What is Permanent Establishment Risk & How to Avoid It?

Expanding your business internationally is exciting until you accidentally trigger permanent establishment risk and find yourself facing unexpected tax obligations in a foreign country.

If you're a global company hiring talent or running business activities abroad, understanding PE risk isn't optional.

One wrong move (a long-term project, remote workers with the wrong responsibilities, or someone signing contracts on your behalf) can create a taxable presence that lands you with corporate income tax bills, compliance headaches, and penalties from local tax authorities.

In this guide, We'll walk you through what permanent establishment actually means, the specific triggers that create tax liabilities, what happens if you cross that line, and most importantly, how to avoid permanent establishment risk while still growing your global workforce.

Whether you're hiring in India or operating in multiple foreign jurisdictions, you need to get this right.

What is Permanent Establishment Risk?[toc=What is PE]

Permanent establishment risk is the possibility that your company's business activities in a foreign country create a taxable presence there, making you liable for corporate income tax, filing obligations, and penalties in that jurisdiction.

Here's a real-world example:

Your company is based in the US, but you have an employee working from their home office in India, or a sales rep closing deals in Germany. That country's tax authorities may determine you've crossed a threshold called "permanent establishment" (PE). Once that happens, you owe taxes on the income generated through that presence and you're required to comply with local tax laws. If you haven't been paying, penalties can be retroactive.

PE is not about intent. It's about how local tax authorities and tax treaties interpret your activities. A remote worker signing contracts, a consulting project that runs too long, or a dependent agent negotiating deals can all inadvertently create a PE.

The concept is primarily governed by Article 5 of the OECD Model Tax Convention, which serves as the framework for most bilateral tax treaties. Each country also has its own domestic tax laws defining taxable presence, and these can be stricter than treaty definitions.

Why PE risk matters more in 2026

Three shifts have made this a bigger issue than ever:

• BEPS Action 7 tightened definitions: The OECD expanded the dependent agent PE definition, narrowed "preparatory and auxiliary" exemptions, and added anti-fragmentation rules. Activities that were safely below the PE threshold before 2017 may now trigger it.
• Remote work created new exposure: The OECD's November 2025 update introduced a 50% working time benchmark and a commercial reason test for home office PE assessments, the first comprehensive revision to Article 5 since 2017. This signals that tax authorities are actively watching remote arrangements.
• Enforcement is intensifying: Tax authorities are increasingly scrutinizing remote arrangements, especially in high-enforcement jurisdictions like India that may apply stricter interpretations than the OECD model. Companies are getting audited for PE violations they didn't know they had.

If your company has any employees or significant business operations in a foreign country, PE risk is something you need to actively manage, not ignore.

What are the three main types of permanent establishment?[toc=Types of PE]

There are three primary types of PE recognized under international tax law, plus two emerging categories. Each triggers corporate income tax obligations in a foreign country through a different mechanism.

1. Fixed Place of Business PE

This is the most straightforward type. Under the OECD Model, a fixed place of business PE requires three elements: a link to a specific geographic location, a degree of permanence, and actual business activities being carried on through that place.

Classic examples include offices, branches, factories, warehouses, and mines. But it also extends to home offices if the space is "at the disposal" of the company (not just the employee's personal convenience), and coworking spaces with fixed desk arrangements. Construction or installation sites can also constitute a PE, typically if they exceed 12 months under the OECD Model.

The Formula 1 Case That Redefined ‘Permanence’ in PE

Companies often assume that if they are only in a country for a few days or weeks, they cannot possibly trigger the "permanence" requirement of a Permanent Establishment.

• How They Ignored the Risk: Formula One World Championship Ltd. (a UK entity) brought the F1 race to India. They argued that a three-day racing event could not constitute a PE because of the extremely short duration.
  
• The Reality & Consequence: In a landmark ruling, the Supreme Court of India held that the Buddh International Circuit (the race track) was completely "at the disposal" of F1 during the event. F1 controlled access, ticketing, and broadcasting. The court ruled this constituted a Fixed Place PE.
  
• The Loss: F1 became liable to pay Indian taxes on a portion of its global broadcasting, sponsorship, and ticketing revenues that were attributable to the Indian race, costing the company millions in taxes they had not provisioned for.

