Employer of Record and Permanent Establishment Risk Guide
EOR Benefits: Employers of record reduce permanent establishment risk by acting as legal employers in foreign countries.
PE Triggers: Permanent establishment exposure arises from business presence, contract negotiation, and revenue generation activities.
Compliance Importance: Adequate compliance prevents unexpected tax obligations and penalties that exceed initial cost considerations.
EOR Limitations: Employers of record may not suffice if roles involve strategy, large teams, or core operations.
Risk Assessment: Companies should self-diagnose potential EOR risks to determine if further action is necessary.
An employer of record helps reduce permanent establishment (PE) risk by acting as the legal employer in a foreign country and keeping your company from creating a taxable presence there. But how you structure the arrangement, what your workers do, and how much authority they carry all determine whether that shield holds up under scrutiny.
Below are the triggers that create PE exposure, how to evaluate whether your EOR setup is protecting you, and when to consider a local entity. Topics include employment contract structuring, risk assessment tools, PE liability insurance options, and provider differences.
What Is Permanent Establishment Risk?
Permanent establishment is a tax concept that determines when a company has enough business activity in a foreign country for that country to tax part of the company’s profits.
Keep Reading—and Keep Leading Smarter
Create a free account to finish this piece and join a community of forward-thinking leaders unlocking tools, playbooks, and insights for thriving in the age of AI.
Have an account? Log In
The concept is defined in Article 5 of the OECD Model Tax Convention. Under Article 5, a PE exists when a company has a "fixed place of business through which the business of an enterprise is wholly or partly carried on."
Treaty-based PE definitions follow the OECD or UN model and apply between countries that have signed an international tax treaty. Domestic-law PE definitions are set by each country's internal tax code and can be broader or narrower than the treaty version. When no treaty exists between two countries, domestic law governs exclusively. When a treaty does exist, the treaty definition typically overrides local tax law, but only if your company can claim treaty benefits.
Why PE Risk Matters for Global Expansion
When you find great talent in another country, you want them to be productive as soon as possible, but a PE finding can retroactively create tax obligations spanning several years, not to mention penalties. The compliance burden of maintaining an unplanned PE can drain resources you didn't budget for.
When I talk to finance leaders about global expansion, I frame it as a race between how fast you can hire and how fast compliance catches up. In my experience, compliance catches up faster than most companies expect, and the cost of remediation always exceeds the cost of getting it right from the start.
What Triggers Permanent Establishment?
There are five primary triggers that create PE exposure in global employment:
Fixed Place of Business
If your company has an office, warehouse, manufacturing facility, or even a co-working desk used on a regular basis in a foreign country, you may have a fixed place of business PE.
The key factors tax authorities evaluate:
- Geographic specificity. Is there a particular location tied to your business activities?
- Permanence. Is the space used regularly, not just for one-off visits?
- Disposal. Does your company control or have the right to use that space?
A shared WeWork desk used by one employee three days a week for six months is different from an employee who works from home and never occupies company-controlled premises.
Duration of Activities
The OECD default for construction and project PEs is 12 months. But for service PEs and general presence, the timelines vary significantly by country. These thresholds determine how long you can operate in a country before PE risk becomes acute.
| Jurisdiction | PE Duration Threshold | Notes |
|---|---|---|
| OECD Default | 12 months (construction) | Service PE not in OECD model; varies by treaty |
| United States | No fixed threshold | Applies a facts-and-circumstances test |
| Germany | 6 months (service PE in some treaties) | Aggressive enforcement on remote workers |
| India | 90 days in any 12-month period (service PE) | Among the most aggressive thresholds globally |
| China | 183 days (service PE under most treaties); 6 months (construction) | Circular on beneficial ownership adds complexity; service PE provisions are broadly interpreted |
| Singapore | 183 days | Relatively standard; follows OECD closely |
Local Employees or Agents Negotiating Contracts
This is the highest-risk trigger when you're using an EOR. Under Article 5(5) of the OECD Model, a PE exists when a person "habitually concludes contracts" on behalf of a foreign enterprise. This is called a dependent agent PE.
Here's why it matters so much in an EOR context. The EOR is the legal employer, but the worker takes day-to-day direction from your company. If that worker starts negotiating deals, signing agreements, or committing your company to terms, the EOR structure doesn't insulate you. The tax authority will look through the arrangement and see you acting through an agent.
Revenue Generation in the Country
Not all in-country activities trigger PE. The OECD Model specifically excludes activities that are "preparatory or auxiliary" in nature. This includes things like market research, maintaining a stock of goods for display, or purchasing supplies.
