Executive summary

India is one of the strongest destinations for European companies building engineering, finance, operations, customer support and back-office teams. The talent pool is deep, English usage is high, and hiring costs can be materially lower than in Western Europe.

But India is not a “just pay someone remotely” market.

European companies hiring in India need to manage:

• Indian payroll and employment compliance
• State-level labour rules
• Permanent establishment risk
• Contractor misclassification
• IP and confidentiality protection
• GDPR transfers to India
• India’s Digital Personal Data Protection Act, 2023
• Foreign exchange and entity-setup rules
• Tax withholding and social security obligations

For most European SMEs entering India, the safest route is usually:

1. Use contractors only for genuinely independent project work
2. Use an Employer of Record, EOR, for early employees or market testing
3. Set up an Indian entity once the India team becomes strategic, larger or revenue-generating

This guide explains how to choose the right path.

Why European companies hire in India

India is attractive for European businesses because it offers:

• Large English-speaking professional workforce
• Strong engineering, finance, SaaS, compliance, IT and operations talent
• Mature remote-work culture
• Time-zone overlap with Europe, especially for UK, CET and Gulf-facing teams
• Lower fully loaded employment costs than most European markets
• Established outsourcing, shared services and global capability centre ecosystem

Common Europe-to-India hiring use cases include:

• Software developers
• Product and QA teams
• Finance and accounting support
• Tax and compliance operations
• Customer support
• Data operations
• AI/ML annotation and review teams
• Sales development and research
• Back-office process teams

The opportunity is real. The mistake is treating India as a low-friction contractor market.

Main hiring options in India

European companies usually have four routes.

1. Hire through an Employer of Record, EOR

An EOR is a local legal employer in India. It hires the employee on your behalf, runs payroll, withholds taxes, provides statutory benefits and manages employment documentation.

You direct the day-to-day work. The EOR handles local employment administration.

Best for:

• First 1–20 hires in India
• Testing India before forming an entity
• Hiring quickly
• Avoiding immediate company incorporation
• Reducing employment compliance burden
• Distributed teams without an Indian office

Watch-outs:

• EOR does not eliminate every tax or PE risk
• Senior commercial roles can still create risk if they negotiate or conclude contracts in India
• Data access, IP assignment and confidentiality must be contractually tight
• Not ideal for large permanent operations forever

2. Use a PEO

A Professional Employer Organisation, PEO, usually supports HR, payroll and compliance for a company that already has a local employing entity.

In India, the term “PEO” is often used loosely. Many providers marketed as “PEO” are actually EOR providers.

Best for:

• Companies that already have an Indian entity
• HR/payroll outsourcing
• Benefits administration
• Compliance support for an existing India payroll

Not ideal for:

• Companies with no Indian entity, unless the provider is acting as EOR

3. Hire independent contractors

A contractor is self-employed or engaged through their own business. They invoice the European company for services.

Best for:

• Short-term projects
• Clearly defined deliverables
• Specialist advisory work
• Non-core work
• Flexible project-based support

High-risk when:

• The person works full-time for you
• You control their hours, leave and tools
• They report like an employee
• They use your email, laptop and internal systems
• They are economically dependent on you
• They perform core business functions
• They have a title like “Head of India” or “Sales Director India”

Contractors are useful. Fake contractors are expensive.

4. Set up an Indian entity

A European company can incorporate an Indian subsidiary, commonly a private limited company, or consider other structures such as LLP, branch office, liaison office or project office depending on the activity.

Best for:

• Long-term India operations
• Larger teams
• Local revenue generation
• Sales, contracting or invoicing in India
• Building a permanent India centre
• Hiring leadership, finance and operations locally
• Owning assets, leases or local vendor contracts

Watch-outs:

• Incorporation, tax, accounting, audit and corporate secretarial compliance
• GST, transfer pricing and intercompany agreements
• Payroll registrations
• Labour law registrations
• FEMA/RBI considerations for foreign investment and branch/liaison structures

EOR vs PEO vs contractor vs entity: quick decision table

Indian payroll basics European companies should understand

Indian payroll is not just net salary transfer. It may include:

• Employment contract and onboarding documents
• Monthly salary processing
• Income-tax withholding, commonly TDS
• Provident Fund, PF, where applicable
• Employee State Insurance, ESI, where applicable
• Professional tax in applicable states
• Gratuity obligations
• Bonus obligations, depending on eligibility
• Leave, holidays and working-hour compliance
• Payslips and statutory records
• Full and final settlement on exit

India has central laws and state-specific employment rules. Shops and Establishments rules, professional tax, holidays and local employment practices can vary by state.

