Lender Due Diligence Document Checklist for Indian Business Loans: 40 Items by Entity Type

An Indian business loan file needs 40 documents across seven categories, but only about 28 of them apply to any one borrower — the rest depend on whether you are lending to a proprietorship, a partnership, an LLP, a private limited company or a trust. This checklist separates the 21 unconditionally blocking items from the 13 that block only once their trigger applies and the 6 that are advisory, and maps every item to entity type. YuSight has processed over 1 Mn documents, classifying each one to the right entity before an analyst opens the file.

Key facts

• 40 items: 21 blocking for every borrower, 13 conditional-blocking, 6 advisory. A blocking gap returns the file regardless of how complete the rest of it looks.
• RBI's KYC Master Direction sets beneficial-ownership thresholds by constitution, not by size: more than 10% of shares, capital or profits for a company or partnership firm; more than 15% of property, capital or profits for an unincorporated association or body of individuals; and, for a trust, the author, the trustee, beneficiaries holding 10% or more, plus anyone exercising ultimate effective control (RBI Master Direction – KYC, 2016, updated 14 August 2025).
• More than 8.9 crore enterprises are registered on the Udyam Registration Portal and Udyam Assist Platform, which is the single document that decides priority-sector classification and CGTMSE eligibility (PIB, 14 July 2026).
• Collateral-free lending to MSEs rises to ₹20 lakh under the Lending to MSME Sector (Amendment) Directions, 2026, for loans sanctioned or renewed on or after 1 April 2026, with bank discretion to go to ₹25 lakh on internal policy (RBI, 9 February 2026). Below that line, categories F and part of G fall away entirely.
• YuSight has processed over 1 Mn documents, auto-classifying each file — ITR, GST return, bank statement, bureau report, trust deed — and mapping it to the correct borrower entity in a group structure.

The process itself, from lead to sanction, is set out in MSME loan underwriting in India. This page is only about what has to be in the file.

How do you read the checklist?

Three statuses, and the difference matters when a relationship manager argues for an exception.

• [Blocking] — the file does not go to committee without it. There is no compensating strength that substitutes for a missing PAN or an unsigned borrowing resolution.
• [Conditional] — blocking once its trigger applies. A factory licence is irrelevant to a distributor and non-negotiable for a fabricator.
• [Advisory] — the file can move with a written reason for the gap and a cure date. A blank is not a reason.

Mark every non-applicable item N/A with a one-line justification. An N/A without a reason is indistinguishable from an item nobody looked for, which is exactly what an internal auditor will call it.

Which constitution documents establish who is actually borrowing?

The first eight items answer one question: does the borrower legally exist, and does the person signing have authority to bind it?

1. PAN of the entity. Not the proprietor's PAN standing in for the firm's, unless the borrower genuinely is a proprietorship — where the individual PAN is the entity PAN. [Blocking]
2. Certificate of Incorporation with CIN (private limited) or Certificate of Incorporation with LLPIN (LLP). Confirm the name on the certificate matches the name on the application character for character, including "Private Limited" spelled out. [Blocking]
3. Constitutional document: MOA and AOA for a company; the LLP Agreement for an LLP; the partnership deed for a firm; the trust deed or society registration certificate with bye-laws for a trust or society. Read the objects clause and the borrowing-powers clause, not just the cover page. [Blocking]
4. Registration certificate under the Indian Partnership Act, 1932. An unregistered firm cannot enforce a contract by suit under Section 69, which is a recovery problem before it is a documentation problem. [Advisory]
5. Borrowing authority: board resolution (company), partners' resolution or consent letter (firm/LLP), trustees' resolution (trust), managing committee resolution (society) — naming the facility, the amount, and the authorised signatories with specimen signatures. [Blocking]
6. MCA master data print and current list of directors with DINs, or the LLP's latest Form 11 annual return listing designated partners. Cross-check against the resolution. [Advisory]
7. Shareholding pattern or capital-contribution schedule with percentages, dated and certified. This is the input to item 11, and to your group-exposure aggregation. [Blocking]
8. Proprietorship existence proof — any two of: GST registration certificate, Udyam certificate, shops and establishment licence, municipal trade licence, or a chartered accountant's certificate of proprietorship. A proprietorship has no constitution document, so two independent proofs replace it. [Blocking, proprietorship only]

What KYC does the entity, its signatories and its beneficial owners require?

