Your sales director has been working from the Netherlands for seven months. She has not signed a lease in her own name, she has not opened a local bank account, and your company has no office there. But under Dutch tax law, you may already owe corporate tax in the Netherlands — and the clock started ticking months ago, without anyone noticing.
This is permanent establishment risk, or PE risk. It is one of the most misunderstood tax exposures in global hiring. It does not need a formal office, a registered subsidiary, or a decision to expand. One employee, in the wrong role, in the wrong country, for long enough, can be enough.
This article covers what permanent establishment risk actually means, what triggers it, what it costs when it goes wrong, and the concrete steps your organization can take to manage it.
What is a Permanent Establishment?
A permanent establishment is a fixed place of business, or a person acting for a company, through which a foreign company carries on business in another country. Once a PE exists, that country can tax the profits connected to it.
The definition comes from Article 5 of the OECD Model Tax Convention, which most bilateral tax treaties follow. Many developing economies use the UN Model instead. Its PE definition is wider and catches more service activity, which matters if you hire in India, Southeast Asia, or Latin America.
Some activities sit outside the definition. Storing goods, buying supplies, or collecting market information usually does not create a PE. Since the 2017 OECD update, that exemption holds only when the activity is genuinely preparatory or auxiliary to the business as a whole.
A PE is not a legal entity. Nobody registers one or signs anything to create it. It exists as a set of facts on the ground, and a tax authority decides whether those facts meet the test, often years after they began.
What is a Permanent Establishment Risk (PE Risk)?
Permanent establishment risk, or PE risk, is the chance that a tax authority decides your company has a PE in its country. If it does, you owe local corporate tax on the profits tied to that activity, usually for past years as well.
The difference matters. A PE is the taxable presence itself. PE risk is your exposure before anyone has made that call. You manage the risk by controlling the facts that a tax authority would later examine.
Three variables drive most PE risk: how long your people spend in a country, what authority they hold, and whether their work produces local revenue. A developer coding remotely for six weeks scores low on all three. A country sales lead closing deals for two years scores high on all three.
Permanent Establishment Risk Triggers and Risk Factors
Most permanent establishment risks come from five triggers. Each one is a different fact pattern a tax authority looks for. A single employee can set off more than one at the same time, and that is when exposure grows fastest.
1. Fixed Place of Business
A fixed place of business establishment is the most conventional kind of permanent establishment. This entails having a concrete, fixed, and tangible place of business, such as a workshop, manufacturing plant, or office. Because of the tangible corporate imprint this creates, a foreign firm is now exposed to the complexities of local tax laws and compliance.
2. Dependent agent PE
A dependent agent PE arises when someone in the country habitually concludes contracts for your company. It also arises when they play the principal role in winning contracts your company then signs without material changes. Job title does not matter. What they actually do does.
This is the trigger that catches sales teams. A country manager who negotiates price and terms, then sends the deal home for a signature, can still create a PE. Independent agents are excluded, but only if they work for several unrelated clients. Verify: treaties that have not adopted the 2017 OECD wording still use the narrower “authority to conclude contracts” test.
3. Service PE and the 183-day rule
The 183-day rule does two separate jobs, and the published article merges them. First, under most treaties, an employee who works more than 183 days in a country usually owes income tax there personally. That is an individual tax issue, not a corporate one.
Second, some treaties include a service PE clause. Under it, a company that provides services through its staff in a country for more than 183 days in a 12-month period has a PE there. The UN Model uses this test, and it is common in treaties with India and other emerging markets.
The standard OECD Model has no service PE clause. So whether 183 days creates corporate PE depends on the specific treaty. Verify: some treaties use shorter thresholds, such as 90 days, and some count days across related projects.
4. Construction and Project-Based PE
Companies running installation, construction, or large infrastructure projects in a foreign country face PE exposure if those projects exceed a specified duration. The threshold is typically six to twelve months, depending on the applicable tax treaty.
5. Digital and significant economic presence
A small group of countries now tax foreign companies that earn meaningful revenue from local users with no people on the ground. India’s significant economic presence rule is the clearest example. It applies in domestic law, though a treaty can override it.
Digital services taxes in France, Italy, Spain and other countries are often discussed alongside PE. They are separate taxes on revenue, not a PE finding. For most companies hiring abroad, people-based triggers create far more exposure than digital ones.
