Startup Compliance Checklist for Corporations in the Philippines (2026 Guide)

Starting a corporation in the Philippines involves more than filing articles of incorporation. It requires navigating a multi-agency registration process, building a tax compliance infrastructure from day one, fulfilling mandatory employee benefit obligations, and maintaining ongoing reportorial requirements that begin the moment your company receives its Certificate of Registration. This guide tells you exactly what to do, when to do it, and which law requires it.

The Philippine startup ecosystem has matured significantly. Republic Act No. 11337 (Innovative Startup Act) [1] established a dedicated government framework for startup development. The Revised Corporation Code (RA 11232) [2] modernized company formation — introducing the one-person corporation, reducing the minimum number of incorporators, and streamlining SEC processes. The Ease of Paying Taxes Act (RA 11976) [3] simplified BIR registration and filing for small and micro businesses. Together, these reforms have made the mechanics of incorporation faster and cheaper than at any prior point in Philippine corporate history.

What has not changed is the complexity of what comes after incorporation. New corporations regularly face regulatory penalties not because their founders are careless, but because no single government agency provides a complete map of the compliance obligations that activate the moment a Certificate of Registration is issued. This guide is that map — grounded in current Philippine statute, BIR regulation, and agency.

7–10 Business days — average SEC online incorporation processing time for domestic corporations in 2025[4]

5+ Government agencies whose registration requirements activate upon SEC incorporation

30 days BIR registration deadline after receiving SEC Certificate of Registration [5]

RA 11232 Revised Corporation Code — the primary statute governing Philippine corporation formation [2]

Before you start: Choosing the right corporate structure

Before filing anything with the SEC, founders must determine which corporate structure suits their business model, ownership plans, and regulatory context. The Revised Corporation Code provides five primary options for Philippine business entities, each with distinct compliance profiles.

Stock corporation. Most common structure. Minimum 2 incorporators (up to 15). No minimum paid-up capital unless sector-specific rules apply. Issues share to stockholders.[2]
One person corporation (OPC) Single natural person, trust, or estate as sole stockholder. No board requirement. Simplified governance. Cannot be incorporated as a non-stock or non-profit entity.[6]
Non-stock corporation for non-profit, civic, charitable, educational purposes. Minimum 5 incorporators. No distribution of income to members. SEC and BIR treatment differs significantly.[2]
Registered startup entity
Must be a stock corporation or OPC. Additional Innovative Startup Act registration unlocks tax exemptions; grants access to Startup Venture Fund and facilitates government procurement. [1]
Foreign-owned corporation Must comply with Foreign Investments Negative List (FINL) equity restrictions. Branch, subsidiary, ROHQ, or Representative Office structures each carry different capital requirements and tax treatments.[7]
Sole proprietorship Not a corporation — registered with DTI, not SEC. Unlimited personal liability. Simpler compliance but no separate legal personality and limited investor attractiveness

OPC vs stock corporation — 2026 decision guide

The One Person Corporation (OPC) introduced under RA 11232 is ideal for solo founders who want limited liability without the complexity of a multi-member board. OPCs are exempt from the requirement to hold annual stockholders' meetings but must file the same BIR, SSS, PhilHealth, and Pag-IBIG returns as multi-member corporations. The trade-off: OPCs cannot issue shares to investors without converting to a regular stock corporation — a conversion that requires SEC approval and can create transactional friction during funding rounds. Founders expecting to raise equity capital within 24 months should incorporate as a standard stock corporation from the outset.[6]

Phase 01. SEC incorporation — the foundational step

All corporations in the Philippines are formed through registration with the Securities and Exchange Commission (SEC) under the Revised Corporation Code (RA 11232).[2] The SEC's online registration system (ESPARC — Electronic Simplified Processing of Application for Registration of Company) has significantly reduced processing times since its rollout, with most domestic stock corporations now processed within 7–10 business days for complete applications.[4]

