No. An Employer of Record does not create permanent establishment risk. It lowers it.
But it does not remove it, and any provider who says it does is selling you something.
Here is the part most guides get wrong. Nearly all of them say the same thing: you are safe unless your employee signs contracts. That advice comes from the OECD model treaty, and in Europe or North America it is broadly sound.
Bangladesh, India, and Pakistan apply a second test. It has nothing to do with signatures. It counts days.
The short answer
An Employer of Record reduces your exposure because the employment sits with a separate legal entity. You hold no local registration, no local employment contract, and no local office.
Risk comes from what the person does, not from who employs them. No employment structure fixes a role that looks like a local business operation.
South Asia adds a service PE test. Time spent delivering services in the country can be enough on its own.
For a normal EOR hire, neither test applies. An engineer building your product is not a permanent establishment. A consultant delivering a project to a client in Dhaka might be.
What permanent establishment means
Permanent establishment, or PE, is a tax concept. It asks whether your company has enough presence in a country for that country to tax you on business profits earned there.
Cross the line and three things follow.
Your company becomes liable for corporate income tax on the profit attributed to that presence. You owe returns for every year the presence existed, not just the year you found out. And penalties and interest run from the original due dates.
There is usually a fourth cost nobody budgets for. Once a PE exists, you need transfer pricing documentation to show how profit was split between your home company and the local presence. That work is expensive and it is retrospective.
How an Employer of Record protects you, and where that protection stops
Under the classic test, a tax inspector looks for a fixed place of business at your disposal.
An office you lease. A desk you control. A registration in your name. An employment contract with your company on it.
Hire through an EOR and none of those exist. That is a real reduction, not a paper one.
The split runs like this.
| What creates the risk | Who carries it under an EOR |
|---|---|
| The employment contract | The provider. Your company is not named on it |
| Local tax and social security registration | The provider, in its own name |
| Payroll, withholding, and statutory filings | The provider |
| A registered local presence | The provider. You register nothing |
| What the person actually does all day | You. This is the part an EOR cannot take |
| Whether they negotiate or close deals | You |
| Whether they deliver services to local customers | You |
An EOR moves the paperwork out of your name. It cannot move the activity out of the country, because the activity is the job you hired someone to do.
So the sensible question is not whether an EOR protects you. It does, on everything above the bold rows. The question is whether the role you are filling sits above or below that line.
Test one: does someone make deals on your behalf?
Tax law calls this the agent test, or dependent agent PE. It asks one thing. Is a person in that country acting for your company in a way that ties you to deals.
This is the test every article covers, and it has moved recently.
The old rule looked at whether a person habitually concluded contracts on your behalf. Keep signature authority at head office and you stayed outside it.
Companies built around that rule. Salespeople negotiated everything locally, then sent the paperwork home for a signature that was never refused.
The BEPS Multilateral Instrument closed that. The revised wording reaches a person who habitually plays the principal role leading to the conclusion of contracts. It applies where those contracts are then routinely concluded without material modification.
India has adopted the MLI, and its treaty network reflects the change.
Read that wording carefully. The salesperson who negotiates price, terms, and scope is now inside the test. Where the signature happens is no longer the answer.
What this means in practice. If a person in-market shapes the deal, a signature at head office will not protect you. The authority at head office has to be real. Signing off on decisions someone else already made is not authority.
Can the Employer of Record itself become your permanent establishment?
A fair question, and worth asking your provider directly.
The agent test has an exception for independent agents acting in the ordinary course of their own business. A provider serving many unrelated clients falls inside that exception. Employing people is its own business, not yours.
The MLI narrowed the exception in one specific way. It no longer applies where a person acts exclusively, or almost exclusively, on behalf of one or more closely related enterprises.
So the question to put to a provider is simple. Who else do you employ people for?
A provider with a broad client base across many companies is an independent agent. A company set up to serve your business alone is a different arrangement, even if it carries the same name.
Most buyers never ask. It takes one sentence, and the answer is checkable. The other questions worth putting to a provider are in how to choose an EOR provider.
Test two: how long are you delivering services there?
This one is called service PE, and it is what the global guides leave out.
Treaties across South Asia follow the UN model more closely than the OECD one. The UN model adds a service PE clause, and the region’s domestic law reflects the same idea.
Service PE works on a different logic. It does not ask who signs anything. It asks how long an enterprise furnishes services in the country through its employees or other personnel.
India. Most Indian treaties set the threshold at more than 90 days in any twelve-month period. Several apply a shorter period where the services go to a related enterprise. Get past the threshold and a service PE can exist with no contract authority anywhere in the picture.
Pakistan. The test sits in domestic law. Section 2(41) of the Income Tax Ordinance 2001 treats activities continuing for the same or a connected project for periods aggregating more than ninety days in any twelve-month period as a permanent establishment.
