01
Volume
28 to 150 line items per vendor, depending on scope and applicable acts. Across a full vendor base that is thousands of individual checkpoints, every month.
VendorX
Contractor compliance, audited & defensible / a MYNDX
platform
See every vendor's compliance, and defend every finding.
Under Indian labour law, you answer for the compliance of every contractor operating under you, across every state and act. VendorX turns scattered vendors and thousands of statutory checkpoints into one audited picture: independently verified by MYND's auditors, scored by weightage, and traceable from a board-level number down to the document behind it.
- 25Indian labour acts, configured in the platform
- 188auditable compliance line items
- 25+ yrsMYND has run enterprise compliance
One number opens to the vendor, and the line item behind it
Zenith Facilities96%
Orbit Staffing88%
Vertex Services79%
Pillar Contracts61%
EPF challan · contribution shortfallNot complied
PF remitted on ₹1,20,000, but the wage register shows ₹1,45,000 in PF-eligible wages. Shortfall on a ₹25,000 base for 2 employees who joined mid-month.
Traceable to
WageRegister_Apr2026.xlsx · auditor: U. KumarFigures illustrative of a principal employer with 70 vendors across multiple states.
The lapse is your contractor's. The liability is yours.
Under Indian labour law, the principal employer carries ultimate responsibility for the compliance of every contractor working under them. If a vendor underpays minimum wages, misses a PF contribution or lets a registration lapse, the penalty and the exposure land on you. With dozens of vendors across several states, each under different acts, that responsibility is real and almost impossible to see.
The scale of what you are accountable for
70vendors under one principal employer
×
28-150line items per vendor, by scope
~10,500
individual compliance checkpoints in a single audit cycle, reviewed against acts that differ by
state.
Are all your vendors compliant this month?
Today, no single source can answer that.
Email threads chasing documentsunversioned
Excel trackers, one per regionout of sync
Self-reported PDFs from vendorsunverified
Vendors self-report, often through junior staff who may not know a muster roll from a wage
register, and nothing independently verifies what arrives. You carry the liability without the
visibility to manage it.
02
Variety
One-time licences, monthly wage registers, half-yearly statutory returns. Each has its own schedule, format and issuing authority, and the mix changes state by state.
03
Verification
Self-reporting is not defensible. Documents need expert review by auditors who know how labour law actually applies across states, ESIC sub-codes and skill categories.
04
Visibility
Without one system there is no real-time picture of who is compliant and who is not, until something slips and a regulator or auditor asks you to prove it.
05
Vendor capacity
Many smaller vendors do not fully understand what is required. The person uploading is often a delegated junior, so errors are the norm, not the exception.
The cost
When a vendor slips, you answer for it
A missed filing carries interest and penalty, an underpayment invites a claim, and the principal employer is the name on the notice. The gap between what your vendors do and what you can prove becomes your exposure.
Not a place to file documents. A place your vendors are audited.
VendorX replaces email chains, manual trackers and ad-hoc collection with one structured, period-based audit. Vendors upload against a clear checklist, but that is the smaller part. MYND's auditors independently verify every submission, record a written finding against each line item, and produce a weighted compliance score you can act on.
Document upload & trackingThe independent MYND audit
20-30%collect, name, store
70-80% of the valueindependent verification, written
findings, weighted score, defensible report
You are not buying a document vault. Vendors uploading files is table stakes. What makes a compliance number worth showing a regulator is that a qualified auditor checked the document behind it. The audit is the product; the platform is how it reaches you.
Oversight
You, the principal employer
You get the executive summary, the detailed audit report and a live picture of where every vendor stands, filtered to your regions. View-only. No chasing, no rekeying.
Compliance targets
Your vendors & contractors
Vendors upload documents against a guided checklist inside a fixed window, with plain guidance on what each requirement means and how to prepare it, so juniors get it right.
Reviewers
MYND's audit team
Qualified auditors independently review every line item, cross-reference the documents, and set a status with a written finding they stand behind. The audit, not the upload, is the record.
