Overview
- Permanent establishment (PE) risk is decided by what your South African staff do and who employs them, not by whether you have registered a company there.
- Two common setups expose UK businesses: a directly employed sales hire who closes deals from South Africa, and a long-term “contractor” who is in practice running your South African operation.
- Employment through an Employer of Record, with contract authority kept in the UK, removes the usual triggers on the employment side.
- An Employer of Record carries the contract, payroll and compliance, so the switch to permanent does not require a South African entity.
What Permanent Establishment Risk Means for a UK Business
Permanent establishment risk is the risk that SARS treats your UK company as taxable in South Africa because of the work people do for you there.
South Africa’s Income Tax Act takes its definition from Article 5 of the OECD Model Tax Convention. A PE exists where you have a fixed place of business in South Africa, or a dependent agent who habitually concludes contracts in your company’s name.
Two consequences follow. SARS can tax the profits attributable to that PE at the South African corporate rate of 27%. And since a 2023 amendment to the Income Tax Act, a non-resident employer with a PE must register with SARS as an employer and withhold PAYE from South African salaries.
The three examples below show how this plays out. Company details are illustrative. The situations are ones we see regularly.
Example 1: The Direct Hire Who Closes Deals (Exposed)
A London software company hires a Cape Town-based Head of Sales for Africa on a UK employment contract, paid from the UK, working from her home office. She sets pricing within a band, negotiates terms and signs order forms with South African clients.
This company is exposed on both PE tests. She is a dependent agent, because she habitually concludes contracts in the UK company’s name. Her home office, used only for the company’s business, is also a candidate for a fixed place of business.
The obligations start before SARS ever raises PE. Being party to an employment contract in South Africa means the UK company must register as an external company with the CIPC within 20 business days. Once a PE exists, it must also register as an employer with SARS, run a South African payroll and account for PAYE, UIF and SDL every month, with penalties and interest for late payment.
You are in this bucket if your UK entity is the employer, the person lives in South Africa, and they agree terms with customers.
Example 2: The Long-Term Contractor Who Runs the Country (Exposed)
A Manchester professional services firm engages a Johannesburg consultant as an independent contractor on a monthly invoice. Eighteen months later she works only for the firm, uses a firm email address, manages two junior contractors, meets clients in a co-working space the firm pays for, and agrees scope and fees for new engagements.
The contractor label does not settle the PE question. The OECD framework only exempts an independent agent who acts in the ordinary course of their own business, and someone working exclusively for one client for a year and a half is hard to describe that way. Agreeing fees and scope is concluding contracts. The co-working desk the firm pays for is a place of business at the firm’s disposal.
There is a second exposure on top of PE. South African labour law looks at how the relationship works in practice, not what the invoice says, and a contractor in this position can be deemed an employee. The nine issues you stop worrying about when contractors become employees covers what that means.
You are in this bucket if the contractor works mainly or only for you, agrees commercial terms, and uses premises or tools you fund.
Example 3: EOR With Contract Authority Kept in the UK (NOT Exposed)
A Bristol fintech builds a five-person engineering and customer support team in Cape Town through Veridian Global as Employer of Record. Each person has a South African employment contract with Veridian Global. Payroll, PAYE, UIF and SDL run through Veridian’s South African entity. The fintech receives one monthly invoice.
Roles are scoped deliberately. Engineers build product. Support agents resolve tickets. One sales development representative qualifies leads and books meetings, but pricing, proposals and signature stay with the commercial director in Bristol. Staff work from home or from workspace arranged by Veridian, not from premises leased in the fintech’s name.
The result is that the UK company has no employment relationship in South Africa, so the CIPC and SARS employer registrations in Example 1 do not fall on it. Nobody in South Africa habitually concludes contracts in its name, so there is no dependent agent. There is no fixed place at its disposal.
One caveat, which we also make in our guide to permanent establishment risk. The EOR resolves the employment layer. If the fintech later gives the Cape Town SDR authority to agree deals, the commercial layer changes and the PE position needs a fresh look, whoever the employer is.
You are in this bucket if a South African entity is the legal employer and nobody in South Africa can bind your UK company to a customer contract.
Three Questions to Find Your Bucket
Who is the legal employer of your South African staff?
If it is your UK company, directly or through a contractor who is really an employee, the registration and payroll obligations sit with you and the PE analysis starts from a weak position. If it is a South African EOR entity, the employment layer is covered.
Who agrees terms with customers?
Anyone based in South Africa who habitually negotiates and concludes contracts in your name is a dependent agent risk, whatever their employment structure.
Is there a place in South Africa at your company’s disposal?
A lease or co-working membership in the UK company’s name, or a home office used only for your business, is a fixed place of business risk factor.
Example 3 is the only one of the three that answers “a South African entity”, “the UK team” and “no”.
Final Thoughts
The difference between the two exposed examples and the safe one is not headcount, seniority or how long the arrangement has run. It is who employs the person and who is allowed to sign.
Veridian Global is a South African EOR based in Cape Town with more than 20 years in South African HR, payroll and labour law. If you recognise your own setup in Example 1 or 2, get in touch and we can work through the employment side with you. For the tax position itself, take specialist advice on your specific facts.