Why HR policies matter more than founders think
Most early-stage startups operate on handshakes and Slack messages. As long as the team is small and tight-knit, that works. But somewhere between 15 and 50 employees, the absence of documented policies starts creating friction — inconsistent leave approvals, confusion about expense reimbursement, disputes over working hours, and in the worst cases, sexual harassment complaints handled without a proper framework.
Beyond internal harmony, documented HR policies are increasingly required by investors during due diligence, by enterprise clients during vendor onboarding, and by statutory auditors verifying compliance. The time to build them is before you need them.
1. Leave Policy
The Shops and Establishments Act and various state labour laws set minimum leave entitlements, but your policy should specify more than the legal floor. A startup-appropriate leave policy includes:
- Earned leave (EL) / Privilege leave (PL): 12–15 days per year, accruing monthly; encashable up to X days at year-end
- Sick leave (SL): 6–12 days per year, not carried forward; requires medical certificate above 2 consecutive days
- Casual leave (CL): 6–8 days per year for personal errands, not carried forward
- Maternity leave: 26 weeks for the first two children as mandated by the Maternity Benefit Act, 1961
- Paternity leave: Not mandated by central law but expected by talent; 5–15 days is market norm
- Bereavement leave: 3–5 days for immediate family
- Optional wellness day: 1–2 paid mental health days per year, no approval required
Your leave policy should specify the approval workflow (who approves, how far in advance), blackout periods (e.g., quarter-end for finance teams), and how unused leave is handled at separation.
2. POSH Policy (Prevention of Sexual Harassment)
The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 mandates that every employer with 10 or more employees must have a written POSH policy and an Internal Complaints Committee (ICC).
Your POSH policy must include:
- Definition of sexual harassment in line with the Act
- Scope — covering employees, contractors, interns, and visitors at the workplace
- ICC composition — at least 50% women members, an external member from an NGO
- Complaint process and timelines (inquiry within 90 days)
- Confidentiality obligations for all parties
- Non-retaliation clause for complainants and witnesses
POSH compliance is not optional. Penalties for non-compliance include fines up to ₹50,000 and potential licence cancellation for repeat violations. More importantly, a culture of psychological safety is foundational to keeping talented women on your team.
3. Code of Conduct
A code of conduct documents the behavioural standards you expect from everyone in the company. It should cover:
- Conflicts of interest (moonlighting, outside investments, vendor relationships)
- Confidentiality and data protection obligations
- Acceptable use of company devices, systems, and software
- Social media conduct when representing the company
- Reporting suspected violations (whistleblower mechanism)
The code should be written in plain language, not legalese, and signed by every employee at onboarding.
4. Remote and Hybrid Work Policy
Post-2020, remote and hybrid work has become a standard arrangement for knowledge workers. A clear policy prevents the ambiguity that leads to inconsistent manager behaviour and perceptions of unfairness. Specify:
- Who is eligible for remote or hybrid work (role, tenure, performance criteria)
- Core hours when all team members must be available
- Equipment provisioning — what the company provides vs. what employees source
- Data security requirements for home networks
- How remote employees are included in performance reviews and promotions
5. Performance Management Policy
Ambiguity around how performance is measured and rewarded is a leading cause of voluntary attrition. Your policy should document the review cadence (quarterly check-ins, annual formal review), how goals are set (OKRs, KPIs), how ratings translate to compensation adjustments, and the process for managing underperformance with clear timelines and support mechanisms.
Rolling out policies effectively
Writing the policy is only half the job. Employees need to be aware of it, understand it, and know where to find it. Best practice: host all policies in a searchable internal wiki (Notion, Confluence), include a policy summary in the onboarding kit, and hold an annual all-hands walkthrough of any changes. Policies that live in a Google Drive folder nobody knows about don't protect the business or the team.