NGO Due Diligence for CSR Compliance: Basic vs Advanced Checks
Every year, Indian companies collectively spend thousands of crores on Corporate Social Responsibility (CSR) activities. Much of this money flows through Non-Governmental Organisations (NGOs) that implement projects on the ground. The intent is good. But the outcomes are not always guaranteed — especially when the NGO partner has not been properly vetted.
That is where NGO due diligence becomes important. It is not about distrust. It is about doing the right thing with money — responsibly, legally, and with accountability.
This article breaks down what NGO due diligence means in the context of CSR compliance, what is basic due diligence, when that is enough, and when you need to go deeper. It also explains how ThinkCap Advisors can help your company navigate this process with confidence.
If you are looking for a quick overview of why pre-grant due diligence matters, see our companion article on pre-grant due diligence of NGOs.
What Is NGO Due Diligence?
NGO due diligence is the process of evaluating a Non-Profit Organisation (NPO) or NGO before you partner with them for your CSR programme. Think of it as background research — structured, documented, and aligned with regulatory requirements.
Under Section 135 of the Companies Act, 2013, qualifying companies are required to spend 2% of their average net profits on CSR activities. A significant portion of this spend is routed through implementing agencies — mostly NGOs. The law expects companies to take responsibility not just for spending the money, but for ensuring it is spent well.
The legal framework has evolved significantly. The Companies (CSR Policy) Amendment Rules, 2021 tightened several governance requirements — including mandatory registration of implementing agencies on the MCA portal (Form CSR-1) and enhanced reporting obligations. Staying current with these amendments is now a baseline expectation, not an optional add-on.
Due diligence is the mechanism through which companies meet that expectation.
Why Does NGO Due Diligence Matter?
Let us be direct about this. The risks of not doing due diligence are real.
You may partner with an organisation that is not registered or the registration is not renewed — and your CSR spend may not qualify.
Your shortlisted NGO may not have the required track record to be eligible to accept CSR funds
You may fund a project that is never implemented or poorly implemented.
Your company's name may get associated with an NGO that has regulatory issues or adverse public domain information.
The CSR Committee and the Board may face scrutiny for inadequate oversight.
Your annual CSR report and Form CSR-2 filings may attract questions from the Ministry of Corporate Affairs
Due diligence protects the company, the CSR Committee, and ultimately the communities you are trying to serve, to a certain extent
What Is Basic NGO Due Diligence?
Basic due diligence is a desk-based review involving specific parameters. It relies on documents, public information, and regulatory databases — without field visits. It is the most common form of pre-grant check that companies perform before onboarding a new NGO partner. It is also the minimum that companies should do before releasing CSR funds to any implementing agency.
There are four core parameters in a basic NGO due diligence exercise:
Partner Profile
This is where you start to understand who the organisation really is. It covers:
• The NGO's vision, mission, and core focus areas
• Whether their thematic focus is aligned with your CSR objectives
• Whether they have a verifiable three-year track record of working in similar projects
A three-year track record is not arbitrary — it is a standard that regulators have mandated to assess maturity and capability of an implementing partner. An organisation that is only one year old may have good intentions, but it does not yet have a demonstrated ability to manage and deliver multi-year CSR projects.
The partner profile review answers a simple question: Is the NGO genuinely equipped to deliver what you are funding?
Public Domain Check
This parameter involves structured internet research on the organisation and its key functionaries — the Board members or trustees, and senior leadership. The purpose is to identify any adverse or unfavourable information that is publicly available.
This could include:
• News reports about fraud, mismanagement, or fund diversion
• Legal or regulatory proceedings against the NGO or its leadership
• Social media complaints or controversies
• Prior adverse findings in audit reports that are in the public domain
In our experience, the public domain check is often underestimated by companies. A simple internet search, done systematically, can surface red flags that would otherwise be missed entirely.
Registration-Related Details
This is the compliance backbone of any NGO due diligence. You need to verify that the organisation you are partnering with is legally constituted, is allowed by its charter documents to execute proposed project and holds the right registrations. The key items include:
Legal status of the organisation — whether it is a Trust, Society, or Section 8 Company
Charter documents — Trust Deed, Memorandum of Association, bye laws or Articles of Association
Valid income-tax registrations — 12A registration for tax exemption and 80G registration which allows donors to claim deductions
CSR registration number on the MCA portal — mandatory under the CSR Rules for any implementing agency receiving CSR funds
Governance structure — composition of the Board, trustees, or governing council
FCRA (Foreign Contribution Regulation Act, 2010) registration or prior permission, if the NGO receives or intends to receive foreign contributions (good to have)
Each of these registrations has its own validity period and compliance cycle. For example, an expired 12A registration can have serious consequences — both for the NGO and for your CSR spend.
For companies that work with NGOs receiving international funds, our dedicated FCRA advisory and compliance services can provide further guidance.
Statutory Compliances
Beyond holding the right registrations, you need to check whether the NGO has actually been filing its returns and meeting its compliance obligations. This covers:
Compliance under the functional regulations governing the NGO (e.g., Public Trusts Act, Societies Registration Act)
Income-tax compliances — whether annual tax returns have been filed for the last three financial years
FCRA compliances — whether the organisation has filed its annual FCRA returns and maintained FCRA accounts correctly (if applicable)
Whether the 12A or 80G status has ever been questioned by tax authorities
Whether the FCRA registration has been suspended or cancelled in the past
A clean registration is not enough. An organisation may have been registered for years but still be non-compliant. This check ensures that regulatory standing is current, not just historical.
