You hired a brilliant developer based in Barcelona. Or a part-time marketing manager living in Dubai. Or a senior strategist who moved to Portugal during the pandemic and never came back. It felt like a win for the agency. Lower cost base, wider talent pool, happier team.

But there is a tax risk hiding in that arrangement that most agency founders never see coming. It is called permanent establishment risk. And if HMRC or a foreign tax authority decides you have triggered it, the costs can easily run into five or six figures.

Let me explain what permanent establishment (PE) actually means, how a remote overseas staff member can create one, and what you need to do to stay on the right side of the rules.

What Is a Permanent Establishment?

A permanent establishment is a fixed place of business through which a company carries out its business activities. That is the technical definition from most double tax treaties, based on the OECD Model Tax Convention.

In plain English: if your UK agency has a physical presence in another country that generates revenue, that country can tax the profits attributable to that presence.

Traditionally, a PE meant a branch office, a factory, or a showroom. But the rules have evolved. Today, a single employee working from home in another country can create a permanent establishment risk for your agency. Especially if that employee has authority to sign contracts, negotiate deals, or manage client relationships.

The key point is this: your agency does not need to have a registered office or a legal entity in the overseas country to have a PE there. The tax authority in that country can argue that your employee's home office constitutes a fixed place of business.

How a Remote Employee Creates a Permanent Establishment Risk

Let me give you a real scenario we worked through with a client last year.

A 15-person digital agency in Shoreditch hired a senior account director who wanted to relocate to Lisbon. The agency had no Portuguese clients, no Portuguese bank account, and no plans to target the Portuguese market. The director worked from a co-working space in Lisbon, managing UK and US client accounts remotely.

Eighteen months later, the Portuguese tax authority sent a letter. They argued that the co-working space was a fixed place of business, the director had authority to negotiate contracts (she did), and therefore the agency had a permanent establishment in Portugal. They wanted corporation tax on the profits attributable to her work. Plus interest. Plus penalties.

That is the permanent establishment risk in action. And it is not limited to Portugal. Spain, France, Germany, the UAE, Thailand, Australia, every country with a double tax treaty with the UK can make this argument.

Three specific triggers create PE risk for remote overseas staff:

  • Dependence: The employee works exclusively or primarily for your agency. They are not an independent contractor serving multiple clients.
  • Authority: The employee can bind your agency contractually. Signing contracts, agreeing fees, negotiating scope changes, all of these create PE exposure.
  • Duration: Most treaties say a PE is created if the activity lasts more than six months (183 days) in a 12-month period. Some treaties use 12 months. Check the specific treaty.

If all three conditions are met, you almost certainly have a PE. If two of the three are met, you are in a grey area that needs professional assessment.

What Happens If You Have a Permanent Establishment?

The consequences depend on the country and the treaty, but the general pattern is the same.

Step one: The overseas tax authority identifies your PE. This often happens through routine tax audits, social security checks, or a tip-off from a competitor. It can also happen if the employee themselves files a local tax return and mentions their UK employer.

Step two: The tax authority assesses corporation tax on the profits attributable to the PE. How do they calculate those profits? They look at the revenue generated by the employee's work, deduct the costs directly associated with that work, and apply the local corporation tax rate. In Portugal, that is 21%. In Spain, 25%. In the UAE (mainland), 9%.

Step three: They add interest and penalties. Late payment interest is standard. Penalties for non-compliance can be substantial. We have seen cases where the total bill was more than double the original tax assessment.

Step four: You now have a compliance obligation in that country. Annual tax returns, transfer pricing documentation, potentially local payroll and social security filings. The administrative cost alone can run to £5,000-£15,000 per year for a simple PE.

And here is the kicker: the UK will not give you double tax relief for the overseas tax unless you have structured things correctly from the start. You can end up paying tax twice on the same profits.

The UAE Is Not Automatically Safe

Many agency founders assume that hiring someone in Dubai is risk-free because the UAE has no corporation tax (for mainland companies below AED 375k profit) and no personal income tax. That assumption is dangerous.

The UAE introduced a 9% corporation tax from June 2023. But more importantly, the UAE-UK double tax treaty still applies. If your employee in Dubai has a home office and authority to bind your agency, the UAE Federal Tax Authority can argue you have a PE there. You would then need to file UAE corporation tax returns and potentially pay 9% on attributable profits.

Free zone companies in the UAE have different rules. But a UK agency with a remote employee in a UAE free zone is not automatically exempt. The employee's activities and your agency's structure matter more than the location of their desk.

If you are considering hiring in the UAE, read our guide on agency structures for more context on how to set up compliantly.

What About Contractors and Freelancers?

This is where the permanent establishment risk intersects with IR35. If you engage an overseas worker as a contractor through their own limited company, you might think you are safe. You are not necessarily.

Tax authorities look at the substance of the relationship, not the legal form. If the contractor works exclusively for you, uses your systems, follows your processes, and has no real independence, they can be reclassified as a de facto employee. That reclassification can create a PE just as easily as a direct employee.

We covered this in more detail on our contractors and IR35 page. The same principles apply internationally, with the added complexity of cross-border tax treaties.