Bangladesh. This one deserves a closer look, because it is stricter than either of the others.
The Income Tax Act 2023 defines permanent establishment to cover the furnishing of services, including consultancy services, through employees or other personnel engaged for that purpose. It applies where activities of that nature continue for the same or a connected project in Bangladesh. That wording is set out in PwC’s summary of Bangladesh corporate residence rules.
Notice what is missing. There is no number of days. The definition sets no period at all.
India’s threshold sits in its treaties. Pakistan’s sits in its statute. Bangladesh’s domestic definition simply has neither.
That does not mean any single day of service creates a permanent establishment. It means the protection comes from a double taxation agreement rather than from the Act. Where a treaty applies, its threshold governs. Bangladesh holds agreements with around 41 countries.
Where no treaty applies, the Act governs on its own terms, and those terms set no safe period.
What to take from this. Check whether your country has a treaty with Bangladesh before you place anyone who will deliver services to Bangladeshi customers. That single question changes your position more than any other step you can take.
One more limb, and it matters if you sell online. The same definition treats significant digital or online activity by a non-resident as a permanent establishment where there are 100,000 or more digital customers or subscribers in Bangladesh. That is a headcount test on your user base, not on your staff. It has nothing to do with whether you employ anyone in the country.
Two details about counting days that surprise people
Days aggregate across people. Two engineers on site for fifty days each in the same twelve-month window can reach a hundred days between them. Nobody individually crossed anything.
Days aggregate across connected projects. Splitting one engagement into three contracts does not restart the clock if the projects are connected.
Where test two stops, and why that works in your favour
Read the paragraph above in isolation and it sounds alarming. It should not be, for most hires.
The clause says services must be furnished within the country. Courts have been consistent about what that means.
Two recent decisions make the position clearer than it has been in years.
In late 2025 the Delhi High Court decided Commissioner of Income Tax (International Taxation) v. Clifford Chance Pte Ltd. The question was whether a Singapore law firm serving Indian clients remotely had a service PE in India. The Revenue argued for a “virtual service PE”. The court rejected it.
Physical presence of employees rendering services in India is a precondition. The court declined to read into a treaty something the treaty does not say. It also held that vacation days and business development days come out of the 90-day count, because no services were rendered to Indian clients on those days.
Separately, the Delhi Tribunal declined to treat back-office operations as a fixed place PE of a foreign parent. The services went to the parent’s customers abroad, not to any customer in India. Saving cost through an offshore team was not enough. The two companies were distinct taxpayers, each free to provide services to the other.
Put those together and a workable line appears.
Ask who receives the service.
A software engineer in Dhaka building your product for your customers in London is not furnishing services to anyone in Bangladesh. A support agent in Dhaka handling tickets from users in twelve countries is not furnishing services to a Bangladeshi customer either.
A consultant in Dhaka delivering an implementation project for a Dhaka client is doing exactly that.
The first two are the standard EOR hire. The third is a service business operating in-country, and it needs advice before anyone signs.
What about remote workers? The OECD changed this in 2025
For years the worry was simple. If someone works from their home in another country, does that home become your office in the eyes of a tax authority?
The rules were never clear. In November 2025 they got clearer.
On 18 November 2025 the OECD Council approved an update to the Model Tax Convention and its Commentary. It is the first significant revision since 2017, and remote work is the reason for it.
Two parts matter to you.
A 50% safe harbour. Where an employee works remotely for less than half of their total working time in any twelve-month period, the presumption is that no fixed place of business exists for the employer at that home. The aim is to stop tax authorities finding a permanent establishment every time someone works from a kitchen table.
A commercial reason test. The Commentary looks at why the person is there. An employee working from home because that is where they live is treated differently from a company that placed someone in a country to serve that market.
Two limits, and they matter here.
The Commentary interprets the OECD model. Treaties across Bangladesh, India, and Pakistan follow the UN model more closely, so this guidance carries less weight in the region than it does in Europe.
It also answers the fixed place question only. It does nothing to the service PE test above, which counts days rather than desks. A remote worker delivering services to local customers still counts those days.
So the OECD update is good news, narrowly. It settles the home office question. It leaves both tests above exactly where they were.
Which roles carry which risk
| Role | Why | Risk |
|---|---|---|
| Software engineer on your own product | Serves your customers abroad, no local delivery, no authority | Low |
| Customer support for global users | Same reasoning, wherever the tickets come from | Low |
| Finance, accounting, or internal operations | Internal function, no external service, no authority | Low |
| Marketing without commercial authority | No contracts, no local service delivery | Low |
| Recruiter hiring for your global team | Internal function | Low |
| Sales negotiating terms with local buyers | Agent test, post-MLI wording | High |
| Consultant delivering projects to local clients | Service PE, days count | High |
| Country manager or general manager | Both tests, plus the appearance of a local branch | High |
| Project team serving one local customer over months | Service PE, days aggregate across the team | High |
Most companies hiring through an EOR in South Asia are hiring from the top half of that table. That is the honest picture and it is a reassuring one.
