Permanent Establishment Risks for Foreign Tech & Saas Businesses in India: What In‑house Tax Teams Must Do in 2026

Foreign technology and SaaS companies selling into or delivering services across India face a sharpened permanent establishment India risk profile in 2026. The Income‑tax Act 2025, together with the Income‑tax Rules 2026 that took effect on 1 April 2026, has overhauled procedural terminology, tightened documentation requirements and updated the statutory framework within which Assessing Officers evaluate whether a non‑resident has created a taxable presence. Budget 2026 has simultaneously introduced recalibrated safe‑harbour provisions for qualifying IT/ITES engagements, creating both relief and new compliance hurdles.

For in‑house tax directors and CFOs, the window between legislative commencement and the first wave of assessments under the new regime is the critical period for triage, evidence gathering and pre‑audit positioning, and that window is narrowing rapidly.

Executive Summary: What In‑House Teams Must Do in 2026 (TL;DR)

The Income‑tax Act 2025 and the Income‑tax Rules 2026 commenced on 1 April 2026, replacing the former “previous year / assessment year” framework with the new “Tax Year” concept and updating the procedural architecture that governs PE determinations. Budget 2026 has also amended the safe‑harbour regime for IT/ITES transactions, which directly affects foreign SaaS and platform businesses with Indian delivery centres or subcontractors.

Every in‑house tax function at a foreign tech company with Indian operations, customers or personnel should complete three actions immediately:

• Triage your PE exposure. Map every Indian touchpoint, employees on secondment, customer‑success staff, business‑development agents, servers, local entities, against Fixed Place PE, Agency PE and Service PE tests under applicable Double Taxation Avoidance Agreements (DTAAs) and domestic law.
• Lock down contemporaneous documentation. Assemble contracts, SOWs, timesheets, agent agreements, travel records and intercompany invoices now, before an Assessing Officer requests them. Under the 2026 Rules, procedural timelines for responding to notices have been recalibrated, late or incomplete evidence is harder to remedy on appeal.
• Align your transfer pricing. If a PE is found, or if your position is that no PE exists, your intercompany pricing and functional analysis must support the conclusion. Ensure the TP study addresses SaaS‑specific value drivers and profit attribution principles consistent with CBDT guidance and OECD BEPS recommendations.

Quick Legal Primer: Permanent Establishment Under Indian Law and Treaties

Understanding PE risk in India requires distinguishing between the domestic statutory concept, “business connection” under Section 9 of the Income‑tax Act, and the treaty concept of “permanent establishment” defined in Article 5 of India’s bilateral DTAAs. Where a DTAA applies (and the non‑resident holds a valid Tax Residency Certificate), the treaty definition generally overrides the broader domestic concept, but the Assessing Officer will frequently examine both in parallel.

A permanent establishment India analysis under most Indian DTAAs covers four principal categories of taxable presence. Each carries distinct evidentiary thresholds, and each is relevant to different aspects of a tech or SaaS business model.

Fixed Place PE

A fixed place of business, an office, branch, factory, workshop or other location, through which the enterprise wholly or partly carries on business in India. For SaaS companies, this can include leased office space used by seconded engineers, a co‑working desk used regularly by a country manager, or even a server or data centre physically located in India if it is at the enterprise’s disposal and used to deliver core business functions. The test is whether the location is “fixed” (geographically and temporally) and at the enterprise’s “disposal” (legal or de facto control).

Agency PE

A person acting in India on behalf of the enterprise who habitually exercises authority to conclude contracts in the enterprise’s name, or who habitually maintains a stock of goods from which deliveries are made. Post‑BEPS updates to several Indian DTAAs have expanded this test to capture persons who habitually play the principal role in concluding contracts that are routinely approved without material modification by the enterprise, a provision that directly targets sales and BD representatives operating from India.

Service PE

Many Indian DTAAs include a service PE clause: furnishing of services by the enterprise through employees or other personnel in India, where those activities continue for a specified period (commonly 90 or 183 days within any twelve‑month period). For tech companies deploying implementation engineers, customer‑success managers or onsite support teams, this threshold is frequently the most contested trigger. Cross-border services India engagements must be carefully time‑tracked to manage this exposure.