The distinction hinges on whether the activities are core to your business or just supporting it. A software company with a developer writing production code in Germany is performing a core business function. The same company with someone attending local trade shows is likely in preparatory territory.
BEPS Action 7 tightened the rules around this exclusion significantly. Tax authorities require that each excluded activity be genuinely preparatory or auxiliary on its own and in combination with other activities in the same country.
Remote Workers Performing Core Business Functions
The shift from the pre-pandemic enforcement landscape to the current one has been dramatic. Countries that previously took a relaxed approach to remote workers are now actively using remote-worker PE as an enforcement tool.
France introduced specific guidance treating regular home-office work by employees of foreign companies as a potential PE trigger. Australia updated its approach in 2024-2025 to address the growing number of workers performing services from Australian soil for overseas companies.
How Employers of Record Protect Against PE Risk
Here are a few ways that using an employer of record can protect your company from permanent establishment risk.
Legal Separation From Direct Employment
The core premise of an EOR arrangement is legal separation. The EOR entity, not your company, is the legal employer in the foreign country. Your company has no direct local employment relationship there.
This matters for dependent-agent PE analysis because the worker's legal employer is the EOR, not your company. In theory, the worker can't "conclude contracts on behalf of" your company because they're employed by someone else. Their payroll comes from the EOR, their employment agreement is with the EOR, and their statutory rights are against the EOR.
Compliance With Local Tax and Labor Laws
An EOR handles payroll tax withholding, social security contributions, statutory employee benefits, and employment law compliance in the host country. This matters for PE analysis because many of these activities, if performed directly by your company, would create administrative connections to the local jurisdiction.
When the EOR manages these obligations, your company doesn't need to register for payroll tax accounts, interact with local tax authorities, or maintain a presence in local social security systems. The compliance footprint belongs to the EOR, not to you.
Managing Payroll and Statutory Obligations
The EOR absorbs the operational activities that can create nexus. Think about what it takes to employ someone in a foreign country: opening local bank accounts, registering with labor authorities, filing employment reports, managing termination procedures.
Each of these activities ties your company to the jurisdiction. When the EOR handles them, your company's administrative presence stays minimal. This is important because some countries define PE broadly to include "any fixed place through which admin activities are carried out."
Avoiding Dependent Agent Relationships
The most valuable PE protection an EOR provides is structural prevention of dependent agent status. Because the worker is legally employed by the EOR, not by your company, the standard dependent-agent analysis changes fundamentally.
Under the OECD framework, a dependent agent PE requires someone who acts "on behalf of" the foreign enterprise and "habitually concludes contracts" or plays the principal role in contract conclusion. The EOR employment structure means workers act on behalf of the EOR in a legal sense, even though your company directs their day-to-day work.
But this protection only holds if the worker doesn't function as your company's agent in practice. I've worked with companies where the paperwork was impeccable (clean EOR contracts, proper employment agreements, the right language) but the worker's behavior told a different story.
Consequences of Triggering Permanent Establishment
So what happens if your employer of record arrangement does trigger a permanent establishment? Here’s a quick summary of the consequences and severity:
| Factor | Low Risk (Preparatory Activity) | Medium Risk (Service PE Threshold Neared) | High Risk (Dependent Agent PE Confirmed) |
|---|---|---|---|
| Tax exposure | Minimal or none | Moderate; partial profit attribution | Significant; full profit attribution |
| Penalty range | 0% | 10-20% of unpaid tax | 20-40% of unpaid tax |
| Compliance burden | None | Annual filings, possible registration | Full local filing, auditor, registered office |
| Reputational impact | Negligible | Moderate; signals compliance gaps | Severe; may affect investor and partner confidence |
Corporate Income Tax Obligations
When a PE is found, the host country taxes profits attributable to that PE. Under the Authorized OECD Approach, the PE is treated as if it were a separate, independent enterprise. Profits are attributed based on the functions performed, assets used, and risks assumed by the PE.
This means the host country won't just tax the worker's salary. It will attribute a portion of your company's overall profit to the PE based on what value the PE creates. For a services business, this can result in a substantial tax bill because the people are the product.
Back Taxes, Penalties, and Interest
Tax authorities don't just assess the current year. They look backward, often 3-7 years depending on the jurisdiction and whether fraud is alleged.
Penalties typically range from 10-40% of the unpaid tax. For example, a German tax audit that finds an unreported PE might assess a 10% penalty for negligence or up to 25% for intentional non-compliance, plus interest at approximately 6% per year.
