Permanent Establishment Risk for Remote Work

Permanent establishment (PE) is a tax presence a company creates in a country where it has no legal entity, usually through an employee working there. Under Article 5 of the OECD Model Tax Convention, a PE arises from a fixed place of business (an office, or in some cases a home office) or a dependent agent who habitually concludes contracts. If a remote worker triggers PE, the employer can owe corporate income tax on profits attributed to that country, plus local payroll registration and filings. The OECD's November 2025 update created a safe harbor: a home office used for under 50% of working time over any 12-month period is generally not a PE. The risk falls on the employer, not the nomad - but it is the reason many companies restrict where staff can work.

Permanent establishment is the tax concept most likely to end a remote-work arrangement, yet most digital nomads have never heard of it. It does not tax the worker. It taxes the worker's employer. A single engineer coding from Lisbon for eight months can, in the wrong setup, give Portugal the right to tax a slice of the company's worldwide profit. That is why HR teams ask where you are and why "work from anywhere" policies come with country lists.

This post is for two readers: the remote employee who wants to understand why their company cares, and the founder or HR lead who needs to know when a remote hire creates exposure. The mechanics are the same for both. PE is governed by bilateral tax treaties built on the OECD Model, so the rule depends on the treaty between the company's home country and the country where the employee sits.

We cover how PE is triggered, who carries the risk, the OECD's 2025 safe harbor for home offices, the common mistakes that create accidental exposure, and how to track the day counts that feed the analysis. Freelancers and contractors face a related but distinct version, noted below.

How permanent establishment risk works

A permanent establishment is created when a company carries on business in a country through either a fixed place of business or a dependent agent there. Article 5 of the OECD Model Tax Convention defines a PE as "a fixed place of business through which the business of an enterprise is wholly or partly carried on." That place can be an office, a branch, a factory, or, in some cases, an employee's home. The second route, the dependent agent PE, arises when a person habitually concludes contracts, or plays the principal role leading to contracts, that bind the company.

The consequence is corporate, not personal. Once a PE exists, the host country can tax the profits attributable to the activity performed there. The company must register locally, file corporate returns, and often run local payroll and social-security withholding. Attributed profit is calculated using transfer-pricing logic, and the tax can apply retroactively to when the PE first arose.

Worked example. Acme Software Ltd is a UK company with no presence in Spain. Diego, a senior account director it employs, moves to Valencia and works from his apartment from March 1, 2026 to February 28, 2027. He works there roughly 90% of his time and routinely negotiates and signs client contracts that bind Acme. Two problems appear. First, his home office is used for well over 50% of his working time, so it can be a fixed-place PE. Second, because he habitually concludes binding contracts, he is a dependent agent under Article 5(5). Spain can treat Acme as having a PE from March 1, tax the profit attributable to Diego's activity, and require Acme to register and file. Diego owes nothing extra; Acme carries the exposure.

The OECD 2025 home office safe harbor

The OECD's November 2025 update to the Model Tax Convention created the clearest threshold yet for when a home office becomes a PE. Under the new Commentary on Article 5, a home or other accommodation used for less than 50% of an individual's total working time over any 12-month period is generally not regarded as a place of business of the employer. That gives a workable safe harbor for short stints and genuine digital-nomad travel. [Source: EY - OECD 2025 update on PE for remote work.]

If the 50% threshold is crossed, a second test applies: the employee's presence in that country must serve a genuine commercial reason for the business. Being closer to local customers or suppliers, needing to work in person at a site, or operating in a customer-friendly time zone can qualify. What does not qualify is telling: employee convenience, talent retention, saving on office costs, or supporting a home-office setup are explicitly rejected as commercial reasons. A nomad who relocated purely for lifestyle generally fails the commercial-reason test, which cuts against a PE finding.

Two cautions apply. The 50% rule covers the fixed-place route only; the dependent-agent route under Article 5(5) is separate and can create a PE regardless of working-time percentage. And the update is guidance, not binding law. Countries such as India have not accepted the new tests, and others apply their own thresholds, so the treaty and local practice of the specific country still govern.

Who permanent establishment risk applies to

PE risk attaches to the employer, not the individual, but it is triggered by what the individual does and where. The classic high-risk profiles are employees with revenue-facing authority: sales staff who close deals, account directors who sign contracts, and senior leaders who make binding decisions from abroad. Their activities map directly onto the dependent-agent test, where habitually concluding or driving contracts creates a PE even without a fixed office.

Lower-risk profiles are back-office and support roles - engineers, designers, analysts - who generate no local revenue and conclude no contracts. They can still create a fixed-place PE if a home office is used heavily and serves a commercial reason, but they rarely trigger the agent route. Duration and regularity matter more than a single visit; a two-week working trip is almost never a PE, while a settled multi-month base can be.

Freelancers and independent contractors face a different analysis. A genuinely independent contractor working for their own account does not create a PE for a client, because they act on their own behalf, not as the client's agent. But contractors create personal tax-residency and registration exposure of their own, and a "contractor" who works exclusively for one company under its direction may be reclassified as a dependent agent or employee. Dual-resident and multi-passport workers add complexity, since tie-breaker rules can resolve where someone is taxed personally without removing the employer's separate PE problem.