What Changed in 2025/2026 and Why It Matters for Tech and SaaS

The legislative overhaul that took effect on 1 April 2026 represents the most significant restructuring of India’s direct tax framework in decades. While the substantive PE and business connection provisions have been substantially carried forward, the procedural and definitional changes under the Income‑tax Act 2025 and the Income Tax Rules 2026 India create material compliance risks that in‑house teams must address.

Key Legislative Changes at a Glance

The Tax Year Transition

The replacement of the “previous year / assessment year” framework with a unified “Tax Year” concept is not merely cosmetic. It affects how time‑based PE thresholds are computed (particularly the 90‑ or 183‑day service PE windows), how limitation periods are calculated for assessments, and how transitional rules apply to matters pending under the former Income‑tax Act. In‑house teams that have historically tracked PE exposure by “assessment year” must recalibrate their compliance calendars.

IT/ITES Safe Harbour 2026

Budget 2026 introduced updated safe‑harbour rules for eligible IT/ITES transactions. These rules allow qualifying enterprises to report income at prescribed margins, shielding them from detailed TP scrutiny provided specific conditions, including documentation, operational substance and turnover thresholds, are met. For foreign SaaS businesses with Indian delivery operations, the IT/ITES safe harbour 2026 provisions present an important planning opportunity, but eligibility must be tested rigorously: margin parameters have been adjusted, and the documentation requirements under the new Rules are stricter than their predecessors.

PE Risk Triggers Specific to Foreign Tech and SaaS Business Models

PE risk India for technology companies rarely arises from a single factor. It typically emerges from the accumulation of operational touchpoints that, viewed collectively, give the Assessing Officer a basis to argue that the foreign enterprise is conducting business “through” India rather than merely selling “into” India. The following triggers are the most common, and the most frequently underestimated.

Digital Permanent Establishment and Server or Infrastructure Location

The concept of a digital permanent establishment remains one of the most contested areas in international tax. Under current Indian DTAAs (which largely follow the OECD Model Tax Convention), a server can constitute a Fixed Place PE if it is (a) physically located in India, (b) at the enterprise’s disposal, and (c) used to carry on the enterprise’s core business functions, not merely auxiliary or preparatory activities. Cloud infrastructure hosted by a third‑party provider (AWS Mumbai, Azure India) generally does not create a PE for the customer enterprise, because the customer does not have “disposal” of the physical equipment. However, if the enterprise has dedicated, self‑managed server capacity in an Indian data centre, the analysis shifts materially.

Industry observers expect Indian tax authorities to push the boundaries of the digital PE concept in the coming assessment cycles, particularly where SaaS platforms collect significant Indian user data or process Indian payment transactions through locally hosted infrastructure.

Service PE Thresholds and Treaty Time Tests

The service PE clause is the single most litigated PE trigger for foreign tech companies. The threshold, typically 90 days in a twelve‑month period under India’s DTAAs with major treaty partners, applies to services furnished “through employees or other personnel.” Key disputes involve:

• Aggregation of days. Tax authorities aggregate days across multiple employees and multiple projects. Two engineers onsite for 50 days each in the same twelve‑month window may satisfy a 90‑day threshold.
• “Other personnel” scope. Independent contractors, secondees from group companies, and even subcontracted individuals may be counted if they are functionally integrated into the enterprise’s service delivery.
• Twelve‑month window computation. The period is typically a rolling window, not a calendar or fiscal year, meaning exposure can crystallise mid‑project.

Agency and Dependent Agent Tests

Foreign SaaS companies that engage local sales representatives, channel partners or BD managers must evaluate whether those individuals meet the dependent agent PE test. Post‑BEPS treaty amendments have broadened the test: it is no longer limited to agents who formally “conclude” contracts. In updated DTAAs, an agent who “habitually plays the principal role leading to the conclusion of contracts that are routinely concluded without material modification” by the foreign enterprise can trigger an Agency PE. For SaaS sales cycles, where an Indian BD representative may negotiate pricing, agree terms and submit a proposal that head office approves as a formality, this expanded test is directly on point.

PE Risk Decision Checklist for SaaS Tax India Operations

Transfer Pricing and Profit Attribution for SaaS PEs

If a permanent establishment India determination is made, or if the enterprise takes the position that no PE exists but wants to be defensible, the transfer pricing analysis must address how profits would be attributed to any actual or hypothetical Indian PE. CBDT Circular No. 5/2004 remains the foundational administrative guidance on profit attribution, and it directs that profits attributable to a PE should be determined as if the PE were a “distinct and separate enterprise” engaged in similar activities under similar conditions.