Every act, broken into the line items an auditor actually checks.
The first domain covers 25 Indian labour acts as 188 auditable line items. Each vendor sees only the acts that apply to their industry, state and headcount, laid out act by act. Every line item carries its own frequency, input type and weightage, so the score reflects what matters, not just how many boxes are ticked.
Applicable acts
Contract Labour Act22
EPF Act, 195214
ESI Act, 194812
Payment of Gratuity6
Minimum Wages Act9
Payment of Bonus5
Factories Act18
Shops & Establishments8
Contract Labour (Regulation & Abolition) Act, 1970line items an auditor
reviews for each vendor
Contractor Registration & Licence
Muster Roll (Form T)
Wage Register
Wage Slips (all employees, zipped)
Half-yearly Return
Line items by frequency
188 auditable line items across 25 acts, by how often each is due
One-time licences and registrations carry forward each period; monthly registers and challans are the recurring bulk; conditional items appear only in the months they fall due.
One disciplined cycle, every month, from upload to signed-off report.
Compliance is a rhythm, not a one-time project. VendorX runs the same predictable cycle each period: vendors upload inside a fixed window, the window locks, MYND's auditors are assigned and review, a manager signs off, and your report is ready. Everyone knows exactly what happens, and when.
Day 1Day 15Day 25-30
Once the window closes on Day 16, upload and delete controls disappear entirely. What was submitted is
what gets audited, on the record.
01Day 1-15
Upload window
- Vendors upload against the checklist; naming and format are enforced at upload, so wrong files are rejected before they enter.
- One-time licences carry forward from the prior period; half-yearly and annual items appear only when they are due.
- You watch progress live and trigger reminders to any vendor who is behind.
02Day 16-25
Audit window
- The audit manager assigns vendors to auditors inside the platform, balancing the workload.
- Auditors review each line item, cross-referencing related documents, and set one of four statuses with a written finding.
- A manager reviews completed audits in a quality gate before anything is finalised.
03by Day 30
Reporting
- The system computes a weighted compliance score for each vendor.
- You receive the detailed audit report and the executive summary, with a corrective action for every gap.
- The cycle resets, and the trend builds period over period.
A document on its own proves nothing. Auditors read it against the others.
This is where the value sits. MYND's auditors do not take a document at face value; they cross-check it against the records that should corroborate it. Attendance against leave. Wages against the PF challan. Headcount across every register. The status behind your score comes from that comparison, not from a tick box.
Cross-reference · Orbit Staffing · Apr 2026
reviewed by U. Kumar
Register
Muster Roll (Form T)
Headcount200
E. Rao · days worked22
E. Rao · marked absent4 days
Register
Leave Register
Headcount195
E. Rao · leave recorded2 days
Absences unaccounted2 days
Not complied
The muster roll shows 200 employees; the leave register shows 195. E. Rao is marked absent for 4 days, but only 2 are accounted for in leave. The records do not reconcile, so the vendor is asked to correct and re-submit.
Status distribution
Every line item resolves to one of four statuses
Complied 78%
Partially complied 9%
Not complied 8%
Not submitted 5%
Illustrative distribution for one cycle. The weighted score is not a headcount of ticks: a non-compliant high-weightage item, like a PF or minimum-wage gap, moves the number far more than a procedural one.
Complied
Uploaded, verified, and meets the statutory requirement.
Partially complied
The right document, but incomplete or partly incorrect data.
Not complied
Uploaded, but wrong, inconsistent or short of the requirement.
Not submitted
No document uploaded against this line item.
Auditors, AI-assisted
The machine flags. The auditor decides.
Instead of sampling a handful of employees, the platform can pre-scan the full set and flag likely issues: an underpaid wage, a PF base that does not match, a muster roll that contradicts the leave register. The auditor reviews the flags, cross-references, and makes the call. They remain accountable for the finding.
What we don't claim
No 100% guarantee, stated plainly.
We do not sell a promise that a machine audited every employee perfectly. Expert review with disclosed random sampling remains our method, and every report states its sampling methodology in plain terms. Honest scope is worth more to you than a number you cannot defend.