6. PE risk factors checklist
Use these six factors to score any employee working outside your home country. Two or more in the right-hand column is the point to get local tax advice.
| Risk factor | Lower risk | Higher risk |
|---|---|---|
| Days in country | Under 90 days in any 12 months | Over 183 days, or no end date |
| Role | Engineering, support, back-office | Sales, business development, country lead |
| Contract authority | No pricing or terms authority | Negotiates or signs with local clients |
| Revenue link | Serves global or home-country clients | Generates revenue from local customers |
| Workplace | Personal home, no company equipment or signage | Company-paid office, coworking desk, or listed address |
| Arrangement | Temporary, documented, with an end date | Open-ended, or started temporary and never reviewed |
Read Also: EOR vs PEO for cross-border employment
The 183-Day Rule in Practice
Most companies assume PE risk comes from opening an office or signing a lease. The 183-day rule catches them off guard because it has nothing to do with either.
The rule works like this: Once an employee spends more than 183 days in a country, their own salary usually becomes taxable there. If the treaty has a service PE clause, the risk of permanent establishment for the employer starts on the same day. No office required. No local contracts. Just time on the ground.
The details matter. Most countries count every day the individual is physically present — weekends, public holidays, and partial days included. Some treaties measure this against a calendar year; others use a rolling 12-month window, which is a stricter test. A handful of jurisdictions go further and apply the threshold at the company level rather than the individual level, meaning the days spent by two or three employees in the same country can be combined when determining whether the threshold is crossed.
In practice: an employee spending four days a week in Germany on a client engagement will hit 183 days somewhere around the sixth month. If that person has any authority to negotiate or sign contracts with German clients, the exposure compounds — because now you have both a time-based trigger and a dependent agent trigger running simultaneously.
Most HR and finance teams are not tracking this. Payroll is processed at home. The employee files expenses. Nobody is counting the days.
Permanent Establishment Issues: What PE Risk Costs in Tax and Compliance
A PE finding rarely arrives as one bill. It shows up as a set of linked permanent establishment issues across tax, payroll, and filings, usually backdated to the day the presence began. Most of the cost comes from the years nobody was tracking.
Corporate income tax
The host country taxes the profits it attributes to the PE, at its local corporate rate. Attribution follows arm’s-length principles, so you need to show what the local function earned. Without transfer pricing documentation, the tax authority will build its own estimate.
Back taxes, interest and penalties
PE risk tax exposure compounds. Because the finding is retroactive, interest runs from each original due date. Many countries add penalties for failing to register or file, even when the underlying tax is small.
Payroll and social security
Once a PE exists, the company is often treated as a local employer for withholding purposes. That can mean back payroll tax, employer social security contributions, and corrections to the employee’s personal tax position in both countries.
Registration and ongoing filings
The company may need to register the PE as a branch, file local corporate returns every year, and sometimes register for VAT or GST. Those obligations continue for as long as the activity does.
Double taxation
Your home country may already have taxed the same profits. Getting relief means claiming foreign tax credits or opening a mutual agreement procedure between the two tax authorities. Both take time, and neither is guaranteed to fully offset the cost.
Contract and commercial effects
A PE dispute can surface in due diligence for a funding round or acquisition, and buyers usually price it in as a liability. It can also complicate customer contracts if local tax was never charged on invoices.
Global Permanent Establishment Risk: How PE Rules Differ by Country
Global permanent establishment risk is not one rule applied everywhere. The same employee doing the same job can be safe in one country and create a PE in the next.
Germany applies one of the stricter interpretations in Europe. Tax authorities there have pursued PE findings against foreign companies whose employees worked from home offices, treating the employee’s residence as a “fixed place of business” of the employer. The 183-day threshold still applies, but German courts have been willing to find PE on shorter timelines where the facts support it.
India is consistently one of the most active enforcement jurisdictions globally. The Supreme Court has upheld PE findings based on preparatory or auxiliary activities that would not have triggered PE in most other countries. Service PE provisions are broadly applied, and dependent agent PE findings are common in technology and professional services sectors.
United Kingdom now operates outside EU frameworks post-Brexit, and HMRC has its own set of treaty positions. Following the pandemic, HMRC published specific guidance on remote working and PE, acknowledging that temporary remote work arrangements would not automatically create PE — but carving out situations where the arrangement has become permanent or the employee has ongoing business development responsibilities.
United States presents a two-layer problem. Federal PE exposure is governed by the US tax treaty network, which generally provides meaningful protection. But state-level “nexus” rules are separate, and a company with an employee working remotely from California or New York can face state corporate income tax obligations there regardless of what any federal treaty says. Each state has its own nexus thresholds and enforcement history.
France has taken a firm position that employees working from home on behalf of a foreign employer can create PE, particularly in commercial roles. French tax authorities have been willing to assert PE in cases where other jurisdictions would have treated the activity as insufficient.
