15 min read
How the Cyprus management-and-control test decides corporate tax residency, the 2023 incorporation test, POEM, and permanent-establishment risk if managed from

Reviewed by Sergios Charalambous, Partner
Cyprus Bar Association
The management-and-control test makes a company tax resident of Cyprus when its management and control are exercised in Cyprus, meaning the place where the board of directors genuinely takes the key strategic and policy decisions of the business. It is the long-standing primary test in Cyprus law, and it looks at economic reality, not at the address on the incorporation certificate. Source: PwC Worldwide Tax Summaries, Cyprus corporate residence.
Cyprus Income Tax Law N.118(I)/2002 provides that a company is resident in Cyprus if it is managed and controlled in Cyprus. The phrase itself is not exhaustively defined by statute, so its meaning is drawn from common-law authority and from the consistent practice of the Cyprus Tax Department. In substance, the Department asks where the directing mind of the company sits: where policy is set, budgets approved, major contracts sanctioned and the direction of the business decided.
Management and control take place wherever the board actually exercises its powers, not wherever the company is registered or where a shareholder happens to live. The test focuses on the highest level of decision-making, the strategic layer, rather than day-to-day operational management by staff. A company can have a Cyprus registered office, a Cyprus bank account and Cyprus accountants and still fail the test if the real decisions are taken by an owner abroad who instructs a compliant local board.
The Cyprus test rests on the common-law principle in De Beers Consolidated Mines Ltd v Howe [1906] AC 455, in which the House of Lords held that a company resides where its central control and management actually abide. In that case the company was registered and mined in South Africa, yet its board met and directed the enterprise in London, so it was resident in the United Kingdom. Cyprus applies the same logic: registration is not residence, the location of real central control is.
Residency and place of incorporation are two different things, and confusing them is the single most common structuring error. Incorporation tells you where the company legally exists on the Registrar of Companies file. Residency tells you which country has the right to tax the company on its income. Historically a Cyprus company incorporated in Cyprus but managed from London was, on the traditional test, not Cyprus tax resident at all. That gap is exactly what the 2023 incorporation test was designed to close, as explained next. For the practical mechanics of setting up correctly from the outset, see how to open a company in Cyprus.
Yes. From the 2023 tax year Cyprus added a second, incorporation-based residency test on top of management and control. Under it, a company incorporated in Cyprus is by default treated as tax resident of Cyprus unless it is tax resident in another jurisdiction. The management-and-control test was not abolished; the incorporation test runs alongside it as a backstop. Source: PwC Worldwide Tax Summaries, Cyprus corporate residence.
The incorporation test was introduced by amending Law 193(I)/2021, published on 21 December 2021, with the changes coming into force from 31 December 2022 and applying from tax year 2023 onward. The test sits in the definition of "resident in the Republic" in section 2 of the Income Tax Law N.118(I)/2002, which Law 193(I)/2021 amended so that a company incorporated or registered under Cyprus law, whose management and control are exercised outside the Republic, is treated as tax resident of Cyprus unless it is tax resident in another jurisdiction. Source: KPMG Cyprus, additional corporate tax residency test. The stated policy aim was to stop Cyprus companies from being "stateless" for tax purposes, that is, incorporated in Cyprus but resident nowhere and taxed nowhere.
The incorporation test works as a default with a carve-out: any company incorporated in Cyprus is deemed Cyprus tax resident, unless it is tax resident in another country under that country's rules. So a Cyprus-incorporated company managed from abroad that is genuinely resident and taxed in that other state stays out of Cyprus residence; but a Cyprus-incorporated company that is resident nowhere is pulled into Cyprus residence by default.
From 2026 the carve-out is refined so that a Cyprus-incorporated company is a Cyprus tax resident by default unless a double tax treaty (DTT) provides otherwise. The 2026 reform package, published in the Official Gazette on 31 December 2025 and effective from 1 January 2026, expands the incorporation test so that a company incorporated in Cyprus is Cyprus tax resident unless it is treated as resident in another jurisdiction under an applicable double tax treaty, in which case the treaty position prevails. Source: Harneys, key insights of the 2026 Cyprus tax reform. In practice this ties the escape route to an actual treaty tie-breaker rather than to a bare claim of foreign residence, tightening the position further. Source: PwC Worldwide Tax Summaries, Cyprus corporate residence.
