How does permanent establishment risk work in Spain?

Spain's domestic permanent establishment definition sits in the Impuesto sobre Sociedades (Corporate Income Tax Act, Law 27/2014) and is reinforced by Spain's bilateral double-tax treaties. Most of Spain's treaty network follows the OECD Model Tax Convention closely.

If PE is triggered, Spain gains the right to tax the profits attributable to that PE. You must:

• Register the foreign company for Spanish corporate income tax (Impuesto sobre Sociedades)
• File annual Spanish corporate tax returns attributing profits to the Spanish PE
• Maintain Spanish accounting records sufficient to support the profit attribution
• Pay Spanish corporate income tax (currently 25% for most companies) on those attributable profits

The Agencia Tributaria (AEAT) is the Spanish authority responsible for corporate tax enforcement. AEAT has been active in PE challenges since the 2017 OECD BEPS reforms expanded the dependent-agent definition. The headline cost is the tax bill. The hidden cost is the operational load: Spanish accounting records, transfer-pricing analysis between the Spanish PE and the rest of the group, and dealing with AEAT inspections.

Spanish tax law and treaty practice follow the three-element OECD test:

1. A place of business: premises, facilities, equipment
2. That is fixed: in a geographical location, with a degree of permanence
3. Through which the business of the enterprise is wholly or partly carried on

Spain's courts and the AEAT read 'at the parent's disposal' broadly. A co-working desk used regularly, a rented meeting room used systematically, or a home office used as the employee's primary work location can all meet the test. The permanence threshold does not require years: even a few months of consistent use can qualify if the location is geographically fixed and functionally integrated into the parent's business.

The preparatory and auxiliary exemption

Activities that are purely preparatory or auxiliary do not create a fixed PE even if conducted through a fixed location. Classic examples are storage facilities, purchasing offices, and information-gathering offices. Post-2017 OECD BEPS rules tightened this significantly. AEAT now reads 'preparatory or auxiliary' narrowly, and the anti-fragmentation rule means splitting operations across multiple locations does not escape PE if the combined activity is not genuinely preparatory.

Spanish-specific risk: home-office workers

Spain's courts have found that a home office constitutes a fixed PE where the employee uses it permanently as the centre of their work for the foreign parent, particularly where the parent provides or subsidises the workspace. The Spanish teleworking law (Law 10/2021) has increased scrutiny of these arrangements.

Before 2017 you could argue that your Spanish person did not formally conclude contracts and that HQ signed everything. Post-2017 that argument largely fails in Spain. If the Spanish person plays the principal role and HQ rubber-stamps, the Spanish person is the dependent agent.

What 'principal role' looks like in Spain

• Pitching to Spanish prospects, presenting commercial terms, and leading negotiations
• Setting price, discounts, or material commercial provisions that HQ does not routinely modify
• Holding out as the customer's point of contact for contract-related questions
• Customer-facing job titles such as 'Spain Country Manager', 'Head of Spain Sales', or 'Director de Ventas'

The AEAT enforcement context

Spain's tax authority has been one of the more active in Europe in applying the post-2017 dependent-agent expansion. AEAT has challenged several large multinationals on PE grounds, including cases involving technology companies where local commercial staff concluded deals electronically without formal Spanish entity contracts. This enforcement posture means the risk is not merely theoretical for international companies with Spanish commercial hires.

The independent-agent carve-out

PE rules do not apply to agents acting in the ordinary course of their independent business. A genuine third-party Spanish distributor acting on its own account is not a dependent agent. An EOR is more nuanced: the EOR entity is commercially independent, but the working arrangement of the Spanish employee is with the foreign parent, not the EOR's own business operations.

The EOR helps in three ways:

1. The legal employer is a Spanish entity, so payroll, social security, and employee-side taxes flow through a Spanish-registered company
2. The contract chain is 'parent to EOR to employee', not 'parent to employee', which provides some treaty-analysis room
3. EOR-employed Spanish staff do not hold formal authority on the parent's legal entity (they cannot bind the parent as an officer or administrator)

What EOR does not fix:

• If the Spanish employee functionally concludes contracts for the parent (presenting, negotiating, setting terms), the dependent-agent test still triggers regardless of who signs the employment contract
• If the Spanish employee operates from a fixed Spanish office rented or subsidised by the parent (not by the EOR), the fixed-place test still triggers
• If customer-facing materials describe the Spanish operation as 'our Spain office' or the Spanish employee as part of the parent's Spain team, AEAT will treat this as PE evidence

EOR provides good risk reduction for back-office, engineering, product, design, marketing, support, and operations roles. EOR provides limited protection for sales, business development, country management, and customer-success roles with commercial authority in Spain.