A one-size global policy does not hold up across these differences. The question to ask for each jurisdiction is not just “do we have anyone there?” but “what are they doing, how long have they been there, and what does the local enforcement environment look like?”
How to Avoid Permanent Establishment Risk
You avoid permanent establishment risk by controlling three things: where your people work, how long they stay, and what they are allowed to commit the company to. Every tactic below works on at least one of those.
Local tax advisor
Managing the intricacies of PE legislation and guaranteeing regional compliance can be handled by hiring a local tax consultant or specialist familiar with the regional nation’s tax laws. Local tax advisors can offer significant insight regarding the regulations controlling the formation of a PE in the host country. Additionally, they can help structure business operations to minimize PE risk and optimize tax efficiency.
Plan in-country assignments before they start
Set the length, the role, and the end date of every foreign assignment before the person travels. Keep anyone without a local entity or EOR behind them out of pricing, negotiation, and signing. Review the assignment at 90 days, not at 183.
Analyze the business’s operations
To find possible PE risks and implement the required remedial measures, thoroughly examine the company’s operations in foreign jurisdictions. Analyze the business’s marketing, sales, transportation, customer support, and strategic decision-making activities in the host country. Businesses can take the required corrective action and prevent unintended tax fines by identifying and addressing potential PE triggers early on.
Manage personnel presence
One primary reason for creating a PE is the presence of personnel in foreign countries. Consider putting regulations restricting particular activities or staff presence to predetermined times to lower this risk. Remote work arrangements can also assist in managing the presence of employees in various jurisdictions. You can strengthen your defense against possible PE claims by implementing appropriate documentation and record-keeping procedures.
Adapt to new regulatory changes
Business operations internationally can be dynamic and may evolve. It’s imperative to monitor your operations and modify your business needs as necessary. To guarantee continued compliance and efficient risk mitigation, stay tuned about changes to local tax laws, regulatory policy requirements, and judicial decisions.
Employer of Record and Permanent Establishment: Where an EOR Reduces PE Risk
An employer of record reduces permanent establishment risk by becoming the legal employer in the country where your person works. The EOR holds the employment contract and runs local payroll, so your company does not have employees on the ground there.
What the EOR takes on
The EOR signs the local employment contract, runs payroll, withholds income tax, pays employer social security, and handles statutory benefits and terminations. Those are the obligations that would otherwise make your company a local employer, which is often where a PE investigation starts.
Where employer of record permanent establishment risk remains
An EOR changes who employs the person. It does not change what the person does. If an EOR-employed sales lead habitually closes deals for your company, a tax authority can still find a dependent agent PE. The contract structure won’t override the facts.
The same applies to workspace. If your company rents an office for EOR staff and directs the work there, that office can still count as a fixed place of business. Keep EOR roles inside the limits set out in the dos and don’ts above.
When to move from an EOR to a subsidiary
An EOR fits early hiring in a new market, usually the first few employees. Once a country team is selling locally and growing past a handful of people, a subsidiary often costs less and carries less risk. Verify: some countries limit how long a worker can stay with a labor provider, so check before committing to a long EOR term.
Permanent Establishment Dos and Don’ts
These eight rules cover the situations that cause most PE findings. Share them with HR, finance, and anyone who approves remote work requests.
| Do | Don’t |
|---|---|
| Log days in each country for every employee working abroad, on a rolling 12-month basis | Rely on expense reports or payroll location to tell you where people are |
| Put written limits on contract authority for anyone working outside a local entity | Let remote sales staff negotiate price or terms and send deals home only to be signed |
| Hire through a local entity or an employer of record when the role is long-term | Keep a foreign hire on home-country payroll “until we decide” |
| Set an end date and a review date for every temporary remote arrangement | Let a three-month exception roll on for two years without a review |
| Check the specific treaty for service PE clauses and day thresholds | Assume the 183-day rule works the same way in every country |
| Keep company signage, equipment leases, and listed addresses out of employees’ homes | Pay rent for an employee’s home office or list it as a business address |
| Document what each foreign worker does and doesn’t do | Write job descriptions that say “responsible for the regional market” if that isn’t true |
| Review the PE position before funding rounds, audits, or an acquisition | Wait for a tax inquiry to find out where your exposure sits |
Tools and Services to Help Manage PE Risk
Establishment of Foreign Subsidiaries
The possibility of a PE being formed can be decreased by establishing an independent legal company, such as a subsidiary, in a foreign nation to help separate the operations and risks. The foreign corporation can conduct business locally through a subsidiary, which may be subject to different regulations and tax laws than its parent organization. This can lessen exposure to PE risk and any tax penalties in the jurisdiction of the host country.
