Permanent Establishment Risk from Remote Employees: A Compliance Guide

When a company permits employees to work remotely from a foreign country, it may inadvertently create a permanent establishment (PE) in that jurisdiction – triggering local corporate tax obligations, payroll registration duties, and potential transfer pricing exposure, even where no branch or subsidiary has been formally incorporated. The risk arises under both domestic tax law and applicable tax treaties, and it is heightened by the fact that tax authorities in many jurisdictions have sharpened their audit focus on cross-border remote work arrangements since the widespread normalisation of distributed working. Identifying and managing PE exposure before it crystallises is materially less costly than addressing it after a tax audit has commenced.

What Is a Permanent Establishment and Why Remote Workers Create One

A permanent establishment is broadly defined, across domestic legislation and tax treaties modelled on the OECD Model Tax Convention, as a fixed place of business through which the business of an enterprise is wholly or partly carried on. The classic examples – registered offices, branches, factories – are well understood. What is less appreciated is that a remote employee working habitually from a home office in a foreign country can satisfy this definition in two distinct ways.

First, a fixed place of business PE may arise if the employee uses a home or co-working location on a sustained basis and that location is, in some meaningful sense, at the disposal of the employer. Second, and often more dangerous in practice, is the dependent agent PE: if an employee habitually concludes contracts, or plays the principal role in leading to the conclusion of contracts, in the name of or on behalf of the enterprise, the enterprise may be treated as having a PE in that state regardless of whether the employee has a fixed place of work at all.

Anti-avoidance rules in a growing number of jurisdictions explicitly address artificial fragmentation of activities designed to stay below the PE threshold, so structuring arrangements solely to minimise the visible footprint of an employee's activity carries its own legal risk.

The Legal Basis: Treaties, Domestic Law and the OECD Framework

The primary analytical framework for most cross-border situations is the relevant bilateral tax treaty. Treaties modelled on the OECD Model Convention contain dedicated PE articles that establish both the threshold for existence and the exceptions (preparatory or auxiliary activities). Where no treaty exists, each country's domestic legislation applies independently, and the definition of PE can be considerably broader or narrower than the OECD standard.

The 2017 revisions to the OECD Model Tax Convention, introduced as part of the Base Erosion and Profit Shifting (BEPS) Action 7 recommendations, tightened the dependent agent definition and narrowed the scope of the auxiliary and preparatory activity exemptions. Many jurisdictions have incorporated these changes into their domestic law or updated treaty networks through the Multilateral Instrument (MLI). Companies operating across multiple jurisdictions should verify, treaty by treaty, whether the MLI modifications are in force for each relevant pair of states, as implementation timelines vary.

Transfer pricing obligations follow directly from PE status: once a PE is recognised, the profits attributable to it must be determined under the authorised OECD approach, which requires a functional analysis, comparability benchmarking, and contemporaneous documentation. This adds a significant compliance dimension that many companies underestimate when initially assessing remote-work arrangements.

How PE Risk Materialises in Practice: A Step-by-Step Exposure Map

Understanding the sequence in which PE risk accumulates helps organisations intervene at the right point rather than reacting after the fact.

• Step 1 – Employee location becomes sustained. A remote arrangement that begins as temporary becomes habitual. Most tax authorities look at the factual pattern over a period of time rather than applying a strict day-count rule; the question is whether the arrangement has acquired a degree of permanence. The relevant period differs by jurisdiction and by treaty.
• Step 2 – Business activity is attributed to that location. The employee's role is examined: Does she manage client relationships? Does she negotiate or sign contracts? Does she control inventory, service delivery, or strategic decisions? The more commercially substantive the role, the stronger the PE argument.
• Step 3 – Tax authorities become aware. Social security registrations, local payroll filings, employment contract disclosures, work permit applications, and bank account openings all generate data that revenue authorities may use. In many jurisdictions, information exchange under the Common Reporting Standard (CRS) and tax treaty exchange-of-information provisions accelerates this awareness.
• Step 4 – Assessment and audit. An assessment typically covers the period from when the PE is deemed to have arisen, not merely from the date of formal notification. Interest and penalties accrue on any under-declared corporate tax, and the burden of rebutting the assessment commonly falls on the taxpayer.
• Step 5 – Secondary consequences. Once a PE is established, the host jurisdiction may require local financial statement filings, statutory audits, VAT or indirect tax registration, and ongoing transfer pricing documentation – all of which persist for as long as the PE exists.