1. Officially Valid Document for every authorised signatory — passport, driving licence, Voter ID, Aadhaar (with masking) or NREGA job card, per the KYC Master Direction. [Blocking]
2. PAN of every partner, designated partner, director, trustee or office bearer, not only the signatories. [Blocking]
3. Beneficial owner declaration, applying the thresholds by constitution: >10% for a company or partnership firm, >15% for an unincorporated association or body of individuals, and the author/trustee/10%-plus beneficiary/controller test for a trust. Where no natural person is identified on ownership, the senior managing official is recorded as BO — and that fallback should be documented, not assumed. [Blocking]
4. CKYC identifier for each individual, or evidence of upload to CKYCR. [Advisory]
5. Proof of registered office and principal place of business — utility bill, registered lease deed or property tax receipt, corroborated against the GST certificate address. [Blocking]
6. Group and related-party declaration listing every associate entity with PAN and CIN, plus common directors and common proprietors. This is what drives group exposure and connected-lending clearance. [Blocking] Where the file spans several entities, multi-entity document mapping is the failure point worth designing around.
7. Sanctions, PEP and negative-list screening record for the entity and each identified beneficial owner, with the screening date and list version. [Blocking]

Which financial and tax documents does the credit file need?

1. Audited financial statements for the last three years with the auditor's report and notes, where audit applies. Where it does not — many proprietorships and small firms — CA-certified statements with a UDIN, plus a written note recording that they are unaudited. [Blocking]
2. Tax audit report in Form 3CA/3CB with Form 3CD where Section 44AB applies. Clause 44 and the quantitative details are worth reading. [Advisory]
3. ITR acknowledgement and computation for three assessment years — ITR-3 for a proprietor, ITR-5 for a firm, LLP or AOP, ITR-6 for a company, ITR-7 for a trust claiming exemption. Reading each form as a credit analyst is covered in ITR analysis for loan underwriting. [Blocking]
4. Form 26AS and the Annual Information Statement for three assessment years. TDS receipts corroborate declared turnover independently of the borrower — see Form 26AS analysis for lenders. [Blocking]
5. Provisional financials for the current year and projections across the facility tenor, with the assumption sheet, not just the output. [Blocking]
6. CMA data — all seven statements — for working capital above the lender's threshold. What CMA data is and why banks ask for it sets out the format. [Blocking above threshold]
7. Personal net-worth statement plus personal ITR for each guarantor, dated within 12 months, with assets independently evidenced rather than self-declared. [Blocking]

What GST and banking evidence corroborates the numbers?

1. GST registration certificate (Form REG-06) for every GSTIN, one per state of operation. [Blocking where registered]
2. GSTR-1 and GSTR-3B for 12 to 24 months. The mismatch between them is a signal, not a clerical detail — see GSTR-1 vs GSTR-3B for credit assessment. [Blocking where registered]
3. GSTR-9 annual return and GSTR-9C reconciliation where turnover crosses the applicable threshold. [Advisory]
4. GST standing check: any cancelled or suspended registration in the group, notices in Form DRC-01, and an e-way bill sample to test whether declared movement matches declared sales. [Advisory]
5. Bank statements for all operative accounts, 12 continuous months, with each month's opening balance equal to the prior month's closing. A single missing month is a gap, not an inconvenience. [Blocking]
6. Sanction letters and repayment schedules for every live facility, including facilities the borrower did not mention. [Blocking]
7. Commercial bureau report for the entity plus a consumer bureau report for each promoter and guarantor. What the 1–10 scale actually signals is unpacked in CIBIL Rank and CMR for MSMEs. [Blocking]
8. No-dues or no-objection letters and statements of account from existing lenders, where the proposal involves a takeover or a multiple banking arrangement. [Blocking on takeover]

What does perfected security actually require on file?