SEC registration checklist

Verify proposed company name availability through SEC Name Verification System (NVS) online portal — name must not be identical or deceptively similar to existing registered entities or trademarked names. · SEC / IPOPHL [2]
Prepare and notarize Articles of Incorporation (AOI) — must include corporate name, purpose clause, principal office address (specific enough to identify the location), term of existence (perpetual under RA 11232), names/nationalities/residences of incorporators, number of directors/trustees, and authorized/subscribed/paid-up capital structure.· RA 11232 Sec. 13[2]
Prepare By-Laws — governing document specifying meeting procedures, voting rights, officer roles, and internal governance. Must be filed with the AOI or within 30 days of SEC Certificate of Incorporation issuance.· RA 11232 Sec. 45[2]
Verify equity structure complies with Foreign Investments Negative List (FINL) if any foreign stockholder is involved — certain activities restrict or prohibit foreign equity participation regardless of business purpose.· RA 11647[7]
Prepare Treasurer's Affidavit certifying that minimum 25% of authorized capital stock has been subscribed and at least 25% of subscribed capital is paid-up.· RA 11232 Sec. 12[2]
Submit complete application package via ESPARC portal and pay SEC filing fee (based on authorized capital stock). Receive Certificate of Incorporation upon approval — this is your company's birth certificate.· SEC[4]
For regulated industries (banking, insurance, lending, schools, hospitals): secure additional Certificate of Authority or License from the relevant sector regulator (BSP, IC, SEC-CG division, CHED, DOH) before commencing operations — SEC incorporation alone is insufficient. · Sector-specific statutes

Phase 02. BIR registration — activating your tax identity

Within 30 days of receiving the SEC Certificate of Registration, every newly incorporated corporation must register with the Bureau of Internal Revenue (BIR) at the Revenue District Office (RDO) having jurisdiction over the company's registered principal office address. [5] This deadline is statutory and strictly enforced — late registration attracts penalties under Section 275 of the National Internal Revenue Code.[9] The Ease of Paying Taxes Act (EOPT, RA 11976) [3] has streamlined aspects of BIR registration, but the 30-day window remains unchanged.

BIR registration checklist

Register with the BIR RDO having jurisdiction over principal office address — file BIR Form 1903 (Application for Registration for Corporations, Partnerships, and Other Non-Individual Taxpayers). 30-day deadline from SEC COR· NIRC Sec. 236[9]
Obtain Tax Identification Number (TIN) — the corporation's permanent tax identity. Required for all subsequent BIR filings, banking transactions, and government contracts. · NIRC Sec. 236[9]
Enroll in correct tax types during registration: Corporate Income Tax (CIT), Value Added Tax (VAT) or Percentage Tax (if below VAT threshold), Withholding Tax on Compensation, Expanded Withholding Tax (EWT), Documentary Stamp Tax (DST). Incorrect tax type enrollment is a common first-year audit finding. · NIRC / BIR RR 7-2024[10]
Register books of account (General Journal, General Ledger, and subsidiary books) with the BIR — or register electronic books of account under the EOPT framework if using accounting software meeting BIR technical specifications. · BIR RR 7-2024[10]
Apply for Authority to Print (ATP) official receipts and invoices — or register for the BIR Electronic Invoicing System (EIS) if applicable to your taxpayer classification. Issuing unregistered receipts attracts penalties from the first transaction. · BIR RMO 12-2013[11]
Determine VAT registration threshold: mandatory VAT registration if gross annual sales/receipts exceed ₱3 million. Optional VAT registration available below threshold. VAT-registered corporations charge 12% output VAT and can claim input VAT credits. · NIRC Sec. 109 as amended [9]
Determine EOPT taxpayer classification (Micro, Small, Medium, Large) based on gross receipts — classification determines filing frequency and available payment channels under RA 11976 implementing rules. · BIR RR 7-2024[10]
Register with eBIRForms and BIR e-services portal — mandatory for all electronic filing categories. Large taxpayers must enroll in the Electronic Filing and Payment System (eFPS). · BIR RR 6-2014[12]

Phase 03. Local government — Mayor's Permit and barangay clearance

National government registration does not authorize a corporation to physically operate at a specific address. Operating at a business address requires a Mayor's Permit (Business Permit) from the city or municipality where the business is located, and a Barangay Clearance from the barangay covering that address. These must be obtained before commencing business operations — not after.[13]