2. Dependent Agent PE (DAPE)

This type is triggered by people, not places. A dependent agent PE occurs when someone habitually negotiates or concludes contracts in a foreign country on behalf of your company. After BEPS Action 7, this definition was expanded to include agents who play a leading role in contract negotiations, even if they don't formally sign the deal.

The agent must be dependent on your company (not an independent agent acting in their ordinary course of business) and must habitually exercise authority to conclude contracts. "Habitually" implies a certain frequency, and theoretically even a short stay could trigger a dependent agent PE if contracts are being concluded.

Example: Your UK-based sales representative regularly closes deals with French clients on behalf of the parent company. That's a dependent agent PE in France.

3. Service PE

Recognized under the UN Model Tax Convention and adopted by many countries. A service PE can be established based on the duration and nature of service activities performed in the host country, even without a fixed physical location.

The threshold varies by jurisdiction and specific tax treaty. Common benchmarks range from 90 days to 183 days within a 12-month period. Critically, cumulative time across multiple employees providing services can count toward the threshold.

Example: A Canadian consulting firm sends rotating teams to a client project in Singapore. No individual exceeds 90 days, but collectively the firm has people on the ground for 8 months. That could trigger a service PE.

Emerging categories to watch

• Construction PE: A subset of fixed place PE with its own duration thresholds (12 months under OECD, but as low as 6 months in some bilateral treaties).
• Digital/Virtual PE: The UN Model Tax Convention's Article 12B grants source countries the right to tax income from automated digital services based on "Significant Economic Presence," even without physical presence. Several countries have already moved in this direction with digital services taxes.

What triggers permanent establishment risk?[toc=Common Triggers for PE Risk]

PE doesn't happen by accident in the legal sense, but it absolutely happens without companies realizing it.

The triggers fall into five categories, and understanding each one helps you assess where your exposure actually sits:

1. Physical presence triggers

• Leasing or owning office space in a foreign country, even a small one, is the most obvious trigger. This includes branch offices, warehouses, manufacturing facilities, and distribution centers.
• Home offices used regularly for business can qualify if the space is at the company's disposal, not just the employee's personal choice. The critical factor is not who owns the space, but whether the company effectively controls its use for business purposes.
• Coworking spaces with a fixed desk or dedicated arrangement (not a hot desk used occasionally) can also constitute a fixed place of business.

2. Employee and agent activity triggers

• Contract-signing authority is the biggest red flag. If a senior executive travels to a country and signs a major service agreement, a dependent agent PE may exist regardless of how brief the stay was. The act, not the duration, is determinative.
• Sales activities and deal negotiation by employees in a foreign jurisdiction, especially if they habitually exercise authority to conclude contracts on behalf of the parent company.
• Senior management presence: C-suite executives or decision-makers regularly operating from a foreign location, making significant decisions that affect the company's business operations.
• Core business functions vs. support roles: Employees performing revenue-generating activities (sales, product development) carry far higher PE risk than those in purely auxiliary roles (administrative support, IT maintenance).

3. Duration and continuity triggers

• Six months is a common benchmark for fixed place of business PE in many jurisdictions.
• 183 days is the typical threshold for service PE under many tax treaties, though some treaties set it as low as 90 days.
• Construction PE thresholds are usually 12 months under the OECD Model, but can be as short as 6 months in certain bilateral treaties.
• Cumulative time matters. Previous trips in a country may be taken into account, as accumulated duration can be considered when evaluating whether PE has been triggered.
• Recurrent short visits by multiple employees can aggregate toward duration thresholds, even if no single person exceeds them.

4. Authority and decision-making triggers

• Employees or agents who habitually exercise authority to conclude contracts on behalf of the company in a foreign jurisdiction.
• Local staff making significant business decisions (pricing, strategy, hiring) rather than just executing decisions made at headquarters.
• The distinction between negotiating contracts (higher risk) and merely communicating terms decided by the home country office (lower risk) matters significantly.

5. Revenue-generating vs. auxiliary activities

This is where many companies get tripped up. Under Article 5(4) of the OECD Model, activities that are "preparatory or auxiliary" in nature are generally exempt from creating a PE. But after BEPS Action 7 narrowed these exemptions, the bar for what qualifies as truly auxiliary is higher.

