GCC India Legal Services | Set Up and Operate a Global Capability Centre
A Global Capability Centre is a company-owned centre in India that runs technology, engineering, finance, analytics or other global functions for its parent. Setting one up is a legal project as much as a talent project: entity and FDI structure, intercompany agreements, employment, data, IP, premises and incentives all have to be built to work together. Candour Legal coordinates those workstreams — partner-led, from Ahmedabad near GIFT City, with delivery across India’s GCC cities — from the board’s first feasibility question to steady-state governance, and on through scale, restructuring or exit.
Who this desk serves
Boards and global executives deciding whether India belongs in their operating model; general counsel mandated to establish a centre; CFOs and tax leaders weighing structure and intercompany economics; people, privacy and security leaders who inherit the Indian workforce and data questions; site-selection teams comparing cities; foreign law firms needing Indian counsel on a GCC mandate; and the heads of existing centres dealing with growth, incidents, restructuring or exit. The desk is built to move a decision from “why India?” to “which city, which structure, which sequence” — and then to execute the legal side of that sequence.
Why India — and what to weigh candidly
The scale case is documented: NASSCOM’s landscape report counts more than 1,700 GCCs operating over 2,975 centres in India in FY2024, generating an estimated US$64.6 billion in revenue and employing over 1.9 million people — and the work has shifted from transactional support toward product ownership, engineering R&D, AI, cybersecurity, finance and risk. The deeper case is structural: specialised talent at depth, a mature ecosystem of operators and advisers, multiple viable cities for diversification, English-language business capability, and an established legal system for wholly-owned subsidiaries, foreign investment, contracting and IP protection.
The honest counterweights deserve equal attention before a board commits: layered central and state compliance; transfer-pricing and permanent-establishment exposure if the intercompany model is careless; evolving data-protection and cybersecurity duties under the DPDP Act and CERT-In directions; employment-law variation by state and worker-classification risk; competition for senior leadership; IP-leakage risk around employee exits; and the classic failure mode — choosing a structure for speed that misfits the centre’s long-term functions, IP ownership, tax position and exit. Our feasibility work exists to surface these before they are expensive.
The lifecycle we cover
Not merely incorporation — the whole arc, with the legal dependencies sequenced.
A legal and regulatory scoping memorandum: functions and their risk classification, FDI and sector screens, structure options, city shortlist with legal factors, incentive eligibility, and a 90-day critical path. Delivered as a written assessment a board can act on.
Entity choice and governance design, Companies Act incorporation, FDI-route and FEMA compliance, banking and secretarial coordination, and the licences the functions actually require — with tax and company-secretarial specialists identified and coordinated, never impersonated.
Intercompany services agreements aligned with the transfer-pricing advice, IP ownership and assignment chains, data-processing and audit terms, secondment arrangements, and delegation-of-authority frameworks — the documents that decide PE and tax outcomes years later.
Employment contracts and localised policies, POSH compliance, contractor and EOR risk, leases and fit-out contracts, state registrations — and incentive applications under schemes such as Gujarat’s GCC Policy, with milestones, audit and clawback conditions read before they are signed.
Vendor and procurement contracting, board and compliance calendars, code-of-conduct and whistleblower frameworks, investigations when something goes wrong, and an annual legal health check — the steady-state counsel most setup advisers never stay for.
Second cities, function migrations, acqui-hires and BOT conversions on the way up; workforce restructuring, closure, sale or transfer on the way out — each with its data, IP and employee-transfer mechanics handled deliberately.
Services, organised by the decision in front of you
“Should we do this, and where?”
The India GCC Legal Feasibility Assessment — structure options, FDI and sector screens, city comparison on legal factors, incentive eligibility, risk matrix and a sequenced action plan, in writing.
“Set up the entity properly.”
Wholly-owned subsidiary versus alternatives, incorporation and constitutional documents, FDI-route analysis, FEMA filings and capitalisation — with beneficial-ownership and investor-origin screening done before the bank asks.
“Make the intercompany model defensible.”
Intercompany services agreements designed together with your tax advisers’ transfer-pricing analysis — scope, charging, service levels, IP and data terms — so the legal documents and the tax characterisation tell the same story.
“Hire and lead a workforce.”
Employment agreements and executive contracts, localised handbooks, invention-assignment and confidentiality architecture, POSH, contractor and EOR risk, secondments — state-aware and checked against the current status of India’s labour codes.
“Handle data, cyber and AI.”
DPDP Act readiness and notices, cross-border data clauses, CERT-In incident duties, cloud and SaaS contracting, and AI-use policy — grounded in our DPDP practice.