Common mistakes that create accidental PE

Assuming PE is the worker's problem. The most common error is conflating personal tax residency with corporate PE. They are independent. A nomad can owe zero personal tax in a country while still creating a PE there for the employer. Both questions must be checked separately.

Letting sales or signing staff work abroad unmanaged. Anyone who negotiates or concludes contracts is the highest-risk profile. Allowing a salesperson to base themselves in a foreign country without contract-authority controls is the fastest route to a dependent-agent PE, no office required.

Treating the 50% safe harbor as universal. The OECD's under-50% home office rule only addresses the fixed-place route, and only where the country has adopted the 2025 guidance. It does not cover dependent agents and does not bind every jurisdiction. Relying on it blindly in a non-adopting country is a trap.

Ignoring duration and renewal. A short trip is rarely a PE; a base that quietly extends across months can become one. The 12-month measurement window means days accumulate over time, so a pattern of returns to the same country can cross thresholds the worker never noticed. Day counting feeds directly into the analysis, the same way it does for the 183-day rule for personal residency.

Forgetting the corporate tax bill is on top of personal tax. PE exposure stacks with the employee's own residency and the interaction of double taxation treaties. Companies that budget only for an employee's relocation, not for potential corporate registration and tax, get surprised by retroactive assessments.

How Staywise tracks the days behind PE risk

Permanent establishment analysis starts with facts: which country, how many days, and across what 12-month window. Staywise (the visa compliance app for digital nomads) tracks your days in every country automatically, so the working-time and duration inputs to a PE review are documented rather than guessed. The same day-counting that powers Schengen and 183-day tracking gives you and your employer a clean record of where you actually were.

Staywise keeps passport details on your device and syncs only travel dates and countries, so sharing a day log with an HR or tax team does not expose sensitive data. The in-app AI assistant answers plain-English questions about residency thresholds and what your day counts mean. Staywise does not give corporate tax advice and cannot decide whether a PE exists - that needs a qualified adviser - but it removes the guesswork from the day counts the analysis depends on.

Download Staywise on the App Store

Frequently Asked Questions

Does a remote worker pay tax if they create a permanent establishment?

No, not directly. Permanent establishment is a corporate tax concept that exposes the employer, not the employee, to tax in the country where the work happens. The host country gains the right to tax the company's profits attributable to the activity performed there, and may require local corporate registration and payroll filings. The remote worker's own liability is governed separately by personal tax-residency rules, which can be triggered or not regardless of whether a PE exists. This is why companies, not nomads, restrict where staff may work.

How many days can I work abroad before creating PE risk?

There is no single day count, but the OECD's November 2025 update set a useful benchmark for home offices: a home used for less than 50% of your total working time over any 12-month period is generally not treated as a place of business for your employer. Crossing 50% triggers a further test of whether your presence serves a genuine commercial reason. This safe harbor covers only the fixed-place route, not the dependent-agent route, and applies only where a country has adopted the 2025 guidance. Short trips of days or weeks almost never create a PE.

Can a single employee create a permanent establishment?

Yes. A single remote employee can create a permanent establishment for their employer in two ways. A fixed-place PE can arise if they work heavily from a home office in another country for a commercial reason. A dependent-agent PE can arise if they habitually conclude contracts, or play the principal role leading to contracts, that bind the company, even with no office at all. Sales staff and executives with signing authority are the highest-risk profiles, because their core activity maps directly onto the agent test.

What are the consequences of permanent establishment for a company?

A permanent establishment gives the host country the right to tax the profits attributable to the activity performed there, often at corporate rates of 20% to 35%. The company typically must register locally, file corporate tax returns, run local payroll withholding, and meet social-security and reporting obligations similar to a local subsidiary. Tax can apply retroactively to when the PE first arose, and penalties may follow late registration. Profit attribution uses transfer-pricing principles, so the company must document what value the foreign activity generated.

Do freelancers create permanent establishment risk for their clients?

Generally no. A genuinely independent contractor working for their own account does not create a PE for a client, because they act on their own behalf rather than as the client's dependent agent. The risk appears when independence breaks down: a contractor who works exclusively for one company, under its direction and control, and who concludes contracts on its behalf, can be treated as a dependent agent or reclassified as an employee. Freelancers also carry their own personal tax-residency and registration exposure in countries where they spend significant time, separate from any client PE question.

About Staywise

Staywise is the visa compliance app for digital nomads. Built by nomads for nomads, it tracks your days across every country automatically, alerts you before overstays, and keeps passport details on your device for privacy. The in-app AI assistant answers visa questions in plain English. Available on iOS.

Download Staywise on the App Store →

Important: This content is informational and does not constitute legal, tax, or immigration advice. Visa rules, tax regulations, and entry requirements change frequently and vary by individual circumstances. Always verify current requirements with official government sources or a qualified professional before making travel decisions. Staywise tracks your days and surfaces compliance information, but final responsibility for compliance rests with the traveler.

Sources: OECD - Tax treaties and the Model Tax Convention; EY - OECD 2025 update: new rules on permanent establishment for remote work; HMRC International Manual INTM264510 - dependent agent permanent establishment; HMRC International Manual INTM266140 - agent as permanent establishment; Thomson Reuters - Navigating permanent establishment risk with remote workers in 2026.