The two tests are best read in order, and the table below shows how they combine.
| Test | Question it asks | Effect | In force |
|---|---|---|---|
| Management and control | Where does the board really decide? | Resident if that place is Cyprus | Long-standing primary test |
| Incorporation test (2023) | Is a Cyprus company tax resident anywhere else? | Resident by default unless taxed elsewhere | Tax year 2023 onward |
| Incorporation test (2026) | Does a DTT allocate residence away from Cyprus? | Resident by default unless a treaty says otherwise | 2026 onward |
Takeaway: management and control decides where a company is really run; the incorporation test then ensures a Cyprus company does not fall through the cracks and end up resident nowhere.
Your company is probably managed from abroad if the person who really decides its strategy, usually the owner, does so from another country while the Cyprus board simply ratifies those decisions. That is the exact scenario that shifts management and control offshore and puts the whole structure at risk. Use the self-diagnostic below before you assume a Cyprus registration protects you.
The single question is: if a stranger read only the evidence, where would they conclude the real decisions were taken? Not where the minutes say, but where the emails, calendars, travel records and signatures actually point. Every substance project we run for clients starts from that honest answer, because the Cyprus Tax Department and foreign tax authorities ask the same question. Getting the answer right is the core of establishing economic substance in a Cyprus company.
The following red flags commonly point management and control offshore:
Emails and WhatsApp messages are frequently where residency is quietly lost, because they show an owner abroad directing the company while the local board rubber-stamps. A person who effectively runs a company without being formally appointed can be treated as a de facto or shadow director, and their location can taint where management and control sit. Cyprus has no dedicated statute or leading tax judgment that names shadow directors as a stand-alone residency trigger; instead the risk operates through the general management-and-control test, under which a non-resident who genuinely directs the company draws its central control to wherever they sit, whatever the formal board looks like. Cyprus practitioner analysis (for example the Lexology commentary "Out of the shadows") treats a non-resident shadow director as a recognised risk of foreign residence rather than as codified law.
Where the board really decides always beats where the minutes say it decides, because tax authorities look through paperwork to substance. Minutes that record a Cyprus meeting are helpful only if a genuine meeting took place and genuine decisions were made there. If the substance and the paperwork diverge, the substance governs, and well-drafted minutes can even become evidence against you if travel records show the directors were elsewhere on the date recorded.
POEM, place of effective management, is the place where key management and commercial decisions necessary for the conduct of the company's business as a whole are in substance made. It differs from the Cyprus management-and-control test in scope: management and control is a domestic Cyprus concept, while POEM is a treaty concept used to resolve conflicts between two countries. In practice they overlap heavily but do different jobs.
POEM is the standard corporate residence tie-breaker in double tax treaties modelled on the OECD Model Tax Convention (2014). When each of two states considers a company resident under its own domestic law, the treaty looks to where effective management sits and allocates residence there. Cyprus, which has an extensive treaty network, relies on this mechanism whenever a company is potentially dual-resident. For how Cyprus treaties feed broader planning, see our overview of taxes in Cyprus.
The tie-breaker resolves the situation where, for example, Cyprus claims a company under the incorporation test and another country claims it because its directors decide there. Older treaties break the tie by POEM; some newer treaties instead require the two tax authorities to agree by mutual agreement, and if they cannot agree, treaty benefits can be denied. Either way, a Cyprus company effectively managed abroad may lose its Cyprus residence at treaty level.
POEM matters even when Cyprus domestic law says your company is resident, because a treaty overrides domestic law for cross-border allocation. A Cyprus-incorporated company that Cyprus deems resident can still be found to have its POEM abroad, in which case the treaty gives the other state the taxing rights and the Cyprus residency certificate may not deliver the benefits you expected. Domestic residence is necessary but not sufficient for treaty protection.
