There is a question at the centre of almost every international structure involving a Cyprus company, and it is one that no legislator has answered with the precision that clients and advisors would prefer. How much presence is enough?
The honest answer is that there is no single law that defines it. No threshold prescribes the exact number of employees, the square metres of office space, or the hours a director must spend in Cyprus. What exists instead is a collection of overlapping frameworks, each arriving at the same conclusion from a different direction: the absolute minimum is not the right answer. It may be the cheapest option today. It tends to become the most expensive over time.
The spectrum
At one pole sits the brass plate arrangement. A nominee director who has never read the company's accounts. A registered address shared with hundreds of other entities. All real decision-making happening somewhere else entirely. Legally available and still in use.
At the other sits a company with genuine management in Cyprus. Qualified executives making real decisions from a real office. Employees on payroll. A bank account used for actual transactions. Board minutes that reflect real deliberations, not formalities.
Most well-advised structures sit between these two points. Finding the right position on that spectrum is the substance question in practice.
| Level | What it looks like | Risk profile |
|---|---|---|
| Brass plate | Shared address, nominee director, no staff, no real activity | High. Increasingly indefensible |
| Credible base | Active resident director, real office, Cyprus banking, decisions documented | Moderate. Appropriate for simpler structures |
| Genuine hub | Qualified staff, expert director, expenses proportionate to income | Low. Withstands any level of scrutiny |
What the Unshell left behind
In 2021 the European Commission proposed a directive known as the Unshell Directive, or ATAD 3, that would have created a harmonised definition of minimum substance across the EU. It defined three baseline indicators: own premises available for exclusive use, an active EU bank account, and at least one genuine resident director not simultaneously serving on too many unrelated boards.
The directive was withdrawn in 2025, unable to achieve the unanimous member state agreement required. But its legacy outlived it. The debate produced a working definition of minimum substance that regulators across Europe continue to reference. Own premises. An active local bank account. A qualified resident director with a genuine commitment to the entity. These are the floor below which credibility begins to erode.
DAC6 and the transparency signal
One of the defined hallmarks in the EU's mandatory disclosure framework for cross-border arrangements specifically concerns structures using entities without substantive economic activity, where beneficial ownership is difficult to identify. Where this applies, the arrangement must be reported to tax authorities across EU member states.
Most Cyprus structures will not trigger this. But the hallmark makes explicit what the regulatory direction of travel has been for years: substance and transparency are the same expectation, not two separate ones.
CFC rules and the shareholder's exposure
Most developed tax systems give their authorities the ability to look through a foreign company and tax its profits in the hands of its shareholders, where that company lacks genuine economic activity of its own. A company with real management and real activity in Cyprus is protected from this. A company with a registered address and a passive director is not.
CRS and the nature of the income
Under the Common Reporting Standard, banks must classify each entity holding an account as either Active or Passive. An entity whose income comes primarily from dividends, interest, rents, or royalties is broadly classified as Passive. The bank is then required to identify and report its beneficial owners to their home tax authorities. The mechanics of this are examined further in the Cyprus structure your client set up hasn't changed, but everything around it has.
An entity with genuine commercial activity in Cyprus, generating income attributable to real work performed there, may qualify as Active, with different reporting treatment. The classification is made by the bank on the basis of economic reality, not on the basis of how the entity describes itself. Substance determines the classification, and the classification determines transparency.
Country-by-Country Reporting as a benchmark
Country-by-Country Reporting formally applies only to large multinational groups above certain revenue thresholds. Most Cyprus structures will not reach them. But the framework matters because it makes explicit the question that tax authorities are now trained to ask at every level: does the income attributed to this jurisdiction bear a credible relationship to the real activity present there?
A structure in which a Cyprus entity receives substantial royalty, management fee, or interest income while employing nobody and incurring minimal expenses will attract this scrutiny regardless of its size. The CbCR framework does not invent the analysis. It codifies it.
Not one size fits all
A holding company passively holding a long-term equity stake in a single subsidiary operates in a different risk environment from an IP company licensing trademarks across multiple jurisdictions. A treasury entity with genuine credit analysis functions presents differently from one that simply passes funds between related parties. A company with active commercial operations generating income from genuine work in Cyprus sits in a fundamentally stronger position than one receiving passive income with nothing proportionate behind it.
Substance is not a fixed number. It is a proportionality judgment. The question is always whether the presence is appropriate to what the entity claims to be doing.
Substance must exist before it is tested. The questionnaire is not the beginning of the problem. It is the end of the period in which the problem could have been addressed.
The questionnaire that arrives too late
Foreign tax authorities making substantial payments to Cyprus entities, by way of royalties, dividends, or interest, can request detailed information about the substance of the receiving company through international administrative cooperation channels. The questions are specific. Does the company have premises appropriate to its activities? Where are management decisions actually made? Are the directors qualified to govern this business? Is there a credible relationship between the income received and the expenses incurred?
By the time that request arrives, it is too late to build the substance that would answer it. Premises cannot be backdated. A director who was never genuinely involved cannot retroactively demonstrate that they managed the business. Board minutes, payroll records, and expense trails cannot be constructed for periods already under review.
The instinctive test
Despite everything above, there is a simpler test beneath all of it.
When you look at genuine presence, a real office, a director who visibly runs this business from Cyprus, people doing real work, decisions that demonstrably happen here, you sense that it is sufficient. When you look at the opposite, you also know. The registered address. The director whose name appears on a hundred company records. The absence of any life in the structure.
That instinct is not law. But it reflects how tax authorities, banks, and regulators assess what they see. And increasingly, it is where the law is pointing.
The minimum was never the right answer. Genuine presence is not a compliance cost. For companies that use Cyprus correctly, it is what makes everything else work.