India has become the world’s most preferred destination for Global Capability Centers. Over 1,700 GCCs now operate across the country, generating USD 64.6 billion in revenue and employing nearly two million professionals, according to KPMG and NASSCOM data from FY 2024. The talent is exceptional. The cost advantage is real. The strategic potential is enormous.
But there is a compliance iceberg beneath India’s attractive surface and thousands of foreign companies are sailing directly into it. The iceberg has three points: permanent establishment risk in India, worker misclassification exposure, and broader statutory compliance failure. Together, they can convert a cost-saving India strategy into a multi-crore liability.
This blog is not a generic warning. It is a data-verified, practitioner-grounded breakdown of the specific legal and tax risks your company takes on the moment it engages workers in India without a properly structured legal entity — and a clear roadmap to eliminate those risks before they escalate.
Critical Alert: Indian tax authorities issued PE-related assessments exceeding INR 15,000 crore across multinational enterprises in FY 2024-25, and enforcement is accelerating through data analytics and international information exchange agreements. PE risk is no longer theoretical, it is an operational reality.
What Is Permanent Establishment Risk in India And Why It Matters Now
Permanent establishment risk in India refers to the legal exposure a foreign company faces when it is deemed, under Indian tax law or a relevant Double Taxation Avoidance Agreement (DTAA), to have a taxable presence in India even without formally incorporating an entity here.
Under Section 92F(iiia) of the Income Tax Act, 1961, a Permanent Establishment is defined as a fixed place of business through which the enterprise is wholly or partly carried on. India also has DTAAs with over 90 countries, each containing its own Article 5 definition of PE. Where treaty definitions conflict with domestic law, the more beneficial provision for the taxpayer generally prevails but this requires proactive treaty analysis, which most companies skip entirely.
The reason permanent establishment risk in India demands urgent attention in 2026 is enforcement intensity. The Income Tax Department now deploys data analytics, cross-border information exchange, and AI-driven audit selection to identify PE exposure. Companies are being audited for PE violations they did not know they had. And the consequences are severe.
“A GCC is not just an offshore team, it is a strategic extension of your enterprise. A correctly structured entity ensures 100% foreign ownership, FEMA compliance, tax efficiency, and board-level governance transparency.”
— SansoviGCC Legal Entity Setup Framework
The Four Types of PE That Trap Foreign Companies in India
A) Fixed-Place PE
Having a tangible location in India used for business, including an office, branch, factory, or warehouse. India applies a strict “disposal test”: if a foreign enterprise has the right to use premises in India for its own business activities, PE is triggered. In the landmark Hyatt International (2025) Supreme Court ruling, a Dubai-based hotel management company was held to have a fixed-place PE in India despite having no formal lease, because it exercised “continuous and substantive control” over Indian hotel operations.
B) Service PE
Created when a foreign company provides services in India through its personnel beyond a threshold duration. Under the India-USA DTAA, aggregate presence of more than 90 days across all personnel in any rolling 12-month period triggers a Service PE. Crucially, the 90 days are aggregated: if three employees each spend 35 days in India, the aggregate of 105 days exceeds the threshold entirely.
C) Dependent Agent PE
Triggered when an agent in India, which can include an employee habitually exercises authority to conclude contracts on behalf of the foreign enterprise. This is one of the most common and underappreciated triggers. An employee who regularly signs contracts, makes pricing decisions, or approves commercial terms on behalf of the foreign parent creates a Dependent Agent PE without anyone realising it.
D) Construction / Project PE
Arises when a foreign company carries out construction, installation, or assembly projects in India exceeding a specified duration. The threshold in most Indian DTAAs is 183 days (six months), though some treaties specify 12 months. Relevant for GCCs involved in infrastructure, engineering, or large-scale system integration projects.
What Happens When PE Is Triggered?
If Indian tax authorities determine that your company has created a permanent establishment in India, the consequences unfold rapidly. Your foreign company is treated as an assessee in default and becomes subject to:
Worker Misclassification: The Compliance Trap Most Companies Walk Into Blindly
Before addressing permanent establishment risk in India directly, many companies stumble at an earlier, more basic trap: misclassifying Indian workers as independent contractors when they are, by law, employees. This is not a gray area in India. It is a clearly defined compliance failure with severe financial, legal, and reputational consequences.
