By Manu Rao | Updated March 2026
The Scenario
A cybersecurity startup in Tel Aviv has raised a $12 million Series B. The company sells endpoint detection and response (EDR) software to enterprises in the US and Europe. With 80 employees in Israel (mostly engineers and researchers), the founders need to grow the engineering team by 40-50 people over the next two years. Israeli developer salaries are high — $100,000-150,000 for senior engineers — and the local talent pool in cybersecurity, while excellent, is small and competitive. The CTO, who worked at a Bengaluru R&D center earlier in her career, has proposed setting up an Indian engineering office.
They plan to invest $500,000 in the first year — covering an office in a Bengaluru tech park, 40 engineering hires, and infrastructure setup.
Why India?
India has become the world's second-largest cybersecurity talent pool after the United States. Bengaluru alone has over 400 cybersecurity companies and research labs, including centers for companies like Cisco, McAfee, Palo Alto Networks, and Check Point (an Israeli company). Indian cybersecurity professionals combine strong programming skills with increasingly deep domain knowledge in network security, cloud security, and threat intelligence.
The Israel-India tech corridor is already active. Over 100 Israeli companies have R&D centers in India. The bilateral relationship is strong — India is Israel's third-largest trading partner in Asia, and defense and technology are the main pillars of the relationship. The Israel-India Innovation Bridge, launched jointly by the two governments, specifically supports tech collaboration.
Cost matters too. A senior cybersecurity engineer in Bengaluru costs $25,000-45,000 annually — roughly one-third of the Israeli equivalent. For a venture-backed startup watching its runway, this arithmetic is hard to ignore.
Entity Choice
A Private Limited Company (Wholly Owned Subsidiary) is the right structure. The R&D center will employ engineers who work on the company's core product — this requires proper employment contracts under Indian law, IP assignment agreements, and data protection compliance. A subsidiary provides the legal framework for all of this.
A Liaison Office cannot hire employees at this scale or pay salaries directly. A staffing/outsourcing arrangement (through a third-party like an EOR — Employer of Record) was considered for speed, but the founders want control over hiring, IP ownership, and engineering culture. An EOR also becomes expensive at 40+ headcount.
A Branch Office could technically house an R&D center, but it cannot retain earnings or reinvest locally, and the compliance requirements are heavier than a subsidiary.
FDI Route and Sector Rules
Software development and IT services fall under 100% automatic route FDI. No government approval needed. Israel is not on the restricted border-country list (Press Note 3).
Cybersecurity products may touch sensitive areas if the Indian subsidiary develops capabilities related to Indian critical infrastructure, defense, or government networks. For a company building commercial EDR software for global enterprise clients, this is not an issue. But if the company later bids for Indian government contracts, additional security clearances and data localization requirements may apply.
Israel is a Hague Apostille Convention member. Documents are apostilled through the Israeli Ministry of Foreign Affairs or designated District Courts. The process is straightforward and takes 2-5 business days.
Registration Process
- Board Resolution (Israel) — The Israeli parent's board approves the subsidiary formation.
- Apostille — Israeli corporate documents (Rasham HaChavarot — Companies Registrar extract), passport copies, and board resolution apostilled through MOFA Israel or the relevant District Court.
- DSC and DIN — For the appointed directors.
- SPICe+ Filing — Name reservation and incorporation through MCA.
- Post-Incorporation — Bank account (the subsidiary should open an account with a bank experienced in handling Israeli company transactions — ICICI, HDFC, and Yes Bank have Israel desks), professional tax registration in Karnataka, Shops and Establishment Act registration.
Timeline: 3 weeks from apostilled documents to incorporation. Setting up the office in a Bengaluru tech park (Manyata, RMZ, Embassy) takes another 2-4 weeks. First hires can start within 6 weeks of project initiation. The time zone is excellent — Israel (IST+2:30 ahead or behind depending on daylight saving) overlaps with Bengaluru business hours almost completely, with a 2.5-3.5 hour offset.
Tax Structure
The India-Israel DTAA has been in force since 1996. Key rates:
| Income Type | DTAA Rate | Domestic Rate |
|---|---|---|
| Dividends | 10% | 20% |
| Interest | 10% | 20% |
| Royalties | 10% | 20% |
| FTS | 10% | 20% |
The Indian subsidiary pays 25% corporate tax under Section 115BAA. Since it is a captive R&D center (its revenue comes from the Israeli parent for development services), the transfer pricing arrangement is critical. The most common model is cost-plus — the Indian subsidiary charges the Israeli parent its costs plus a markup (typically 10-18%). This markup is the Indian subsidiary's taxable profit.
The markup percentage must be supported by a transfer pricing study using comparable uncontrolled price or transactional net margin method (TNMM). Indian transfer pricing authorities have been aggressive in challenging low markups, sometimes proposing adjustments of 20-25%+. Use a reputable Big 4 or mid-tier firm for the TP study.
Israel taxes worldwide income at 23% corporate tax rate. The Israeli parent can claim credit for Indian taxes paid, including withholding tax on management fees or royalties. The Israel Tax Authority is familiar with India R&D structures — many Israeli tech companies use this model.
Ongoing Compliance
- MCA filings — Board meetings (4/year), AGM, MGT-7A, AOC-4
- Tax — Corporate tax, advance tax, TDS returns, transfer pricing report (mandatory given 100% related-party revenue)
- GST — R&D services provided to the Israeli parent are export of services, zero-rated under LUT. No GST payable, but GST on input (office rent, equipment) can be claimed as refund.
- Employment — EPF, ESI, professional tax (Karnataka), gratuity, bonus
- IP compliance — Ensure all IP assignment agreements are valid under Indian law, all code and inventions vest in the Israeli parent, and employee agreements include proper assignment and confidentiality clauses
- RBI FLA Return — Annual filing by July 15
Common Pitfalls
- Transfer pricing audits — Captive R&D centers are a primary target for Indian transfer pricing officers. The TP officer may compare the subsidiary to full-risk Indian IT companies and argue for a higher markup. Maintain thorough documentation and comparable company analysis (CCA) from the first year. Retroactive adjustments from a TP audit can be painful.
- Not structuring IP ownership correctly — Indian law defaults to inventor ownership of patents unless there is a clear written assignment. Every employment agreement must include an explicit IP assignment clause, and the assignment should be registered with the Indian Patent Office if patents are filed. Verbal understandings or boilerplate clauses from Israeli contracts may not hold up in India.
- Underestimating Indian attrition rates — Bengaluru's tech talent market has attrition rates of 15-25% annually. Israeli startups used to low attrition in Tel Aviv are often shocked. Build attrition into the hiring plan (hire 50 if you need 40 to be stable) and invest in retention — ESOPs that vest over 4 years are effective.
- Data protection compliance — The Digital Personal Data Protection Act, 2023 (DPDPA) and the upcoming rules impose obligations on companies processing personal data in India. If the Bengaluru team handles customer data from US or European clients, both Indian and foreign data protection laws (GDPR, CCPA) apply. Set up data handling protocols before the team starts accessing production data.
How Beacon Filing Helps
Beacon Filing works with Israeli tech companies setting up R&D centers in India. We handle apostille coordination, SPICe+ incorporation, and post-incorporation setup in Bengaluru including bank account opening, professional tax, and Shops & Establishment registration.
Our compliance packages for R&D subsidiaries include MCA filings, tax returns, GST refund processing, TDS, and transfer pricing coordination — structured so the Israeli CFO gets monthly reports in a format compatible with Israeli reporting standards.