NGO Due Diligence for CSR Compliance: Ensuring Responsible Partnerships
- ThinkCap Advisors
- Jun 23
- 11 min read
Updated: 10 minutes ago
Every year, Indian companies collectively spend thousands of crores on Corporate Social Responsibility (CSR) activities. Much of this funding flows through Non-Governmental Organisations (NGOs) that implement projects on the ground. The intent is commendable, but the outcomes are not always guaranteed. This is particularly true when the NGO partner has not been properly vetted.
That is where NGO due diligence becomes essential. It is not about distrust; it is about ensuring responsible, legal, and accountable use of funds.
This article breaks down what NGO due diligence means in the context of CSR compliance. It covers basic due diligence, when it is sufficient, and when deeper investigation is necessary. Additionally, it explains how ThinkCap Advisors can assist your company in navigating this process confidently.
If you are looking for a quick overview of why pre-grant due diligence matters, see our companion article on *pre-grant due diligence of NGOs
What Is NGO Due Diligence?
NGO due diligence is the process of evaluating a Non-Profit Organisation (NPO) or NGO before partnering with them for your CSR programme. Think of it as structured background research that is documented and aligned with regulatory requirements.
Under Section 135 of the Companies Act, 2013, qualifying companies must spend 2% of their average net profits on CSR activities. A significant portion of this expenditure is routed through implementing agencies, primarily NGOs. The law expects companies to take responsibility not just for spending the money but also for ensuring it is spent effectively.
The legal framework has evolved significantly. The Companies (CSR Policy) Amendment Rules, 2021 tightened several governance requirements. This includes mandatory registration of implementing agencies on the MCA portal (Form CSR-1) and enhanced reporting obligations. Staying current with these amendments is now a baseline expectation, not an optional add-on.
Due diligence is the mechanism through which companies meet that expectation.
Why Does NGO Due Diligence Matter?
Let us be direct about this. The risks of not conducting due diligence are real.
You may partner with an organisation that is not registered, or whose registration has not been renewed, making your CSR spend ineligible.
Your shortlisted NGO may lack the required track record to accept CSR funds.
You may fund a project that is never implemented or is poorly executed.
Your company could become associated with an NGO facing regulatory issues or negative public information.
The CSR Committee and the Board may face scrutiny for inadequate oversight.
Your annual CSR report and Form CSR-2 filings may attract questions from the Ministry of Corporate Affairs.
Due diligence protects the company, the CSR Committee, and ultimately the communities you aim to serve.
What Is Basic NGO Due Diligence?
Basic due diligence is a desk-based review involving specific parameters. It relies on documents, public information, and regulatory databases without field visits. This is the most common form of pre-grant check that companies perform before onboarding a new NGO partner. It is also the minimum requirement before releasing CSR funds to any implementing agency.
Core Parameters of Basic NGO Due Diligence
There are four core parameters in a basic NGO due diligence exercise:
Partner Profile
This is where you start to understand who the organisation truly is. It covers:
The NGO's vision, mission, and core focus areas.
Whether their thematic focus aligns with your CSR objectives.
Whether they have a verifiable three-year track record of working on similar projects.
Public Domain Check
This parameter involves structured internet research on the organisation and its key functionaries — Board members or trustees, and senior leadership. The purpose is to identify any adverse or unfavourable information that is publicly available.
This could include:
News reports about fraud, mismanagement, or fund diversion.
Legal or regulatory proceedings against the NGO or its leadership.
Social media complaints or controversies.
Prior adverse findings in audit reports that are in the public domain.
Registration-Related Details
This is the compliance backbone of any NGO due diligence. You need to verify that the organisation you are partnering with is legally constituted, allowed by its charter documents to execute the proposed project, and holds the right registrations. Key items include:
Legal status of the organisation — whether it is a Trust, Society, or Section 8 Company.
Charter documents — Trust Deed, Memorandum of Association, bye-laws, or Articles of Association.
Valid income-tax registrations — 12A registration for tax exemption and 80G registration, which allows donors to claim deductions.
CSR registration number on the MCA portal — mandatory under the CSR Rules for any implementing agency receiving CSR funds.
Governance structure — composition of the Board, trustees, or governing council.
FCRA (Foreign Contribution Regulation Act, 2010) registration or prior permission, if the NGO receives or intends to receive foreign contributions (good to have).
Statutory Compliances
Beyond holding the right registrations, you need to check whether the NGO has been filing its returns and meeting its compliance obligations. This covers:
Compliance under the functional regulations governing the NGO (e.g., Public Trusts Act, Societies Registration Act).
Income-tax compliances — whether annual tax returns have been filed for the last three financial years.
FCRA compliances — whether the organisation has filed its annual FCRA returns and maintained FCRA accounts correctly (if applicable).
Whether the 12A or 80G status has ever been questioned by tax authorities.
Whether the FCRA registration has been suspended or cancelled in the past.