For a European company, this means a Delhi hire, Bengaluru hire and Mumbai hire may not be administratively identical.

Key employment and payroll compliance areas

Income-tax withholding

Employers must generally withhold tax from salary and deposit it with Indian tax authorities. This is typically handled through a Tax Deduction Account Number, TAN, and payroll compliance processes.

Provident Fund

India’s Employees’ Provident Fund system is a statutory retirement savings scheme administered by EPFO. Applicability depends on establishment coverage, employee eligibility and wage structure.

Employee State Insurance

ESI is a social security and health insurance scheme for eligible employees, generally linked to wage thresholds and covered establishments.

Professional tax

Professional tax is levied by certain Indian states, not by the central government. It is capped under the Constitution but varies by state.

Gratuity

Gratuity is a terminal benefit generally payable after continuous service conditions are met, commonly five years, subject to statutory rules.

Bonus

India has statutory bonus rules for eligible employees, subject to wage thresholds and employer applicability.

Leave and holidays

Leave entitlements, working hours, overtime rules and holiday requirements often depend on the state’s Shops and Establishments legislation and the nature of the establishment.

Contractor risk in India

European companies often begin in India by hiring contractors. That can work, but the structure must match the reality.

A contractor is more defensible when:

• The work is project-based
• The contractor controls how work is performed
• The contractor can work for others
• Payment is linked to milestones or invoices
• The contractor uses their own tools where possible
• The contract has clear IP assignment and confidentiality clauses
• There is no employee-style leave, appraisal or disciplinary process

A contractor becomes risky when they look like an employee.

Red flags

• Fixed full-time working hours
• Exclusive work for one company
• Company email, title and business cards
• Managerial reporting identical to employees
• Paid monthly like salary
• Company controls tools, methods and daily tasks
• No real business independence
• Long-term indefinite engagement
• Role is core to business operations

Consequences of misclassification

Potential consequences include:

• Employment claims
• Back wages or statutory benefits
• Tax withholding exposure
• Social security exposure
• Penalties and interest
• IP ownership disputes
• Permanent establishment arguments
• Reputational issues with future employees and investors

For European SMEs, the practical rule is simple:

If the person is full-time, managed like staff and core to your business, use EOR or an Indian entity.

Permanent establishment risk for European companies

Permanent establishment, PE, is a tax concept. If a European company has sufficient business presence in India, India may seek to tax profits attributable to that presence.

PE risk depends on Indian domestic law and the relevant double tax treaty between India and the European country.

Common PE risk triggers include:

Fixed place PE

A fixed place of business in India, such as an office or dedicated workspace, may create PE risk.

Dependent agent PE

A person in India who habitually concludes contracts, negotiates key terms or plays the principal role leading to contract conclusion may create PE risk.

Service PE

Some India tax treaties include service PE clauses. Providing services in India for a specified period through employees or other personnel may create exposure.

Management or leadership risk

A senior India-based person with authority over commercial decisions, pricing, contracting or market entry can increase risk.

Practical PE controls

European companies should avoid allowing India-based personnel to:

• Sign customer contracts
• Negotiate final commercial terms
• Represent that they can bind the foreign company
• Maintain a local office as the company’s business address
• Store inventory or assets for local sales
• Run India as an unregistered branch
• Perform revenue-generating activities without tax review

An EOR can reduce employment-law burden, but it does not automatically eliminate PE risk if the role itself creates taxable presence.

GDPR and data transfers to India

India is not currently listed by the European Commission as an adequacy jurisdiction for GDPR purposes. That means EU/EEA personal data transfers to India generally need an appropriate transfer mechanism, commonly Standard Contractual Clauses, SCCs, plus a transfer impact assessment where required.

