Employer of RecordApril 17, 2026by Soham VaghelaPermanent Establishment Risk: A Complete Guide to International Tax Compliance

Permanent establishment (PE) risk is the tax exposure a company creates when its cross-border business activities – employees, contracts, office space, or digital presence – cross a threshold that triggers corporate income tax obligations in a foreign country. For companies hiring across the EU/UK-India corridor, PE risk is one of the most common and costly compliance failures. This guide explains how PE is triggered, what the consequences are, and how to structure international hiring to avoid it.

The rise of remote work, digital business models, and cross-border service delivery has made PE determinations more complex than ever. Tax authorities in India, the United Kingdom, Germany, and across the EU are increasingly aggressive in asserting PE claims particularly against technology companies and digital service providers.

Permanent establishment (PE) is a threshold concept in international taxation that determines when a foreign business has sufficient presence in a country to be taxed on its local profits. PE risk arises when a company’s activities in a foreign jurisdiction may inadvertently create a taxable presence, subjecting the business to local corporate income tax.

The concept of PE is the cornerstone of international tax treaties and domestic tax laws worldwide. It sets the minimum level of economic activity before a country can tax a foreign enterprise’s business profits protecting businesses from being taxed everywhere they operate minimally, while ensuring countries can tax substantial operations within their borders.

The modern interpretation of PE has evolved significantly, especially with the OECD’s Base Erosion and Profit Shifting (BEPS) initiatives and increasing digitalization of the global economy. Today’s PE determinations must consider virtual presence, digital services, and the changing nature of remote work.

Understanding the different types of PE risk is essential for proactive risk management. Each type has unique triggers and requires specific mitigation strategies. PE in India is determined by the criteria set out in article 5 of most tax treaties and related provisions, which define the types and triggers of a permanent establishment (PE).

Several categories of business activity and arrangement can inadvertently create permanent establishment risk exposure. Understanding these triggers is key to proactive risk management.

The presence of employees, contractors, or facilities in a foreign jurisdiction is the most obvious PE risk factor. This includes permanent offices, temporary project sites, warehouses, manufacturing facilities, and home offices used by employees for business purposes. Duration matters: regular or long-term presence creates PE risk; brief visits generally do not.

A place of business in a foreign country, such as India, can itself trigger PE risk if it is the place of business through which the business of the enterprise is carried out. This includes not only physical offices but also any place of business through which the activities of an enterprise are conducted, such as through employees, agents, or contractors. The place of business through which the business of the enterprise operates—whether via direct presence, secondment, or stewardship—plays a crucial role in determining PE status.

Operational arrangements, such as the business through which the enterprise provides services or manages projects, can also create PE exposure. It is important to assess whether the business of the enterprise is being conducted through a fixed place of business or through arrangements that amount to a place of business in the host country. The specific facts of an arrangement, including the place of business through which the activities are performed, are critical in evaluating the risk.

In summary, the business of the enterprise, the place of business in the foreign country, and the manner of business through which the activities are carried out are all key determinants for permanent establishment risk.

Post-2020, remote work has become one of the fastest-growing PE risk categories globally. When an employee works regularly from their home in a foreign country, that home may qualify as a fixed place of business for the employer – particularly if the employee conducts core business activities or has authority to conclude contracts.

The location where key decisions are made and contracts are negotiated directly impacts PE risk. When employees or representatives have authority to bind the company or make significant business decisions from a foreign country, PE risk increases substantially. This has become more complex with remote work, as decision-making authority may now be exercised from multiple locations.

The increasing digitalization of business operations has created new PE risk factors. Server locations, data processing activities, user interactions, and digital platform operations can all contribute to PE determinations under evolving international tax rules. Many jurisdictions, India in particular are developing specific rules to address digital business models.

The potential impacts of unmanaged PE risk extend far beyond simple tax obligations, creating cascading compliance and business risks that can severely damage operations and profitability.

