Picture this. An email lands in an HR manager’s inbox from the legal team. It says the company needs to register on something called the SHe-Box portal. She Googles it, lands on a government website, reads through a few circular notifications in bureaucratic language, and spends the next two hours trying to figure out what exactly needs to be done, by when, and what happens if it isn’t.
This is the reality in HR departments across India right now. SHe-Box registration mandatory and a compliance requirement that arrived without much fanfare, is being enforced with increasing seriousness, and is catching thousands of organizations completely off guard.
What Is the SHe-Box Portal?
SHe-Box stands for Sexual Harassment Electronic Box. It is a centralized online portal run by the Ministry of Women and Child Development, Government of India, first launched in 2017 and significantly upgraded in August 2024.
The upgrade changed everything. What was once a passive complaint-filing platform became an active compliance monitoring system. Today the portal does three distinct things — 1) it lets women employees file sexual harassment complaints online, routed directly to their company’s Internal Committee, 2) it lets government authorities monitor whether ICs exist, are functional, and are resolving complaints within the mandatory 90-day window; and 3) it requires organizations to upload their annual POSH compliance reports, training records, and IC member details in one place.
Put simply, the SHe-Box portal is the government’s live window into your company’s POSH compliance. And it is now open.
Is Registration Actually Mandatory?
This is where most HR managers get stuck and fairly so, because the answer varies by state and is still evolving.
Here is where things stand as of May 2026:
Delhi — The Department of Women and Child Development, Government of NCT of Delhi, issued a public notice on 12 June 2025 making SHe-Box registration compulsory for all public and private organizations, with immediate effect.
Maharashtra — Mumbai’s District Women and Child Development Officer mandated all private establishments with 10 or more employees to register by 15 May 2025, through Notification No. DGIPR/2025‑26/480. A Government Resolution in August 2025 then triggered a statewide audit with SHe-Box registration explicitly listed as one of the audit checkpoints.
Odisha — Registration was made mandatory for all government departments and private establishments in November 2025.
Karnataka — The Labour Department issued a circular in August 2025 directing Labour Officers to verify ICC constitution in commercial establishments and submit compliance reports.
Rajasthan — A public notice mandates registration of all government departments, private institutions, PSUs, and subordinate offices.
Noida / Uttar Pradesh — The District Probationary Officer of Noida instructed all organizations with more than 10 employees to register their ICs in April 2025. Other states are expected to issue formal mandates soon.
And above all of this sits the Supreme Court’s order dated 12 August 2025, which directed every State Government to conduct district-wise surveys to verify POSH compliance and ensure data is uploaded onto the SHe-Box platform. When the Supreme Court gives that kind of direction, state governments move.
So coming back to the question is registration mandatory? If your company is in Delhi, Maharashtra, Odisha, Karnataka, or Rajasthan, yes, it is. If you are in another state, the writing is clearly on the wall. Waiting to see what happens is not a sensible position.
The Part Nobody Talks About-What Happens When a Complaint Is Filed?
Most articles about SHe-Box focus on the registration process. But there is something far more important that rarely gets discussed.
When a woman files a complaint through the SHe-Box portal, the system looks up her employer and automatically routes the complaint to that company’s Internal Committee but only if the IC is registered on the portal.
If the IC is not registered, the portal flags the company to the State Nodal Officer and District Nodal Officer, alerting government authorities that no functioning committee is on record. That is not a minor administrative note. That is the start of a compliance investigation.
Penalties under Section 26 of the POSH Act are real which can be a fine of up to ₹50,000 for a first violation, doubled for repeat offences, and the possibility of business license cancellation for persistent non-compliance. The Supreme Court has made clear that these penalties apply, and state governments are now the ones enforcing them.
Registration is not bureaucratic box-ticking. It is making sure that when the moment of reckoning arrives and it can arrive without warning your organisation has a functioning system in place.
The Hidden Gap Registration Uncovers
Here is something worth knowing before you start the registration process. It often reveals compliance gaps that organizations had no idea existed.
When you register, the portal requires you to enter the details of every IC member across every branch names, designations, contact information, and roles. It asks for the Presiding Officer, the employee members, and the external member.
