TL;DR
An Employer of Record (EOR) is a third party that legally employs workers on your behalf in a foreign country, handling payroll, taxes, and compliance. Permanent establishment (PE) is a tax concept where a foreign government determines your company has a taxable presence in their country. Using an EOR significantly reduces PE risk for roles like software engineering, but it does not eliminate that risk entirely, especially for sales roles or executive positions with contract authority. The OECD’s November 2025 update introduced a 50% working time benchmark and a commercial reason test that actually favor remote engineering hires in Latin America.
Need help building your software team?
Mismo helps companies hire vetted nearshore developers and build reliable engineering teams faster.
Talk to MismoWhat Is an Employer of Record (EOR)?
An Employer of Record is a third-party company that becomes the legal employer of your workers in a foreign country. You manage the day-to-day work. The EOR handles everything else: payroll, benefits, tax withholding, employment contracts, and local labor law compliance.
Think of it as a legal wrapper. Your company directs what the employee does, but on paper, the EOR is the employer in that country. This means your company doesn’t need to register a local entity, open a foreign bank account, or navigate unfamiliar employment regulations.
Companies use EORs primarily for three reasons:
- Speed. Most EORs complete onboarding in one to two weeks. Compare that to roughly 3.5 months for establishing a legal entity in a new country.
- Cost. Setting up and maintaining a foreign subsidiary costs tens of thousands of dollars annually, even before you hire a single person.
- Compliance. Employment law varies dramatically across countries. An EOR already knows the rules and stays current on changes.
This model is especially popular among startups and mid-market tech companies hiring engineers in Latin America, where the advantages and disadvantages of nearshore outsourcing make EOR arrangements a natural fit for building distributed teams quickly.
What Is Permanent Establishment (PE)?
Permanent establishment is a tax concept, not a physical building. It refers to the point where a foreign government determines that your business has a fixed, ongoing, taxable presence in their country. Once that threshold is crossed, your company owes corporate income tax in that country, potentially on top of what you already pay at home.
The consequences are serious. A PE finding can trigger corporate income tax on profits attributed to the foreign jurisdiction, plus back taxes, interest, and penalties for years of prior non-compliance. It can also force your company into local registration, reporting obligations, and legal representation requirements that multiply operational complexity overnight.
Five Common PE Triggers
Fixed place of business. An office, branch, factory, or even a regularly used coworking space can qualify. If your company controls a physical location in another country, that’s a red flag.
Dependent agents and employees. Local workers who negotiate contracts, sign deals, manage clients, or represent your company in the local market can create a taxable presence. This is one of the most common triggers and the one most directly relevant to the employer of record and permanent establishment question.
Revenue-generating activities. Consistently generating income or providing services in a country, especially services that are core to your business, raises PE risk significantly.
Duration of activities. Many countries consider a PE if employees work more than 183 days per year in their jurisdiction, even without a physical office. Operating beyond six months is a common threshold across tax treaties.
Remote workers. This is the newest and most debated trigger. Even remote employees can create PE risk if their activities are significant and directly tied to the company’s core business in the host country.
For a deeper look at the tax side of remote hiring, see this guide to remote employee tax obligations.
How an EOR Reduces Permanent Establishment Risk
The core mechanism is simple: the EOR, not your company, is the legal employer in the foreign country. This creates a legal buffer between your business and the host jurisdiction.
Here’s what that buffer actually does:
Removes the need for a physical presence. Your company doesn’t register an entity, open a bank account, or maintain an office. The EOR holds the employment relationship, so the most straightforward PE trigger (fixed place of business) doesn’t apply to you.
Separates payroll and tax obligations. All fiscal obligations, including income tax withholding, social security contributions, and employment taxes, are handled locally by the EOR. Your company’s name doesn’t appear on local tax filings.
Eliminates the dependent agent argument. Because workers are legally employed by the EOR, not by your company, the “agent acting on behalf of the foreign enterprise” argument becomes much harder for tax authorities to make.
Ensures local labor law compliance. The EOR manages employment contracts, termination procedures, mandatory benefits, and local regulatory requirements. This compliance layer prevents the kinds of administrative entanglements that can signal a permanent presence.