• Corporate income tax on all profits attributable to the PE – India applies a base rate of up to 40% for foreign companies

• Withholding tax obligations on payments made to the foreign company

• Mandatory local tax return filing for every assessment year the PE is deemed to have existed

• Transfer pricing scrutiny if intercompany transactions exist between the PE and home entity

• Penalties under India’s Income Tax Act can reach 100-300% of unpaid tax amounts

• Interest on unpaid taxes compounds annually – some jurisdictions impose rates exceeding 20% per annum

• Penalties can accumulate retroactively if PE is discovered years after the relevant activities occurred

• Ongoing obligations: local tax return filing, financial statement preparation, record-keeping to local accounting standards

• Audit exposure: Indian tax authorities are increasing scrutiny of foreign company arrangements, especially in technology and services

• Significant investment required in local expertise, legal representation, and documentation systems

• Tax disputes must be disclosed by listed companies as material controversies – reputational damage with investors and customers

• In extreme cases, tax authorities may restrict business operations or impose collection measures that disrupt normal operations

• PE disputes can take years to resolve and distract management from core business activities

India PE risk has gained significant importance due to the country’s aggressive tax enforcement and evolving digital economy rules. India and other countries have specific rules for determining when a foreign or a non resident company is deemed to have a permanent establishment. The Indian tax authorities focus on whether the activities of a foreign enterprise or a non resident entity are carried out in India, as this can trigger PE status. India’s approach to PE reflects its position as a major emerging market seeking to capture tax revenues from foreign businesses benefiting from its large consumer base and engineering talent pool. Companies may have a permanent establishment if their activities meet the relevant criteria under Indian tax law.

India’s Income Tax Act aligns with international standards but includes domestic-specific provisions. The country’s ‘business connection’ rules can create tax obligations even without a traditional PE. India’s Significant Economic Presence (SEP) rules introduced under the Finance Act 2018 are a significant departure from traditional PE concepts: they focus on revenue thresholds and user engagement rather than physical presence, directly impacting digital businesses and e-commerce companies.

Indian tax authorities have become significantly more aggressive in asserting PE claims against foreign companies, particularly in technology and digital services. Detailed scrutiny of business arrangements, employee activities, and decision-making processes to establish PE exposure has become standard practice. Foreign companies operating in India face increasing compliance burden and audit risk in 2025 and 2026.

The case illustrates how modern business arrangements including employee secondments, local infrastructure support, and shared services can create unexpected PE exposure for companies that consider themselves purely digital. The Netflix situation proves that even digital service providers cannot entirely avoid physical presence considerations when they embed personnel or operations in a country.

• Structuring international operations to minimize PE risk is essential whenever employees or infrastructure support cross-border services

• Comprehensive documentation and substantive substance are required when claiming treaty benefits to avoid double taxation

• PE determinations in the digital economy continue to evolve traditional concepts must adapt to new business models and revenue streams

• Tax authorities worldwide are becoming more sophisticated in identifying and pursuing PE claims against foreign businesses, including purely digital ones

Effective PE risk management requires a holistic approach combining proper business structuring, operational controls, documentation, and ongoing monitoring. It must be embedded in international expansion strategy from day one, not retrofitted after the fact; for many companies this includes evaluating whether EOR vs PEO services are the better fit for managing international teams.

• Use independent distributors rather than dependent agents to reduce agency PE exposure

• Limit local employee activities to preparatory or auxiliary functions – tasks that support the main business rather than constitute its core operations

• Restrict contract-signing authority to home-country personnel; ensure local representatives do not habitually conclude contracts on the company’s behalf

• Ensure substance in any intermediary entities used for treaty planning – hollow structures are increasingly challenged by tax authorities

• Implement and enforce clear remote work policies that track time spent by employees in foreign countries

• Monitor the nature of activities conducted by local employees to ensure they remain preparatory or auxiliary

• Manage contract negotiation and signing processes to prevent inadvertent agency PE creation

• Train relevant personnel on PE risk triggers and their obligations to report changes in work location or role scope

• Maintain defensible documentation for every international arrangement: employment contracts, role definitions, communication flows, and decision-making records