At that point, many organizations realize one or more of the following:
- The Presiding Officer named in their POSH policy resigned eight months ago
- The external member’s three-year term expired and was never renewed
- Branch offices never had their own IC, only the head office has one
- IC details were entered when the committee was formed years ago and never updated since
The Maharashtra audit has already found that a significant number of ICs exist only on paper. Organizations in that situation are being asked to show cause immediately.
Each of these gaps does not just mean a problem on the SHe-Box portal. It means that any POSH inquiry your company has conducted or would conduct could be legally challenged on the grounds of an improperly constituted committee. Registration holds up a mirror. What it reflects is sometimes uncomfortable.
So What Does SHe-Box Registration Actually Require?
The registration process is straightforward once you know what to gather. The official SHe-Box User Manual for Private Offices is available as a downloadable PDF on the portal itself and walks through every step.
Before you begin, you will need:
- Your company’s PAN number and GST number
- A scanned copy of your Registration Certificate or GST certificate in PDF format
- The name and contact details of your designated Nodal Officer which, is typically the HR Head or a senior compliance manager. They receive the portal login and are the primary point of contact for all POSH related government communication going forward.
Once head office registration is approved by the District Nodal Officer, you log back in and add all branch locations along with their respective IC member details. For companies with many locations, this is where the real time investment sits.
After everything is set up, the IC’s Presiding Officer receives a separate login to view and respond to any complaints filed through the portal, with visibility into resolution timelines.
Registration Is Step One-Training Is What Actually Protects You
This is where most articles on SHe-Box stop. It is also where the real conversation should begin.
Getting registered puts you on the government’s radar in the right way as it signals that your IC exists and is accessible. But being on the radar also means you will be scrutinized. And the scrutiny does not stop at registration.
The Maharashtra audit checks for six things: a functioning IC, trained IC members, documented employee training, annual reports filed with the District Officer, SHe-Box registration, and mandatory awareness boards displayed at the workplace. Registration is one of six. An organisation that ticks only that box is still non-compliant on five others.
The one that most organizations underestimate is documented employee training. An HR team may know that training happened but if there is no record of who attended, when, and what they were taught, that training does not exist in the eyes of an auditor or a court.
This is precisely what POSH e-learning is designed to solve. Every employee who completes the online module receives an individual completion certificate with the name, date, course completed and a valid till date. The LMS generates a full completion report that can be produced instantly when an audit asks for it. No scrambling, no gap in records.
For organizations spread across multiple cities, factory sites, or remote locations, the classroom alternative is simply not practical. You cannot fly a trainer to fifteen locations every year. An e-learning module that runs in the employee’s language, on their device, at a time that suits their shift that is the only approach that works at scale and leaves a clean paper trail.
A SHe-Box Compliance Check Before You Consider Yourself Done
Run through each of these before concluding your SHe-Box status is resolved:
1. Your IC is properly constituted — Presiding Officer is a current senior female employee, external member’s term is still valid, all member details are up to date as required under Section 4 of the POSH Act, 2013.
2. Your company’s head office is registered on shebox.wcd.gov.in with a nominated Nodal Officer
3. All branch locations and their IC member details are entered on the portal
4. The annual POSH compliance report has been filed with the District Officer and uploaded on the portal for the preceding calendar year
5. Employee training has been conducted within the last 12 months and individual completion records exist
6. IC members have received separate, specialized training on how to conduct an inquiry
7. Your POSH policy has been updated to explicitly cover remote work, hybrid arrangements, and digital communication . The Delhi High Court confirmed in 2026 that WhatsApp messages, Zoom calls, and emails fall within POSH jurisdiction wherever a professional relationship exists
If even one of these is missing, your compliance is incomplete regardless of whether SHe-Box registration is done.
The Bottom Line
2026 is the year POSH compliance became a field-level enforcement issue, not just a policy document sitting in a shared drive. The Supreme Court’s August 2025, the Maharashtra audit, and the wave of state-level mandates have together created a compliance environment that is more serious than anything organizations have faced under the POSH Act since it was enacted in 2013.
SHe-Box registration is the entry point. But the organizations that will come through this period without disruption are the ones that have gone beyond registration trained their people, documented it properly, and kept their ICs functional and updated.
If your organisation needs to close the training gap quickly and at scale, XLPro’s POSH e-learning courses for employees, blue collared workforce, factory staff and IC are available in English and 7 regional languages, deliver individual completion certificates. These can be deployed across all your locations be it office, factory floor, or remote without a single classroom session.