Indian labor law draws a sharp distinction between employees and independent contractors. The key tests that Indian courts apply include the degree of control the employer exercises, whether the worker is economically dependent on a single principal, whether the work is integral to the business (not merely auxiliary), and whether the worker has genuine autonomy over how and when they work. Critically, Indian courts adopt a pro-employee stance, even well-drafted contracts will not protect employers if the working relationship resembles traditional employment.
Legal Precedent : In a widely cited Indian labor court ruling, the Himachal Pradesh High Court held that over 60 contract workers at MES Subathu were wrongly treated as outsourced labor despite existing contracts to the contrary, because they worked under direct supervision of the principal. The court ordered reinstatement with 50% back wages. Contracts do not override substance.
The Financial Cost of Misclassification in India
When a worker is reclassified from contractor to employee by an Indian court or regulator, the liability is not prospective, it applies retroactively from the date the arrangement began. The financial exposure compounds rapidly:
1) Retrospective PF contributions
12% employer contribution on basic pay, with interest from the date contributions should have been made.
2) ESI contributions
Approximately 3.25% employer contribution on applicable wages, retroactive from commencement.
3) Gratuity liability
15 days of salary per year of service, becoming payable once the reclassified employee crosses five years of continuous service.
Paid leave encashment, bonuses, and other statutory benefits: All claimed retroactively with compounding effect.
4) TDS non-compliance penalties
Underpaid taxes, interest, and penalties for failure to deduct and remit income tax at source on salary payments.
5) Professional Tax
State-level professional tax (varies by state, up to INR 2,500 per annum per employee) unpaid from day one.
6) Legal and labor court costs
Extended litigation, reinstatement orders, and significant legal fees.
Real Case: A foreign marketing firm had its freelance content creators reclassified as employees by an Indian court. The company was ordered to pay back wages, full statutory benefits, and taxes retroactively across the entire engagement period. The total liability significantly exceeded the cost of establishing a proper entity from day one.
The Control Test: Where Most Companies Fail
The single most common misclassification trigger is the control test. If your “contractor” attends daily standups, works fixed hours, uses company tools, receives regular performance feedback, reports to a designated manager, and works exclusively or primarily for your company they are an employee under Indian law, regardless of what the contract says. The Contract Labour (Regulation and Abolition) Act also prohibits contractors from being engaged for jobs that are perennial in nature meaning contractors can only lawfully work on time-bound, project-specific engagements.
Compliance Exposure Beyond PE and Misclassification: The Full Regulatory Stack
Even companies that correctly classify workers and avoid permanent establishment risk in India can face significant compliance exposure through the layered statutory framework that governs employment in India. This framework operates at both central and state levels, and the interaction between them creates complexity that foreign companies consistently underestimate.
The Central Statutory Obligations Stack
| Statute | Obligation | Consequence of Non-Compliance |
|---|---|---|
| EPF & MP Act, 1952 | 12% employer PF contribution on basic wages; mandatory for establishments with 20+ employees | Retrospective contributions + 12% annual interest + 5–25% damages + possible prosecution |
| ESIC Act, 1948 | ~3.25% employer ESI contribution; applicable where wages are below ₹21,000/month | Retroactive contributions, penalties, and regulatory scrutiny |
| Payment of Gratuity Act, 1972 | Gratuity at 15 days’ salary per year after 5 continuous years of service | Claims with interest; labor court enforcement |
| Industrial Disputes Act, 1947 | Termination protections for “workmen”; notice, retrenchment compensation, prior approval for large-scale reductions | Illegal termination claims, reinstatement orders, back wages |
| POSH Act, 2013 | Mandatory Internal Complaints Committee, anti-harassment policy, annual reporting | Fines up to ₹50,000; license cancellation risk for repeat violations |
| DPDP Act, 2023 | Digital Personal Data Protection obligations; data principal rights, consent management, data fiduciary duties | Penalties up to ₹250 crore for significant data breaches |
State-Level Compliance: The Hidden Complexity Layer
Beyond central statutes, each Indian state maintains its own Shops & Establishments Act, professional tax regime, minimum wage schedule, and labor welfare fund requirements. For a company hiring across Bengaluru (Karnataka), Pune (Maharashtra), and Hyderabad (Telangana) three of the most common GCC locations the compliance matrix operates across three entirely different state frameworks simultaneously. Many states require Shops & Establishment registration within 30 days of commencing operations. Non-registration during audits frequently triggers penalties and payroll disruption.