A three-year track record is not arbitrary; it is a standard mandated by regulators to assess the maturity and capability of an implementing partner. An organisation that is only one year old may have good intentions, but it lacks a demonstrated ability to manage and deliver multi-year CSR projects.
The partner profile review answers a simple question: Is the NGO genuinely equipped to deliver what you are funding?
In our experience, the public domain check is often underestimated by companies. A systematic internet search can surface red flags that would otherwise be missed entirely.
Each of these registrations has its own validity period and compliance cycle. For example, an expired 12A registration can have serious consequences for both the NGO and your CSR spend.
For companies that work with NGOs receiving international funds, our dedicated FCRA advisory and compliance services can provide further guidance.
A clean registration is not enough. An organisation may have been registered for years but still be non-compliant. This check ensures that regulatory standing is current, not just historical.
When Is Basic Due Diligence Sufficient?
Basic due diligence is appropriate in several situations:
When your company is conducting an initial screening of multiple NGOs before shortlisting.
When the CSR project is relatively simple, with a short duration and a modest grant amount.
When you are working with a well-established NGO that has a long track record and minimal risk indicators.
In essence, basic due diligence works well when the risk profile is low and the objective is to establish a reasonable baseline of trust before onboarding.
Think of basic due diligence as the entry gate. It tells you whether the NGO qualifies to be considered at all. Before you invest significant time in deeper evaluation, this check is your first line of defence.
Basic vs Advanced Due Diligence: What Is the Difference?
This is a question we often hear from our clients, and it is a fair one.
Basic due diligence focuses on foundational checks — registration, public profile, compliance status, and organisational track record. It is entirely desk-based and relies on documents and publicly available information.
Advanced due diligence goes further in several ways, extending beyond the four basic parameters into the 100+ advanced parameters we evaluate as part of a full review.
It involves a more granular review of how the organisation operates — assessing the skill set of the project team, how it manages finances, collects and reports data, and governs itself daily. It examines the quality of the NGO's internal systems, not just whether those systems exist.
Advanced due diligence also involves direct interaction with the NGO — requesting clarifications, having conversations with program teams, and, in some cases, visiting project locations.
The difference is not just about more parameters; it is about a different level of depth and confidence. Basic due diligence tells you whether the NGO is credible. Advanced due diligence tells you whether the NGO is capable.
It is worth noting that advanced due diligence does not replace basic due diligence; it builds on top of it. The four basic parameters we have discussed are always the foundation.
If you wish to explore the full spectrum of due diligence and grant review services we offer, visit our NGO due diligence and grant audits.
When Should a Company Opt for Advanced Due Diligence?
There are specific circumstances in which advanced due diligence is necessary.
When the grant amount is large (typically above INR 25–50 lakhs per partner per year).
When the project duration is multi-year or multi-location and involves complex programme design.
When the NGO is relatively newly formed or lacks an established reputation.
When the CSR project involves direct cash transfers or significant procurement by the NGO.
When your CSR Committee or Board has flagged specific concerns about a partner.
When your CSR programme is in a high-visibility thematic area (e.g., health, child development) where reputation risk is higher.
When you have previously encountered issues with an NGO partner and want a structured reset.
When external stakeholders — such as parent companies or institutional investors — require a higher standard of partner verification.
Our CSR consulting services are structured to help you make this call based on actual risk factors, not just caution. We assist clients in designing a due diligence framework that matches the complexity of their CSR portfolio.
How ThinkCap Advisors Can Assist In NGO Due Diligence
ThinkCap Advisors has been providing NGO due diligence services as part of its broader social sector consulting services since the firm's founding. Our team combines Chartered Accountant expertise in regulatory matters with on-the-ground knowledge of the social sector.
Here is what we bring to the table:
A dedicated Social Sector practice led by senior professionals with Big 4 backgrounds.
Deep expertise in CSR regulations, income-tax law, FCRA, and Companies Act compliance.
A senior-led SPOC model — meaning a qualified, experienced professional is your single point of contact throughout.
Clear, actionable due diligence reports that your CSR Committee can rely on.
Our CSR consulting practice extends beyond due diligence. We assist with CSR strategy, documentation, project monitoring, annual reporting, and impact assessment.
Our Methodology
Our due diligence process is structured, transparent, and efficient. Here is how it typically works:
Step 1: Request for Documents and Supporting Information
We provide the NGO with a structured checklist of documents required for the review. This ensures the process is systematic and that nothing is missed.
Step 2: Desk Review of Information Received
Our team reviews the documents received against applicable legal and regulatory standards. This includes checking registrations, compliance records, and governance documents.
Step 3: Analysis and Clarification
Where documents raise questions or appear incomplete, we engage with the NGO to seek clarifications. This ensures our findings are based on verified information, not assumptions.
Step 4: Preparation of Draft Report
We compile our findings into a structured due diligence report. The report clearly presents what was reviewed, what was found, and any gaps or concerns identified.