When Is Basic Due Diligence Sufficient?
Basic due diligence is appropriate in several situations:
When your company is conducting an initial screening of multiple NGOs before shortlisting
When the CSR project is relatively simple, with a short duration and a modest grant amount
When you are working with a well-established NGO with a long track record and minimal risk indicators
In essence, basic due diligence works well when the risk profile is low and the objective is to establish a reasonable baseline of trust before onboarding.
Think of basic due diligence as the entry gate. It tells you whether the NGO qualifies to be considered at all. Before you invest significant time in deeper evaluation, this check is your first line of defence.
Basic vs Advanced Due Diligence: What Is the Difference?
This is a question we hear often from our clients, and it is a fair one.
Basic due diligence, as described above, focuses on the foundational checks — registration, public profile, compliance status, and organisational track record. It is entirely desk-based and relies on documents and publicly available information.
Advanced due diligence goes further in several ways — extending beyond the four basic parameters into the 100+ advanced parameters we evaluate as part of a full review.
It involves a more granular review of how the organisation actually operates — what is the skill set of the project team, how it manages finances, how it collects and reports data, how it governs itself on a day-to-day basis. It looks at the quality of the NGO's internal systems, not just whether those systems exist.
Advanced due diligence also involves direct interaction with the NGO — requesting clarifications, having conversations with program teams, and in some cases, visiting project locations.
The difference is not just about more parameters. It is about a different level of depth and confidence. Basic due diligence tells you whether the NGO is credible. Advanced due diligence tells you whether the NGO is capable.
It is worth noting that advanced due diligence does not replace basic due diligence — it builds on top of it. The four basic parameters we have discussed here are always the foundation.
If you wish to explore the full spectrum of due diligence and grant review services we offer, visit our NGO due diligence and grant audits
When Should a Company Opt for Advanced Due Diligence?
There are specific circumstances in which advance due diligence is necessary.
When the grant amount is large (typically above INR 25–50 lakhs per partner per year)
When the project duration is multi-year or multi locations and involves complex programme design
When the NGO is relatively newly formed or lacks an established reputation
When the CSR project involves direct cash transfers or significant procurement by the NGO
When your CSR Committee or Board has flagged specific concerns about a partner
When your CSR programme is in a high-visibility thematic area (e.g., health, child development) where reputation risk is higher
When you have previously encountered issues with an NGO partner and want a structured reset
When external stakeholders — such as parent companies or institutional investors — require a higher standard of partner verification
Our CSR consulting services are structured to help you make this call based on actual risk factors, not just caution. We help clients design a due diligence framework that matches the complexity of their CSR portfolio.
How ThinkCap Advisors Can Assist In NGO Due Diligence
ThinkCap Advisors has been providing NGO due diligence services as part of its broader social sector consulting services since the firm's founding. Our team combines Chartered Accountant expertise in regulatory matters with on-the-ground knowledge of the social sector.
Here is what we bring to the table:
A dedicated Social Sector practice led by senior professionals with Big 4 backgrounds
Deep expertise in CSR regulations, income-tax law, FCRA, and Companies Act compliance
A senior-led SPOC model — meaning a qualified, experienced professional is your single point of contact throughout
Clear, actionable due diligence reports that your CSR Committee can rely on
Our CSR consulting practice goes well beyond due diligence. We assist with CSR strategy, documentation, project monitoring, annual reporting, and impact assessment.
Our Methodology
Our due diligence process is structured, transparent, and efficient. Here is how it typically works:
Step 1: Request for Documents and Supporting Information
We provide the NGO with a structured checklist of documents required for the review. This ensures the process is systematic and that nothing is missed.
Step 2: Desk Review of Information Received
Our team reviews the documents received against the applicable legal and regulatory standards. This includes checking registrations, compliance records, and governance documents.
Step 3: Analysis and Clarification
Where documents raise questions or appear incomplete, we engage with the NGO to seek clarifications. This ensures our findings are based on verified information, not assumptions.
Step 4: Preparation of Draft Report
We compile our findings into a structured due diligence report. The report clearly presents what was reviewed, what was found, and any gaps or concerns identified.
Step 5: Discussion of Draft Report
Before finalising, we share the draft with your team. This gives you the opportunity to flag any context we may have missed and ensures the final report is accurate and useful.
Step 6: Submission of Final Report
The final due diligence report is submitted in the format agreed upfront — typically a PowerPoint document. It is designed to be usable directly by your CSR Committee.
All parameters are evaluated against the last three financial years completed by the NGO, in line with standard CSR practice. The scope explicitly excludes physical visits (unless expressly required) to the NGO's offices, forensic reviews, legal opinions, and any attestation or certification services.
Conclusion
NGO due diligence is not a regulatory checkbox. It is a genuine act of stewardship.
When a company spends CSR funds through an NGO, it is making a promise to a community — that help is coming, that the project will be delivered, and that the money will reach its intended purpose. Due diligence is the first step to keep that promise.
The four parameters of basic due diligence — partner profile, public domain check, registration-related details, and statutory compliances — gives you the minimum assurance you need before releasing funds. When the stakes are higher, advanced due diligence provides the depth of confidence that serious and large CSR programmes demand.
At ThinkCap Advisors, we believe that good CSR is built on three things: the right strategy, the right partners, and the right processes. Our NGO due diligence services exist to support all three.
Comments
Post a Comment