The risk that a company's activities in a foreign country, often through remote employees or contractors, create a taxable business presence that triggers corporate income tax obligations in that jurisdiction.
Key Takeaways
Permanent establishment risk is a corporate tax concept that HR teams now need to understand. Here's why. Every time your company has someone working in a country where it doesn't have a legal entity, there's a chance that person's activities could create a taxable presence for the company in that country. That taxable presence is called a permanent establishment. Before remote work went mainstream, PE risk was mostly a concern for companies sending employees on long-term assignments or operating branch offices abroad. Tax advisors and mobility teams managed it. Today, an engineer working from Lisbon, a sales rep closing deals from Toronto, or a consultant running a project from Sydney can all create PE exposure for their employer. The consequences aren't small. Once a country determines that your company has a PE, it can tax a portion of the company's global profits attributable to that PE. It can assess back taxes for the years the PE existed but wasn't reported. And it can charge penalties and interest on top. For HR, this means that every cross-border hiring decision, remote work approval, and business travel pattern carries a tax dimension that didn't exist a decade ago.
Tax treaties and domestic laws define several ways a PE can be created. Understanding these triggers helps HR teams spot risk before it materializes.
This is the classic trigger. If your company has an office, factory, warehouse, or other fixed location in a foreign country, that's a PE. But 'fixed place' is interpreted broadly. A home office used by a remote employee can qualify if the employee works there regularly and the company knows about it or requires it. The OECD Model Tax Convention says a PE exists when there's a fixed place of business through which the business is wholly or partly carried on. 'Fixed' means permanence, not a physical building. An employee working from their apartment for 12 months can meet this test.
If a person habitually exercises authority to conclude contracts on behalf of your company in a foreign country, they can create a PE even without a fixed office. This is the trigger that keeps sales teams awake at night. A sales rep who negotiates and signs deals in a country where your company doesn't have an entity is acting as a dependent agent. Under the OECD's updated guidance (post-BEPS), even agents who 'play the principal role' in contract negotiations without formally signing can create a PE.
Some countries (particularly those following the UN Model Tax Convention) include a 'service PE' provision. If your company's employees provide services in a country for more than a specified number of days (often 183 days in any 12-month period), a PE is triggered. The days don't have to be consecutive, and in some countries, the threshold is calculated across all employees, not per individual. Send three consultants to a project for 70 days each, and you've exceeded the threshold.
Building sites, construction projects, and installation projects that last longer than a specified duration (typically 12 months under the OECD model, but 6 months under some treaties) create a PE. This threshold applies to the project duration, not the individual worker's time in the country.
Remote work has transformed PE risk from a niche tax planning concern into a core HR issue. Here's what's changed.
| Scenario | PE Risk Level | Why |
|---|---|---|
| Employee works remotely from foreign country for 2 weeks (vacation + work) | Low | Most treaties require sustained activity; short stays rarely trigger PE |
| Employee works remotely from foreign country for 6+ months | High | Likely meets fixed place of business test; home office becomes company's fixed location |
| Sales rep closes deals from foreign country regularly | High | Dependent agent PE; habitually exercising authority to conclude contracts |
| Developer writes code remotely from foreign country | Medium | Depends on duration and whether the work constitutes core business activity |
| Employee attends conferences or training abroad | Low | Preparatory or auxiliary activities are generally excluded from PE definitions |
| Manager directs local team from foreign country | High | Management activity through a fixed location is a strong PE indicator |
When a tax authority determines that your company has an unreported PE, the financial and operational impact goes well beyond the tax itself.
PE risk can't be eliminated in a global workforce, but it can be managed. These are the practical steps HR and tax teams should take together.
An EOR is a third-party company that legally employs workers on your behalf in a foreign country. Since the workers are employed by the EOR (not your company), their activities generally don't create a PE for you. This is the most common solution for companies that want to hire in countries where they don't have entities. It's not bulletproof, though. If the EOR employee acts as a dependent agent (negotiating and signing contracts on your behalf), PE risk may still exist despite the EOR arrangement.
Your remote work policy should address cross-border work explicitly. Set maximum day limits for working from foreign countries (90 days is a common threshold). Require pre-approval for extended stays. Prohibit employees from signing contracts, negotiating deals, or making binding commitments while abroad. Track days worked per country. These rules won't prevent all PE exposure, but they reduce the most common triggers.
You can't manage what you don't track. Implement a system to record where employees work every day, especially for international travel and remote work. Several technology platforms now automate this tracking using calendar data, expense reports, and travel bookings. The data feeds both PE risk assessment and individual tax compliance (since employees may trigger personal tax obligations in countries they visit).
Before approving a remote work request or hiring someone in a new country, consult a tax advisor on the PE implications. The cost of a PE assessment ($2,000 to $10,000 depending on complexity) is trivial compared to the cost of an undisclosed PE discovery ($50,000 to $500,000+ in back taxes and penalties). Build this step into your international hiring workflow.
Data points that illustrate the growing scope of PE risk in a remote-first world.
PE definitions and thresholds vary significantly by country. This table covers the countries HR teams encounter most often.
| Country | PE Threshold | Key Considerations |
|---|---|---|
| United States | No specific day count; based on 'trade or business' test | Broad interpretation; even a single sales meeting can trigger 'engaged in US trade or business' in some cases |
| United Kingdom | No fixed day threshold; based on whether business is conducted through a fixed place | HMRC has clarified that employees working from home in the UK can create a PE for foreign employers |
| Germany | 183 days of service in any 12-month period (service PE) | Aggressive enforcement; Germany actively audits for PE from cross-border workers |
| France | Based on dependent agent or fixed place; no specific day count for fixed PE | France applies PE rules strictly and has a broad definition of dependent agent |
| India | 90 days of service in any 12-month period (service PE under many treaties) | One of the lowest service PE thresholds; frequently catches companies off guard |
| Singapore | 183 days (service PE); contract conclusion test for agent PE | Relatively clear rules but strict enforcement on agent PE |
| Australia | 183 days (service PE under some treaties); broad fixed PE definition | ATO has issued guidance on remote work PE risk post-COVID |