Common conflicts arise where the owner lives in a high-substance jurisdiction and cannot resist running the company personally.
| Owner location | Typical conflict | Practical risk |
|---|---|---|
| United Kingdom | UK "central management and control" claims the company as UK resident | UK corporation tax on worldwide profits |
| United Arab Emirates | UAE substance and management presence asserted | Cyprus residence and treaty benefits challenged |
| India | Indian POEM rules capture companies effectively managed from India | Indian tax residence despite Cyprus incorporation |
Takeaway: the more capable and hands-on the owner, and the higher the tax in their home country, the greater the pull of POEM away from Cyprus.
Permanent-establishment (PE) risk is the risk that a company, without being tax resident in another country, still creates a taxable business presence there that the other country can tax. It differs from residency in what gets taxed: residency exposes worldwide income to one state, whereas a PE exposes only the profit attributable to that fixed presence. A company can be Cyprus resident and still have a taxable PE abroad.
A permanent establishment is a fixed place of business through which the business of an enterprise is wholly or partly carried on, for example a branch, office, factory or workshop. The concept comes from the OECD Model Tax Convention and is reproduced in Cyprus law and in Cyprus treaties. The defining features are a physical location, a degree of permanence, and business carried on through it.
Cyprus law contains explicit provisions determining a taxable permanent establishment of non-Cyprus residents, broadly aligned with the 2014 OECD Model Tax Convention. Non-resident companies are taxed in Cyprus only on income attributable to a Cyprus PE, together with certain Cyprus-source income. Source: PwC Worldwide Tax Summaries, Cyprus corporate residence. The same logic runs in reverse: a Cyprus resident company operating through a fixed place abroad can trigger a PE and a tax charge in that other country.
Beyond a fixed office, a PE can arise through a dependent agent or a construction site. A dependent-agent PE is created where a person in another country habitually concludes contracts, or plays the principal role leading to their conclusion, in the name of the company. A construction PE arises where a building site or installation project lasts beyond the threshold set in the relevant treaty. Both catch companies that thought they had no taxable footprint abroad.
Managing a Cyprus company from a home office abroad can itself create a PE in that country, because the owner's premises can be characterised as a fixed place through which the business is run. If, on top of that, contracts are habitually concluded there, a dependent-agent PE may also arise. This is why remote management is a double risk: it can move residency under POEM and, separately, create a PE that hands taxing rights to the other state on the profits generated there.
You evidence management and control in Cyprus by showing that a resident-majority board genuinely decides the company's affairs in Cyprus, with meetings, minutes, banking authority and real substance located on the island. The Cyprus Tax Department looks for a consistent picture across governance, banking and operations, not a single document. Building that picture deliberately is what turns a paper structure into a defensible one.
A board on which the majority of directors are Cyprus tax residents, and who genuinely deliberate and decide, is the strongest single piece of evidence. The directors must understand the business, exercise independent judgement and be able to explain their decisions. Nominee directors who merely sign what they are sent are a weakness, not a strength, and they are addressed properly through professional corporate nominee and registered office services that provide directors who actually act.
The majority of board meetings should be held physically in Cyprus, with minutes prepared and retained in Cyprus, recording real decisions taken there. The Income Tax Law sets no minimum number of Cyprus board meetings and no codified threshold, so holding the majority of meetings on the island is established best practice for evidencing management and control, not a legislated rule. Quality matters more than count: one substantive meeting where the board truly decides a major matter carries more weight than a dozen circular resolutions signed from abroad.
The Cyprus board should control the company's bank account and hold the authority to sign the contracts that matter. The Tax Department's residency review specifically checks that the board controls a Cyprus bank account. Where the owner abroad holds the banking tokens and signs the deals, control has left Cyprus regardless of who sits on the board. Powers of attorney granted to persons abroad should be limited, specific and revocable, never a general delegation of the directing mind.
Real economic substance, an office, staff, equipment and genuine local activity, backs up governance and is increasingly expected. Substance requirements interact with the Cyprus controlled foreign company (CFC) rules and with anti-avoidance tests across the EU. For holding structures in particular, substance is what makes treaty and directive benefits stick; see our guide to Cyprus holding company structures for how this plays out.