1. Spanish sales hire with quota and commission selling to Spanish customers. Almost always triggers the dependent-agent test if they are closing deals with Spanish buyers.
2. Spanish office with the parent's name or branding on the door or website. Fixed-place trigger, even if rented short-term or shared. Spain's teleworking law has sharpened scrutiny of subsidised home offices used in the same way.
3. Spain Country Manager, VP Spain, or Head of Spain title. The title alone is dependent-agent evidence in AEAT inspections. The BEPS-expanded test means AEAT looks at functional authority, not just who signs the contract.
4. Spanish customer-success or account-management role with authority to renew or expand contracts. Post-2017 case law and AEAT guidance increasingly reads this as dependent-agent activity, particularly where the Spanish person is the customer's main commercial contact.
5. Spanish employee hosting client events and product demonstrations presenting the parent's offerings to Spanish prospects. Fixed-place and dependent-agent overlap if the events are systematic and the employee is the commercial face of the parent's offering.

Lower-risk patterns in our experience: Spain-based engineers building product for the global business; Spain-based designers contributing to global design systems; Spain-based support handling tickets globally (not just for Spanish customers); Spain-based operations roles serving internal company functions globally. These patterns tend to be genuine internal functions rather than client-facing commercial activities.

Step 1: honest assessment

For each Spanish hire, ask: does this person have customer-facing commercial authority? Do they operate from a fixed Spanish location? How would AEAT characterise the role if they read the job description and customer-facing materials? Most PE risk is foreseeable from the hiring brief. The AEAT has publicly flagged commercial and sales roles as its primary inspection focus for PE under BEPS-expanded rules.

Step 2: tax opinion

A short PE-risk opinion from a Spain-qualified tax adviser gives you a defensible position. The cost depends on complexity but is typically a fraction of the potential tax exposure. The opinion does not bind AEAT. But it is strong evidence of reasonable care if AEAT challenges, and it matters significantly to the penalty position. Spanish tax penalties for PE-related failures can be substantial, with late-declaration additions charged on top of the underlying tax.

Step 3a: structure to avoid

If the activities can be carried on without triggering PE (most operational and engineering roles can), structure the engagement to match. Use EOR through a Spanish entity, avoid any parent-rented or parent-subsidised Spanish office, ensure the employee has no customer-facing commercial authority, and keep working arrangements consistent with an internal-to-global function.

Step 3b: incorporate a Spanish entity

If the activities materially benefit from triggering a Spanish presence (commercial Spain presence, customer perception, or local contracting), or cannot be reshaped to avoid the trigger, the right answer is your own Spanish entity (typically a Sociedad de Responsabilidad Limitada, S.L.). The PE becomes explicit rather than accidental, and you control the profit-attribution analysis. You can also access local entity benefits including local contracting and Spanish collective bargaining frameworks.

1. Map each Spanish hire against the two PE tests

   For every Spain-based role, check it against the fixed-place test (does this person use a location at the parent's disposal?) and the dependent-agent test (does this person play the principal role leading to contracts for the parent?). Sales, country management, and customer-success roles with commercial authority are the highest-risk patterns.

2. Assess whether EOR structure provides sufficient protection

   EOR reduces PE risk because the legal employer is a Spanish entity and the employee cannot bind the parent as an officer. EOR does not fix PE risk if the Spanish employee functionally concludes contracts for the parent or operates from a fixed Spanish location subsidised by the parent. Back-office, engineering, and operations roles typically sit in the lower-risk category; commercial roles do not.

3. Get a PE-risk opinion from a Spain-qualified tax adviser

   A short opinion from a Spain-qualified tax adviser gives you a defensible position and matters significantly to the penalty position if AEAT later challenges. Spanish tax penalties for PE-related failures can be substantial, with late-declaration additions charged on top of the underlying tax.

4. Structure to avoid the trigger or incorporate a Spanish entity

   If the activities can be carried on without triggering PE, use EOR through a Spanish entity, avoid any parent-rented or parent-subsidised Spanish office, and ensure the employee has no customer-facing commercial authority. If the activities cannot be reshaped, the right answer is your own Spanish entity, typically a Sociedad de Responsabilidad Limitada (S.L.).

5. Review customer-facing materials and job titles before hiring

   Titles such as Spain Country Manager, Head of Spain Sales, or Director de Ventas are dependent-agent evidence in AEAT inspections. Any materials that describe the Spanish operation as the parent's Spain office or the Spanish employee as part of the parent's Spain team will be treated as PE evidence. Align titles and materials with the actual working arrangement before the first hire.

Real HR and legal experts handle your Spanish hires, from the first offer letter through every Seguridad Social filing and annual tax submission. An actual person, not a chatbot or a pooled queue. There is no setup fee and no exit fee. Employer cost passes through at cost, itemised on every invoice.

EOR payroll, contractor onboarding, and entity setup all live on one platform. Run the Crossover Calculator to see the month the model flips from EOR to your own Spanish entity. Start from the Spain hiring overview; each guide here takes one layer of Spanish employment law.

Key sources: Estatuto de los Trabajadores (BOE), Agencia Tributaria (AEAT), and Gobierno de Espana.