Last updated: June 2026
Permanent establishment risk is the chance that hiring or operating in a foreign country creates an unintended taxable presence there. Once triggered, the host country may tax part of your company’s profits.
Deloitte’s 2026 Global Tax Policy Survey found that 40% of tax and finance leaders across 28 jurisdictions name rising compliance complexity as the biggest driver of operational impact on their business (Deloitte, 2026). For US companies building distributed teams, PE risk often goes unnoticed until a tax authority flags it.
What Triggers Permanent Establishment Risk?
A permanent establishment gets created when a business crosses from “visiting” a country to “doing business” there. Tax authorities look for specific signals, not vague impressions.
The most common triggers are:
- A fixed place of business, such as an office, warehouse, or project site.
- An employee or agent who regularly signs or finalizes contracts locally.
- A construction or installation project that runs past a treaty-defined time limit.
- Remote workers whose home office functions as a de facto business location.
Each trigger can apply even without a formal local entity. A foreign subsidiary does not automatically create a PE for its parent. But PE can arise if the parent has subsidiary premises at its disposal, carries on its own business through that place, or if the subsidiary acts as a dependent agent under the applicable treaty.
How Did The 2025 OECD Update Change Remote Work PE Rules?
The OECD’s 2025 update to the Model Tax Convention added guidance for remote and hybrid work arrangements. It clarifies when a home office abroad may count as a fixed place of business for the employer.
A home office is not automatically a PE. The analysis depends on facts and circumstances, such as whether the employee works there continuously, whether the employer requires or directs the arrangement, whether there is a commercial reason for the employee to be in that country, and how much working time is spent there.
US companies with remote hires in other countries should review these factors before assuming a distributed setup is safe.
What Are The Consequences Of Triggering PE?
Getting PE wrong is not just a paperwork problem. It can create tax exposure with compounding penalties.
A company that triggers PE may face:
- Corporate tax on profits attributed to the host country.
- Double taxation if the home country also taxes the same income.
- Local registration, payroll withholding, and statutory filing duties.
- Audits and back-tax assessments years after the activity occurred.
US companies may also face international information-reporting obligations depending on the structure. Form 5471 can apply where a US person has a reportable interest in certain foreign corporations, while Form 8858 may apply to certain foreign branches or foreign disregarded entities. These filings can carry significant penalties if missed, so PE reviews should involve a tax adviser before operations begin.
What Are The Different Types Of Permanent Establishment?
Tax authorities generally assess PE through several categories.
| PE Type | What Creates It | Common Example |
| Fixed Place Of Business | A physical office, branch, or facility | A leased office used for ongoing operations |
| Agency PE | A dependent agent who habitually concludes contracts | A sales rep closing deals in-country |
| Construction PE | A project exceeding a treaty time threshold | A build-out lasting over 9 to 12 months |
| Service PE / Remote-Work PE Risk | Ongoing services where recognised by treaty or local law | A home-based employee directed daily by HQ |
Thresholds vary by country and treaty. A setup that is safe in one market may trigger PE in another.
What Are Smart Ways To Reduce Permanent Establishment Risk?
There is no universal fix, but a few approaches consistently reduce exposure.
Use an Employer of Record. An EOR, such as Procloz, serves as the legal employer in the host country. This can reduce direct employment-administration risk tied to local contracts, payroll, and statutory filings.
Limit signing authority. Keep contract negotiation and execution with headquarters staff, not in-country workers.
rack time against treaty thresholds. Many construction, project, and service PE rules use a 183-day or 6 to 12-month window, depending on the applicable treaty.
Document every in-country activity. Preparatory or auxiliary work, such as market research, is generally lower risk. Revenue-generating work needs closer review.
Set up a local entity for long-term presence. A registered subsidiary is often the most durable option once a market commitment becomes permanent.