• Higher risk: Sales, client management, deal closing, product development, strategic decision-making.
• Lower risk: Storage, purchasing goods for display, collecting information, or other activities that support but don't directly drive the core business.
• Preparatory or auxiliary work like storage, display, or purchase of goods does not qualify as PE, but the activities must be genuinely supportive, not core business functions dressed up as support roles.

The key takeaway: PE risk isn't binary. It's a spectrum based on multiple risk factors, and many tax authorities will look at your business activities holistically rather than checking one box at a time.

How does remote work create permanent establishment risk?[toc=Remote Work Create PE]

This is where PE risk has changed the most in recent years. Before 2020, PE was mostly about offices and factories. Now, a single remote employee working from their apartment in another country can potentially create a taxable presence for your company.

The OECD's new two-part framework (November 2025)

The OECD's November 2025 update introduced a two-part framework for assessing PE risk from cross-border remote work: a 50% working time safe harbor and a "commercial reason" test.

Here's how it works:

• Step 1 (Time test): If an employee spends less than 50% of their working hours at a foreign location over a rolling 12-month period, that location is generally not considered a place of business. This is based on actual time worked, not what's written in the employment contract. Below 50%, you're typically safe.
• Step 2 (Commercial reason test): If the employee exceeds 50%, the question becomes whether there's a genuine commercial reason for them to be in that country. Factors include business ties to the location like serving local clients, accessing regional markets, or supporting on-site operations. Remote work driven primarily by employee preference or talent retention generally does not create a PE.

When remote workers create PE (high risk)

• Employees with contract-signing authority or who habitually negotiate deals from a foreign location.
• Revenue-generating roles like sales, business development, or client management based in the host country.
• Founders or key executives who habitually perform essential business functions from a home office abroad. The OECD guidance is especially clear here: if one person essentially is the business and operates from a foreign country, that home office will very likely be treated as the company's place of business.

When remote workers don't create PE (lower risk)

• Support staff, administrative roles, or purely auxiliary functions.
• Employees working remotely for personal reasons (family, lifestyle) without any business-driven reason to be in that country.
• Occasional visits to clients, like quarterly meetings, generally fall short of the commercial reason standard.

The catch: not every country follows the OECD

High-enforcement jurisdictions like India and other non-OECD countries may deviate from the OECD Model, and the temporal test may not apply. India specifically does not accept the new 50% threshold and commercial reason tests. So while the OECD framework gives helpful guardrails, you still need to check the specific tax treaties and local tax laws for every country where your remote workers are based.

What are the consequences of triggering permanent establishment?[toc=Consequences of Creating a PE]

If you're wondering whether PE risk is worth worrying about, this section should settle that. The consequences go well beyond just paying taxes in the host country. They cascade quickly..

Corporate income tax liability

Permanent establishments are typically subject to corporate income tax on profits attributable to the PE, with rates and obligations varying by jurisdiction and influenced by applicable tax treaties.  Depending on the country, you could be looking at 20-30% on attributed profits.

Retroactive assessments, penalties, and interest

PE assessments can be retroactive, with tax authorities going back years to assess corporate income tax liability plus interest and penalties for the entire period the PE existed. You won't just owe taxes from the point of discovery, but from when the PE was actually created.

Cascading compliance obligations

A PE triggers mandatory registration with local authorities, requirements for compliant accounting records, obligations to collect and remit VAT or GST, payroll tax registration, withholding requirements, and social security contributions. One unplanned PE can snowball into a full local compliance operation.

Double taxation risk

If both the host country and your home country tax the same income, you're paying twice. Tax treaties can provide relief, but only if you're aware of the PE and have proper documentation in place. Unintentional PEs rarely come with clean records.

Reputational damage and increased scrutiny

Companies face increased audit frequency and scrutiny from local tax authorities. Once flagged for a PE violation in one country, expect closer attention to your operations in other jurisdictions too.

Real-world example

A US software company had a senior sales executive relocate to Germany and continue her role remotely, regularly meeting clients and finalizing agreements. After 18 months, a German tax audit identified a PE, resulting in corporate tax liability on German sales, retroactive VAT obligations, penalties, and a requirement to register a formal branch office.

How to avoid permanent establishment risk?[toc=How to Avoid]

There's no single fix for PE risk. The right approach depends on your business objectives, risk tolerance, and how deep your operations run in the foreign country.