1. Title deeds with a 30-year chain, plus an advocate's title search report and legal opinion naming the searcher and the search period. [Conditional — immovable security offered]
2. Valuation report from a panel valuer, dated inside the lender's validity window, stating method and basis. [Conditional]
3. Encumbrance certificate and a CERSAI search, with post-disbursement registration of the security interest on the Central Registry. [Conditional]
4. Charge creation with the Registrar of Companies in Form CHG-1 for a company or LLP, filed within 30 days of creation, together with the hypothecation deed and the stock and book-debt statement format the borrower will submit monthly.
5. Insurance policies on hypothecated and mortgaged assets, with the lender named as loss payee and the sum insured at least equal to the assessed value. [Conditional]

Which statutory registrations and licences belong in the file?

1. Udyam Registration Certificate or Udyam Assist Certificate. RBI directs banks to be guided by the classification recorded on the URC or UAC for priority-sector purposes (RBI MSME FAQs, 29 July 2025). Without it you cannot classify the exposure or claim CGTMSE cover. [Blocking]
2. Shops and Establishment registration or municipal trade licence, state-specific in both name and renewal cycle. [Conditional — trading and services]
3. Factory licence under the Factories Act, 1948, plus the stability certificate where the state requires one. [Conditional — manufacturing above the state threshold]
4. Consent to Establish and Consent to Operate from the State Pollution Control Board, with the category (red, orange, green, white) and expiry date recorded. An expired CTO is an operating risk with a date on it. [Conditional — red and orange category units]
5. Sector-specific licences: FSSAI, drug licence, IEC for importers and exporters, RERA registration for developers, and — for trusts and societies — registration under Section 12A/12AB, 80G where donations are claimed, and FCRA where foreign contributions are received. [Conditional]

Entity-type matrix

R = required, C = conditional on the trigger named in the item, N/A = does not apply to this constitution. Illustrative and generic — align it to your own credit policy before use.

Three things the matrix makes visible. A proprietorship has the shortest constitution section and the longest evidence section, because nothing about it is on a public register. An LLP and a private limited company diverge on exactly two rows — 3 and 6 — and converge everywhere else, which is why treating them as separate document journeys wastes analyst time. A trust or society is the only constitution where the guarantor row weakens and the licence row hardens.

Worked example: scoring a real file (illustrative)

Step 1 — establish the denominator. Five items are N/A for this borrower:

• #4 firm registration — not a partnership
• #8 proprietorship proofs — not a proprietorship
• #30 no-dues letters — new-to-bank, no takeover
• #37 shops and establishment — a factory licence applies instead
• #40 sector licences — domestic sales only, no FSSAI, IEC or RERA trigger

Denominator = 40 − 5 = 35 applicable items.

Step 2 — count what arrived. Thirty-one items are complete. Four are missing:

Step 3 — score it.

• Completeness = 31 ÷ 35 = 0.8857 → 88.6%
• Blocking gaps = 2

Step 4 — apply the rule. Committee-ready requires completeness of 95% or higher AND zero blocking gaps. This file fails both tests. It is returned with two named requests, not with "please complete documentation."

Note what the arithmetic does not do. It does not tell you the loan is bad. It tells you the file cannot be assessed yet, which is a different and much cheaper thing to discover on day two than on day nineteen. The same discipline applied to the numbers themselves — reconciling GST, ITR and bank credits against each other — is set out in three-way triangulation.

Where does document collection actually go wrong?

Not in the list. In four places the list does not cover.

Documents arrive as one 400-page PDF. A single scanned bundle containing four years of ITRs, three bank accounts and a trust deed is technically complete and practically unusable until someone splits it. Classification is the first real step, and it is the step most lenders still do by hand.