If you are using contractors overseas, you need a properly drafted contract that demonstrates their independence. You also need to ensure they have multiple clients, use their own equipment, and control their own working hours. The more control you exert, the higher the PE risk.

How to Assess Your Permanent Establishment Risk

Here is a practical checklist. Run through it for every overseas employee or contractor working remotely for your agency.

  • Where are they physically located? Not where their contract says. Where they actually sit and work.
  • How long have they been there? If more than 183 days in any 12-month period, you are in high-risk territory.
  • What authority do they have? Can they sign contracts, agree fees, or commit the agency to projects? If yes, the risk is higher.
  • Do they have a dedicated workspace? A home office, a co-working desk, a rented room. Any fixed location counts.
  • Are they dependent on your agency? Do they work exclusively for you? Do you provide their equipment, training, and tools?
  • What does the double tax treaty say? Each treaty is different. Some have higher thresholds. Some exclude certain activities. Check the specific treaty between the UK and the employee's country.

If you answered yes to three or more of these questions, you need to speak to a qualified accountant before the tax authority speaks to you.

Practical Steps to Reduce Permanent Establishment Risk

You do not need to stop hiring overseas staff. But you do need to structure the arrangement correctly. Here are the options, from simplest to most complex.

Option 1: Keep the Employee Below the Threshold

Limit overseas work to less than 183 days per year. Rotate employees through different locations. Ensure no single country becomes a habitual workplace. This works for short-term assignments but is impractical for permanent hires.

Option 2: Remove Contractual Authority

Ensure overseas employees cannot bind the agency contractually. All contracts, fee agreements, and scope changes go through a UK-based director or manager. The overseas employee handles delivery and client communication only. This reduces PE risk but does not eliminate it entirely.

Option 3: Use an Employer of Record (EOR)

An EOR like Remote, Deel, or Oyster employs the worker on your behalf in their country. The EOR handles local payroll, tax, and compliance. Your agency pays the EOR a fee. The EOR takes on the employment risk, including PE exposure. This is the cleanest solution for most agencies with 1-10 overseas staff.

Costs typically run at 10-20% of the employee's gross salary. For a £50,000 employee, that is £5,000-£10,000 per year. Compare that to the potential tax bill from an undisclosed PE. The EOR is usually cheaper.

Option 4: Set Up a Local Entity

If you have more than 10 staff in one country, or if the country is a strategic market, consider setting up a local subsidiary. This is expensive (legal fees, registration, ongoing compliance) but gives you full control and clear tax treatment. It also protects your UK entity from direct PE exposure.

Option 5: Use a Professional Employer Organisation (PEO)

Similar to an EOR but the PEO co-employs the worker with your agency. You retain more control over the worker's day-to-day activities. The PEO handles compliance. This sits between an EOR and a local entity in terms of cost and complexity.

What the Tax Authorities Are Actually Doing

This is not a theoretical risk. HMRC has a dedicated team looking at remote working arrangements. They share data with other tax authorities through automatic exchange agreements. If your employee files a local tax return showing UK employment income, the local tax authority will flag it. They will then contact HMRC to verify the arrangement.

We have seen a significant increase in enquiries since 2022. The pandemic normalised remote work, and tax authorities are now catching up. They know that thousands of UK companies have overseas remote workers. They are looking for the ones that did not think about PE.

Spain, Portugal, and France have been particularly active. Germany and the Netherlands are also stepping up enforcement. The UAE is still relatively relaxed, but that will change as their new corporation tax regime beds in.

What to Do If You Already Have Overseas Staff

If you already have remote overseas employees and you have not addressed PE risk, do not panic. But do act quickly.

First, gather the facts. Where is each employee based? How long have they been there? What authority do they have? Do you have contracts in place?

Second, review the relevant double tax treaties. Your accountant can help with this. Each treaty has different provisions for what constitutes a PE.

Third, decide on a remediation strategy. For recent hires (under six months), you may be able to restructure the arrangement before a PE is triggered. For longer-term arrangements, you may need to use an EOR or set up a local entity.

Fourth, consider a voluntary disclosure. If you believe you have an undisclosed PE, telling the tax authority before they find you can reduce penalties significantly. This is a specialist area. Do not attempt it without professional advice.

If you need help assessing your current structure, our team at Agency Founder Finance can walk through your specific situation. We are ICAEW qualified accountants who work exclusively with agency founders. We understand the cross-border tax issues that come with remote teams.

The Bottom Line on Permanent Establishment Risk

Hiring overseas staff is a legitimate and often smart move for UK agencies. The talent pool is wider. Costs can be lower. Time zones can work in your favour.

But the permanent establishment risk is real. It is not a theoretical tax concept that only applies to multinational corporations. It applies to your 12-person agency with one employee in Barcelona.

The solution is not to avoid hiring overseas. The solution is to structure the arrangement properly from day one. Use an EOR. Limit contractual authority. Monitor time spent in country. And get professional advice before you hire, not after the tax authority writes to you.

If you are planning to hire overseas staff or already have them, contact us for a review of your permanent establishment exposure. A one-hour conversation now can save you tens of thousands in tax, interest, and penalties later.