LGU registration checklist

Secure Barangay Clearance from the barangay covering the business address — prerequisite for the Mayor's Permit application. Bring SEC Certificate of Registration, lease contract or proof of address ownership, and government-issued ID of authorized representative. · RA 11032[13]
Apply for Mayor's Permit / Business Permit at the city or municipal Business Permits and Licensing Office (BPLO). Documents typically required: SEC Certificate of Registration, AOI, Barangay Clearance, lease agreement, BIR Certificate of Registration, and zoning clearance. · RA 7160 Sec. 151[14]
Obtain Zoning Clearance from the city/municipal zoning office — confirms that the intended business activity is permitted in the zone classification of the address. Tech offices in areas zoned for residential use are a common compliance gap for early-stage startups operating from founders' residences. · RA 7160[14]
Obtain Fire Safety Inspection Certificate (FSIC) from the Bureau of Fire Protection (BFP) — required for Mayor's Permit issuance for all commercial premises. Physical inspection of the office space is required. · RA 9514[15]
Pay local business taxes assessed by the LGU based on gross revenues or capitalization — rates vary by city/municipality under their respective Local Revenue Codes enacted under RA 7160. · RA 7160 Sec. 143[14]
For multiple business addresses (branch offices, warehouses, satellite offices): separate Mayor's Permit and Barangay Clearance required for each address. BIR also requires separate RDO registration for each branch location. · RA 7160 / NIRC

Phase 04. Mandatory employee benefits registration

From the moment a corporation hires its first employee, a mandatory benefits compliance framework activates — requiring registration with three government agencies and timely monthly contribution remittances. This obligation does not have a grace period, and late registration or remittance triggers penalties that compound over time. Many startups discover their benefits compliance gaps only during their first regulatory audit or when employees begin filing claims — at which point arrears and penalties may span months or years.[16]

Employee benefits registration checklist

Register as employer with Social Security System (SSS) — file Employer Registration Form (SS Form R-1) immediately upon hiring the first employee. SSS employer number required for all subsequent contribution remittances. Failure to register is a criminal offense under RA 11199. · RA 11199 Sec. 28[17]
Register with PhilHealth — file Employer Data Record (ER1 Form) and Employee Registration Forms (ER2). PhilHealth contributions are mandatory from the first month of employment under the Universal Health Care Act (RA 11223). Current employer contribution: 2.5% of monthly basic salary (5% total, split equally).· RA 11223[18]
Register with Pag-IBIG Fund (HDMF) — file Employer's Data Form (HQP-PFF-053). Both employer and employee contribute monthly. Current mandatory contribution: ₱200 per employee per month at minimum, or a percentage of monthly compensation for higher earners under RA 9679. · RA 9679[19]
Set up payroll withholding tax on compensation — register all employees with BIR, collect completed BIR Form 2305 (Employee's Certificate of Withholding Exemptions), and remit monthly withholding tax within 10 days after month-end (or 15 days for eFPS filers). · NIRC Sec. 79[9]
Compute and remit 13th-month pay to all rank-and-file employees — must be paid on or before December 24 of each year, equivalent to 1/12 of total basic salary earned within the calendar year under Presidential Decree No. 851. · PD 851[20]
Verify compliance with applicable Regional Minimum Wage Order — compensation must meet or exceed the prevailing minimum wage rate in the region where employees are based, as determined by the NWPC Regional Tripartite Wages and Productivity Board. · RA 6727[21]
Register employment of foreign nationals — secure Alien Employment Permit (AEP) from DOLE for each foreign employee before they commence work. AEP is activity-specific and employer-specific; renewal required annually under DOLE DO 221-21. · DOLE DO 221-21[22]

Phase 05. Data privacy — NPC registration and DPA compliance

Every corporation that processes the personal data of Philippine residents — employees, customers, suppliers, website visitors — is subject to the Data Privacy Act of 2012 (RA 10173)[24] from inception. For most startups, this means registering a Data Protection Officer (DPO) with the National Privacy Commission (NPC), establishing a Privacy Management Program, and publishing a Privacy Notice before collecting any user or customer data.

