On day 58 of a 90-day plan, the finance lead in the room asked the one question nobody had assigned an owner: who, exactly, was authorized to sign for the bank account that would pay the first salaries?
The company in this scenario, which this article will call Halden Medical, is invented. It is a composite of situations that come up repeatedly when a multinational builds offshore capacity. The question is not invented. It points at the real shape of GCC setup in India: the work is rarely blocked by the tasks everyone planned for. It is usually blocked by an authority, a document, or a registration that sits one step upstream of a task.
That is the lens for this GCC setup checklist. A global capability center (GCC), also called a captive center or global in-house center, is an offshore unit owned or controlled by a parent company that performs engineering, analytics, finance, HR, or operations work for the parent’s global business. India hosts roughly two thousand of them, employing around two million professionals. The legal, hiring, and real-estate machinery for setup is well worn, but so is the competition for the same mid-level talent and the same compliant office space.
A caution on the number in the title. Ninety days is enough to build the foundation of a center: a registered entity, a working bank account, statutory registrations, an intercompany agreement, a workspace, a leadership hire, and a seed team. It is not enough to build a mature center. Advisers commonly describe the path from decision to steady-state operations as twelve to eighteen months, so a 90-day plan is best read as the first quarter of that path.
The Signatory Problem Hiding Inside Every Timeline
Halden Medical is a US device maker that wants a 60-person engineering and finance operations center in Hyderabad within its first year, starting with eight people. Its board approved the plan, an advisory team was hired, and a project chart with ninety rows was built. Every row was real. The flaw was that the chart listed tasks by calendar week instead of by dependency.
Trace the signatory question backward and the chain becomes visible. A bank account in the name of the Indian entity requires an incorporated entity. Incorporation requires directors who hold a director identification number and a digital signature certificate. Indian company law requires a private limited company to have at least two directors, at least one of whom is resident in India, so someone must be identified, vetted, and appointed. Those appointments depend on the parent’s board passing the right resolutions. Salary payments then depend on the bank account, payroll setup, and provident fund enrollment. A missing resolution on day 12 can surface as an unpaid salary on day 94.
The practical lesson is to build the plan around the critical path. For GCC setup in India, that path usually runs from parent board approval to director appointments, then entity incorporation, tax registrations, the bank account and capital remittance, payroll and statutory enrollments, and finally the first employment contracts. Office fit-out, vendor selection, and branding can run in parallel, but nothing on the critical path can be skipped or reordered without cost.
Days 1 to 15: Scope, Structure, and the Operating Model
The first fifteen days produce decisions, not documents. Four of them shape almost every later step.
The first is the charter: what the center will do and what it will not. A center that starts with “support engineering” and one that starts with “own the diagnostics software roadmap” need different leaders, salary bands, and intellectual property arrangements. The second is location. Hyderabad, Bengaluru, Pune, Chennai, and other hubs differ in talent depth, attrition patterns, cost, and ecosystem, and the choice should follow where the specific skills cluster, not where competitors went. The third is legal structure. A wholly owned private limited subsidiary is the usual choice for a center that will employ people and sign contracts, because branch and liaison office structures typically carry activity restrictions and different tax treatment.
The fourth decision is the GCC operating model, and it deserves the most care. A direct captive build means the parent creates its own entity and hires its own people, which gives maximum control but puts every registration, lease, and hire on the parent’s shoulders. A build-operate-transfer arrangement has a partner build and run the center for an agreed period before transferring the entity and team to the parent. That lowers early risk, but the transfer terms must be clear. A managed model, sometimes sold as GCC-as-a-service, has a partner run workspace, HR, payroll, and compliance while the parent directs the work. A modular model buys only specific functions, such as recruiting or facilities. Providers in this space, typically offer several of these side by side, and the trade-off is always control against speed.
Halden chose a hybrid. It formed its own subsidiary but used a partner for managed workspace and payroll, because its internal team had never run Indian statutory compliance and could not afford to learn it on the critical path.