Step 5: Discussion of Draft Report
Before finalising, we share the draft with your team. This gives you the opportunity to flag any context we may have missed and ensures the final report is accurate and useful.
Step 6: Submission of Final Report
The final due diligence report is submitted in the agreed format — typically a PowerPoint document. It is designed to be directly usable by your CSR Committee.
All parameters are evaluated against the last three financial years completed by the NGO, in line with standard CSR practice. The scope explicitly excludes physical visits (unless expressly required) to the NGO's offices, forensic reviews, legal opinions, and any attestation or certification services.
Conclusion
NGO due diligence is not merely a regulatory checkbox. It is a genuine act of stewardship. When a company spends CSR funds through an NGO, it makes a promise to a community — that help is coming, that the project will be delivered, and that the money will reach its intended purpose. Due diligence is the first step to keep that promise.
The four parameters of basic due diligence — partner profile, public domain check, registration-related details, and statutory compliances — provide the minimum assurance needed before releasing funds. When the stakes are higher, advanced due diligence offers the depth of confidence that serious and large CSR programmes demand.
At ThinkCap Advisors, we believe that effective CSR is built on three pillars: the right strategy, the right partners, and the right processes. Our NGO due diligence services exist to support all three.
About the Author
Dipti Iyer | Chartered Accountant | Lead, Social Sector & CSR Practice | *https://www.linkedin.com/in/dipti-iyer-083668a2/
FAQs
Q1. Is NGO due diligence mandatory under the Companies Act, 2013?
The Companies Act does not prescribe the specific form that due diligence must take, but it does expect companies to ensure that CSR funds are spent as intended and that implementing agencies are credible. The Companies (CSR Policy) Amendment Rules, 2021 reinforced this by mandating that implementing agencies hold a valid CSR registration number on the MCA portal before funds are transferred.
In practice, CSR Committees are expected to verify partner credentials before releasing funds. A documented due diligence exercise is the most effective way to demonstrate this responsibility has been discharged.
Q2. How long does a basic NGO due diligence take?
A basic due diligence typically takes 6 to 7 working days from the date of receiving all required documents from the NGO. Timelines can vary depending on the responsiveness of the NGO and the availability of regulatory data.
Q3. What documents does an NGO need to provide for basic due diligence?
The core documents include charter documents (Trust Deed, MOA/AOA), certificate of registration, 12A and 80G registration certificates, CSR registration number from the MCA portal (mandatory under the 2021 amendment rules), FCRA registration certificate (if applicable), audited financial statements, and statutory filings for the last three years.
Q4. Can we conduct NGO due diligence in-house?
Companies can conduct basic checks in-house, particularly if they have a well-resourced CSR team. However, a structured due diligence by a professional advisor brings additional value — methodological rigour, access to specialised regulatory databases, objectivity, and a documented report that the CSR Committee can rely on. For higher-value engagements, specialist support is strongly recommended.
Q5. What is the CSR registration number and why is it important?
All NGOs intending to receive CSR funds must register on the MCA portal and obtain a CSR registration number (Form CSR-1). This requirement was introduced by the Companies (CSR Policy) Amendment Rules, 2021. Without a valid CSR registration number, any funds transferred to that NGO shall not qualify as CSR expenditure under the Companies Act. This is one of the first things verified in any due diligence exercise.
Q6. What happens if an NGO's 80G registration has expired?
If an NGO's 80G registration has expired, donors cannot claim tax deductions on the funds contributed. This also invalidates the CSR spend.
Q7. Does ThinkCap Advisors conduct field visits during due diligence?
Basic due diligence is entirely desk-based and does not include field visits. Field visits can be included as part of advanced due diligence or as part of ongoing project monitoring services, which ThinkCap Advisors also provides.
Q8. How does due diligence differ from a grant audit?
Due diligence is a pre-grant exercise — it happens before funds are released, to evaluate whether the NGO is suitable to receive them. A grant audit is a post-disbursement exercise — it verifies how the funds were actually used. Both are important parts of a robust CSR governance framework. ThinkCap Advisors provides both services.
Q9. We work with the same NGO partners every year. Do we still need due diligence?
Yes — particularly for registration and compliance checks. Registrations expire, FCRA status can change, and even long-standing NGOs can develop governance issues over time. A refresh of the due diligence on existing partners is good practice and demonstrates ongoing oversight by the CSR Committee.
Q10. How is ThinkCap Advisors different from other firms offering CSR consulting services?
ThinkCap Advisors operates on a senior-led SPOC model, which means the person you speak to is also the person leading the work. Our team has Big 4 backgrounds combined with deep social sector knowledge. We cover the full CSR value chain — from strategy and partner identification to due diligence, monitoring, and reporting. We are also recognised as one of India's Top 10 CSR Consulting Firms. Our pricing reflects Big 4 quality at a reasonable cost.
Comments