Functional Analysis for SaaS

Transfer pricing for SaaS PE attribution requires a granular delineation of functions, assets and risks. Key questions include:

• Where is the software developed and maintained? If core R&D occurs offshore, the PE should not be attributed returns to development intangibles.
• What functions do Indian personnel perform? Implementation, customisation, customer success and support functions may generate attributable profits, but only to the extent they are performed through the PE and not compensated at arm’s length through an intercompany service agreement.
• Who bears commercial risk? Credit risk, market risk, and contractual liability for Indian customers are critical indicators. If the foreign enterprise bears all risk, the PE’s profit attribution should reflect a limited‑risk characterisation.
• What role does Indian user data play? Industry observers note that this is an emerging area. If Indian user data is a material value driver, for example, for AI training, advertising targeting, or product improvement, tax authorities may argue that a greater share of residual profits should be attributed to the Indian PE.

Documentation Evidence and Comparability

In‑house teams must ensure that the TP study includes a dedicated PE profit‑attribution section, not merely an analysis of intercompany transactions with an Indian subsidiary. The documentation should contain contemporaneous functional and factual analysis, benchmarking of the PE’s activities against comparable Indian IT/ITES service providers, and a clear articulation of why the chosen transfer pricing method (typically TNMM or profit split, depending on the PE’s functional profile) is the most appropriate. Under the Income Tax Rules 2026 India, documentation deadlines and prescribed formats should be confirmed against the latest CBDT notifications.

Audit and Assessment Defence Playbook: Defending a PE Assessment Step by Step

When an Assessing Officer issues a notice asserting that a foreign tech or SaaS company has a permanent establishment in India, the response must be immediate, structured and evidence‑led. The following ten‑step framework provides a litigation‑aware approach to defending a PE assessment.

1. Immediate evidence preservation. Issue a litigation hold to all relevant custodians (India country manager, sales leads, engineering managers, finance). Preserve emails, travel records, contracts, Slack/Teams messages, CRM records and calendar entries that document the nature and duration of Indian activities.
2. Assemble contemporaneous contracts and SOWs. Gather every customer contract, statement of work, service agreement and amendment relevant to Indian delivery. Identify which contracts were negotiated, signed or performed in India.
3. Compile time logs and travel records. For service PE defences, granular time tracking is decisive. Reconstruct (or, ideally, produce pre‑existing) timesheets showing exactly how many days each employee or contractor spent in India, the nature of activities performed, and the project to which they were assigned.
4. Review agent and representative agreements. For agency PE defences, produce agreements with Indian sales representatives, channel partners or distributors. Highlight contractual limitations on authority, for example, prohibitions on concluding contracts or committing the enterprise without written head‑office approval.
5. Extract and update TP study. Prepare a focused extract of the transfer pricing study addressing PE profit attribution. If the existing study does not contain a PE‑specific section, commission an addendum immediately.
6. Consider advance rulings or no‑PE certificates. Evaluate whether an application for an advance ruling (under the applicable provisions of the Income‑tax Act 2025) is strategically appropriate, or whether a certificate from the treaty‑partner tax authority confirming the enterprise’s residence and non‑PE status would strengthen the defence.
7. Assess pre‑emptive disclosure options. If the PE risk is genuine and material, evaluate whether a voluntary disclosure and protective return filing reduces penalty exposure and demonstrates good faith, this is a strategic decision that requires experienced counsel.
8. Engage experienced litigation counsel. PE disputes in India routinely escalate through the Commissioner of Income Tax (Appeals), the Income Tax Appellate Tribunal and, in significant cases, the High Court. Appoint counsel with demonstrated experience in cross‑border PE litigation at the earliest stage.
9. File objections and pursue appeals. If the assessment order is adverse, file a timely appeal. Under the 2026 procedural framework, strict adherence to response deadlines is essential, missed timelines can result in ex parte orders that are difficult to reverse. Draft objection grounds that address each factual and legal finding in the assessment order.
10. Evaluate settlement and MAP. For high‑value disputes, consider whether Mutual Agreement Procedure (MAP) under the applicable DTAA, or any domestic dispute resolution mechanism, offers a faster or more favourable resolution path than prolonged litigation.