For companies evaluating different onshore, nearshore, and offshore outsourcing models, the EOR approach stands out specifically because of this PE risk reduction.
An engineer working remotely from Costa Rica through an EOR, for example, is legally an employee of the EOR entity in Costa Rica. Your U.S. company has no registered presence there, no tax filing obligations, and no direct employment relationship that local authorities can point to.
The Limits: When an EOR Doesn’t Protect You
This is where most EOR vendor content falls short. They sell peace of mind. The reality is more complicated.
Tax authorities don’t just look at who the legal employer is. They look at what the worker actually does. If an employee’s activities would create a permanent establishment regardless of their employer, the EOR structure won’t save you.
As a tax advisor at Vistra put it plainly: “An EOR does not wholly do away with your permanent establishment risk. It’s a very real risk.”
Specific scenarios where an EOR falls short
Sales roles with contract authority. If your worker in Colombia is closing deals, signing contracts, or making binding commitments on behalf of your company, that’s a textbook dependent agent. The EOR wrapper doesn’t change what they’re doing.
The rubber-stamping problem. Analysis from Freshfields, a global law firm, highlights a critical nuance: even if contracts are technically signed at headquarters, a permanent establishment can arise if the local worker “plays a key role in negotiating the contract” and the home office merely rubber-stamps it. Many modern tax treaties now explicitly cover this scenario.
C-level and strategic decision-making roles. If you hire a country manager or a senior executive through an EOR who makes strategic decisions for the business from a foreign location, that signals a taxable presence. The Vistra tax advisory team is direct on this point: “If there are clear PE risk issues, such as hiring C-level executives, an EOR should not be used.”
Revenue-generating activities tied to the local market. A Vistra advisor frames it as a diagnostic question: “Are the activities revenue-generating or creating economic value? Do they go towards delivering on the contractual obligations of the parent company?” If a U.S. software company has local workers in the UK doing implementation work that the U.S. entity is being paid for, those workers may be satisfying contractual obligations and creating PE.
A practical safeguard
Practitioners in the LATAM EOR space recommend a specific contractual protection: secure a written PE indemnity clause in your EOR agreement. Nearshore Business Solutions, a LATAM EOR specialist, calls this “the gold standard” and advises that the clause should cover both permanent establishment risk and misclassification liability. If your EOR provider won’t offer this, that tells you something about their confidence in the protection they provide.
For companies implementing remote work best practices, understanding these boundaries is essential to keeping your international hiring compliant.
The 2025 OECD Update: New Rules on Remote Work and PE
The OECD released its 2025 Update to the Model Tax Convention in November 2025, the first comprehensive revision since 2017. This update is a big deal for anyone thinking about employer of record and permanent establishment risk because it directly addresses remote work for the first time.
The update introduces a two-part test for determining when remote workers create a PE:
The 50% working time benchmark (temporal test)
If an employee spends less than 50% of their total working time at a remote location in another treaty country over any twelve-month period, that location is generally not considered a “fixed place of business.” No PE arises. This is essentially a safe harbor for occasional or part-time remote work.
The commercial reason test (qualitative assessment)
For arrangements exceeding the 50% threshold, the OECD examines whether the employee’s physical presence in the foreign country serves a genuine commercial purpose for the company.
Here’s the part that matters most for remote engineering hires: the OECD explicitly states that no commercial reason exists where the enterprise enables remote work solely for employee convenience, talent retention, cost savings related to office space, or financial support for a home office.
This is excellent news for companies hiring engineers in Latin America. The engineer lives in Costa Rica or Mexico because that’s where they’re from, not because the U.S. company needs them physically present there for commercial reasons. The engineering work is exported to the U.S. company. There’s no location-dependent commercial purpose. Under the new framework, this significantly lowers PE risk even when engineers work full-time from a foreign location.
The shift in remote work trends across Latin America makes this OECD guidance directly relevant to thousands of companies.
Country exceptions to watch
Not every country follows the OECD framework uniformly. India has expressed reservations and does not accept the new tests. Israel has specific criteria that differ from the OECD model. Nigeria and Malaysia have indicated differing interpretations as well. LATAM countries are increasingly adopting OECD standards, but often with local modifications that add compliance complexity.