“Own what the centre creates.”
Foreground and background IP allocation, employee and contractor assignment chains, intra-group licences, trade-secret controls, open-source governance and exit-proof documentation for R&D output.
“Premises and incentives, without surprises.”
Lease and landlord diligence, fit-out and facilities contracts, Shops & Establishments and state registrations, SEZ/STPI/IFSC regime assessment where relevant, and incentive applications with their conditions read hard — supported by our property practice.
“Govern, investigate, restructure, exit.”
Compliance calendars, investigations and whistleblower matters through our defence practice, disputes through our cross-border disputes team, and restructuring, closure or BOT transfer when strategy changes.
Operating models compared
The structure decision outlives the setup team. The honest comparison:
| Model | Control & IP | Speed to start | Long-term economics | Where it fits |
|---|---|---|---|---|
| Captive (wholly-owned subsidiary) | Full control; IP sits in-group by design | Slower — entity, registrations, leases, hiring | Best at scale; all capability compounds in-house | Centres core to strategy, sensitive functions, long horizons |
| Build–Operate–Transfer (BOT) | Control arrives at transfer; IP and employee transfer terms decide everything | Fast start on a partner’s platform | Transfer pricing and option terms set at signing, exercised years later | Boards wanting speed now and ownership later — if the exit maths is negotiated up front |
| Vendor-assisted / managed | Contractual control only; IP and data terms carry the weight | Fastest | Recurring vendor margin; switching costs grow quietly | Pilots, small teams, functions that may not stay |
| Hybrid | Split by function — clarity of boundaries is the legal work | Varies | Flexible, if the boundaries are papered | Regulated cores in-house, commodity functions outsourced |
The recurring mistake is choosing for speed and discovering the IP, data and employee-transfer terms were never built for the transfer or exit that follows. We negotiate those terms at the start, when leverage exists.
Where in India — a methodology, not a verdict
No city is objectively “best”. The right answer depends on functions, sector, seniority mix, talent volume, cost, resilience and incentives. Our comparison, in brief:
| Location | Strong fit | Weigh carefully |
|---|---|---|
| Bengaluru | Deep technology, product and leadership talent; the default for large tech/R&D centres | Talent and real-estate competition; retention and concentration risk |
| Hyderabad | Technology, cloud, cyber, pharma and analytics; modern campuses | Fast growth tightening talent in some micro-markets |
| Delhi NCR | Corporate functions, BFSI, policy-adjacent work | State-boundary law differences across Gurugram/Noida; commute realities |
| Mumbai | BFSI, treasury, risk and legal functions near the financial ecosystem | Premium property and workforce cost |
| Pune | Engineering, automotive, software and shared services at relative cost advantage | Leadership depth should be function-tested |
| Chennai | Industrial, automotive, product engineering and SaaS | Climate-resilience and continuity planning by site |
| Ahmedabad – Gandhinagar – GIFT City | BFSI/FinTech (with the IFSC next door), finance operations, manufacturing-linked and pharma teams — backed by a dedicated state GCC policy and competitive cost | Smaller mature GCC talent pool than Bengaluru or Hyderabad — validate the specific roles before committing |
The Ahmedabad corridor is our home ground and, we would argue, India’s most underpriced GCC decision for the right functions. The Government of Gujarat’s GCC Policy (2025–30) targets a minimum of 250 new GCC units, more than 50,000 jobs and ₹10,000 crore of investment into the state, with incentives subject to eligibility, milestones, audit and clawback conditions we read before you rely on them. And GIFT City sits twenty minutes away — relevant where an IFSCA-regulated structure genuinely fits, and irrelevant where it does not: IFSC benefits attach to specific entities, activities and authorisations, never to GCCs in general. We keep that line honest, through our GIFT City practice.
The risks we are hired to manage
The intercompany model, the seniority seated in India and the contracts’ wording drive permanent-establishment and pricing outcomes — designed with your tax advisers, documented by us.
DPDP obligations, CERT-In incident timelines and sector rules reach GCCs processing group or customer data — the compliance stack has to exist before the first incident, not after.
Contractor and EOR arrangements that behave like employment create misclassification liability precisely when the centre scales or restructures.
Assignment chains, trade-secret controls and enforceable confidentiality — tested when a senior engineer resigns for a competitor, which is the wrong week to discover a gap.
State incentives carry employment and investment milestones, audit rights and clawback triggers; the fine print is a contract, and we treat it as one.