NPC / data privacy checklist

Appoint a Data Protection Officer (DPO) — corporations processing personal data of 1,000 or more individuals must register their DPO with the NPC through the online portal. For early-stage startups below this threshold, DPO appointment is still best practice and becomes mandatory upon crossing the threshold.· RA 10173 / NPC Advisory 2023-01[25]
Establish a Privacy Management Program — includes a data inventory, Records of Processing Activities (ROPA), Privacy Impact Assessments (PIAs) for high-risk processing, and staff data privacy training. NPC audit teams verify these documents in compliance inspections.· NPC Circular 2016-01[26]
Publish a Privacy Notice on your website and in customer-facing touchpoints — must specify: what data is collected, purpose, legal basis, retention period, third-party sharing, and data subject rights. Consent must be freely given, specific, and informed before any personal data collection begins.· RA 10173 Sec. 13[24]
Establish personal data breach notification procedures — NPC and affected data subjects must be notified within 72 hours of discovering a qualifying breach under NPC Circular No. 2022-01. Incident response plans should be documented before the breach, not after.· NPC Circular 2022-01[27]
Assess cross-border data transfer obligations — if customer or employee data is processed on overseas servers or shared with foreign parent companies or cloud providers, contractual safeguards and NPC notification requirements under Circular No. 2023-04 apply. · NPC Circular 2023-04[28]

Annual calendar. Ongoing compliance obligations every corporation must maintain

Startup compliance does not end at registration. Philippine corporations face a dense calendar of recurring obligations — monthly, quarterly, and annual — that must be maintained from Year 1. Missing any of these deadlines generates automatic BIR surcharges of 25% of the tax due, plus 12% annual interest, plus compromise penalties.[30] The following are the highest-priority recurring obligations for a typical startup corporation.

Monthly · by 10th–15th

Withholding tax remittance

Compensation and expanded withholding tax — BIR Form 0619-E and 0619-F. SSS, PhilHealth, and Pag-IBIG contributions also remitted monthly.[9]

Quarterly · by 25th–30th

VAT return

BIR Form 2550Q — quarterly VAT filing now applies to all taxpayers under the EOPT reforms (RA 11976). No longer monthly for most corporations.[10]

Quarterly · 60 days after quarter

Corporate income tax

Quarterly CIT return — BIR Form 1702-Q. Annual ITR (BIR Form 1702) due on April 15 for calendar-year corporations.[9]

Annual · by January 31

Alphalist of employees

BIR Alphalist (BIR Form 1604-C) — complete list of all employees and withholding tax withheld for the prior calendar year. Non-filing is frequently penalised.[9]

Annual · within 120 days

SEC audited financials

Audited Financial Statements (AFS) and General Information Sheet (GIS) filed with SEC within 120 days after fiscal year-end. AFS must be PFRS-compliant.[31]

Annual · by January

Mayor's Permit renewal

Business Permit renewed every January at the LGU. Late renewal attracts surcharges and may result in closure orders. Most cities accept applications from November.[13]

"The corporations that thrive past their third year are the ones that built compliance into their operations from Day 1 — not as a separate function, but as a discipline embedded in every hiring decision, every sales transaction, and every financial report."

Penalties. What non-compliance actually costs

Late BIR filing

25% surcharge + 12% interest p.a.

On unpaid tax, plus compromise penalty of ₱1,000–₱25,000 per return. NIRC Sec. 248–249.[30]

Failure to register with BIR

₱1,000 – ₱50,000 fine

Plus, imprisonment of 6 months to 2 years. NIRC Sec. 258.[9]

SEC reportorial failure

₱10,000 – ₱200,000

Per violation. Repeated failure leads to revocation of Certificate of Registration. RA 11232 Sec. 179.[2]

SSS non-remittance

3% per month penalty

On unpaid contributions, plus criminal liability for employer officers. RA 11199 Sec. 22.[17]

No Mayor's Permit

Business closure order

LGU may padlock and seal business premises. Fines per local ordinance. RA 7160.[14]

NPC data breach violation

Up to ₱5,000,000 + imprisonment

For negligent or malicious processing causing harm. RA 10173 Sec. 26.[24]

Recommended compliance timeline — first 90 days of a Philippine corporation

Day 0

SEC Certificate of Registration issued — all registration deadlines begin from this date.Retain certified copy; this document is required for every subsequent government registration.

Day 1–5

Secure Barangay Clearance and begin Mayor's Permit application at the LGU.Collect required documents: AOI, SEC COR, lease agreement, IDs of authorised officer.

