Virtual Assistant Contract (India)

A Virtual Assistant Contract in India sets out the mutual obligations the parties accept and the terms that govern their dealings.

India has one of the world's largest pools of virtual assistant talent, with VAs serving domestic and international clients from cities including Bengaluru, Hyderabad, Pune, Delhi, Mumbai, Ahmedabad, and Chennai. Services typically provided by Indian VAs include email management, calendar scheduling, social media management, data entry, bookkeeping support, customer service (voice and non-voice), content writing, graphic design, and research. Many VAs operate as freelancers registered on platforms such as Upwork, Fiverr, or directly with clients, while others work through VA agencies registered under the Companies Act 2013 or as Limited Liability Partnerships under the LLP Act 2008.

Data security is the most critical legal dimension of the VA relationship. Where the VA handles client data — customer lists, financial records, business plans, CRM data, or sensitive personal data — the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 (SPDI Rules) apply. Under Rule 5 of the SPDI Rules, entities collecting sensitive personal data must obtain consent, disclose the purpose of collection, and implement reasonable security practices. The Digital Personal Data Protection Act 2023 (DPDPA 2023), administered by the Data Protection Board of India, imposes stricter obligations for processing personal data of Indian residents. The VA contract must address these obligations with specificity: VPN use, prohibition on personal device storage, encrypted communications, and immediate breach notification.

The misclassification risk — the risk that a labour authority recharacterises the VA as an employee — is a live concern in India. The Industrial Disputes Act 1947, as interpreted by the Supreme Court of India, looks past contractual labels to the economic reality of the relationship. If the VA works exclusively for one client, is subject to tight supervision over work methods, works fixed hours set by the client, and has no independent business presence, a labour court may treat them as a workman entitled to retrenchment compensation under Section 25F of the Industrial Disputes Act 1947. A well-drafted VA contract that reflects a genuinely independent arrangement — multiple clients permitted, VA providing own equipment, autonomy over work methods — substantially reduces this risk. The tax treatment of VA services under the Income Tax Act 1961 is important for both parties. Payments to an Indian VA by a client who is a company, firm, or person liable for tax audit are subject to TDS at 10% under Section 194J (fees for professional or technical services) if the aggregate payment in a financial year exceeds ₹30,000. The VA must file their income tax return disclosing VA income under the head 'Profits and Gains of Business or Profession' and may claim deductions for business expenses — internet costs, equipment depreciation, software subscriptions, and co-working space fees — under Section 37 of the Income Tax Act 1961. Forms-legal.com provides this Virtual Assistant Contract template as a starting point for India-compliant independent contractor arrangements.

A Virtual Assistant Contract (India) is needed before a VA begins any work for a client. Engaging a VA without a written contract exposes the client to data security risks, IP ownership uncertainty, and fee disputes, and exposes the VA to late payment and scope creep that can be difficult to resolve without documentary evidence of the original agreement.

Specific situations requiring this contract include: engaging an individual Indian freelancer for ongoing administrative support such as inbox management, scheduling, travel booking, and research; contracting with a VA agency for customer service or data entry support for an e-commerce business operating on Amazon India, Flipkart, or Meesho; hiring a bookkeeping VA to manage accounts payable/receivable records, reconcile bank statements, and prepare data for the chartered accountant's quarterly GST return filing review; engaging a social media VA to manage Instagram, LinkedIn, Facebook, or Twitter/X accounts, create content calendars, and schedule posts using tools such as Buffer or Hootsuite; and contracting with a specialist VA for services such as legal research support, patent prior-art searches, or medical transcription for a healthcare provider registered under the Clinical Establishments (Registration and Regulation) Act 2010.

The contract is also essential for cross-border VA arrangements — where an Indian VA serves an overseas client in the US, UK, UAE, Australia, or Singapore. Export of services by an Indian VA to an overseas client qualifies for zero-rated GST under Section 16 of the IGST Act 2017 provided the consideration is received in convertible foreign exchange and the Place of Supply rules confirm the recipient is outside India. The VA must comply with FEMA 1999 and the RBI Master Direction on Export of Services for receipt of foreign currency through an Authorised Dealer bank. Under Section 195 of the Income Tax Act 1961, an overseas client paying fees to an Indian resident VA may be required to withhold Indian tax — the contract should address this responsibility clearly.