If your organisation is in the early stages of a remote-work expansion, our team can map your specific exposure before it progresses to Step 3. Please reach out at info@ferrazwhitmore.com or visit our contacts page to arrange an initial discussion.

Key Jurisdictional Considerations

While the OECD framework provides a common analytical starting point, the practical application of PE rules varies significantly across jurisdictions. The following considerations represent the most common patterns encountered in cross-border PE analysis; they are not exhaustive, and each situation requires analysis of the specific treaty and domestic law in force.

• Continental European jurisdictions generally follow the OECD Model closely but differ on how they apply the "at the disposal of" test to home offices. Some authorities have issued administrative guidance following the pandemic period; others have not, leaving practitioners to rely on general principles and case law.
• Common law jurisdictions (UK, Australia, Canada, among others) tend to apply a facts-and-circumstances test that places weight on the degree of control the employer exercises over the employee's workspace. A fully employer-equipped home office is treated differently from a situation where the employee uses personal space at her own initiative.
• Asian-Pacific jurisdictions frequently have domestic PE definitions that do not directly mirror the OECD Model, and their treaty networks may contain older provisions that have not been updated through the MLI. For companies with employees working remotely in this region, treaty-by-treaty analysis is essential. For work involving Japan specifically, our tax structuring practice for Japan addresses the particular features of Japanese PE analysis.
• Emerging market jurisdictions sometimes assert PE on the basis of service-fee payments alone, independent of physical presence, particularly under domestic source-of-income rules. This can create double taxation risk even where no employee is physically present in that country.

Documents and Evidence Your Organisation Needs to Maintain

Effective tax risk management in this area depends heavily on contemporaneous documentation. Assembling evidence after a tax audit notice has been received is both more expensive and less persuasive than maintaining records as part of routine compliance.

• Employment contract and remote work policy – specifying the approved work location(s), the duration of any remote arrangement, and the employee's authority (or lack thereof) to conclude contracts on behalf of the employer.
• Role description and authority matrix – documenting precisely what the employee is authorised to do: negotiate, propose, conclude, or merely transmit information.
• Travel and immigration records – calendars, expense reports, and visa or work permit records that substantiate the number of days spent in each jurisdiction.
• Correspondence records – email and communication records that evidence whether contracts are habitually concluded through or by the employee in the host state.
• Transfer pricing documentation – if a PE is accepted or likely, a functional analysis and profit attribution memorandum should be prepared to limit exposure on the quantum of any assessment.
• Local legal and tax registration status – records confirming whether any registration obligations in the host state have been assessed and, where required, discharged.

Common Errors Made by Foreign Companies

Several patterns of error recur across the PE cases our practice encounters.

• Treating PE analysis as a one-time exercise. A role assessed as auxiliary when the arrangement began may become substantive as the employee's responsibilities evolve. PE exposure should be reviewed whenever there is a change in the employee's duties, the duration of the arrangement, or the applicable treaty position.
• Conflating immigration compliance with tax compliance. A valid work visa or a compliant payroll registration does not resolve – and may in fact provide evidence for – a PE analysis. The two regimes operate independently.
• Assuming the "preparatory or auxiliary" exception will apply. This exception is narrower than it appears and has been further tightened under post-BEPS treaty provisions. An employee who handles client queries, reviews draft agreements, or manages a portfolio of accounts is unlikely to qualify.
• Overlooking social security and employment law exposure. Mandatory social security contributions, local employment law protections, and labour registration requirements may apply independently of whether a formal PE exists for corporate tax purposes. These are separate but overlapping compliance obligations.
• Failing to document the temporary nature of an arrangement. Tax authorities will look at what actually happened rather than what the contract says. A nominally temporary arrangement that runs indefinitely, without any formal renewal or review, is vulnerable to challenge.

