Permanent Establishment Risk in Mexico (2026 Guide)

You hired someone in Mexico. You have no Mexican entity. And someone just flagged "permanent establishment risk."

This is not a technicality to worry about later. It is one of the most consequential tax exposures a foreign company can create without realizing it.

Mexico's SAT is enforcing it with increasing intensity.

When a foreign company is deemed to have a permanent establishment (PE) in Mexico, it does not just owe back payroll taxes.

It owes 30% corporate ISR on all income attributable to that establishment. The exposure is retroactive, compounding, and often larger than the entire value of the Mexico operation.

Key takeaways

• PE subjects a foreign company to 30% Mexican corporate income tax on attributable income, the same rate paid by incorporated Mexican companies.
  
  

• PE can arise without any office in Mexico. A dependent agent with contract authority, or an employee performing core business activities, is enough.
  
  

• Article 2 of the LISR defines PE broadly: any place where business activities are conducted, including a home office used regularly by a Mexico-based employee.
  
  

• Remote work creates real PE exposure. An employee working from Mexico for a foreign employer can trigger a dependent agent PE if their activities go beyond preparatory or auxiliary work.
  
  

• Construction and services projects exceeding 183 calendar days in a 12-month period create a PE automatically.
  
  

• An EOR with active REPSE registration eliminates the dependent agent PE risk for foreign companies that want to hire in Mexico without incorporating.
  
  

• Treaty relief exists but is not automatic. Benefits must be actively claimed with proper home-country tax residency documentation.
  
  

• SAT audits can reach back five years, with surcharges, fines, and potential criminal referral on top of the back tax.
  
  

What permanent establishment means under Mexican law

Under Article 1 of the LISR (Ley del Impuesto sobre la Renta), Mexican residents pay income tax on worldwide income. Non-residents pay only on Mexican-source income.

Unless they have a permanent establishment in Mexico.

If a PE exists, the non-resident is taxed on all income attributable to that establishment as if it were a full Mexican corporate taxpayer. Article 2 of the LISR defines PE as:

Any place of business in which business activities are carried out, partially or totally, or in which independent personal services are rendered.

The LISR lists examples explicitly: branches, agencies, offices, factories, workshops, facilities, mines, quarries, and any place of exploration or extraction of natural resources.

But the definition does not stop at physical locations.

The two types of PE in Mexico

Type 1: Fixed place of business

A fixed place PE arises when a foreign company has any identifiable location in Mexico through which it conducts business, even partially.

Common triggers:

• A sales or coordination office, even operating under a service agreement with a local firm

• A warehouse used as a distribution point for sales to Mexican customers

• A factory, assembly workshop, or production facility

• A home office regularly used by a Mexico-based employee as the effective base for the foreign company's Mexican operations

The LISR does not require the foreign company to own or lease the space. If business is conducted there on the company's behalf, the location qualifies.

Type 2: Dependent agent

This is the type that catches most foreign companies off guard.

A dependent agent PE arises when a foreign company operates in Mexico through a person who:

• Is not economically independent of the foreign company

• Habitually concludes contracts on the company's behalf, OR

• Habitually performs the principal role that leads to such contracts

Under Article 2 of the LISR, the agent is deemed non-independent (and therefore PE-creating) when they:

• Hold inventory and make deliveries on behalf of the foreign company

• Assume the company's risks in their activities

• Act under detailed instructions or the general control of the foreign company

• Exercise activities economically corresponding to the foreign company, not their own business

• Receive remuneration regardless of results: A fixed salary or fee irrespective of performance

That last point is the one most HR teams miss. An employee on a fixed salary is not economically independent by definition.

If that employee also conducts core business activities for the foreign company in Mexico, a dependent agent PE exists.

SAT does not ask what you call the arrangement. It asks what the person actually does. A "contractor" who works exclusively for one foreign company, follows its direction, and generates its Mexican revenue is a dependent agent. The label does not protect you.

What activities create PE exposure in practice

Employees performing core business functions

This is the most common unintended PE trigger. A Mexico-based employee:

• Attends client meetings and negotiates terms on the company's behalf

• Manages customer relationships and commits the company to timelines or deliverables

• Develops software, content, or other outputs that directly generate company revenue

• Signs or effectively concludes agreements binding the foreign company

Any of these activities, performed habitually, establishes a dependent agent PE. You do not need a dozen employees. One person performing these functions consistently is sufficient.

Sales representatives with commercial authority

A Mexico-based sales representative who quotes prices, negotiates terms, and closes deals on behalf of a foreign company creates PE exposure even if technically employed by a local intermediary.

The question is not who employs them. The question is whether their activities habitually lead to contracts binding the foreign company.

Recurring executive presence

A foreign executive who regularly travels to Mexico for business meetings, negotiations, or operational oversight can create a fixed place PE if the pattern is sufficiently consistent.

The LISR does not define "recurring" by a day count. It assesses the overall pattern of activities and their business significance.