The EOR Mirage: Why Cheap EOR Alone Does Not Eliminate Permanent Establishment Risk in India
Many foreign companies believe that engaging an Employer of Record (EOR) provider automatically eliminates all compliance exposure, including permanent establishment risk in India. This is a dangerous and costly misconception. An EOR, when structured correctly, is an excellent mechanism for compliant hiring without an entity. But the EOR structure does not, by itself, insulate a foreign company from PE risk if the underlying business activities are mismanaged.
Specifically, permanent establishment risk in India remains alive even with an EOR in place when:
1) The EOR-hired team makes key business decisions in India
Approving contracts, setting pricing, or exercising commercial authority on behalf of the foreign parent.
2) The foreign company controls the operational premises
If the EOR team works from an office whose costs are borne by or controlled by the foreign company, India may apply the “disposal test” and classify it as a fixed-place PE.
3) Foreign executives visit India repeatedly for management and oversight:
Aggregated to exceed the service PE threshold under the applicable DTAA.
IP created by the India team is assigned to the foreign entity without proper arm’s-length transfer pricing documentation, The EOR provider is a pure payroll pass-through without genuine HR, governance, and compliance infrastructure, leaving the foreign company exposed on every non-payroll dimension
Key Distinction: Not all EOR providers are equal. Payroll-only EOR providers process salaries and remit taxes — but they do not manage governance reporting, compliance frameworks, PE risk structuring, or the operational oversight that prevents inadvertent PE creation. Enterprise-grade EOR with full compliance ownership is a fundamentally different product.
The EOR-to-Entity Decision Framework: When to Move, How to Move
The appropriate structure for hiring in India depends on your headcount trajectory, the nature of work being performed, your risk tolerance, and your long-term India strategy.
Here is the decision matrix that SansoviGCC uses with clients:
| Headcount | Nature of Work | Recommended Structure | Primary Risk Without Structure |
|---|---|---|---|
| 1–5 employees | Testing the market; exploratory | Enterprise EOR | Misclassification if using contractors; PE risk if direct engagement |
| 5–15 employees | Growing operations; some decision-making in India | EOR with BOT pathway, or Hybrid EOR + Entity | Dependent Agent PE if employees have commercial authority |
| 15+ employees | Material operations; significant India footprint | Wholly Owned Subsidiary (Private Limited) via full Legal Entity Setup | Fixed-Place PE; full compliance exposure; transfer pricing risk |
| Any size | Long-term GCC with strategic functions | Incorporated subsidiary + GCC Advisory + GBS Operating Model | Unstructured growth leading to governance failure and board-level liability |
The BOT Model: How to De-Risk the Transition
The Build-Operate-Transfer (BOT) model is the most structured pathway from EOR-based hiring to a fully owned India entity. Under BOT, the GCC partner, SansoviGCC builds and operates the India team within its own legal and compliance infrastructure, then formally transfers ownership to the foreign parent once operational maturity is achieved. This eliminates the transition risk of shifting employees, contracts, and compliance registrations from an EOR structure to a captive entity a process that, if poorly managed, can itself trigger employment disputes, compliance gaps, and PE exposure during the handover window.
What the Legal Entity Setup Journey Looks Like
T+0: Name Reservation & DSC Application
Proposed company name filed with MCA; Digital Signature Certificates obtained for directors. SansoviGCC can provide an Indian director appointment service, eliminating the need to source one independently.
T+22: Incorporation Filing
Draft MOA & AOA prepared; apostilled foreign holding company documents submitted; incorporation filing executed with ROC.
T+28: Certificate of Incorporation
Certificate issued. The Indian subsidiary is now a separate legal entity. Foreign parent’s PE exposure ends at this structure level.
T+40: RBI FIRMS Registration
FIRC obtained; FCGPR filed within 30 days of capital infusion; RBI registration completed. FEMA compliance secured.
