Quick Summary
- Cyprus corporate income tax: 15% from 2026 (up from 12.5%), still equal-lowest in the EU.
- IP Box effective rate: approximately 3% on qualifying SaaS, API, and software licensing income.
- Deemed Dividend Distribution abolished from 2026: full retention of profits for product reinvestment without an automatic shareholder tax.
- SDC on actual dividends: cut from 17% to 5% for Cyprus tax resident and domiciled individuals. Non-Dom owners pay 0%.
- The new substance bar: at least one Cyprus-resident developer or technical lead is the minimum for IP Box defensibility under the post-2026 nexus framework.
- Timeline: 8 to 12 weeks for company and banking; 3 to 6 months end-to-end including dev team and substance build-out.
- Concrete example: a SaaS with €1M ARR moved from a 25% jurisdiction saves about €220,000 a year in corporate tax alone.
Relocating a SaaS company is not the same as relocating a holding company. The product never stops shipping. Customers do not pause their subscriptions while you re-domicile. Your dev team has lives in Berlin or Lisbon or Tel Aviv that do not magically translate to Limassol. And HMRC, the German Finanzamt, or the Israeli Tax Authority will scrutinise your IP transfer years after the fact at fair market value.
This guide is the operator’s playbook, not the brochure. It covers what actually breaks when a SaaS moves to Cyprus, the order of operations, the substance bar that matters under the 2026 nexus rules, and the math on a realistic €1M ARR worked example. If your situation is specific enough that you want a tailored review, the contact form sits at the bottom.
The Problem: why SaaS founders are leaving high-tax jurisdictions in 2026
The macro picture for software founders changed twice in 12 months. First, the OECD Pillar Two minimum kicked in at 15% for groups above €750M in turnover, removing the headline-rate advantage of the cheapest jurisdictions. Second, several historically founder-friendly regimes tightened: the UK abolished the non-dom remittance basis in April 2025, France keeps adjusting wealth taxation, and Germany’s combined corporate burden sits at roughly 30%.
For a SaaS founder pulling €300k to €5M in operating profit, the spread between a 25% to 30% effective jurisdiction and a Cyprus structure with the IP Box is not a rounding error. On €1M of qualifying IP profit, the difference between 25% and 3% is €220,000 every year. Over a five-year holding period before exit, that is over a million euros of preserved capital, usually more than the next product hire or a full Series A bridge.
The Solution: why Cyprus, specifically, for SaaS
Cyprus is not the cheapest jurisdiction in the world. Dubai’s 9% is lower in absolute terms. The BVI is 0%. The reason serious SaaS founders pick Cyprus is the combination of four things that matter at exit.
EU passporting and credibility. Cyprus is a full EU member state. Your Stripe, Mollie, or Adyen account does not blink. Your enterprise customers do not need to fill out additional vendor risk forms. Your acquirers do not write down the multiple because the IP sits in an offshore haven.
15% headline, 3% effective with IP Box. The 2026 reform raised the corporate rate from 12.5% to 15%, but the IP Box mechanic was untouched: an 80% deduction on qualifying IP profit. That means the effective rate moved from 2.5% to 3.0%. For a SaaS where 70% to 85% of revenue is qualifying subscription income, the difference between Cyprus and most EU corporate regimes remains 20+ percentage points.
English-language common-law contracts. Your master subscription agreement, your DPA, and your employment contracts work in Cyprus without translation or local reinterpretation. This sounds boring until you do diligence the other way and try to relocate to Tallinn or Sofia.
Non-Dom on the founder side. If you also become Cyprus tax-resident, dividends paid out of your Cyprus operating company are exempt from the Special Defence Contribution. Combined with a 0% Cyprus personal income tax on dividends, that is a 0% personal tax on profit extraction for up to 17 years. See our Cyprus IP Box article for the structural detail.
We will run the numbers on your ARR mix in a 30-minute call.
