We successfully relocated management and operations to Cyprus, streamlining tax residency, payroll, VAT and banking into a compliant structure. The process covered board reconstitution, registrations, KYC alignment and treaty positioning – managed end-to-end.
It took 6–8 weeks from project start to first Cyprus payroll and VAT filings.
This ensured 0 penalties on VAT and Social Insurance, with 1 audit-ready evidence pack consolidating TD98 documentation, board minutes, mandates and substance proofs.
The Opportunity
Cyprus offers a 12.5% corporate rate, broad treaty network, non-dom rules for founders, and straightforward EU market access. But the value only shows up if you win the residency and substance tests, switch payroll/VAT correctly, and align contracts to avoid foreign permanent establishment (PE) risk. Each of the three clients arrived mid-move with red flags (rubber-stamp boards, mis-timed VAT, and payroll without GHS/Social Insurance set up). We were engaged to stabilise governance, file cleanly, and defend the tax position.
The Solution
Residency & substance first — reconstitute the board (majority Cyprus-resident), calendar/hold meetings in Cyprus, and relocate books & records.
Registrations on day one — Tax (TIC), VAT, Social Insurance, GHS (GeSY), payroll PAYE.
Banking & KYC — UBO file, source-of-funds trail, sanctions screening; align signatories with Cyprus-based officers.
Contracts & PE control — move contract negotiation/conclusion to Cyprus; narrow any foreign POAs; update ToS and intercompany agreements.
Compliance calendar — month-by-month filing map (VAT, PAYE, SI/GHS, provisional tax, financial statements, TP files).
Evidence pack — TD98 residency questionnaire with exhibits (minutes, leases, utilities, staff, RO/auditor letters).
The Impact
SaaS (UK > CY): ceased UK dependent-agent patterns; Cyprus residency secured; first VAT return filed with zero adjustments; bank opened with Cyprus directors as signatories.
E-commerce (DE > CY HoldCo): Germany > Cyprus dividend flow reduced to 5% WHT at source (≥10% holding); participation exemption confirmed in Cyprus; TP files aligned.
Family office (GCC > CY): founder non-dom status documented; dividend/interest flows structured with no Cyprus SDC for the founder; investment accounts cleared through enhanced KYC.
The Top 10 Mistakes
1. Treating “incorporation” as “residency”
What goes wrong: A Cyprus company is formed, but the CEO and board keep deciding everything abroad; minutes are back-filled.
Risk: Loss of Cyprus residency, treaty challenges under the PPT/MLI, and foreign PE claims.
Fix: Majority Cyprus-resident board, real meetings in Cyprus, contract execution here, books & records here; keep a TD98 file with proof.
2. Leaving VAT until revenue starts
What goes wrong: Waiting to cross the domestic threshold before registering; mixing EU B2B/B2C supplies without place-of-supply mapping.
Risk: Back-VAT, interest, and penalties; marketplace blocks.
Fix: Register before first taxable supplies where forecast shows threshold breach; map place of supply (digital, services, goods), set correct VAT codes in the ERP, and diarise quarter ends.
3. Running payroll without Social Insurance/GHS set-up
What goes wrong: Paying staff net salaries while Social Insurance and GHS aren’t registered or capped correctly.
Risk: Arrears, fines, and inability to renew work/residence permits.
Fix: Register employer and employees, apply the maximum insurable earnings cap and the GHS cap, and remit on the statutory schedule; issue Cyprus pay slips from month one.
4. Ignoring defensive WHT rules on outbound payments
What goes wrong: Paying dividends/interest/royalties to entities in blacklisted/low-tax jurisdictions assuming “Cyprus is 0% outbound”.
Risk: Forced withholding or non-deductibility under 2025/2026 rules.
Fix: Run a payee-jurisdiction audit; re-route through cooperative jurisdictions or change recipients; update contracts and AP supplier master data.
5. Banking KYC mismatch
What goes wrong: UBO disclosure, source-of-funds and board authority don’t match filings.
Risk: Account refusal or later off-boarding.
Fix: Build a clean KYC pack: UBO tree, board minutes appointing signatories, PoE/SoF documentation, leases/utilities and auditor’s engagement letter.
6. Foreign “dependent agent” behaviour continues
What goes wrong: Sales managers abroad keep negotiating and concluding contracts for the Cyprus entity.
Risk: PE in the foreign country, profit attribution outside Cyprus.
Fix: Move negotiation/conclusion to Cyprus (or appoint true independent agents); limit authorities abroad; show contract execution and CRM audit trail from Cyprus.
7. Transfer pricing left for “year-end”
What goes wrong: Intercompany loans, management fees or IP licences priced later.
Risk: Adjustments, penalties, cash trap.
Fix: Sign intercompany agreements now; apply Cyprus TP rules (local file/master file or simplified safe harbours) and book entries monthly.
8. Using the wrong founder tax profile
What goes wrong: Founders assume dividends/interest are tax-free without checking non-dom status; or they draw only salary and miss planning.
Risk: Unexpected SDC or over-taxation.
Fix: Document non-dom status (or model SDC if domiciled), balance salary vs dividend, and watch GHS exposure on passive income up to the cap.
9. Immigration/work permits out of sequence
What goes wrong: Hiring non-EU staff before obtaining the right company eligibility (e.g., Companies of Foreign Interest) or work permits.
Risk: Delays, refusals, or payroll without legal right to work.
Fix: Secure the company eligibility first, then individual permits; align employment contracts and payroll activation to permit start dates.
10. No compliance calendar
What goes wrong: Missing PAYE/SI/GHS, VAT, provisional tax, audited financials and annual returns.
Risk: Penalties and “not in good standing” status (banking nightmare).
Fix: A single 12-month calendar with owners for each filing, reminders, and a monthly “close and file” checklist.
What we deliver
-
Residency & substance file (TD98 + exhibits)
-
Governance pack (board calendar, authority matrix, minutes)
-
Banking KYC pack (UBO/SoF/PoE, signatories)
-
Contract choreography (where negotiated/signed, CRM evidence)
-
Registration set (TIC, VAT, SI, GHS, PAYE)
-
Compliance calendar with reminders and a penalty-free filing record