Where the VA will handle sensitive personal data or information (SPDI) under the IT (SPDI) Rules 2011, or personal data under the Digital Personal Data Protection Act 2023, a Data Processing Agreement should be executed alongside the VA contract to address the data principal's rights and the VA's obligations as a data processor acting on the client's instructions.

A complete Virtual Assistant Contract (India) must cover the following elements to protect both client and VA.

Parties and commencement: Full legal name, address, and PAN of both the client and the VA (or VA agency with CIN/LLP registration number and GSTIN). Commencement date and initial engagement period (often a 3-month probationary period with a right to extend).

Scope of services: A detailed, exhaustive task list specifying exactly the services to be performed — not a generic description such as "administrative support." Ambiguity about scope is the most common cause of VA disputes in India. The contract should also specify explicitly what the VA is not obligated to do, to prevent scope creep. Any out-of-scope tasks requested by the client should be the subject of a written variation agreed before performance.

Fees and invoicing: Hourly rate, monthly retainer, or per-project fee, stated exclusive of GST. If the VA's aggregate annual turnover exceeds ₹20 lakhs (the GST registration threshold under the CGST Act 2017), the VA must issue valid GST tax invoices at 18% and file monthly or quarterly GSTR-1 and GSTR-3B returns. The contract should address TDS deduction at 10% under Section 194J of the Income Tax Act 1961 for professional or technical services where the client is a company, firm, or individual liable for tax audit — clarifying whether the fee stated in the contract is the gross fee (from which TDS is deducted) or the net fee payable after TDS.

Working hours and availability: Core availability hours (e.g., Monday to Friday, 9 AM to 6 PM IST), expected response time to emails and messages (typically within 2–4 hours during working hours), and whether the VA is required to attend video calls at specific times. Drafting this clause as guidance rather than a rigid command structure helps preserve the independent contractor character of the engagement and reduces the risk of misclassification under the Industrial Disputes Act 1947.

Equipment and software: Statement that the VA provides their own computer (meeting specified minimum specifications), high-speed internet connection, and validly licensed software. Where the client provides login credentials for proprietary systems — CRM platforms such as Salesforce or Zoho, project management tools such as Asana or Jira, or the client's email platform — the VA's security obligations for those credentials must be specified in detail.

Data security and IT Act 2000 compliance: Obligation to connect to client systems only via a company-approved VPN; prohibition on storing client data on personal cloud storage accounts (Google Drive, Dropbox, OneDrive) without written client approval; encrypted communication for all sensitive information; prohibition on sharing client access credentials with any third party; immediate notification of any suspected data breach to the client within 6 hours in line with CERT-In Directions 2022; secure disposal of client data (deletion and confirmation) within 7 days of contract termination; and compliance with the Digital Personal Data Protection Act 2023 as a data processor.

Confidentiality: A broad confidentiality clause covering all client business information, customer and supplier data, financial records, business plans, pricing strategies, and trade secrets. The obligation must survive termination for a period of at least 3 years and is enforceable under Section 27 of the Indian Contract Act 1872 to the extent it is reasonable in scope.

IP assignment: All deliverables created by the VA — written content, designs, code, databases, data compilations, social media posts, reports, and any other output — vest in the client upon creation. The VA assigns all copyright and other intellectual property rights in deliverables to the client under the Copyright Act 1957, supported by the payment of fees as valuable consideration. The VA warrants that deliverables are original and do not infringe any third party's intellectual property rights.

Independent contractor declaration: Express statement that the VA is an independent contractor, not an employee, bears sole responsibility for their income tax returns, GST compliance, and any applicable professional tax, and has no entitlement to employee benefits — provident fund contributions, ESIC, gratuity, or paid leave — from the client.

Termination: Notice period (typically 14–30 days for convenience), immediate termination for material breach including data security violations, and obligations on termination including prompt handover of all work in progress, return or deletion of client data, and submission of a final invoice within 7 days of the termination date. Forms-legal.com provides this template as a starting point for India-compliant VA engagements.