Two reports, one live picture, and a trail you can stand behind.
You care about two things: the audit report and what is still pending. VendorX gives you both, plus a live dashboard through the cycle. A weighted score per vendor, a ranking from most to least compliant, a corrective action for every gap, and an immutable trail that shows exactly who audited what, and when.
Weighted compliance
84%
Vendors ≥ 90%
41/70
High-weightage gaps
6
Not-submitted items
9
Ranking
Vendors, most to least compliant
90% and above
70 to 89%
below 70%
Trend
Weighted compliance, last 6 cycles
Illustrative trajectory. As vendors close flagged items, the weighted score climbs cycle over cycle, which is the point of the corrective action plan.
Vendors by band
Where the 70 vendors sit
≥ 90%: 41
70 to 89%: 18
< 70%: 11
Next cycle
Corrective action plan
1
Pillar Contracts: correct the PF base and re-remit for 2 mid-month joiners;
upload the revised challan next cycle.
2
Orbit Staffing: reconcile the muster roll headcount with the leave register
before the next upload window.
3
Apex Logistics: obtain the current ESIC sub-code for the Pune branch; the
uploaded sub-code is for Whitefield.
Audit trail · immutable
Who audited what, and when
18 Apr · 10:15
U. Kumar set EPF Challan to Not complied for Pillar
Contracts, with a written finding.
18 Apr · 16:40
U. Kumar revised it to Partially complied after
cross-referencing joining dates; the change reason is recorded, the earlier status retained.
21 Apr · 09:02
A. Menon (audit manager) approved the Orbit Staffing
audit in the quality gate.
24 Apr · 14:30
Executive summary generated and delivered to the principal employer. Nothing in
this trail can be edited or deleted.
You keep the authority. We carry the verification and the record.
Bringing in an audit should not mean losing control of it. VendorX is built so the judgment and the decisions stay with you, while MYND carries the work, the verification and an evidence trail that holds up long after the cycle closes.
You keep
The judgment and the view
- The decisions. You act on the findings; how you handle a non-compliant vendor is yours to decide, not ours.
- The full view. Every vendor, every score and every finding for your regions, with a drill-down to the document behind any number.
- The evidence, on demand. Download the audit report, executive summary and pending list whenever you need them, in your own branding.
We carry
The work and the accountability
- The verification. MYND's auditors independently review every line item and stand behind the finding, not the vendor's word.
- The record, made permanent. Nothing is ever hard-deleted; every document version, status change and comment is retained with who and when.
- History that stays true. Each closed period is locked to the rules in force at the time, so a July 2026 finding can be reconstructed years later, unchanged.
The rules live in configuration, not code, so the platform keeps up with the law.
Acts, line items, rates, weightages and windows are all configuration, maintained by MYND without a software release. That is what lets the platform absorb a rate revision, a new state rule, or an entirely new compliance area, and what keeps every engagement cleanly separated from the next.
TIER 1Platformplatform.yml
The registry of every compliance area and the platform-wide rules. One place that
governs the whole system, and the only entry point a new domain is registered through.
TIER 2Domain_config + regulations
A self-contained compliance area: its own acts, line items, scoring and workflow.
Indian labour law is the first domain, with 25 acts and 188 line items.
TIER 3Tenanttenant.yml
One principal-employer engagement: which acts apply, which vendors, which regions,
which windows. Fully isolated, so no client can ever see another's data.
Adding a compliance area is configuration, not a rebuild. Domains active and planned
Indian Labour Compliance Active
DPDP Act Planned next
Environmental · SOX · ISO 27001 Example areas
When the law shifts, as with the new labour codes, old acts and new codes can run in parallel through a transition on a cutover date you control. Live rules keep evolving; closed audits stay locked to the rules that applied when they were done.
Six roles, one interface, and strict lines between them.
Everyone works in the same basic layout, but sees only what their role allows. One email and mobile maps to exactly one role per engagement, and the boundaries are enforced at the platform, not left to good behaviour.