How to do it: the 8-step SaaS relocation sequence
Done in parallel by an experienced team, this runs 8 to 12 weeks for the corporate side and 3 to 6 months for the full operational move.
Step 1: Structuring decision (Week 1). Choose between (a) a new Cyprus operating company that acquires the IP and contracts, (b) redomiciliation of your existing entity into Cyprus, or (c) a Cyprus IP holding company sitting above your existing operating entity. The right answer depends on customer contract assignability, current jurisdiction’s exit tax exposure, and whether you have outside investors with reserved matters that block the move.
Step 2: Incorporation (Weeks 1 to 3). Reserve the name, draft the Memorandum and Articles, appoint a Cyprus-resident director with real decision-making authority, file with the Registrar. Standard timeline is 7 to 14 working days.
Step 3: Banking (Weeks 2 to 6). The slowest step. Cyprus banks now expect a clean business plan, full UBO KYC, source-of-funds evidence, and a projected ARR schedule. Our business bank account guide covers the documentation.
Step 4: IP transfer and transfer pricing study (Weeks 3 to 8). The single most important compliance step. If your IP currently sits in a UK Ltd, a Delaware LLC, or a German GmbH, transferring it to Cyprus must happen at fair market value. Commission a transfer pricing study from a recognised firm before the transfer, not after. Your old jurisdiction will reassess deemed disposal proceeds with hindsight if you skip this.
Step 5: Tax, VAT, and payroll registration (Weeks 4 to 5). Obtain a Tax Identification Code, register for VAT if turnover will exceed €15,600 in any rolling 12-month period (most SaaS hit this in month one), register for VIES for EU B2B sales, and register the Cyprus payroll. See our VAT registration guide.
Step 6: Customer and contract migration (Weeks 4 to 10). Two routes: novate existing customer agreements to the Cyprus entity, or let them run off and onboard renewals into the new entity. Novation is cleaner for accounting but requires customer consent. The “let it run off” approach is simpler but leaves you with two entities for 12 months.
Step 7: Dev team and substance build-out (Weeks 4 to 12). The post-2026 nexus framework expects R&D activity to be physically performed in Cyprus by Cyprus-resident developers or unrelated third-party subcontractors. One Cyprus-resident senior engineer (full-time or fractional) plus documented design decisions, sprint logs, and code commits routed through the Cyprus entity is the minimum credible substance for a small SaaS. Add a Cyprus office lease, local utilities, and recorded board meetings.
Step 8: Stripe, hosting, and operational rails (Weeks 6 to 12). Open a new Stripe / Mollie / payment processor account under the Cyprus entity. Move hosting billing to the Cyprus entity (the data centre location does not need to be Cyprus, the contract counterparty does). Update your privacy policy, DPA, and master subscription agreement to reference the Cyprus entity. Update your trust and compliance page.
The Trap: five things SaaS founders get wrong
Trap #1: IP transferred without a transfer pricing study. By far the most expensive mistake. A SaaS with €5M of revenue and a defensible enterprise value of €25M cannot transfer its source code, brand, and customer book to Cyprus for €1. The old jurisdiction will assess deemed proceeds at fair market value with penalties, sometimes three or four years after the move. Get the study done before the transfer, not after.
Trap #2: Substance shortcut on the dev team. A virtual office in Limassol with a US-based CTO and an entire Estonian dev team will not qualify for the IP Box at full nexus. Under the OECD modified-nexus approach, the qualifying expenditure is R&D performed by the Cyprus entity itself or by unrelated subcontractors. Related-party offshore dev work scores zero against the nexus fraction. Plan substance from week one.
Trap #3: VAT misapplication on US and EU customers. B2B SaaS to a US customer is generally outside Cyprus VAT scope. B2B SaaS to an EU business customer uses the reverse-charge mechanism, not Cyprus VAT. B2C SaaS to EU consumers triggers MOSS / OSS registration. Most SaaS founders set this up wrong in month one and clean up two years later under audit.