PE Risk by Role Type
This is something missing from most guides on employer of record and permanent establishment: a clear breakdown of which roles create the most risk. Not all employees are equal in the eyes of tax authorities.
| Role Type | PE Risk Level | EOR Effective? | Why |
|---|---|---|---|
| Software Engineer | Low | Yes | Work is exported; no revenue generated in host country |
| QA / DevOps | Low | Yes | Supporting roles with no client-facing or contract authority |
| Designer / Data Analyst | Low | Yes | Back-office functions; non-revenue-generating locally |
| Customer Support (local market) | Medium | Case-dependent | Real-time local service delivery may signal taxable presence |
| Sales Rep (closing deals) | High | Limited | Dependent agent risk; contract authority is a classic trigger |
| Country Manager / C-Suite | Very High | Not recommended | Strategic decision-making signals a fixed business presence |
As Deel confirms: “An engineer’s work will unlikely trigger a permanent establishment since the service does not generate any revenue for the business in the country.”
The takeaway is clear. Engineering-focused hiring in Latin America falls into the lowest PE risk category. The work is performed remotely, exported to the parent company, and generates no local revenue. Combined with the OECD’s commercial reason test, this is the safest configuration for EOR-based international hiring.
Special Considerations for LATAM Hiring
Latin America presents its own specific wrinkles in the employer of record and permanent establishment equation. Companies hiring across the region need to understand three things.
Mexico’s 2021 Outsourcing Reform
Mexico made sweeping changes to its labor law in 2021, banning most forms of outsourcing. The reform targeted abusive subcontracting (the use of third parties as legal employer of record for multinationals increased 360% between 2003 and 2018), but it caught legitimate EOR arrangements in the crossfire.
Under the new rules, only specialized services registered with REPSE (Mexico’s outsourcing registry) can lawfully provide outsourced personnel. Any EOR operating in Mexico must hold REPSE registration. The penalties for noncompliance are severe: fines up to USD $222,000 and potential incarceration of company representatives.
If you’re hiring in Mexico through an EOR, verify REPSE registration before signing anything.
Costa Rica’s Territorial Tax Regime
Costa Rica taxes residents and corporations only on income earned within Costa Rica. This territorial approach means that engineers working through an EOR in Costa Rica who perform work exclusively for U.S. clients face a different PE risk profile than countries with worldwide taxation systems. The engineering services are exported, and under Costa Rica’s system, branches and permanent establishments are taxed the same way as subsidiaries, but only on Costa Rican-source income.
For a comparative view across the region, this analysis of Latin American tech hubs including San José, São Paulo, Mexico City, and Buenos Aires covers the broader talent and regulatory picture.
General LATAM Trends
Latin American countries are increasingly aligning with OECD PE standards, but with local interpretations that create additional complexity. The United States applies its own unique PE framework through “effectively connected income” rules, which don’t map perfectly onto OECD concepts. Working with a hiring partner that understands both frameworks is important. LATAM developers cost 40-55% less than U.S. equivalents when you factor in employer burden rates, but those savings only materialize if you’re compliant.
EOR vs. Legal Entity: When to Transition
An EOR is a bridge solution, not a permanent one. It works well for testing a market, hiring your first few people in a country, or getting started quickly. But it has natural limits.
Signs it’s time to set up a local entity
Headcount thresholds. Mid-market firms typically consider local entity establishment around 10 to 15 employees per country. Tax advisors at Vistra put the ceiling even more explicitly: “If you have 30 individuals you want to hire or the on-the-ground activities are core to your business operations, an EOR route may not be the recommended solution.”
Country-specific time limits. Some countries cap how long you can use an EOR. Germany restricts EOR employment beyond 18 months. France requires organizations using EORs to comply with tighter labour laws and tax regulations. Singapore announced in late 2024 that EORs cannot be used to hire non-Singaporean nationals at all.
Activity escalation. If your workers’ roles evolve from back-office support to client-facing, revenue-generating work, the PE risk changes and the EOR protection weakens.
Cost math. At a certain scale, entity formation becomes cheaper than EOR fees. That crossover point varies by country, but it’s worth modeling once you pass five to seven employees in a single jurisdiction.