The wrong entity's document is filed against the right borrower. In a group with an operating company, a holding company and two guarantor proprietorships, the ITR-3 of a promoter and the ITR-6 of the company look similar enough on a scan to be misfiled. That error survives into the spread and into the memo.

Freshness is checked once, at collection. A valuation dated in March and a committee date in October may both be inside policy individually while the file as a whole has aged. Every dated document needs a validity window recorded, not a receipt date.

The N/A is never justified. This is the finding that appears in internal audit reports, because an unjustified N/A is the cheapest place to hide a missing document.

YuSight's Document Intelligence module addresses the first two directly: it classifies each document by type and period, and maps it to the correct borrower entity in a multi-entity structure, before the analyst opens the file. Across 1 Mn documents processed, the recurring failure mode has been misattribution in group structures, not extraction from any single page.

FAQ

Which documents does a bank need for a business loan in India?

Every file needs the same seven categories: constitution, KYC of the entity and its beneficial owners, financials and tax, GST, banking and bureau, security, and statutory registrations. What changes with the borrower is which items inside each category apply — a proprietorship has no incorporation certificate, and a trading company has no factory licence.

How does the checklist differ for a partnership versus a private limited company?

The differences sit almost entirely in the first eight items. A partnership needs the deed and, ideally, registration under the Indian Partnership Act; a private limited company needs the Certificate of Incorporation, MOA and AOA, MCA master data and a board resolution. From KYC onwards the two lists are nearly identical, except that charge creation in Form CHG-1 applies only to companies and LLPs.

What documents does a trust or society need that a company does not?

The trust deed or society registration certificate with bye-laws, a trustees' or managing committee resolution, and registration under Section 12A/12AB. Add 80G where donations are being claimed and FCRA where foreign contributions are received. In exchange, the personal guarantee documentation usually weakens, because trustees often cannot give personal guarantees under the trust deed.

How long must credit file documents be retained?

Under the KYC Master Direction, records of transactions and of customer identification are retained for five years — transactions from the date of the transaction, identification records from the cessation of the relationship or account closure.

Is Udyam registration mandatory for an MSME loan?

For classification purposes, effectively yes. RBI directs banks to be guided by the classification on the Udyam Registration Certificate or Udyam Assist Certificate for priority-sector reporting, and CGTMSE cover follows the same certificate. A borrower without one can still be lent to; the exposure just does not count where you want it to count.

Do collateral-free MSE loans skip the security documents entirely?

Below the collateral-free threshold, items 31 to 35 do not apply, and the file gets materially shorter. The threshold moves to ₹20 lakh for MSE loans sanctioned or renewed on or after 1 April 2026, with bank discretion to extend to ₹25 lakh. Everything else on the list still applies.

How many bank statements are enough?

Twelve continuous months across every operative account, with no missing month and each month's opening balance matching the prior close. Twenty-four months is better for a seasonal business, because one cycle cannot tell you whether a peak is seasonality or a one-off.

Can any of this be collected through Account Aggregator instead?

Bank statements and, increasingly, GST and tax data can flow through consent-based rails rather than as PDFs. That changes the collection mechanics and the tamper risk, not the checklist — see the Account Aggregator framework explained for what a lender actually receives.

Key takeaways

• Forty items, but only around 28 apply to any single borrower. The discipline is in justifying every N/A, not in collecting everything.
• Twenty-one items block every file. Thirteen block only once their trigger applies — security offered, GST registered, takeover involved. Six are advisory and can carry a documented gap with a cure date.
• Constitution and KYC differences between entity types are concentrated in items 1 to 15. After that the list converges.
• Score the file as completeness percentage and blocking-gap count. Both must pass; neither substitutes for the other.
• The common failure is not a missing document. It is a document filed against the wrong entity in a group structure.

Cash-flow-led assessment changes which of these items carry the decision weight — that argument is made in cash flow based lending for MSMEs in India, and the surrounding sanction journey in the credit appraisal process in Indian banks.

Upload a messy document set and see it classified — book a YuSight Document Intelligence demo.