The checklist for this phase:
Approve the center charter, scope, and a 12-month headcount ramp
Shortlist two or three cities against the specific talent profiles needed
Choose the legal structure and the operating model
Name an executive sponsor and an India-side point person
Assign an owner to every critical-path item
Pre-clear parent-side approvals: board resolutions, signing authority, and intercompany funding
Entity, Tax, and Licenses: The Paperwork That Sets the Pace
Between roughly day 10 and day 45, the work shifts from deciding to filing. Entity incorporation in India runs through the Ministry of Corporate Affairs, and the integrated SPICe+ form can bundle several registrations, including the tax account numbers, into one application. The inputs still have to exist first: approved company name, memorandum and articles of association, proof of registered office address, and identity and address documents for every director and shareholder. Documents executed abroad often need notarization or apostille, and that step alone can consume a week if it starts late.
After incorporation, the remaining registrations follow in a predictable order:
Permanent and tax deduction account numbers for the new entity
Goods and services tax registration, where applicable
Provident fund and employee state insurance enrollment
Professional tax and shops and establishment registration at the state level
A bank account with all authorized signatories documented
Capital infusion by the parent, with proper reporting
The capital step is where foreign-owned entities most often stumble. Money received as share capital has to be matched to share allotment within strict timelines and reported to the Reserve Bank of India through the authorized dealer bank. Missing those windows creates penalties, so confirm current deadlines with counsel. Bank account opening for a newly formed, foreign-owned entity frequently takes longer than founders expect, often a few weeks, because banks run enhanced due diligence on the parent.
Some centers also evaluate registration under a software technology park scheme or a special economic zone for customs, indirect tax, and export-related treatment. The advantages here have narrowed over the years, so evaluate them against current rules, not legacy assumptions.
For Halden, incorporation finished faster than the bank account did. The entity existed on day 31, but the bank’s due-diligence request for the parent’s ownership chain arrived on day 44, and the first signatory had to be reconfirmed. That is the origin of the day-58 question.
Why Do Compliance and Data Decisions Belong in Month Two?
Because month two is when abstract policy hardens into contract language, floor plans, and system access. A decision postponed to month three has to be retrofitted into things already built.
Start with the intercompany services agreement. It defines what the center does for the parent, how it is paid, who owns the intellectual property it creates, and how confidentiality works. Pricing is commonly set on a cost-plus basis, and Indian transfer pricing rules expect documentation that supports it. The agreement also manages permanent establishment risk, which is the question of whether the center’s activities could cause the parent to be taxed in India. Centers typically stay clear by ensuring staff do not habitually negotiate or conclude contracts on the parent’s behalf. Finance needs this agreement signed before the first invoice, not after.
Data protection comes next. India’s Digital Personal Data Protection Act, 2023, governs how personal data is processed, and a center that handles employee or customer data is within its reach. Halden’s center would touch device-related data, so its parent’s own requirements, such as healthcare privacy rules, apply too. These obligations determine how the workspace is zoned, who gets access to which systems, and whether the center needs security attestations such as ISO 27001 or SOC 2 from the start. Parent-side security teams usually demand evidence of controls before they permit production access, so that evidence is on the critical path whether or not it appears on the chart.
Employment law is the third strand. Appointment letters, leave policies, gratuity, provident fund, and notice terms must match current statute, and India’s labor law framework has been consolidating into new codes, so confirm which provisions apply at the time of hiring. An Internal Committee under the sexual harassment prevention law is required once a workplace reaches ten employees, which a growing GCC passes quickly. A compliance calendar listing every recurring filing, owner, and due date belongs in the plan by day 60, because GCC compliance is a recurring obligation, not a one-time registration.
Talent Moves Before the Office Does
The binding constraint in most GCC timelines is talent acquisition, and the clock on it starts earlier than people expect. Notice periods of sixty to ninety days are common in Indian corporate and technology roles. A candidate who accepts an offer on day 30 may not join until after day 90, unless the employer negotiates a notice buyout. A 90-day plan that starts hiring on day 45 produces an empty office on day 90 regardless of how good the office is.
So sequence the hiring deliberately. The head of the center comes first, because that person sets the culture and the early hiring standards, and because senior candidates take longest to land. Halden made that offer by day 28 and agreed to cover part of the notice buyout. The first wave of engineers and finance staff followed, with offers out between days 35 and 55. Recruiters were briefed on compensation benchmarks before the first interview, since mid-level roles in AI, data engineering, and cybersecurity are where Indian GCC hiring is most contested and where attrition risk is highest. An offer that is slightly below market costs less on day 40 than a resignation costs on day 400.