Day 1–15

Open corporate bank account — most banks require SEC COR, AOI, By-Laws, Board Resolution authorizing signatories, and TIN (if already issued). Corporate bank account needed before BIR registration is complete.

Day 1–30

Register with BIR RDO — file Form 1903, secure TIN, register tax types, register books of account, apply for ATP or EIS. Critical: 30-day statutory deadline from SEC COR. Late registration = immediate penalties.

Day 1–30

Upon hiring first employee: register with SSS, PhilHealth, and Pag-IBIG. Set up payroll withholding immediately. No grace period — benefits obligations activate from first day of employment.

Day 15–45

Publish Privacy Notice on website. Appoint DPO. Begin building Privacy Management Program. Register DPO with NPC if threshold is met. Do not collect customer data before Privacy Notice is published.

Day 30–60

File trademark applications with IPOPHL for company name, logo, and key product marks. Philippine trademark: first-to-file system. Delay creates competitor registration risk.

Day 60–90

Review all registrations, confirm first monthly returns are prepared, brief accountant / tax advisor on annual compliance calendar. First BIR returns due within 30–60 days of registration. Miss no deadline from here.

The 2026 compliance foundation — what this guide is really about

Every item in this checklist represents a statutory obligation with a penalty attached to non-compliance. But the purpose of meeting these obligations is not to avoid penalties — it is to build a corporation that can raise capital, hire talent, win government contracts, attract enterprise customers, and eventually exit or scale without a compliance liability cloud hanging over every transaction. Philippine regulators are not adversaries. They are the gatekeepers of the business legitimacy that your startup needs to grow. Treat compliance as infrastructure, and it will serve your company as reliably as your technology stack.

References and legal authority

[1] Republic Act No. 11337. Innovative Startup Act. Manila: Congress of the Philippines, 2019. DICT Implementing Rules and Regulations, updated 2023. dict.gov.ph

[2] Republic Act No. 11232. Revised Corporation Code of the Philippines. Manila: Congress of the Philippines, 2019. sec.gov.ph

[3] Republic Act No. 11976. Ease of Paying Taxes (EOPT) Act. Manila: Congress of the Philippines, 5 January 2024. BIR Revenue Regulations No. 7-2024 (Implementing Rules). bir.gov.ph

[4] Securities and Exchange Commission. ESPARC (Electronic Simplified Processing of Application for Registration of Company) — Registration Processing Times and Guidelines. Pasay City: SEC, updated 2025. sec.gov.ph

[5] Bureau of Internal Revenue. NIRC Section 236: Registration Requirements — 30-Day Deadline for New Corporations. Quezon City: BIR. BIR Revenue Regulations No. 7-2024 (EOPT Implementing Rules). bir.gov.ph

[6] Securities and Exchange Commission. SEC Memorandum Circular No. 7, Series of 2019: Guidelines on the Establishment of One Person Corporations. Pasay City: SEC, 2019.

[7] Republic Act No. 11647. An Act Amending RA 7042 (Foreign Investments Act of 1991). Manila: Congress of the Philippines, 2022. Foreign Investments Negative List: Executive Order. dti.gov.ph

[8] Republic Act No. 11032. Ease of Doing Business and Efficient Government Service Delivery Act of 2018. DTI business name registration procedures. bnrs.dti.gov.ph

[9] Republic Act No. 8424 as amended. National Internal Revenue Code of the Philippines (NIRC) — Sections 79 (withholding on compensation), 109 (VAT threshold), 236 (registration), 248–249 (surcharges and interest), 258 (failure to register). Quezon City: BIR. bir.gov.ph

[10] Bureau of Internal Revenue. Revenue Regulations No. 7-2024: Comprehensive Implementing Rules of the Ease of Paying Taxes Act — Taxpayer Classification, Filing Frequencies, Electronic Books. Quezon City: BIR, 2024.

[11] Bureau of Internal Revenue. Revenue Memorandum Order No. 12-2013: Revised Procedures for Authority to Print (ATP) Official Receipts and Invoices. Quezon City: BIR, 2013.