Construction, installation, and services projects

For construction, demolition, installation, maintenance, or assembly services on real property in Mexico, a PE arises only when those activities exceed 183 calendar days in any 12-month period.

Important: subcontractor days count toward the total. A foreign company cannot reset the clock by shifting work to a local subcontractor while the underlying project continues.

What does NOT create a PE

Article 3 of the LISR provides specific exceptions for preparatory and auxiliary activities. A location used solely for these purposes does not constitute a PE:

• Storing or displaying goods solely for storage or display

• Maintaining a stock of goods processed by a different enterprise

• Purchasing goods solely for the company's own use

• Collecting information for the foreign company

• Advertising, market research, or scientific research of a preparatory or auxiliary character

The critical caveat: These exceptions disappear when auxiliary activities are combined with other functions that form part of a cohesive business operation. If a Mexico-based person "collects information" and also negotiates contracts, the exception does not apply to any part of the arrangement.

What PE actually costs

When SAT determines a PE existed, the exposure is not prospective. It reaches back.

30% corporate ISR on attributable income

The foreign company owes ISR at the standard 30% corporate rate on all income attributable to the PE for every year it is deemed to have existed.

Attributable income is determined on an arm's-length basis, requiring transfer pricing documentation between the foreign head office and the Mexican PE.

Monthly provisional payments going forward

Once a PE is identified, the company must make monthly ISR provisional payments (pagos provisionales) to SAT by the 17th of each month, based on year-to-date attributable income.

IVA obligations

A PE conducting commercial activities in Mexico may also owe IVA (16% VAT) on Mexican-source revenues, with separate registration, monthly filings, and CFDI issuance required.

Payroll tax obligations from day one

A PE with employees must register with IMSS from the first day of employment, not from the date of PE assessment.

Back-dated IMSS contributions, ISR withholding failures, and missing CFDI payroll receipts all attract their own penalties on top of the corporate tax.

Surcharges and fines on back taxes

A company with a Mexico-based person conducting core business activities for three years, with no ISR withholding and no IMSS registration, can face back-tax liability that exceeds three years of Mexican revenue.

PE risk and contractor misclassification: they appear together

Permanent establishment exposure and contractor misclassification are distinct legal issues that almost always occur simultaneously.

A foreign company paying a Mexico-based person as an "independent contractor" typically faces three simultaneous exposures:

1. LFT misclassification: The person is actually an employee under Mexico's subordination test, entitling them to retroactive IMSS, statutory benefits, and severance
   
   

2. ISR withholding failure: The company should have withheld non-resident ISR on Mexican-source salary income and remitted it to SAT
   
   

3. PE exposure: The person's activities constitute a dependent agent PE, triggering full corporate ISR obligations
   
   

These three issues compound each other. Addressing one in isolation leaves the others unresolved.

For the full framework on how Mexico's labor law distinguishes employees from contractors, the independent contractor vs. employee in Mexico guide covers the subordination test and its consequences.

How tax treaties affect PE

Mexico has income tax treaties with over 55 countries. For companies whose home country has an active treaty with Mexico, these agreements can:

• Narrow the dependent agent PE definition relative to domestic LISR rules

• Protect preparatory and auxiliary activities more broadly than the domestic exception

• Set specific thresholds (often 183 days) for services and construction PE

• Define tie-breaker rules when both countries claim taxing rights

What treaties do not do

Treaties do not eliminate PE risk for companies whose employees actively conduct core business activities in Mexico.

The OECD Model Tax Convention, which Mexico's treaties follow, is clear that a dependent agent who habitually concludes contracts on behalf of a foreign enterprise creates a PE.

The OECD's November 2025 update introduced a two-part framework for remote work PE, including a 50% working time safe harbor and a "commercial reason" test.

This provides some relief for employers with employees working partially from Mexico without deliberate market entry intent.

This guidance operates in the treaty context only. It does not override Mexico's domestic LISR rules.

Treaty benefits must be actively invoked with a valid tax residency certificate from the home country's tax authority. They are never automatic.

How a compliant EOR eliminates PE risk

The most direct solution for foreign companies that want to hire in Mexico without creating a PE is an Employer of Record with active REPSE registration.

Here is why the structure works:

The EOR is the legal employer. The employment relationship in Mexico runs between the employee and the EOR, not the foreign company. The foreign company directs daily work but has no direct employment nexus in Mexico.

The EOR has its own Mexican entity. The EOR is incorporated in Mexico, registered with SAT, enrolled with IMSS, and holds active REPSE authorization. All payroll tax obligations run through the EOR's entity.

The foreign company pays a service fee, not an employee. The foreign company pays the EOR as a commercial counterparty. That payment does not constitute a direct employment relationship and does not create the nexus that drives dependent agent PE.

REPSE is the critical verification. Under the 2021 outsourcing reform, EOR providers must hold active REPSE registration to operate legally. An EOR without REPSE is classified as illegal subcontracting, which does not eliminate PE exposure. It adds a separate legal violation on top of it.