Where the entity cannot yet pay people, a bridge is legitimate and common. An employer-of-record arrangement or contract staffing partner can employ the first few hires temporarily, with a documented plan to convert them to direct employees once payroll is live. The risk is drift: bridge arrangements that never convert create tax and retention problems later.
Workspace and technology follow the same logic of choosing the reversible option. A custom office build-out often takes months, which does not fit a 90-day window. A managed or serviced workspace with expansion rights lets a seed team start working by day 60 to 75, and the space can be replaced once the headcount ramp is proven. Halden took a small managed floor with a right of first refusal on adjacent space. On the technology side, laptops, identity and access management, network connectivity back to the parent, and endpoint security tooling all have procurement lead times, and the parent’s security team usually has to approve each of them. Order hardware by day 40, not day 70.
Day 90 Is a Starting Line
A credible day 90 looks less like a launch party and more like a checklist that has turned green:
The entity is active, the bank account operates, and every signatory is on record
Payroll has run at least once, even as a dry run, and statutory enrollments are complete
The head of the center is in seat and the seed team is employed or contractually committed
The intercompany agreement is signed and the compliance calendar is live
Workspace, hardware, and system access are in place for the first cohort
A governance rhythm exists, such as weekly operating reviews and a monthly steering meeting, with agreed measures of success
What day 90 does not contain is the hard part. Knowledge transfer from headquarters, the ramp from eight people toward sixty, the building of a local leadership bench, and the shift from executing assigned tasks to owning outcomes all happen in the following quarters. That shift, from a cost center to a capability center, is what separates a center that merely exists from one that matters to the parent’s strategy, and no 90-day plan can compress it.
Halden’s finance lead eventually got her answer: two directors, one of them resident in Hyderabad, and an authorized signatory named in a board resolution dated three weeks earlier than anyone expected to need it. On day 58, the question had felt like an oversight in the plan. Read from day 90, it looks different. It was the first moment the center asked to be treated as an institution with its own authority, not a project borrowing headquarters’ authority. Every item after it, from the first payroll to the first product decision made in Hyderabad instead of approved from Chicago, is a version of the same question: who here is allowed to decide?
Frequently Asked Questions
How long does GCC setup in India take?
The foundation, covering entity incorporation, banking, registrations, workspace, and a seed team, can be completed in about 90 days if tasks run in parallel along the critical path. A fully functioning center with transitioned processes and a mature leadership team commonly takes twelve to eighteen months. The slowest items are usually bank account opening and the notice periods of hired talent.
What is the first step in setting up a GCC in India?
The first step is deciding the center’s charter, location, legal structure, and operating model, then securing parent board approval. These decisions determine who the directors are, what the entity must be licensed for, and how hiring is structured. Registration work cannot start cleanly until they are settled.
Do you need a legal entity to set up a global capability center in India?
Usually yes, most commonly a wholly owned private limited subsidiary, because it can employ staff, sign contracts, and be taxed as a clear legal person. Some structures, such as build-operate-transfer or managed models, let a partner’s entity operate the center in the early phase. The parent’s own entity is then formed or transferred to at a later stage.
What is the build-operate-transfer model for a GCC?
In a build-operate-transfer arrangement, a partner sets up and runs the center for a defined period and then transfers the entity, team, and operations to the parent. It reduces early execution risk and local compliance burden for the parent. The agreement should clearly cover transfer price, employee transition, and intellectual property.
What compliance requirements apply to a new GCC in India?
A new GCC must complete company incorporation, tax and payroll-related registrations, state-level business registrations, and foreign investment reporting. It must also meet data protection, labor, and transfer pricing obligations and keep a calendar of recurring filings. Requirements change, so current rules should be confirmed with local counsel.
How many people do you need to start a GCC in India?
There is no minimum headcount. Many centers begin with a seed team of roughly ten to fifty people and scale as their value is proven. Smaller “nano” GCCs of this kind are increasingly common, particularly among mid-sized companies.