Sample Document Production List

When responding to an Assessing Officer’s request for information in a PE enquiry, the following categories of documents are typically relevant:

• Corporate organisational chart showing the Indian operations within the global structure
• All contracts with Indian customers, including SOWs and amendments
• Agreements with Indian agents, distributors or representatives (including authority limitations)
• Employee secondment agreements and assignment letters for personnel deployed to India
• Timesheets, travel records and visa documentation for all personnel who visited India
• Lease agreements or co‑working memberships for any Indian premises
• Intercompany agreements and invoices between the foreign enterprise and any Indian group entity
• Transfer pricing study (PE profit‑attribution section)
• Tax Residency Certificate from the home jurisdiction
• Board resolutions, minutes and internal policies governing contracting authority

Practical Templates and Sample Documents

Effective PE risk management requires not just legal analysis but operational documentation infrastructure. The following templates are essential components of a defensible PE compliance programme. In‑house teams should adapt these to their specific business model and treaty position:

• Dependent agent compliance checklist. A standardised form for each Indian representative confirming contractual authority limits, reporting lines and compliance with PE‑safe operational parameters.
• Personnel timesheet template. A day‑by‑day log capturing location, activities performed, client engagement and project assignment, designed to support or rebut service PE threshold calculations.
• Engagement letter PE‑safe clauses. Model contractual language for customer agreements and agent contracts that delineates authority, identifies the contracting entity, and specifies the locus of contract formation.
• TP study PE‑attribution excerpt. A template section for inclusion in the annual TP documentation addressing profit attribution to any actual or hypothetical Indian PE.
• Model objection letter. A template first response to an adverse PE assessment order, structured to address each ground of assessment and preserve all appellate rights.

Key Cases and Administrative Guidance to Cite in Assessments

Effective defence of a PE position requires anchoring arguments in established judicial precedent and CBDT administrative guidance. The following table summarises the most commonly cited authorities and their practical use in PE disputes.

Conclusion: 6‑Point Action Plan and 30/90/180‑Day Checklist

The permanent establishment India landscape has fundamentally shifted with the Income‑tax Act 2025, the Income Tax Rules 2026, and the Budget 2026 safe‑harbour amendments. Foreign tech and SaaS businesses cannot afford to wait for an assessment notice to begin their response. The following phased action plan provides a practical roadmap:

• Days 1–30: Triage. Complete a full PE exposure mapping exercise across all Indian touchpoints. Identify the highest‑risk triggers (personnel days, agent authority, server location). Issue a documentation preservation instruction to all relevant business units.
• Days 1–30: Documentation. Assemble all contemporaneous contracts, timesheets, agent agreements and intercompany invoices. Fill gaps immediately, retrospective documentation is always less credible.
• Days 31–90: TP alignment. Commission or update the transfer pricing study to include a PE profit‑attribution section. Test eligibility for the IT/ITES safe harbour 2026 provisions and, if eligible, prepare the required documentation.
• Days 31–90: Operational restructuring. Where PE risk is high and the business model permits, implement structural changes, incorporate a local entity, restructure agent authority, migrate server infrastructure, to reduce forward‑looking exposure.
• Days 91–180: Board escalation. Present the PE risk assessment and remediation plan to the board or audit committee. Secure budget for litigation counsel and advance ruling applications if defensive positions are required.
• Days 91–180: Litigation readiness. Engage experienced cross‑border tax litigation counsel. Prepare model objection grounds and appeal briefs on a contingency basis so that responses can be filed within statutory timelines if an assessment is issued.

In‑house teams looking for qualified tax counsel in India should prioritise practitioners with demonstrated experience in PE disputes, transfer pricing for SaaS, and appellate litigation before the Income Tax Appellate Tribunal and High Courts. Early engagement, before an assessment notice, is significantly more cost‑effective and strategically advantageous than reactive defence.

Sources

1. Income Tax Department, Government of India, Official Site (Statutes, CBDT Circulars & Notifications)
2. Income‑tax Act 2025 & Income‑tax Rules 2026, Official e‑Filing Portal
3. OECD Tax, Model Tax Convention, PE Commentary & BEPS Reports
4. Supreme Court of India, Judgments Database
5. Ministry of Finance, Union Budget Documents (Budget 2026)