For how REPSE authorization works and what it verifies, the what is REPSE in Mexico guide covers the registration framework and how to confirm a provider's status publicly.

When PE is unavoidable: incorporating in Mexico

Some activities create a PE by design, and the only correct path is incorporating a Mexican legal entity.

If your company needs to:

• Invoice Mexican clients directly in MXN for services rendered in Mexico

• Hold real property or operate a physical facility under your own name

• Manufacture, assemble, or distribute goods from a Mexican location

• Run a sales operation where your company (not an EOR) is the contracting party

...then PE exists by structure, and a properly registered Mexican entity turns it into a fully compliant, transparent corporate presence.

For the timeline and cost of incorporating in Mexico, the legal entity setup in Mexico guide covers the full process from notary to SAT registration to IMSS enrollment.

PE risk self-assessment

Before your next Mexico hiring or operational decision, work through these:

• Does the Mexico-based person negotiate terms or close deals on our behalf with Mexican clients?

• Do they have authority to commit our company to deliverables, timelines, or prices?

• Do they work exclusively or near-exclusively for our company?

• Are they compensated regardless of the outcome of their activities?

• Does our company have recurring executive presence in Mexico for business purposes?

• Do we have any construction or services project in Mexico approaching or exceeding 183 days?

• Does our EOR provider hold active, publicly verifiable REPSE registration?

If the answer to any of the first six is yes, and the last is no, you have PE exposure that needs to be addressed now.

Addressing PE exposure that already exists

If your company has been operating in Mexico without a compliant structure and PE exposure has already accumulated, two paths exist.

Prospective compliance. Engage a compliant EOR going forward. This stops new exposure from accruing. It does not resolve historical liability, but it prevents the position from worsening while you assess what has already happened.

Voluntary disclosure. Mexico's tax framework allows companies to self-disclose back-tax positions and negotiate payment with SAT. Working with a qualified Mexican tax advisor, the company files amended returns, pays the back ISR, and settles surcharges at potentially reduced rates.

Voluntary disclosure is substantially less costly than a full SAT audit, where maximum penalties apply.

Neither path is simple. Both are better than waiting.

Managing PE risk with the right Mexico structure

Human Resources Mexico (HRM) is a Mexico-only Employer of Record with 17 years of physical presence in Mexico.

We are the legal employer for every employee we hire on your behalf. Our entity is incorporated in Mexico, registered with SAT, enrolled with IMSS, and holds active REPSE authorization.

Employment relationships, ISR withholding, IMSS contributions, and CFDI payroll receipts all run through our Mexican entity. Your company pays us a service fee. The dependent agent PE exposure does not exist.

• 17 years of physical presence in Mexico: Our entity, our team, our registrations

• Active REPSE registration: Verifiable in the federal government registry

• Mexico-only focus: One country, every compliance detail handled correctly

• Human support: Real bilingual professionals manage payroll and tax compliance in Mexico

• Transparent pricing: One fee covers the entire employment structure

Get a custom HRM proposal and understand exactly what compliant Mexico employment costs.

Have specific questions about your company's PE exposure? Ask our Mexico EOR Specialist AI Chatbot for immediate answers.

Frequently asked questions

What is a permanent establishment in Mexico?

Under Article 2 of the LISR, a PE is any place of business through which a foreign company conducts business activities in Mexico, through a fixed location or through a dependent agent.

When a PE exists, the foreign company owes 30% corporate ISR on all income attributable to it.

Can one employee create a permanent establishment?

Yes. One employee who habitually negotiates or concludes contracts on the foreign company's behalf constitutes a dependent agent PE under Article 2 of the LISR.

Does remote work from Mexico create PE risk?

It depends on the nature of the work. Preparatory or auxiliary activities are generally safe.

Core revenue-generating activities, contract negotiation, or client management performed from Mexico trigger dependent agent PE exposure regardless of the employment label.

What is the corporate tax rate on a PE in Mexico?

30% ISR on income attributable to the establishment. Monthly provisional payments are required by the 17th of each month, with an annual return due by March 31.

IVA obligations at 16% may also apply if the PE conducts commercial activities.

How does an EOR eliminate PE risk?

The EOR is the legal employer in Mexico. The foreign company's employees are employed by the EOR's Mexican entity.

The foreign company pays a commercial service fee to the EOR, not a direct salary to a Mexico-based person. This eliminates the nexus that creates dependent agent PE.

What are the penalties for unrecognized PE in Mexico?

SAT can assess back corporate ISR for up to five years, plus monthly surcharges of 1.47% on unpaid balances and fines of 55%–100% of omitted tax.

In cases of deliberate evasion, criminal referral is also possible.

Does a tax treaty protect my company from PE in Mexico?

Partially. Treaties can narrow PE definitions and protect auxiliary activities. They do not eliminate PE for companies whose employees perform core business functions in Mexico.

Treaty benefits must be actively claimed with documentation and do not apply automatically.