The speed tradeoff
Entity setup takes roughly 3.5 months on average. EOR onboarding takes one to two weeks. For companies that need engineers working next month (not next quarter), starting with an EOR and transitioning later is a common and sensible strategy.
For a complete walkthrough on getting started, this guide to hiring offshore talent in Latin America covers the process from sourcing through onboarding.
Key Takeaways
The relationship between employer of record and permanent establishment comes down to risk management, not risk elimination. Here’s what matters:
- An EOR creates a legal buffer that significantly reduces PE risk by removing your company’s direct legal and fiscal presence from a foreign country.
- That protection has real limits. Tax authorities care about what the worker does, not who issues their paycheck. Sales roles, C-suite positions, and contract-negotiating employees can trigger PE regardless of EOR structure.
- The OECD’s 2025 update favors remote engineering hires. When the worker is abroad for personal reasons (not commercial ones), and the work is exported, PE risk is low under the new framework.
- Engineering-focused hiring in Latin America sits in the lowest PE risk category. The work generates no local revenue, involves no contract authority, and typically serves no local commercial purpose.
- Always demand a PE indemnity clause in your EOR contract.
- Plan your transition. An EOR works well up to about 10 to 15 employees per country. Beyond that, start exploring entity formation.
- Consult local tax counsel. No article replaces jurisdiction-specific legal advice.
If you’re considering building an engineering team in Latin America with compliant, time zone-aligned talent, explore how to build a nearshore development partnership or see how Mismo can enhance your LATAM hiring strategy.
Frequently Asked Questions
Does an EOR eliminate permanent establishment risk?
No. An EOR reduces PE risk substantially, but it does not eliminate it. If the worker performs activities that would create PE on their own (closing deals, making strategic business decisions, negotiating contracts), the EOR wrapper won’t prevent a PE finding. Tax authorities examine the substance of what the worker does, not the formal employment structure.
What roles create the most PE risk when using an EOR?
Sales representatives who close deals or sign contracts, country managers, and C-level executives create the highest risk. These roles involve contract authority and strategic decision-making, which are classic PE triggers. Engineering, QA, design, and data roles carry the lowest risk because they don’t generate revenue locally or exercise binding authority.
How does the 2025 OECD update affect remote hiring?
The OECD’s November 2025 update introduced a 50% working time benchmark as a safe harbor and a commercial reason test for arrangements exceeding that threshold. For remote engineers hired through an EOR, this is favorable: if the worker is located abroad for personal reasons (they live there) rather than because the company needs them physically present for business purposes, the PE risk is lower under the new framework.
What is a PE indemnity clause, and should I require one?
A PE indemnity clause is a contractual provision in your EOR agreement where the EOR accepts financial responsibility if a permanent establishment is triggered despite their involvement. LATAM EOR specialists consider this the gold standard for risk mitigation. If your EOR provider won’t include one, that should raise questions about how much protection they’re actually providing.
When should a company move from an EOR to a legal entity?
Most companies consider entity formation when they reach 10 to 15 employees in a single country. Some countries force the issue (Germany’s 18-month EOR limit, for example). If your workers’ roles evolve toward client-facing or revenue-generating activities, entity formation also becomes more urgent for PE risk reasons.
Does using an EOR in Mexico require special registration?
Yes. Mexico’s 2021 outsourcing reform requires that any EOR providing personnel services must be registered with REPSE. Non-compliance carries fines up to USD $222,000 and potential criminal penalties. Always verify your EOR provider’s REPSE registration before engaging them for Mexican hires.
Are remote software engineers a PE risk in Latin America?
Generally, no. Remote software engineers represent the lowest PE risk category. Their work is exported to the parent company, generates no revenue in the host country, and involves no contract authority. Under the OECD’s 2025 commercial reason test, the fact that the engineer lives in a LATAM country for personal reasons (rather than for the company’s commercial benefit) further reduces risk.
How does Costa Rica’s tax system affect PE risk?
Costa Rica operates a territorial tax regime, meaning it only taxes income earned within Costa Rica. Engineers working through an EOR in Costa Rica who exclusively serve U.S. clients are performing exported services. This territorial approach creates a lower PE risk profile compared to countries that tax worldwide income.
