INVESTORS & SPONSORS
The company,
without the varnish.
Mallah Software Services Private Limited is a four-product software company in its first year. This page carries the entity facts, the portfolio, the governance position and an honest account of what we have not built yet. It is background information, not an offer of securities.
Entity snapshot
Everything below is verifiable against the MCA register. Published under section 12(3)(c) of the Companies Act, 2013.
- LEGAL NAME
- Mallah Software Services Private Limited
- ENTITY TYPE
- Private company limited by shares
- CIN
- U62011MH2026PTC475385
- DATE OF INCORPORATION
- 5 September 2026
- PAN
- AAVCM4546P
- TAN
- MUMM76259B
- REGISTERED OFFICE
- Santacruz (East), Mumbai 400055, Maharashtra
- FIRST FINANCIAL YEAR
- 5 Sep 2026 – 31 Mar 2027
- ACTIVITY (NIC)
- 62011 — computer programming
- INVESTOR RELATIONS
- contact@mallahsoftware.com
Full registered office: Plot No. 347, Flat No. 301, Status-2 CHSL, Santacruz (East), Mumbai 400055, Maharashtra, India. Telephone +91 88281 41371.
The portfolio
Four products, each live and each sold on its own site. They share an operating idea — read the signal, decide what matters, act inside guardrails, keep a record — but they are separate products with separate buyers, not modules of a suite.
| Product | What it does | Who buys it | Published pricing | Links |
|---|---|---|---|---|
| CertNotify | Attack-surface and certificate monitoring | Engineering and IT teams; any business with a domain | Free tier plus paid monitoring, USD | Detail · certnotify.com ↗ |
| Regulane | Regulatory change intelligence and compliance automation | Regulated firms — financial services, market infrastructure | ₹4,000 – ₹18,000 per workspace / month | Detail · regulane.com ↗ |
| Lawzer | Statutory compliance calendar for Indian entities | CS and CA practices, and the companies they act for | ₹1,249 – ₹4,166 / month, plus enterprise | Detail · lawzer.in ↗ |
| MADBOT | Autonomous website marketing | SMBs and agencies running client sites | Free tier, then ₹1,499 – ₹14,999 / month | Detail · getmadbot.com ↗ |
Two of the four sell into Indian statutory compliance, which is a market with a non-discretionary budget: a company either files AOC-4 or it pays ₹100 a day. One sells into security monitoring, and one into growth. That mix is deliberate — compliance revenue is durable and unglamorous, growth revenue is faster and more cyclical.
How the business model works
- Subscription software, billed monthly or annually
- Priced per workspace or per entity, not per seat
- Self-serve trial on every product, no card
- Mostly INR, mostly India
Pricing per workspace rather than per seat is a commercial choice with a reason behind it: compliance only works when everyone is inside the system, and charging for the twenty-sixth employee is charging a customer to keep its own records complete. It costs us some revenue per account and it removes the main reason a customer would under-deploy the product.
The moat, such as it is, is the statutory modelling. 106 rules in Lawzer and 214 monitored sources in Regulane each carry a section reference, an applicability threshold, due-date logic and a penalty basis. That is slow, unfashionable work, it does not demo well, and it is the part a competitor cannot generate in a weekend.
What we have not got yet
A diligence conversation goes faster if this list comes from us. In the first month of a company’s life the honest answer to most questions is “not yet”.
- No audited financialsThe first financial year ends 31 March 2027. There is nothing audited to show before then.
- No revenue disclosedWe are not publishing revenue, customer counts or pipeline on a public page. Ask under NDA.
- No customer references or logosWe do not publish a testimonial or a logo we have not been given written permission to use, and we do not invent them.
- No security certificationsNo ISO 27001, no SOC 2 report, no penetration test yet. The security page states this plainly.
- No GST registrationNo GSTIN has been allotted. Invoices carry no GST until it is.
- No DPIIT recognitionNot applied for yet. The eligibility position is set out below.
Startup India & DPIIT
The company has not yet applied for recognition by the Department for Promotion of Industry and Internal Trade. It has no recognition number and this page makes no claim to one. What follows is the eligibility position against the criteria in DPIIT Notification G.S.R. 127(E) dated 19 February 2019, as amended, so a reader can assess it rather than take our word for it.
| Criterion | What DPIIT requires | Our position | |
|---|---|---|---|
| Entity type | Private limited company, LLP or registered partnership firm | Private company limited by shares, CIN U62011MH2026PTC475385 | Met |
| Age | Not more than 10 years from incorporation | Incorporated 5 September 2026 — year one | Met |
| Turnover | Under ₹100 crore in any financial year since incorporation | First financial year is still running | Met |
| Innovation or scalability | Working towards innovation, development or improvement of products, processes or services, or a scalable model with high potential for employment generation or wealth creation | Four software products, each addressing a distinct operational problem; the statutory-rule modelling behind Lawzer and Regulane is the substantive technical work | Met, on the evidence below |
| Origin | Not formed by splitting up or reconstruction of an existing business | Incorporated fresh; no predecessor business, no demerger, no transfer of an existing undertaking | Met |
The innovation limb, in specifics
DPIIT asks whether a company is working towards innovation, development or improvement of products, processes or services. The substantive claim we would make is narrow and checkable:
- An applicability engine that derives which Indian statutes bind a given entity from its legal form, turnover, paid-up capital, headcount, state and registration flags — and records the reason for each determination in plain English rather than returning an unexplained checklist.