A model chosen for speed that misfits long-term functions, IP ownership or exit is the costliest error in this field — and entirely preventable at the feasibility stage.
How a small senior firm runs a large mandate
One accountable matter lead — partner-level, named at engagement — running defined workstreams: corporate and foreign investment, employment, data/technology/IP, premises and incentives, and disputes readiness, with external tax, accounting, company-secretarial and immigration specialists identified transparently and local counsel in other cities engaged openly where a mandate needs them. The discipline is in the deliverables: a written scope and responsibility matrix, a critical-path tracker, an issues register, a weekly status report during setup, a decision log, a compliance calendar at go-live, a closing binder — and 30/90/180-day legal reviews after launch. That project spine, more than headcount, is what a cross-functional GCC mandate actually requires.
Frequently Asked Questions
The questions general counsel and GCC leaders ask first.
What is a GCC in India?
A Global Capability Centre is an India-based centre owned by (or built for) a foreign enterprise that performs global functions — technology, engineering, finance, analytics, HR, legal, risk — for the group rather than for external clients. It is distinct from outsourcing: the capability, the people and usually the IP belong to the enterprise. NASSCOM counted more than 1,700 such organisations operating over 2,975 centres in India in FY2024.
What legal entity is normally used?
A private limited company, wholly owned by the foreign parent, incorporated under the Companies Act — it supports FDI cleanly, employs staff, holds leases and contracts in its own name, and gives the group full governance control. Branch and liaison offices exist but need RBI-route approval and suit narrower purposes; LLPs fit only limited cases. The right answer follows the functions, which is why structure is a feasibility question, not a formality.
Can a foreign company own 100% of an Indian GCC?
In most cases, yes. The services and technology activities typical of GCCs sit on the automatic route with 100% foreign ownership permitted and no prior approval — obligations arrive afterwards as FEMA filings and pricing compliance. Exceptions exist for specified regulated sectors and for investment from countries sharing a land border with India, which needs government approval. We confirm the route for your specific activities in writing before anything is committed.
How long does GCC legal setup take?
Honestly: it depends on dependencies more than on any statutory clock — name and incorporation, bank-account opening and KYC, capitalisation and FEMA filings, lease negotiation, state registrations and hiring paperwork each have their own rhythm, and some run in parallel. What we commit to instead of a universal timeline is a critical-path plan for your specific case in the feasibility assessment, and weekly reporting against it during setup.
Which Indian city should a GCC choose?
The one whose talent, cost, resilience and incentive profile fits your functions — which is a methodology, not a slogan. Large technology and R&D centres still default to Bengaluru or Hyderabad for depth; BFSI gravitates to Mumbai and, increasingly, the Ahmedabad–GIFT City corridor; engineering-linked work suits Pune and Chennai. Many groups now split functions across two cities for resilience. Our city matrix compares the legal, workforce, premises and incentive factors for your shortlist.
How should IP created by the Indian centre be owned?
Deliberately, from day one. Indian law vests employee-created copyright works made in the course of employment in the employer, but inventions, contractor output and cross-border development need express assignment — so the architecture is: watertight invention-assignment clauses in every employment and contractor agreement, an intra-group licence or assignment structure that matches the transfer-pricing model, and trade-secret controls that survive resignations. Retrofitting this after a funding round’s diligence finds the gap costs far more.
Does India permit cross-border data transfers?
Generally yes — the DPDP Act permits transfers of personal data outside India except to countries the government notifies as restricted, and subject to any stricter sectoral rules (financial-sector localisation being the notable example). A GCC processing group HR or customer data therefore needs its notices, contracts and security posture in order, but rarely faces a transfer wall. We map your actual data flows against the current rules rather than assuming either extreme.
Is GIFT City suitable for every GCC?
No — and be wary of anyone who implies otherwise. GIFT City’s IFSC benefits attach to specific regulated entities and activities authorised by the IFSCA — financial services, global in-house centres serving financial groups, and similar — not to GCCs at large. A conventional technology or operations GCC belongs in Ahmedabad, Gandhinagar or another city under the ordinary regime, possibly with Gujarat GCC Policy incentives. Where a group genuinely has IFSC-eligible functions, the two can be combined. We advise on which side of that line your plan sits.
Start with the feasibility assessment
Tell us the functions, the home jurisdiction, the cities under discussion and the timing. We will run a conflict check and come back with a written scope for a GCC Legal Feasibility Assessment — structure options, city factors, risk matrix and a sequenced plan your board can act on.
Request a GCC Legal Feasibility Assessment →