You hired a brilliant developer based in Barcelona. Or a part-time marketing manager living in Dubai. Or a senior strategist who moved to Portugal during the pandemic and never came back. It felt like a win for the agency. Lower cost base, wider talent pool, happier team.
But there is a tax risk hiding in that arrangement that most agency founders never see coming. It is called permanent establishment risk. And if HMRC or a foreign tax authority decides you have triggered it, the costs can easily run into five or six figures.
Let me explain what permanent establishment (PE) actually means, how a remote overseas staff member can create one, and what you need to do to stay on the right side of the rules.
What Is a Permanent Establishment?
A permanent establishment is a fixed place of business through which a company carries out its business activities. That is the technical definition from most double tax treaties, based on the OECD Model Tax Convention.
In plain English: if your UK agency has a physical presence in another country that generates revenue, that country can tax the profits attributable to that presence.
Traditionally, a PE meant a branch office, a factory, or a showroom. But the rules have evolved. Today, a single employee working from home in another country can create a permanent establishment risk for your agency. Especially if that employee has authority to sign contracts, negotiate deals, or manage client relationships.
The key point is this: your agency does not need to have a registered office or a legal entity in the overseas country to have a PE there. The tax authority in that country can argue that your employee's home office constitutes a fixed place of business.
How a Remote Employee Creates a Permanent Establishment Risk
Let me give you a real scenario we worked through with a client last year.
A 15-person digital agency in Shoreditch hired a senior account director who wanted to relocate to Lisbon. The agency had no Portuguese clients, no Portuguese bank account, and no plans to target the Portuguese market. The director worked from a co-working space in Lisbon, managing UK and US client accounts remotely.
Eighteen months later, the Portuguese tax authority sent a letter. They argued that the co-working space was a fixed place of business, the director had authority to negotiate contracts (she did), and therefore the agency had a permanent establishment in Portugal. They wanted corporation tax on the profits attributable to her work. Plus interest. Plus penalties.
That is the permanent establishment risk in action. And it is not limited to Portugal. Spain, France, Germany, the UAE, Thailand, Australia, every country with a double tax treaty with the UK can make this argument.
Three specific triggers create PE risk for remote overseas staff:
- Dependence: The employee works exclusively or primarily for your agency. They are not an independent contractor serving multiple clients.
- Authority: The employee can bind your agency contractually. Signing contracts, agreeing fees, negotiating scope changes, all of these create PE exposure.
- Duration: Most treaties say a PE is created if the activity lasts more than six months (183 days) in a 12-month period. Some treaties use 12 months. Check the specific treaty.
If all three conditions are met, you almost certainly have a PE. If two of the three are met, you are in a grey area that needs professional assessment.
What Happens If You Have a Permanent Establishment?
The consequences depend on the country and the treaty, but the general pattern is the same.
Step one: The overseas tax authority identifies your PE. This often happens through routine tax audits, social security checks, or a tip-off from a competitor. It can also happen if the employee themselves files a local tax return and mentions their UK employer.
Step two: The tax authority assesses corporation tax on the profits attributable to the PE. How do they calculate those profits? They look at the revenue generated by the employee's work, deduct the costs directly associated with that work, and apply the local corporation tax rate. In Portugal, that is 21%. In Spain, 25%. In the UAE (mainland), 9%.
Step three: They add interest and penalties. Late payment interest is standard. Penalties for non-compliance can be substantial. We have seen cases where the total bill was more than double the original tax assessment.
Step four: You now have a compliance obligation in that country. Annual tax returns, transfer pricing documentation, potentially local payroll and social security filings. The administrative cost alone can run to £5,000-£15,000 per year for a simple PE.
And here is the kicker: the UK will not give you double tax relief for the overseas tax unless you have structured things correctly from the start. You can end up paying tax twice on the same profits.
The UAE Is Not Automatically Safe
Many agency founders assume that hiring someone in Dubai is risk-free because the UAE has no corporation tax (for mainland companies below AED 375k profit) and no personal income tax. That assumption is dangerous.
The UAE introduced a 9% corporation tax from June 2023. But more importantly, the UAE-UK double tax treaty still applies. If your employee in Dubai has a home office and authority to bind your agency, the UAE Federal Tax Authority can argue you have a PE there. You would then need to file UAE corporation tax returns and potentially pay 9% on attributable profits.
Free zone companies in the UAE have different rules. But a UK agency with a remote employee in a UAE free zone is not automatically exempt. The employee's activities and your agency's structure matter more than the location of their desk.
If you are considering hiring in the UAE, read our guide on agency structures for more context on how to set up compliantly.
What About Contractors and Freelancers?
This is where the permanent establishment risk intersects with IR35. If you engage an overseas worker as a contractor through their own limited company, you might think you are safe. You are not necessarily.
Tax authorities look at the substance of the relationship, not the legal form. If the contractor works exclusively for you, uses your systems, follows your processes, and has no real independence, they can be reclassified as a de facto employee. That reclassification can create a PE just as easily as a direct employee.
We covered this in more detail on our contractors and IR35 page. The same principles apply internationally, with the added complexity of cross-border tax treaties.
If you are using contractors overseas, you need a properly drafted contract that demonstrates their independence. You also need to ensure they have multiple clients, use their own equipment, and control their own working hours. The more control you exert, the higher the PE risk.