You obtain a Cyprus tax residency certificate by applying to the Cyprus Tax Department and satisfying it that the company's management and control are in Cyprus, evidenced by a resident-majority board, meetings and minutes in Cyprus, and local bank control. The certificate is the document that unlocks double tax treaty benefits, so it is worth preparing the evidence carefully before applying.
The certificate matters because foreign payers and tax authorities require proof of Cyprus residence before granting reduced withholding or exemptions under a treaty. Without it, a foreign dividend, interest or royalty payment may suffer full domestic withholding tax. The certificate is therefore not a formality but the key that operationalises the treaty network a Cyprus structure is usually built to use.
The Tax Department applies a consistent set of questions before issuing the certificate. It examines whether the majority of the board are Cyprus tax residents, whether the majority of board meetings are held in Cyprus, whether board minutes are prepared and retained in Cyprus, and whether the board controls a Cyprus bank account. Source: Mondaq, Cyprus company tax residency criteria and requirements. Weakness on any of these points invites questions and can delay or defeat the application.
A company applies on Form TD 98, the Tax Residency Certificate Request and Questionnaire that the Tax Department requires for each certificate request (Form TD 126 is the separate route used by individuals), supported by corporate documents, board minutes, evidence of directors' residence and confirmation of the bank mandate, and is typically made for a specified tax year. Source: KTC, Cyprus company tax residency certificate TD 98 guide. In our practice, assembling the governance file before year-end makes the certificate straightforward; scrambling for it afterwards is where problems appear.
The Department can refuse or defer a certificate where the evidence shows management and control are not really in Cyprus, for example a board that meets abroad, an owner who runs the banking, or minutes that do not match travel records. A refusal is a serious signal, because it suggests the company may be resident elsewhere, exactly the exposure this article is about. Fixing the substance is the remedy, not resubmitting the same file.
Being Cyprus tax resident means the company is taxed in Cyprus on its worldwide income at the corporate rate; not being resident means Cyprus taxes only Cyprus permanent-establishment profits and certain Cyprus-source income. The stakes rose in 2026, when the corporate rate increased, so getting residency right carries more weight than before.
A Cyprus tax resident company is taxed on its worldwide income at a corporate income tax rate of 15% from 1 January 2026, up from 12.5%, aligning Cyprus with the OECD 15% global minimum. Source: BDO, Cyprus tax reform. The rate remains competitive within the EU, but the increase means residency planning must be deliberate rather than incidental.
A non-resident company is taxed in Cyprus only on income attributable to a Cyprus permanent establishment, plus certain Cyprus-source income. Everything else falls outside the Cyprus net. This is the mirror image of residency: the same PE concept that can catch a Cyprus company abroad is what catches a foreign company in Cyprus.
Residency interacts with the Cyprus controlled foreign company (CFC) rules, which can attribute the undistributed income of a low-taxed foreign subsidiary to a Cyprus parent. The 2026 reform also extends loss carry-forward from 5 to 7 years, improving the position of resident companies with early-stage losses. Source: Sovereign Group, Cyprus tax reform. These rules reward genuine substance and penalise artificial arrangements.
Dividend treatment is governed by Special Defence Contribution (SDC) rules, which apply to Cyprus tax resident and domiciled shareholders. The 2026 reform reduces SDC on actual dividend distributions from 17% to 5%, abolishes deemed dividend distribution on profits arising after 1 January 2026, and works alongside the individual Cyprus tax residency and non-domiciled status regime. Source: Sovereign Group, Cyprus tax reform. Financing structures can be optimised further with the Cyprus notional interest deduction.
You fix a company managed from abroad by moving the real decision-making back to a competent board in Cyprus and building genuine substance around it, in the right order, before the year-end. The goal is not more paperwork but a real change in where the company is run, evidenced consistently across governance, banking and operations.
The first step is to relocate decision-making itself: the board in Cyprus must actually take the strategic decisions, meet in Cyprus, and stop merely ratifying instructions from abroad. That means appointing directors who are competent to run the business, giving them real information, and letting them decide. Everything else supports this or it fails.