- A machine-readable model of 106 statutory obligations across the Companies Act, GST, income-tax, EPF, ESI, FEMA and state law, each carrying its own due-date logic and penalty basis, including section 403 additional-fee slabs and section 201(1A) interest.
- Continuous monitoring of 214 primary regulatory sources with impact scored 0–100 against a customer’s own control set, rather than a digest of everything published.
- Measurement of whether a business is cited in AI-generated answers, by putting unbranded buyer questions to a model with live web search and reporting what was named instead.
What recognition would unlock
Stated as it actually is, because these benefits are routinely oversold:
- Self-certification under nine labour and three environment laws for a defined period.
- IPR support — an 80% rebate on patent filing fees, 50% on trade marks, fast-track examination, and facilitator fees borne by the government.
- Public procurement — exemption from prior-turnover and prior-experience conditions on GeM, subject to meeting quality requirements.
- Section 80-IAC — a deduction of 100% of profits for three consecutive years out of the first ten. This needs separate certification by the Inter-Ministerial Board, is not granted by recognition alone, and is subject to the sunset date as it stands from time to time. It is also worth nothing to a company with no profits, which is the position today.
- Faster winding up under section 59 of the Insolvency and Bankruptcy Code, 2016.
- Funding schemes — eligibility to apply to the Startup India Seed Fund Scheme and the SIDBI Fund of Funds. Eligibility to apply, not an entitlement to money.
One benefit often still listed elsewhere is the angel-tax exemption under section 56(2)(viib) of the Income-tax Act. That provision was removed by the Finance (No. 2) Act, 2024 with effect from assessment year 2025-26, so it is no longer a reason to seek recognition. We mention it because a 2023-vintage checklist will tell you otherwise.
Governance and statutory position
A first-year private limited company has a specific set of obligations, and an investor is entitled to know we know what they are. This is the schedule the company is working to.
| Obligation | Provision | Timing |
|---|---|---|
| First board meeting | Section 173(1), Companies Act 2013 | Within 30 days of incorporation |
| First auditor appointed by the Board | Section 139(6), Companies Act 2013 | Within 30 days of incorporation |
| INC-20A — declaration of commencement of business | Section 10A, Companies Act 2013 | Within 180 days of incorporation |
| DIR-3 KYC for every director holding a DIN | Rule 12A, Companies (Appointment and Qualification of Directors) Rules 2014 | By 30 September each year |
| First financial year | Section 2(41), Companies Act 2013 | 5 September 2026 to 31 March 2027 |
| First annual general meeting | Section 96(1), Companies Act 2013 | Within 9 months of the first financial year end |
| AOC-4 and MGT-7 / MGT-7A | Sections 137 and 92, Companies Act 2013 | 30 and 60 days from the AGM |
| Income-tax return, FY 2026-27 | Section 139, Income-tax Act 1961 | Assessment year 2027-28 |
| GST registration | Section 22, CGST Act 2017 | On crossing the threshold for services, or earlier by choice |
We are not a Significant Data Fiduciary under section 10 of the DPDP Act, 2023 and no CSR obligation under section 135 of the Companies Act arises at this size. There is no holding company, no subsidiary and no group structure. Two of our own products exist to run exactly this calendar, and the company runs on them.
What a diligence pack contains
Ask and you get, under NDA, in one go rather than in instalments:
- Certificate of incorporation, memorandum and articles, and the MCA master data.
- Shareholding pattern, cap table, and any instrument outstanding.
- Board composition, minutes and the statutory registers.
- Revenue, pipeline and unit economics as they actually stand, dated.
- Product architecture, the statutory-rule catalogues, and the roadmap with its known gaps.
- Customer contracts and the standard terms every customer signs, which are on this site already.
- The compliance calendar for the current financial year, with what is filed and what is pending.
Investor and sponsor enquiries
Write with who you are and what you are trying to work out. You will get a direct answer, including where the answer is “we do not know yet”. Sponsorship and partnership enquiries reach the same address.
Nothing on this page is a prospectus, an offer or an invitation to subscribe for or purchase securities, or investment advice. Any investment would be documented separately and would be subject to the Companies Act, 2013 and, where applicable, SEBI regulation. See the Disclaimer.