• Preserve evidence of business substance – economic substance analysis, transfer pricing documentation, and records supporting the business rationale for chosen structures

• Keep records showing the absence of a taxable local presence: no regular, fixed place of business; no contract authority; no service delivery beyond time thresholds

The EOR Mechanism

When a company hires through an Employer of Record (EOR) like PamGro, the EOR becomes the legal employer of the workforce in the target country. Employment contracts, payroll, and compliance sit under the EOR’s local entity, not the foreign company. Because the legal nexus sits with the EOR, the hiring company avoids creating a fixed place, agency, or service PE. The foreign company retains full operational direction of the team while the EOR holds all legal employer obligations.

After supporting 100+ companies expanding into India, PamGro has developed a four-pillar PE risk management approach:

• Legal Employment Separation: PamGro hires your team under its local entity, keeping employment and compliance cleanly separated from your global HQ and limiting exposure to fixed place, agency, or service PE triggers.

• Smart Role Structuring: PamGro defines job scopes, reporting lines, and work structures to ensure local teams stay outside PE-triggering activities such as concluding contracts or revenue generation.

• Real-Time Compliance Monitoring: PamGro’s in-house legal and payroll specialists track every update from CBDT, GST, FEMA, labor law, and international treaty guidelines so your structure stays ahead of audits.

• Documented PE Risk Audit Trail: PamGro maintains defensible documentation for every client contracts, classification, and communication flows to support your non-PE status if questioned by Indian tax authorities.

Permanent establishment risk is one of the most consequential and most misunderstood compliance challenges facing companies that hire or operate internationally. As global hiring becomes more distributed and tax authorities in India, the UK, and across the EU become more aggressive, PE risk is no longer a concern only for large multinationals.

For seed-to-Series C technology companies building engineering teams in India, or for Indian SaaS businesses employing sales staff in Europe, the practical answer to PE risk is almost always the same: use an Employer of Record to establish a compliant, scalable employment infrastructure before the PE clock starts ticking.

PamGro has supported 100+ companies across the EU-India and UK-India corridor to build compliant teams without triggering PE exposure through its customer-centric EOR and PEO solutions. If you are planning an international hiring move or are concerned about existing arrangements, speak to our team before the structure is in place, not after.

In India, PE can be triggered by maintaining a fixed place of business, having an employee or agent who habitually concludes contracts on the company’s behalf, delivering services for more than 90 days in a 12-month period under most DTAAs, or exceeding the Significant Economic Presence threshold of INR 2 crore in revenue or 3 lakh Indian users.

Yes. Remote employees working from a foreign country can create PE risk for their employer. If an employee regularly works from home in a country where the employer has no entity, that home office may qualify as a fixed place of business especially if the employee has authority to conclude contracts or conducts core business activities on the employer’s behalf.

Triggering PE means the company becomes subject to local corporate income tax on profits attributable to the PE, withholding tax obligations, mandatory local tax filing, and potential audit exposure. In India, foreign companies face a base corporate tax rate of up to 40%. Penalties for non-compliance can reach 100-300% of unpaid taxes, with compounding interest.

A tax treaty (Double Taxation Avoidance Agreement, or DTAA) defines the threshold at which one country can tax the profits of a company from another signatory country. PE is that threshold concept within the treaty. Without crossing the PE threshold, treaty protections generally shield the company from local corporate income tax on business profits.

India’s Significant Economic Presence (SEP) rule, introduced under the Finance Act 2018, extends PE-like tax obligations to foreign digital businesses even without a physical presence. A foreign company is treated as having a taxable presence in India if it earns more than INR 2 crore from Indian customers or has more than 3 lakh Indian users in a financial year.

Companies can reduce PE risk by structuring local operations through an Employer of Record, limiting local employees to preparatory or auxiliary roles, restricting contract-signing authority to home-country personnel, monitoring time spent by employees in foreign countries, and maintaining clear documentation showing the absence of a taxable local presence while also understanding how much an Employer of Record costs. Legal entity setup should be deferred until the business case is established.