EOR Vs. Local Entity Vs. Unmanaged Remote Hire: Which Reduces PE Risk?
| Factor | Employer Of Record | Local Entity Setup | Unmanaged Remote Hire |
| PE Exposure | Lower, with local employment structure | Lower once registered, but needs upkeep | Higher, with no compliance buffer |
| Setup Time | Days | Months | Immediate, but risky |
| Upfront Cost | Low | High | Low, but penalties can exceed savings |
| Best Suited For | Market testing, fast hiring | Long-term presence | Not recommended for ongoing work |
| Compliance Ownership | Shared with EOR partner | Held in-house | Held by hiring company |
A startup testing a new market often starts with an EOR. A company committing to permanent headcount may transition to a local entity over time.
How Does Data Handling Affect PE Exposure?
PE risk is not only about contracts and physical presence. Data handling is an adjacent compliance concern.
Transferring payroll records or employee data without proper safeguards can violate regulations such as the General Data Protection Regulation or local equivalents. Poor data practices may also support the view that business activity is happening locally in substance, strengthening a broader PE argument.
What Do Example Scenarios Show About PE Risk?
Consider a US software company that hires a sales representative in Germany without local registration. If that representative signs client contracts directly, German authorities may argue that a PE exists and assess back taxes for the unreported period.
Now compare that with a startup hiring marketing support in Spain through an EOR. The EOR handles the employment contract, statutory filings, and local payroll administration. The company can test market fit while reducing direct employment and compliance exposure.
The difference is not just the country or role. It is whether compliance is built into the hiring structure from day one.
PE Risk Checklist For HR, Legal, And Finance Teams
Before any cross-border hire or assignment:
- Review country-specific PE triggers.
- Choose an EOR or in-country payroll partner where appropriate.
- Withhold signing authority from remote workers.
- Track time spent on revenue-generating activity.
- Maintain dated contracts, time logs, and role descriptions.
- Reassess remote work against the 2025 OECD update.
- Involve a tax adviser before the hire goes live.
How Procloz Helps Reduce PE Risk In Global Hiring
Procloz helps companies hire internationally through employer of record support across 100+ countries. Through ProEmp, Procloz acts as the local legal employer for eligible hires, managing employment contracts, statutory benefits, payroll coordination, and locally compliant employment administration.
This structure can reduce common gaps that increase PE exposure, such as unclear contracts, unmanaged payroll, missed filings, and undocumented worker arrangements. It does not replace country-specific tax advice, and it does not eliminate PE risk where a worker signs deals, negotiates contracts, manages core revenue activity, or creates a fixed place of business.
For payroll-heavy needs, ProPay supports global payroll services, including multi-currency salary disbursement, tax withholding, and statutory payroll filings. For US companies, payroll services in the US bring the same execution model to domestic multi-state compliance, where nexus and payroll obligations also need careful management.
Conclusion
Permanent establishment risk is becoming harder to ignore as companies hire across borders, support remote work, and test new markets without opening local entities. The safest approach is to assess PE exposure before hiring, limit local signing authority, document employee activity, and choose the right structure for each country.
An EOR does not eliminate all PE risks, but it can reduce operational gaps that often cause problems, especially during early market entry. For long-term expansion, companies should combine EOR support, payroll controls, local documentation, and tax-adviser review to keep global hiring compliant and scalable.
Contact us for assistance.
Permanent Establishment Risk Frequently Asked Questions
1. What activity is most likely to create a permanent establishment?
Signing contracts on behalf of the company in a foreign country is the most common trigger. This applies to sales staff, country managers, or any worker with authority to bind the company, even without a physical office.
2. Can a fully remote employee trigger permanent establishment?
Yes. Following the OECD’s 2025 update, a home office can count as a fixed place of business if the employer directs the work closely and the arrangement is ongoing rather than occasional. Sporadic remote work carries a lower risk.
3. Does using an Employer of Record fully eliminate PE risk?
No structure eliminates PE risk entirely, but an EOR significantly reduces it. The EOR holds the employment contract and local compliance obligations, which removes the direct link between the worker’s activity and the parent company.
4. How long can a project run before it creates a construction PE?
Most tax treaties set a 6 to 12 month threshold, though some default to the OECD’s 183-day guidance. The exact figure depends on the specific treaty between the two countries involved.
5. What happens if a company discovers PE risk after the fact?
The company should document the activity immediately and consult a tax adviser before any filing. Voluntary disclosure is generally treated more favorably than discovery through an audit, though outcomes vary by jurisdiction.