[12] Bureau of Internal Revenue. Revenue Regulations No. 6-2014: Mandatory eBIRForms Electronic Filing Requirements for All Taxpayers. Quezon City: BIR, 2014, updated 2023.

[13] Republic Act No. 11032. Ease of Doing Business and Efficient Government Service Delivery Act of 2018 — Business Permit Processing Timelines and LGU Obligations. Manila: ARTA. arta.gov.ph

[14] Republic Act No. 7160. Local Government Code of the Philippines — Sections 143 (local business tax), 151 (Mayor's Permit), and local revenue code authority. Manila: Congress of the Philippines, 1991.

[15] Republic Act No. 9514. Revised Fire Code of the Philippines of 2008. Manila: Congress of the Philippines, 2008. Bureau of Fire Protection — FSIC requirements. bfp.gov.ph

[16] Department of Labor and Employment. DOLE Labor Laws Compliance System — Startup and MSME Compliance Advisory 2024. Manila: DOLE, 2024. dole.gov.ph

[17] Republic Act No. 11199. Social Security Act of 2018 — Section 22 (employer obligations and penalties), Section 28 (criminal liability). Manila: Congress of the Philippines, 2018. SSS contribution schedule: Circular No. 2023-004. sss.gov.ph

[18] Republic Act No. 11223. Universal Health Care Act. Manila: Congress of the Philippines, 2019. PhilHealth Circular No. 2023-0022 (current contribution rates). philhealth.gov.ph

[19] Republic Act No. 9679. Home Development Mutual Fund Law of 2009 (Pag-IBIG Fund Act). Manila: Congress of the Philippines, 2009. Current contribution schedule. pagibigfund.gov.ph

[20] Presidential Decree No. 851. Requiring All Employers to Pay Their Employees a 13th-Month Pay. Manila: Office of the President, 1975. DOLE Labor Advisory 2023 Edition.

[21] Republic Act No. 6727. Wage Rationalization Act. Manila: Congress of the Philippines, 1989. Current regional wage orders: National Wages and Productivity Commission, 2024–2025. nwpc.dole.gov.ph

[22] Department of Labor and Employment. Department Order No. 221-21: Revised Rules and Regulations on the Issuance of Alien Employment Permit (AEP). Manila: DOLE, 2021.

[23] Department of Labor and Employment. Department Order No. 174, Series of 2017: Rules Implementing Articles 106–109 of the Labor Code on Contracting and Subcontracting. Manila: DOLE, 2017. Presidential Decree No. 442 (Labor Code), Article 295 — Regular employment.

[24] Republic Act No. 10173. Data Privacy Act of 2012 — Section 13 (sensitive personal information), Section 26 (penalties). Manila: Congress of the Philippines, 2012. NPC Implementing Rules and Regulations, updated 2023. privacy.gov.ph

[25] National Privacy Commission. NPC Advisory No. 2023-01: Guidelines on Data Protection Officer Registration. Manila: NPC, 2023. privacy.gov.ph

[26] National Privacy Commission. NPC Circular No. 2016-01: Guidelines on Privacy Management Program (PMP) and Privacy Impact Assessment (PIA). Manila: NPC, 2016.

[27] National Privacy Commission. NPC Circular No. 2022-01: Personal Data Breach Management and 72-Hour Notification Requirements. Manila: NPC, 2022.

[28] National Privacy Commission. NPC Circular No. 2023-04: Rules on Cross-Border Transfer of Personal Data. Manila: NPC, 2023.

[29] Republic Act No. 8293. Intellectual Property Code of the Philippines — Section 31 (provisional patent), Section 122 (trademark registration), Section 172 (copyright), Section 178 (IP ownership by employees). Manila: Congress of the Philippines, 1997. ipophil.gov.ph

[30] National Internal Revenue Code, Sections 248–249. Additions to Tax — Surcharges (25%), Interest (12% per annum), and Compromise Penalties for Late or Non-Filing. As amended by TRAIN Law (RA 10963) and EOPT (RA 11976).

[31] Securities and Exchange Commission. SEC Memorandum Circular No. 1, Series of 2023: Revised Guidelines on Submission of Audited Financial Statements — 120-Day Deadline and PFRS Compliance Requirements. Pasay City: SEC, 2023. sec.gov.ph