For example, let’s say a US SaaS company places three sales representatives in the UK through an EOR. One of them negotiates and closes enterprise deals. After an HMRC inquiry, the company faces a PE finding covering three years of unreported profits, with penalties of 30% plus interest. Total exposure: over $500,000 on $2 million in attributed profits.
The company believed the EOR structure was sufficient because they'd been told it would "handle compliance." The EOR handled employment compliance, but PE risk was not discussed.
Ongoing Compliance Requirements
A PE finding creates a huge tax bill and ongoing obligations. You'll need to file annual tax returns in the host country, appoint a local tax representative or auditor, maintain a registered office address, and keep separate books and records for the PE.
This requires local accounting expertise, legal support, and administrative infrastructure. In many cases, the compliance cost of an unplanned PE rivals the cost of setting up an entity.
Double Taxation Risks
When two countries both tax the same income, you're in double taxation territory. Tax treaties generally provide relief through foreign tax credits or exemptions. But treaty relief isn't automatic, and it doesn't always work cleanly.
If your home country doesn't recognize the PE finding, you may need to initiate a Mutual Agreement Procedure between the two countries' tax authorities. MAP is only available when a tax treaty exists between the two countries, which excludes situations involving non-treaty jurisdictions.
When an EOR May Not Be Enough to Prevent PE
Here are some signs that your employer of record may not be enough to protect you from triggering a permanent establishment.
Senior Leadership or Country Manager Roles
A local hire who sets strategy, approves budgets, or represents your company publicly can create PE regardless of the EOR structure. Tax authorities look at substance over form. If someone functions as a country manager, calling them an "individual contributor" on paper doesn't change the analysis.
The test is whether the person exercises authority that binds the company. Approving expenditures, making strategic decisions for the market, or speaking on behalf of the company at regulatory or industry forums signal that your company has more than a passive presence.
Large Team Size in One Location
Thresholds vary, but once you have 10 or more workers in a single country through an EOR, you should expect heightened scrutiny. A large team suggests permanence, operational significance, and organizational commitment to the new market. All of these factors work against you in a PE analysis.
I've seen companies operate with 5-8 people through an EOR for years without issues. Once headcount crosses into double digits, tax authorities start asking questions. At 20+, the EOR structure becomes very difficult to defend, and a local entity almost always makes more sense.
Core Business Operations in the Country
An EOR is designed for employment, not for running a business. If you're manufacturing products, warehousing inventory for distribution, operating a customer service center, or running a development team that produces your core product, you've likely exceeded what an EOR can shield.
These activities go beyond hiring employees in a country. They represent operational infrastructure that most tax authorities will treat as a fixed place of business PE, regardless of the employment structure.
Here is a 5 question self-diagnostic to help you determine whether your EOR setup at risk:
- Does any EOR-employed worker negotiate, approve, or materially influence contracts with your clients or vendors?
- Does any EOR-employed worker hold a title like "country manager," "regional director," or "head of" a function?
- Do you have 10 or more EOR-employed workers in a single country?
- Have any EOR-employed workers been in their roles for more than 24 months?
- Do EOR-employed workers perform activities that generate revenue directly, rather than supporting operations elsewhere?
If you answered "yes" to two or more of these questions, I recommend an immediate PE risk review with a qualified tax advisor.
EOR vs. Legal Entity: A Decision Framework
Use this table to determine whether an employer of record or permanent establishment is the right fit for your business when it comes to international hiring. Keep in mind that your decision isn’t permanent, and you can use an EOR as a transitional structure.
| Factor | EOR | Local Entity |
|---|---|---|
| Team size sweet spot | 1-10 employees | 10+ employees |
| Ideal timeline | Short-to-medium term (under 24 months) | Long-term or permanent |
| Setup cost | Low (no incorporation) | High ($15K-$80K+ depending on country) |
| Ongoing compliance burden | Managed by EOR | Borne by company |
| PE risk level | Low-to-moderate (if structured correctly) | Eliminated (entity IS the local presence) |
| Control and flexibility | Moderate | Full |
| IP and data control | Limited by EOR contract terms | Direct ownership and management |
| Exit complexity | Low (terminate EOR agreement) | High (wind-down, deregistration, employee transfer) |
What’s Next?
If you’ve decided that an employer of record best fits your current needs for hiring internationally, it’s worth looking into the cost of an employer of record to get an idea of how much you can expect to pay before committing.