Principal Employer
View-only
Sees compliance for the vendors in their region, downloads reports, and triggers reminders. No uploads, no edits, no other client's data.
Vendor / Contractor
Own data
Uploads documents against the checklist inside the open window, with per-item guidance. Multi-state vendors switch state with a selector.
Auditor
Assigned vendors
Reviews every line item for the vendors assigned to them, cross-references documents, and sets a status with a written finding.
Audit Manager
Their team
Assigns vendors to auditors, tracks progress, and approves completed audits in a quality gate before reports go out.
Administrator
Within tenant
Configures the engagement, acts, windows, vendors, users and regions, through a versioned admin panel where every change is logged.
Super-Admin
MYND, cross-tenant
MYND operations: onboards tenants, maintains the compliance domains, and holds the platform-wide view. No client crosses this line.
The answers a rep would give, without the rep.
The questions the buying group actually asks, from compliance, legal, finance, IT and procurement. If yours isn't here, a mapping session answers it against your own vendor base.
Is VendorX a self-certification tool where vendors just tick boxes?
No. Vendors upload documents, but the document layer is a fraction of the value. Every submission is independently reviewed by MYND's qualified auditors, who set a compliance status and record a written finding against each line item. You rely on an expert audit, not on what a vendor says about itself.
Do we have to replace our current compliance tracker or process?
No. VendorX runs your audit as a structured monthly cycle: vendors upload inside a fixed window, MYND's auditors review, and you receive the report. You can start with one audit cycle for a defined set of vendors and acts, then widen the scope. There is no rip-and-replace.
How is a compliance number defensible to a regulator or our board?
Every score traces down to its evidence: the aggregate to the vendor, the vendor to the specific non-compliant line item, and the line item to the auditor's written finding and the exact document version behind it. The audit trail is immutable, and each closed period is locked to the rules in effect at the time, so a finding from July 2026 can be reconstructed years later, unchanged.
You mention AI. Are you claiming a machine audits every employee?
No, and we are deliberate about this. AI assists MYND's auditors by pre-flagging likely issues across the full employee set, so they review more and miss less. The auditor makes the compliance call and remains accountable for it, and every report states its sampling methodology in plain terms. We do not sell a 100% accuracy guarantee.
Where is our data held, and who can see what?
Each principal-employer engagement is a fully isolated tenant, so no client's data is visible to another, and even auditors see only the vendors assigned to them. Access is role-based across six roles, principal employers are view-only, and nothing is ever hard-deleted. MYND holds ISO 27001, ISO 27701, SOC 1 and SOC 2 Type II, each verifiable in our Trust Center.
What happens when the law changes, like the new labour codes?
Acts, line items, rates and weightages live in configuration, not code, so MYND updates them without a software release and the change reaches your next audit period. Old acts and new codes can run in parallel during a transition, on a cutover date you control, and historical audits stay locked to the rules that applied when they closed.
Can VendorX handle compliance areas beyond Indian labour law?
Yes. The platform separates the audit engine from the compliance content, so a new area such as the DPDP Act or environmental compliance is added as a new configured domain rather than a rebuild. Indian labour law, 25 acts and 188 line items, is the first domain configured on the platform.
11 The next step
Start by mapping the vendors you're accountable for.
Tell us your vendor and compliance landscape: how many contractors, in which states, under which acts, and how you track them today. We will map it against the platform and show you one audited view, built from your own vendor base, before you commit to anything.
OfficeReach Comercia Corporate Tower, 3rd
Floor, Sector-68, Sohna Road, Gurugram, Haryana 122101
Mapping requestsmyndsolution.com/contact-us
HoursMon to Fri, 9:30am to 6:30pm IST
1,000+
enterprises trust MYND with their back-office
50+
countries MYND operates across
25+
years running compliance for enterprises
© 2026 MYND Integrated Solutions Pvt. Ltd. All rights
reserved.
ISO 27001 · ISO 27701 · SOC 1 & SOC 2 Type II · DPDP compliant.