Permanent Establishment Risk & Remote Work in 2026

Permanent establishment risk arises when remote work gives a company a taxable presence abroad — through a fixed place of business (including a required home office), a dependent agent habitually concluding contracts, or senior management deciding from another country. Occasional employee-driven remote days rarely create a PE; recurring patterns, employer requirement and contract-signing activity do — and from 9 April 2026 the EU’s biometric Entry/Exit System makes stays visible in real time.

Let the wrong employee work the wrong way from the wrong country, and your company can acquire a taxable presence there — with corporate tax filings, payroll withholding and penalties to match. In 2026 the risk is no longer theoretical: tax authorities exchange data automatically, regulators extend host-country rules to remote workers, and the EES records every border crossing. This guide explains when remote work creates a PE, what else it triggers, and how employers keep flexibility without acquiring a tax problem.

What creates a PE? The three classic routes

Fixed place of business: a location at the employer’s disposal through which business is carried on — a home office can qualify where the employer requires or expects continuous work from it, especially with no other in-country presence and a core-business role.
Dependent agent: someone who habitually concludes contracts, or plays the principal role leading to their conclusion — a sales director closing deals from a holiday home abroad is the textbook case.
Management presence: senior executives making key decisions from another country can shift the place of effective management — the severest outcome, since it can drag the whole company’s residence.

Occasional, genuinely employee-driven remote days rarely create a PE. Patterns do: recurring stays, employer requirement or encouragement, client-facing or contract-signing activity, and duration measured in months.

What else does one long stay trigger?

Layer	What can be triggered	Typical signals
Individual tax	Host-country residency and payroll withholding	183-day tests, permanent home, centre of vital interests
Social security	Host contributions unless coordinated	A1 certificate keeps EU/EEA workers in the home system for postings and multi-state work
Employment law	Host mandatory protections	Spain applies working-time recording to remote workers — fines to €7,500 per employee
Immigration	Right to work and stay	Schengen 90/180 for visa-free visitors; work authorisation for productive work
Data protection	Transfer and security duties	Client data accessed from third countries

Bilateral fixes exist but are narrow: the Switzerland–France arrangement lets cross-border commuters telework up to 40% of annual working time from France — but arrives with new employer reporting from 1 January 2026 and automatic salary-data exchange. Relief and surveillance increasingly travel together.

Why is 2026 the turning point? Borders that count days

The Entry/Exit System became mandatory at all Schengen external borders on 9 April 2026, replacing passport stamps with biometric records. Every entry and exit is logged centrally — the 90/180 rule is now enforced by database rather than a border guard’s squint at ink stamps. Employees who quietly stretched workcations, and employers who preferred not to know, have lost their ambiguity. Digital nomad visas solve part of the individual’s problem, not the employer’s: Portugal requires roughly €3,680 monthly income, Italy €33,000 a year plus employer declarations — but a nomad visa neither prevents PE nor switches off host employment and social security law. Treat it as one immigration tool inside a wider design, never the design itself.

How do employers manage it? A five-part framework

Policy first: define who may work abroad, where, for how long (20–30 workdays per rolling year is a common low-risk ceiling), and which activities are banned abroad — above all contract negotiation and signature.
Approval workflow: every request logged, risk-scored and approved before travel, days tracked centrally — assume authorities see the same border data you can.
Role screening: stricter limits for sales, executives and anyone with signing authority — the dependent-agent route is the fastest to a PE.
Paperwork by design: A1 certificates or certificates of coverage, 90/180 checks, documented home-office arrangements keeping premises outside the employer’s disposal.
Escalate to employment: where someone genuinely needs to live and work abroad beyond your thresholds, employ them there properly — our EOR onboards in 3–5 days across 60+ countries, so a relocation never has to become your corporate tax exposure.

Summary — key takeaways

Three PE routes: fixed place of business (incl. required home office), dependent agent, management presence.
One arrangement can trigger five layers at once: individual tax, social security, employment law, immigration, data protection.
From 9 April 2026 the EES logs every Schengen crossing biometrically — 90/180 is enforced by database.
Nomad visas fix the individual’s immigration, not the employer’s PE or employment-law exposure.
Policy + approval workflow + role screening + paperwork + EOR escalation is the working architecture.

FAQ

What creates a permanent establishment?

What creates a permanent establishment? Under most tax treaties: a fixed place of business at the employer’s disposal (a home office can qualify where the employer requires continuous work from it), a dependent agent who habitually concludes contracts or leads to their conclusion, or effective management exercised from the country. Recurring patterns and contract-signing activity matter far more than occasional remote days.

How can employers reduce permanent establishment risk?

Employers reduce permanent establishment risk by policy design: cap foreign workdays (20–30 per rolling year is a common ceiling), ban contract negotiation and signature abroad, screen sales and executive roles hardest, log and approve every stay, obtain A1 certificates, and document that home offices are not at the company’s disposal. Beyond thresholds, employ the person in-country properly — typically via an EOR.

Does remote work trigger tax residency?

Remote work can trigger tax residency for the individual — through 183-day presence tests, a permanent home or centre of vital interests in the host country — which brings host payroll withholding obligations for the employer alongside any PE analysis. The corporate and personal layers are assessed separately: an employee can become tax-resident without creating a PE, and vice versa.