Substance is best built in a logical order rather than piecemeal:
Sometimes the right answer is to migrate the company's seat to Cyprus or to restructure entirely, rather than patch a company that is deeply managed elsewhere. Redomiciliation into Cyprus, or moving operations and people to Cyprus, can be cleaner than defending a structure whose reality points abroad. The choice depends on where the people and decisions genuinely are, which is a commercial question as much as a tax one.
Whatever route you choose, document the change before the tax year closes, because residency is assessed year by year. A mid-year shift of management and control needs a clear evidential break: dated board resolutions, the new banking mandate, and a consistent record from that point on. Fixing substance in December and claiming it applied all year is exactly what invites challenge.
The mistakes that most often break Cyprus corporate tax residency all share one root: the paperwork says Cyprus while the reality says somewhere else. Each of the errors below is common, avoidable, and individually capable of costing the company its Cyprus residence or its treaty benefits.
A rubber-stamp nominee board that signs whatever the owner sends breaks residency because management and control never really sat in Cyprus. Nominee directors are legitimate only when they genuinely direct the company. A board that cannot explain its own decisions is evidence against Cyprus residence, not for it.
Signing the company's key contracts abroad, typically by the owner in person, moves the exercise of authority out of Cyprus. Even if the board later ratifies, the real decision was taken elsewhere, and a dependent-agent PE may also arise where the signing happens. Authority to bind the company should sit with, and be exercised by, the Cyprus board.
A company with no local office, no staff and no board control over its bank account has little substance to point to when challenged. Modern residency and anti-avoidance tests expect proportionate real presence. An empty shell with a registered-office address is the profile most likely to fail.
Assuming that incorporating in Cyprus alone secures Cyprus tax residency is the foundational error, and the 2023 incorporation test does not cure it. That test defaults a Cyprus company to residence only where it is not resident elsewhere; it does not protect a company whose management and control, or POEM, clearly sit in another country. Incorporation is the start of the analysis, never the end of it.
Philippou Law Firm advises founders, directors and international groups on getting Cyprus corporate tax residency right the first time, from the initial structure through to a defensible tax residency certificate. We assess whether your company is genuinely managed and controlled in Cyprus, identify POEM and permanent-establishment exposure in the countries where your people actually sit, and build the board, banking and substance arrangements that stand up to scrutiny. If a company is currently run from abroad, we plan and document the move of decision-making to Cyprus in the right order and before year-end. Contact us to review your structure against the 2023 incorporation test, the 2026 rate change and your relevant treaties, and to put your residency on solid ground.
This article is general information, not legal or tax advice. Cyprus tax law is subject to change and figures should be confirmed against current Cyprus Tax Department guidance before you act.
Company registration
from €1,050
A complete, working Cyprus company on a fixed fee, agreed in writing before we start.
Fixed fee, written into your engagement letter before you pay. A Cyprus-admitted lawyer replies within 24 hours.
Book a free 30-minute consultation with a partner.
Book free consultation
Partner
Partner specializing in corporate and tax law. Member of both the Cyprus Bar Association and the Athens Bar Association, bringing expertise across both jurisdictions.
View profile
Cyprus vs Ireland corporate tax in 2026: both near 15%, but who wins on holding, dividends, IP and exits? Rates, participation exemption and structures
VideoIntroduction Cyprus has strengthened its position as one of the most attractive places in Europe for business, largely due to its well-organized and internationally accepted tax system. More and more...
VideoCorporate nominee services in Cyprus place a regulated local professional on the public company register in your place, as nominee director, nominee shareholder or company secretary, and provide the registered office address that every Cyprus company must have by law.
Related Services
“Fabulous service from everyone at Philippou Law. We moved here in July and had our immigration sorted with Nikolas and Laura, our tax residency, non-dom and the opening of our business was seamlessly done by Cleo, and we are also buying our house with them, where Maria and Elpida have been wonderful. Honestly I would not go anywhere else. Many thanks all.”
Free Consultation
Book a free, no-obligation consultation with one of our experienced lawyers. As one of the most established law firms in Paphos, we're here to help you navigate the legal landscape of Cyprus with confidence.
No fees. No obligations. Speak with a qualified lawyer today.