The problems start when a company hires an engineer in year one, and by year three that person is a country manager quoting local prospects. Nobody revisited the structure. The risk changed on its own.
What tax authorities actually look at
The tests are legal. The evidence is ordinary.
- A job title that reads as a local branch, such as “Country Manager, Bangladesh”, on a public profile
- Your company’s local phone number or address published on your own website
- Quotes, purchase orders, or proposals going out under the employee’s name
- Office space you pay for, even a hot desk billed to your company
- Invoices issued to local customers for work performed locally
- Business cards, email signatures, and LinkedIn headlines presenting the person as your local office
None of these is decisive alone. Together they build the picture an inspector is looking for.
The pattern is worth noticing. Most of these are marketing decisions, not tax decisions. They get made by people who have never heard of permanent establishment.
How to protect your company: six things to do
None of these needs a lawyer on retainer. Five of the six are decisions you make before anyone starts.
1. Define the scope before you make the offer. After the person starts, you are describing what happened. Before, you are deciding what will happen. Write down what the role can and cannot do.
2. Keep commercial authority real, not cosmetic. If the deal is shaped in-market, a signature at home does not change the substance. Either move the negotiation home, or accept that the role carries risk and plan for it.
3. Count days if you deliver services to local customers. Track them per project and across everyone involved. Short engagements count too, and that is where companies get caught.
4. Do not build the appearance of a local office. No local address on your site. No local phone number in your company’s name. No job title that reads as a branch.
5. Take tax advice before any commercial or client-facing hire. Thresholds and consequences differ by market and by treaty. One advisory conversation costs far less than a retrospective assessment covering several years.
6. Check the role again when it changes. A promotion can move a hire from the safe half of the table to the risky half. Nobody sends an alert when that happens.
What a good provider says about this
A provider who tells you an EOR eliminates permanent establishment risk has either not read the treaties or would rather you did not.
A provider who asks what the person will actually do, before you make the offer, is doing the job properly. That is a five-minute conversation, and it is the difference between a structure that holds and one that reads well until it is examined.
At Meteors we employ people across Bangladesh, India, and Pakistan, and we review role scope before the contract is drafted rather than after. Where a role sits close to a line, we say so and recommend you take tax advice.
Frequently asked questions
Does using an Employer of Record guarantee I will not create a permanent establishment?
No, and no provider can promise it. An EOR removes most of the fixed place indicators, because the local employment and registrations sit with the provider. What it cannot change is what the person does. Commercial authority and local service delivery carry risk under any employment structure.
Can a single employee create a permanent establishment?
Yes. There is no minimum headcount in either test. One salesperson with real negotiating authority can create an agent PE. One consultant past the day threshold can create a service PE.
Is remote work alone enough to create one?
Usually not, and two things from 2025 support that. The OECD’s November 2025 Commentary presumes no fixed place of business where someone works remotely for less than half their working time in a twelve-month period. Separately, the Delhi High Court held that a service PE needs physical presence of employees rendering services in the country, and rejected the idea of a virtual one. A person working remotely for a foreign employer, serving that employer’s customers abroad, is a weak candidate for either test.
What happens if we create a permanent establishment by accident?
Your company registers and files in that country. It pays corporate tax on the profit attributed to the presence. Penalties and interest run from the original due dates, not from the day you found out. Expect to prepare transfer pricing documentation covering the same years. The cost is rarely the tax alone.
Does the Employer of Record become liable if a permanent establishment arises?
No. The permanent establishment belongs to your company, because it is your business being carried on. The provider’s obligations are employment ones: payroll, filings, contributions, and statutory compliance. That is a fair reason to check what your provider actually reviews before a hire.
We have a tax treaty with the country. Are we covered?
A treaty helps, because it sets the threshold and usually narrows the domestic definition. It does not remove the question. Treaties in this region carry the service PE clause, so a treaty can be the reason the second test applies rather than the reason it does not.
For Bangladesh the treaty matters more than usual. The domestic services test carries no day threshold, so where no treaty applies there is no safe period to rely on. Check whether your country has an agreement with Bangladesh before placing anyone who will deliver services to Bangladeshi customers.
Does an EOR help with the same problem as a PEO?
They answer different questions. PE is about your company’s taxable presence. The difference between an EOR and a PEO is about who counts as the legal employer. A PEO also needs you to hold a legal entity in the country already. If you have an entity there, most of the question above is already settled.
Weighing up a specific role in Bangladesh, India, or Pakistan? Tell us what the person will be doing and we will tell you where it sits.