T+50 onward: Post-Incorporation Compliance
GST, PF, ESIC, Professional Tax, Shops & Establishment, Statutory Audit, Board Meeting compliance all activated. Full operational readiness achieved.
How SansoviGCC Eliminates Permanent Establishment Risk in India End-to-End
SansoviGCC, powered by the GoodWorks Group, is India’s only full-stack GCC platform that addresses permanent establishment risk in India not as a legal advisory footnote but as a core operational discipline built into every engagement.
Unlike payroll-only EOR providers or generic company formation consultants, SansoviGCC integrates legal entity setup, EOR services, workspace provisioning, talent management, technology delivery, and ongoing compliance governance under a single operating model. Our track record speaks directly to this: we have a 100% success record supporting global enterprises in India, with zero FEMA non-compliance incidents and zero PE triggers for clients under our managed structures.
What SansoviGCC provides to eliminate your permanent establishment risk in India:
EOR with full compliance ownership — not payroll-only. Dedicated HRBP, complete India statutory compliance (PF, gratuity, labour laws), HRMS, governance reporting, and employee lifecycle management from Day1
Legal Entity Setup — end-to-end incorporation of a Wholly Owned Subsidiary (Pvt. Ltd.), including RBI FIRMS registration, FCGPR filing, FEMA compliance, and post-incorporation statutory setup. We provide an Indian director if required.
BOT Model — structured Build-Operate-Transfer with seamless employee transfer, legal novation of contracts, zero disruption to employees, and compliance continuity throughout.
PE Risk Governance — clear SOPs governing how India team employees interact with the foreign parent, preventing inadvertent Dependent Agent PE or Fixed-Place PE creation.
GCC Advisory Services — ongoing strategic advisory covering operating model design, governance structures, stakeholder alignment, and GCC-to-GBS maturity roadmap.
Premium Workspace — over 1 million sq. ft. under management; plug-and-play Grade A offices in Bengaluru and other major GCC hubs, structured to prevent PE exposure from workspace arrangements.
8 Immediate Actions to Audit Your India Compliance Exposure
If your company is already hiring in India, through contractors, informal EOR arrangements, or direct engagement here is an immediate action plan to audit and remediate your permanent establishment risk in India and related compliance exposure:
1. Classify every Indian worker immediately
Apply the control test, economic dependency test, and integration test to every person on your India payroll or contractor list. Flag anyone who fails two or more criteria for immediate reclassification review.
2. Audit all contracts for commercial authority clauses
Review every employment and contractor contract for clauses that grant the India-based person authority to conclude contracts, set prices, or approve commitments on behalf of the foreign parent. Remove or restructure these clauses immediately to prevent Dependent Agent PE creation.
3. Track all executive travel days to India
Aggregate all days spent in India by any foreign company employee or officer across the rolling 12-month period. Cross-reference against your applicable DTAA threshold (90 days for India-US; varies for other treaties). Any threshold breach requires immediate entity structuring.
4. Assess your workspace arrangements
Determine whether any office space in India is, in substance, at the disposal of the foreign company even if not formally leased. Apply the disposal test used by Indian courts. If the foreign parent controls access, usage, or costs, a fixed-place PE risk exists.
5. Verify DTAA applicability and treaty thresholds
Identify the specific DTAA between India and your home country. Confirm the Service PE threshold, Dependent Agent PE definition, and Force of Attraction provisions under that specific treaty. Do not assume OECD model treaty defaults apply.
6. Audit statutory deductions retroactively
Verify that PF, ESIC, Professional Tax, TDS, and gratuity obligations have been correctly calculated and remitted from the commencement of each worker’s engagement. Identify any gaps and assess retroactive exposure before a regulatory audit does it for you.
7. Evaluate transfer pricing documentation
If your India team creates intellectual property, develops software, or delivers services to the foreign parent, ensure you have proper transfer pricing documentation establishing arm’s-length pricing for those intercompany transactions.
8. Design your entity roadmap
Based on your current headcount, growth trajectory, and the nature of work being performed, design a 12-month roadmap to the appropriate legal structure EOR, BOT, or fully owned subsidiary. Begin the incorporation process before you reach 15+ employees, not after.
SansoviGCC by GoodWorks Group is India’s Leading End-to-End GCC Solutions Platform to build, operate and scale GCCs.