Our corporate law practice works alongside our tax team to ensure that employment agreements, authority matrices, and governance structures support – rather than undermine – the desired tax position.

Decision Checklist: Assessing PE Exposure Before It Arises

The following checklist provides a structured starting point for any organisation reviewing a proposed or existing remote-work arrangement. It is not a substitute for jurisdiction-specific legal advice.

• In which country or countries will the employee physically work, and for how long?
• Is there a bilateral tax treaty in force between the employer's residence state and the employee's work state? Has that treaty been modified by the MLI?
• Does the employee have authority to conclude contracts, negotiate material terms, or take binding decisions on behalf of the employer?
• Does the employer provide, pay for, or exercise control over the employee's workspace in the host jurisdiction?
• Does the employee perform functions that go beyond preparatory or auxiliary support, as those terms are interpreted in the relevant treaty and domestic guidance?
• Are there any group intercompany arrangements (service agreements, cost-sharing arrangements, IP licences) that could interact with a PE finding to create a transfer pricing exposure?
• Has the arrangement been reviewed since the employee's role last changed?
• Are all relevant employment, immigration, social security, and indirect tax registrations in the host state current?

For organisations managing M&A transactions involving cross-border remote-work arrangements, PE exposure may also interact with tax warranty and indemnity structures. Our analysis on tax warranties and indemnities in M&A addresses how undisclosed PE risk is typically allocated in transaction documentation.

Managing Identified PE Risk: Practical Approaches

When PE exposure has been identified, the options available to a company will depend on the maturity of the arrangement, the jurisdictions involved, and the company's appetite for restructuring.

Where an arrangement is in its early stages, the most straightforward approach is often to redesign the employee's role and authority so that it falls clearly within the auxiliary and preparatory exception – provided that genuinely reflects the commercial reality. Superficial restructuring that does not alter substantive functions is unlikely to withstand scrutiny and may attract additional anti-avoidance exposure.

Where a PE has already arisen, voluntary disclosure to the relevant tax authority – made before an audit is opened – typically results in materially lower penalties and interest than a finding made during examination. The mechanics of voluntary disclosure vary significantly by jurisdiction, and advice should be sought before any approach is made to a tax authority.

In some cases, formalising the PE through branch registration or establishing a local subsidiary may be the most efficient path forward, particularly where the commercial activity in the host state is expected to continue or expand. Tax structuring decisions of this kind require careful analysis of the corporate, employment, and indirect tax implications in both the home and host jurisdictions.

Timelines and Cost Drivers

The time required to analyse, remediate, or regularise a PE situation depends on several variables: the number of jurisdictions involved, the complexity of the employee's role, the availability of treaty protection, and whether voluntary disclosure is contemplated. As a general matter, a straightforward single-jurisdiction PE assessment can typically be completed within a few weeks; multi-jurisdictional reviews involving treaty analysis, transfer pricing considerations, and restructuring recommendations take considerably longer.

Cost drivers include the number of jurisdictions requiring analysis, the need for local counsel in each host state, the complexity of any required transfer pricing documentation, and the scope of any back-period exposure that needs to be quantified. Companies that address PE risk proactively – before an audit is opened – consistently face lower total costs than those who manage it reactively.

If you would like to discuss a specific remote-work arrangement or review your organisation's current PE exposure across multiple jurisdictions, please contact us at info@ferrazwhitmore.com or through our contacts page. We work with clients across Europe, Asia-Pacific, the Americas, and Africa to provide practical, jurisdiction-specific guidance on cross-border tax risk management.

Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.