But these are the proven strategies that work, and most companies need a combination of them:

1. Use an Employer of Record (EOR) for foreign hires

This is the most common and practical strategy for companies that want to hire in a foreign country without creating a direct taxable presence. The EOR operates as the official employer, meaning your company is not seen as having a direct presence in the foreign jurisdiction.

The EOR legally employs the workers on your behalf, handles payroll, tax withholding, social security contributions, and local employment compliance. Your company directs the day-to-day work, but the legal employment relationship sits with the EOR.

That said, an EOR like Wisemonk reduces PE risk significantly but doesn't eliminate it entirely. Long-term or strategic operations that resemble a branch or subsidiary in everything but name may still trigger PE, as tax authorities can look past the EOR arrangement. An EOR works best for small teams, market testing, and situations where you're not yet ready to set up a local entity.

2. Limit contract-signing authority for foreign employees

This directly addresses dependent agent PE risk. Ensure no one in the foreign jurisdiction habitually exercises authority to conclude contracts on your behalf. Keep contract approvals, pricing decisions, and deal sign-offs centralized in your home country.

If you have sales staff abroad, structure their roles so they negotiate but don't conclude contracts. The distinction between "playing a role in negotiations" and "habitually concluding contracts" is critical under the OECD framework. Document this clearly in employment contracts and internal policies.

3. Structure roles as auxiliary rather than core

Employees performing revenue-generating activities (sales, product development, strategic decision-making) carry far higher PE risk than those in support roles. Where possible, structure foreign roles as genuinely preparatory or auxiliary: customer support, research, IT maintenance, administrative functions.

The key word is "genuinely." After BEPS Action 7 narrowed the auxiliary exemptions, tax authorities will look at what employees actually do, not just their job titles. Document that activities are support functions, not core business operations.

4. Monitor duration of employee presence

Establish clear policies prohibiting employees from working in foreign jurisdictions beyond specified periods. Require pre-approval for any international relocation, even temporary. Use technology to track where remote workers are physically located.

Track cumulative days per country per employee. Implement approval processes before anyone approaches duration thresholds (183 days, 90 days, or whatever the relevant treaty specifies). Rotate employees before thresholds are reached if you're running project-based work.

5. Use independent contractors carefully

Engaging truly independent contractors rather than employees can reduce PE risk because an independent agent acting in the ordinary course of their own business generally doesn't create PE. But misclassification makes things worse, not better. The contractor must be genuinely independent: serving multiple clients, controlling how work is done, and not having authority to bind your company.

6. Establish a local subsidiary for significant operations

If your operations in a foreign country are substantial and long-term, setting up a local entity (subsidiary) may actually be the cleanest path. A subsidiary creates clear legal separation between the parent company and local operations, with its own tax filings and compliance structure.

Important caveat: a subsidiary does not automatically eliminate PE risk for the parent company. If subsidiary employees act as dependent agents for the parent, or if parent company employees use subsidiary premises as a fixed place of business, the parent can still trigger PE separately.

7. Document everything and maintain detailed records

This is the strategy that ties all the others together. Maintain written contracts clearly defining scope, authority limits, and location of services. Keep time logs documenting employee and contractor presence in each country. Maintain board resolutions and approval chains showing where significant decisions are made.

If tax authorities ever challenge your PE status, your documentation is your defense. Evidence that activities are auxiliary, that decision-making authority stays at headquarters, and that duration thresholds weren't breached is what keeps you on the right side of a PE assessment.

Get Started with Wisemonk EOR[toc=Wisemonk EOR]

If you're looking to hire employees in India without triggering permanent establishment risk, Wisemonk handles this exact challenge for global companies.

Here's how we eliminate PE risk:

1. Your employees work under our legal entity in India, not yours.
2. We become the Employer of Record, managing everything from payroll and social security contributions to local employment laws compliance.
3. You get access to talent in India without establishing a physical presence or creating tax obligations there.

We've helped 300+ companies from the US, UK, France, Canada, and other countries expand into India while maintaining compliance with local tax authorities.

Our team manages $20M+ in payroll for 2,000+ employees, so we understand exactly how to structure business operations to avoid inadvertently creating a taxable presence.

You focus on growing your business. We handle the legal and compliance issues, tax risk, and all the complexities of operating in a foreign jurisdiction.

Ready to expand into India without the PE headache? Book a Call Now!