Use double taxation agreements
Most countries have bilateral tax treaties in place that address PE and double taxation. These treaties typically specify the conditions under which PE is created, the rate at which treaty-country profits are taxed, and the mechanisms for avoiding the same income being taxed twice. Structuring international operations to take advantage of applicable treaty provisions, with qualified tax advice, is a core part of PE risk management for any company with significant cross-border activity.
Read Also: How an EOR mitigates PE risk
Three PE Scenarios From Real Hiring Patterns
The scenarios below are illustrations, not client cases. Each shows how the same question gets a different answer depending on role, time, and treaty.
Scenario 1: The engineer who moved to Portugal
A US software company lets a senior engineer relocate to Lisbon. She writes code for the core product, has no customer contact, and works from her apartment. Corporate PE risk is low. Her personal tax residency and Portuguese social security are the real issues to resolve.
Scenario 2: The business development lead in India
A UK company sends a business development lead to Bengaluru for eight months. He books meetings, agrees on pricing with prospects, and sends contracts to London for signature. That creates two live triggers: a service PE clock under the treaty and a dependent agent pattern.
The fix is to move him to an employer of record or a local entity. He should also hand pricing and final terms back to the home team. Both changes are needed; either one alone leaves a gap.
Scenario 3: The installation project that ran long
A German equipment maker plans a seven-month installation at a client site abroad. Delays push it to fourteen months. Depending on the treaty, the construction PE threshold may be six, nine, or twelve months. The overrun alone can create a PE.
The lesson is to track project duration against the treaty threshold from day one. Get advice at the halfway point, not after the deadline has passed.
Run a local EOR with national-grade EOR operations
Accurate payroll, on-time benefits enrollment, and fast answers decide whether clients renew. PHRBO is the workforce operations platform EORs and PEOs use to run HR, payroll, and back-office work from one system.
FAQs
What is PE risk?
PE risk is the chance that a foreign tax authority decides your company has a taxable presence in its country. That usually comes from employees working there, people signing deals there, or a fixed workplace. A finding brings local corporate tax, often backdated.
How do I avoid permanent establishment when hiring internationally?
Hire through an employer of record or a local entity rather than keeping foreign workers on home payroll. Limit their authority to negotiate or sign contracts. Track their days in country, and get local tax advice before any role becomes long-term or revenue-facing.
What are the main permanent establishment risk factors?
The six to check are days in country, the person’s role, their authority over contracts, whether they generate local revenue, where they work, and whether the arrangement has an end date. Two or more high-risk answers mean you should get advice.
How does PE risk affect tax?
If a PE is found, the host country taxes the profits attributed to it at its corporate rate, plus interest and penalties for past years. You may also owe payroll tax and social security there, and you need treaty relief to avoid paying twice.
Does hiring a remote employee abroad automatically create PE?
Not automatically. PE depends on what the employee does, how long they have been in the country, and whether they have authority to commit the company to contracts. A software engineer writing code remotely is generally lower risk than a sales director negotiating deals with local clients.
What is the 183-day rule?
Under most tax treaties, an employee working more than 183 days in a country usually owes income tax there personally. Where a treaty has a service PE clause, the same threshold can also create a PE for the employer. The exact test varies by treaty.
Does an employer of record eliminate permanent establishment risk?
No, but it removes the largest source of it. The EOR becomes the local employer, so your company has no employees or payroll in that country. Risk remains if the worker habitually concludes contracts for you, or works from an office you control.
Which countries are most aggressive in enforcing PE rules?
India, France, and Germany have reputations for active PE enforcement. The US presents a more complex picture because state-level nexus rules operate separately from federal treaty provisions, and enforcement varies considerably by state.
How far back can a tax authority assess PE liability?
This varies by jurisdiction and statute of limitations rules. In many countries, the assessment window is five to seven years, though it can be longer in cases of fraud or wilful non-disclosure. The retroactive nature of PE assessment is one of the reasons early identification matters so much.
What is the difference between PE risk and worker misclassification?
These are distinct but related risks. Worker misclassification is about whether an individual should be classified as an employee or an independent contractor under local labor law. PE risk is about whether the company has created a taxable presence in a foreign jurisdiction. Both risks often arise from the same underlying situation — a person working in a foreign country — which is why they are frequently managed together.
Final words!
Permanent establishment risk builds quietly. It grows one workday, one sales call, and one unreviewed exception at a time. The companies that avoid it are not the ones with the most lawyers. They are the ones who know where their people are and what they are doing.
Start with a list of everyone working outside your home country, then score each person against the risk factors above. Anyone who scores high needs a decision this quarter: move them to an employer of record, set up an entity, or change the role.
