutions are also filed with the registrar within a short statutory window, which is how the public record keeps up with the company's constitution. Knowing which threshold a decision needs, before the meeting, is elementary governance hygiene.

Yes — the Companies Act 2017 permits resolutions by circulation, signed by the directors, for matters not required to be decided in a meeting, and well-drafted articles set out the mechanics. It is the workhorse for routine decisions in small companies where convening everyone is impractical. The discipline is documentary: the circulated resolution, the signatures and the date belong in the minute book exactly as a meeting would, because a decision that cannot be evidenced later might as well not have been made.

The Companies Act 2017 requires an AGM on a statutory clock — the first within a set period after incorporation and thereafter annually within a set window after the financial year ends — with modifications for single-member and certain private companies [CURRENT DEADLINES AND EXEMPTIONS — TO BE VERIFIED BY REVIEWING LAWYER], as of mid-2026. The AGM is where accounts are laid before members and auditors are appointed, so skipping it quietly breaks several other compliance items at once. Dormancy is not an exemption; a registered company owes its calendar regardless of activity.

The board appoints the first auditor within a short statutory window after incorporation [NINETY DAYS — TO BE VERIFIED BY REVIEWING LAWYER], and the auditor then holds office until the first AGM, where the members appoint. The appointee must be eligible under the Companies Act 2017 — for most companies that means a chartered accountant, and independence rules exclude officers and closely connected persons. New companies routinely miss this clock because nothing operational forces it; it surfaces later as a defect in the compliance record.

Yes — the Companies Act 2017 spares the smallest private companies, below a paid-up capital threshold, from mandatory audit [CURRENT THRESHOLD — TO BE VERIFIED BY REVIEWING LAWYER], as of mid-2026. Everyone else, including dormant companies above the line, needs audited financial statements. Exempt companies often choose audit anyway once banks, investors or large customers start asking for audited numbers — the exemption removes the legal requirement, not the commercial one.

Routine succession happens at the AGM, where members appoint the auditor for the coming year; replacing an auditor mid-term or against the incumbent's wishes engages the protective procedure in the Companies Act 2017 — notice requirements, the auditor's right to make representations, and registrar filings — because the law treats forced auditor exits as a red-flag event. Casual vacancies are filled by the board. The paperwork is manageable; the mistake is treating an auditor change as informal when the Act treats it as anything but.

Changes among directors and officers — appointment, resignation, removal, or a change in particulars — are reported to the registrar on the prescribed return within a short statutory window after the event, and the company's own register of directors and officers is updated in parallel. The SECP record is what banks, counterparties and courts rely on, so an unfiled change leaves the departed on the hook and the arrived invisible. Filing on the event, not at year-end, is the rule.

Three things stack up, as of mid-2026: additional filing fees that escalate with delay under the fee schedule, exposure to penalties through SECP's adjudication process for the company and its officers, and a compliance record that flags the company in bank onboarding and investor diligence. None of it is dramatic on any single day, which is exactly why arrears accumulate. The cure is mechanical — file, pay, regularise — and far cheaper early than late.

Yes — where the registrar has cause to believe a company is not carrying on business or is in persistent default, the Companies Act 2017 provides a strike-off process, on notice, at the end of which the company is dissolved. Dissolution does not launder liabilities: officers' exposure can survive, and the company's assets do not simply become the shareholders'. A struck-off company can seek restoration, but that is a formal proceeding — the sensible course is to either maintain the company or wind it up deliberately, not let it lapse.

The Act codifies what the common law long implied: directors must act in accordance with the company's articles and the law, in good faith to promote the company's objects, with due care, skill and diligence, and without letting personal interests conflict with the company's — disclosing interests in transactions where they arise. The duties are owed to the company itself, and they do not shrink for nominee or investor-appointed directors. Minutes, disclosed interests and documented reasoning are how a careful director evidences compliance.

Legal responsibility sits with the company and its officers — directors first, with the chief executive and company secretary carrying the roles the Act and articles assign them. Not every private company is required to have a company secretary [CURRENT REQUIREMENT BY COMPANY CATEGORY — TO BE VERIFIED BY REVIEWING LAWYER], and appointing one does not transfer the board's accountability. The workable model in an SME is one named owner for the compliance calendar, board visibility at each meeting, and professional support scaled to the company's complexity.

Four layers: the fixed annual items — annual return, financial statements and audit, AGM, tax filings; the event-driven filings that fire on changes to directors, shares, charges or the registered office; the registers and minute books that must stay current continuously; and the licence and sector renewals particular to the business. The calendar earns its keep by assigning each item an owner and a lead time, not just a date. Most compliance failures in practice are diary failures.