Permanent establishment UAE: the remote employee risk nobody plans for

A founder hires one remote employee in Dubai to handle UAE client relationships. The employee is helpful, responsive, and good at their job, so over a few months they start joining calls where terms get discussed, then start proposing pricing, then start being the one who tells a client “yes, we can do that” before a contract goes out. Nobody decided this on purpose. It just happened.

That is how a foreign company ends up with a UAE permanent establishment without ever opening an office here. It is one of the least understood risks in remote-first hiring, because the trigger is not where someone sits, it is what authority they actually exercise.

Why permanent establishment matters

If a foreign company is found to have a permanent establishment in the UAE, the profits attributable to that UAE presence become subject to UAE corporate tax, on the same 9% above AED 375,000 basis that applies to UAE resident companies. The company does not need a UAE trade licence, a lease, or any formal registration for this exposure to exist. The test is about substance and conduct, not paperwork.

This matters most for companies that are genuinely foreign, incorporated and managed outside the UAE, but who employ or contract people physically based here. Remote-first structures, distributed teams, and “hire someone in Dubai to cover the region” arrangements are exactly the pattern that creates this risk, because the employment relationship is set up around convenience and cost, not around tax exposure.

The fixed place of business test

This is the traditional, more intuitive test. A permanent establishment exists where the foreign company has a fixed place through which its business is wholly or partly carried on in the UAE. That includes an office, a branch, a factory, a workshop, or another established physical location.

A remote employee working from their home apartment does not automatically satisfy this test on its own. Working from home is generally treated differently from a company deliberately maintaining a UAE office or branch. But this test is rarely where the real risk sits for remote-first companies, because most of them are careful enough not to lease office space or put a UAE address on their website. The exposure lives in the second test.

The dependent agent test: where remote roles actually get caught

The dependent agent test does not require any fixed location at all. It looks at whether a person is acting on the foreign company’s behalf in the UAE and has, and habitually exercises, the authority to conclude contracts in the company’s name, or plays the principal role leading to the conclusion of contracts that are then routinely finalised without material modification by the company.

Signal	Lower PE risk	Higher PE risk
Role scope	Marketing, research, technical support	Sales closing, contract negotiation
Contract authority	None, everything routed to head office	Can agree pricing or terms directly with clients
Client-facing conduct	Introduces, does not commit the company	Tells clients “yes” before head office signs off
Decision pattern	Head office materially reviews every deal	Deals go through as the local person negotiated them

This is a conduct test, not a job title test. Two employees with the identical job title, “Regional Manager, UAE”, can sit on opposite sides of this line depending on what they actually do day to day, and how much head office actually changes before signing.

Mission creep: how the risk grows without a decision point

The phrase “mission creep” describes exactly how this happens in practice. A role is defined narrowly at hiring, business development, lead generation, client support. Over time, because the local person is closer to the client and faster to respond, they start being trusted with more. They quote a price on a call because waiting for head office felt slow. They agree a small contract variation because it was obviously fine. None of these individual moments looks like a tax decision. Collectively, they can be exactly what the dependent agent test is designed to catch.

The practical danger is that nobody flags it, because there is no single event that triggers a review. It is worth periodically asking, in plain terms, whether the UAE-based person’s actual day to day conduct still matches what was true when the role was set up, or whether it has quietly expanded into negotiating and effectively concluding deals.

Employer of Record as a mitigation, not a shortcut

An Employer of Record (EOR) is a UAE-licensed entity that formally employs the individual, issuing the visa, payroll, and employment contract, while the person continues to do their actual job for your business. It is a genuinely useful structure for compliant, fast hiring in the UAE without setting up your own entity, and it solves the labour law and visa side of remote hiring cleanly.

What an EOR does not automatically do is eliminate permanent establishment risk. The dependent agent test looks at whose behalf the person is acting on and what authority they exercise, not who technically issues their employment contract. An EOR-employed sales lead who still negotiates and effectively closes deals for your foreign company can still create the same exposure, because the EOR is an employment law fix, not a tax law fix.

Used well, an EOR reduces risk in a real way, mainly because it forces a moment of clarity about the role: what the person is and is not authorised to do gets written down properly, rather than drifting informally. Pair the EOR structure with an explicit, enforced limit on the person’s contracting authority, routing final terms and sign-off through the foreign head office, and you address both the employment side and the substance of the tax question.

Practical steps worth taking

• Write down what the UAE-based person is actually authorised to do, and keep it current as the role evolves, not just at hiring
• Route final pricing and contract sign-off through head office as a real, followed process, not a formality on paper
• Review conduct periodically, not just job descriptions, since mission creep happens through behaviour, not policy changes
• Treat an EOR as one part of the answer, alongside a genuine limit on local contracting authority
• Get a UAE tax adviser to assess the specific role before assuming either “we’re fine, it’s just one person” or “we definitely have a PE”, both extremes are common and both are usually wrong without a proper look at the facts

Conclusion

Permanent establishment risk for remote-first companies rarely comes from renting an office nobody meant to rent. It comes from a remote employee whose day to day conduct quietly drifts into negotiating and closing deals on the company’s behalf. The fixed place of business test is the one everyone thinks about. The dependent agent test is the one that actually catches distributed teams. An Employer of Record helps with the employment and visa side, but the underlying authority question still needs a deliberate answer.

If you are building or already running a distributed UAE team, we help assess the accounting and tax side of the structure as part of our advisory services, at fixed prices.

Talk to us, the initial consultation is free.

As of July 2026. This article is general information and is no substitute for advice in an individual case. Whether a specific role creates a permanent establishment depends on the actual facts and conduct involved and should be assessed with a licensed tax adviser.

Read on: Corporate tax in Dubai: the full guide · Setting up a foreign company branch in the UAE · The cost of non-compliance in the UAE