Trap #4: Payment processor and country-of-establishment mismatch. If your invoices say Cyprus but your Stripe account still routes through your old UK or US LLC, your old tax authority can argue that the economic activity is still local. Move the payment rail at the same time as the corporate move, or document a clear transition period.
Trap #5: Source-country exit tax on share value. Some jurisdictions (Germany, France, Netherlands, Denmark) tax unrealised gains on the founder’s shares the moment they cease tax residence. Plan the personal move in coordination with the corporate move, not as an afterthought.
The Result: €1M ARR worked example
Consider a SaaS founder with the following profile: €1,000,000 ARR, 70% gross margin, €700,000 EBITDA, currently operating through a UK Ltd, owned 100% by the founder who is UK tax-resident.
| Item | UK Ltd (status quo) | Cyprus Ltd + IP Box + Non-Dom |
|---|---|---|
| Corporate tax on €700k EBITDA | €175,000 (25%) | €21,000 (3% IP Box on 80% qualifying) |
| Withholding tax on dividends out | 0% but UK dividend tax follows | 0% |
| Personal tax on dividends received | approximately €175,000 (higher rate UK) | €0 (Cyprus Non-Dom) |
| Total annual tax | approximately €350,000 | approximately €21,000 |
The Cyprus structure preserves about €329,000 per year. Over a five-year hold before exit, that is over €1.6M of additional capital, on the same business. The numbers assume real substance, a defensible IP Box nexus, and proper Cyprus tax residency for the founder. Each of these is required, not optional, and not where you cut corners.
We will model your ARR, cost base, and home jurisdiction in 30 minutes.
Frequently Asked Questions
Does my dev team have to physically move to Cyprus?
Not the whole team. The IP Box nexus fraction caps the benefit by the share of R&D performed by the Cyprus entity (or unrelated third-party subcontractors) versus related-party offshore work. One Cyprus-resident senior engineer plus documented R&D is usually enough for a small SaaS to score a defensible nexus ratio. As you scale, plan for proportional Cyprus headcount.
Can I keep a US LLC parent on top of a Cyprus subsidiary?
Yes, this is a common structure, particularly when there is US institutional capital on the cap table. The Cyprus Ltd holds the IP and operates the SaaS, the US LLC holds the shares. Watch for US controlled foreign corporation rules (GILTI, Subpart F) on the US side, and ensure board meetings of the Cyprus entity are held in Cyprus.
Should I novate customer contracts or let them run off?
Novate for clarity and clean revenue allocation, especially for enterprise customers. For self-serve SMB customers paying monthly, letting them run off and onboarding renewals into the Cyprus entity is operationally simpler. The novation route requires customer consent, which adds friction but pays off at audit.
Does my hosting need to be in Cyprus?
No. The data centre location does not affect tax residency or IP Box qualification. What matters is the contracting party (your Cyprus entity should be the AWS / GCP / Azure customer of record) and where the R&D and operational decisions happen.
Can I move from Stripe Atlas to a Cyprus Stripe account?
Yes. Open a new Stripe account under the Cyprus entity with its own TIN, route new subscriptions through it, and decommission the Atlas account once renewals have migrated. Plan a 60 to 90-day overlap.
What does the full move cost?
Setup costs typically run €3,000 to €8,000 for a SaaS-specific incorporation with IP transfer, transfer pricing study, and standard registrations. Annual running costs (accounting, audit, registered office, payroll, IP Box reporting) are typically €6,000 to €15,000 depending on company size and ARR.
Talk to KTC About Your SaaS Relocation
We have moved SaaS companies from the UK, Germany, the Netherlands, Israel, and the US into Cyprus. The mechanics are similar, the traps are jurisdiction-specific, and the right substance level depends on your ARR, your investor base, and your exit horizon. One 30-minute call usually gives you enough clarity to decide.