For European companies hiring India-based workers, GDPR issues arise when the India team accesses:

• Customer personal data
• Employee data
• CRM records
• Support tickets
• Financial data
• Health or special category data
• Login credentials
• Monitoring or productivity tools
• EU user analytics

GDPR checklist for India hiring

European companies should have:

• Data Processing Agreement with the EOR, payroll provider or contractor
• SCCs for EU/EEA-to-India transfers where applicable
• Transfer Impact Assessment
• Role-based access control
• Least-privilege access
• Encryption in transit and at rest
• Device management and endpoint security
• Clear retention and deletion rules
• Incident reporting obligations
• Subprocessor list and approval rights
• Confidentiality undertakings
• Data return/deletion process on exit
• Access logs for sensitive systems

India’s DPDP Act

India’s Digital Personal Data Protection Act, 2023 creates obligations for processing digital personal data in India. European companies with India employees, contractors, customers or vendors should account for Indian privacy requirements alongside GDPR.

This is especially relevant when handling employee data, background checks, payroll data, device monitoring, biometrics, health data or customer support data.

Entity setup in India

A European company may eventually need a local Indian presence.

Common structures include:

Private limited company

Most common structure for a foreign-owned operating subsidiary. Suitable for hiring, contracting, invoicing, local operations and long-term India presence.

LLP

May be suitable for certain professional or service structures, but foreign investment rules and commercial requirements need review.

Branch office

A foreign company may establish a branch office for permitted activities, subject to RBI/FEMA rules. It is not as flexible as a subsidiary.

Liaison office

A liaison office can generally represent the foreign parent and undertake limited liaison activities. It should not carry on commercial or revenue-generating business.

Project office

Used for specific projects in India, commonly infrastructure or contract-linked projects, subject to conditions.

When to move from EOR to entity

Consider entity setup when:

• India headcount is becoming material
• You need a local office
• You need local customer contracts
• You want to invoice Indian clients
• You are hiring senior leadership in India
• Investors or customers expect direct control
• You need long-term benefits, ESOPs or internal HR systems
• India is no longer an experiment

A common path is:

Contractor → EOR → Indian subsidiary

Common Europe-to-India hiring mistakes

Mistake 1: Calling employees “contractors”

If the person works like an employee, structure them as an employee.

Mistake 2: Assuming an EOR removes PE risk

EOR solves employment administration. It does not automatically solve corporate tax presence.

Mistake 3: Ignoring state-level compliance

India is not one uniform payroll jurisdiction. State-level labour and professional tax rules matter.

Mistake 4: Copy-pasting a European employment contract

Indian employment contracts need local clauses on probation, notice, confidentiality, IP, leave, termination, restrictive covenants and statutory benefits.

Mistake 5: Giving India staff commercial authority too early

Sales or country-manager roles can create tax and regulatory exposure if not structured carefully.

Mistake 6: Forgetting GDPR transfer mechanics

If India-based staff access EU personal data, you need GDPR transfer documentation and security controls.

Mistake 7: Weak IP assignment

Make sure employment, EOR or contractor contracts clearly assign IP to the right company.

Mistake 8: No exit process

India exits require attention to notice, final settlement, device return, access removal, confidentiality and statutory documentation.

Practical decision framework

Use this framework before hiring in India.

Step 1: What is the role?

• Project-based specialist: contractor may work
• Full-time managed worker: EOR or entity
• Sales/contracting leader: tax review before hiring
• Local operations head: likely entity planning needed

Step 2: How long is the plan?

• Less than 3 months: contractor
• 3–18 months testing: EOR
• Long-term strategic team: entity

Step 3: How many people?

• 1–5: EOR usually easiest
• 5–20: EOR or entity depending on strategic importance
• 20+: start entity analysis

Step 4: Will they touch EU personal data?

If yes, implement GDPR transfer controls before access is granted.

Step 5: Will they generate revenue or bind the company?

If yes, assess PE and entity risk.

Step 6: Do you need local invoicing?

If yes, an Indian entity may be required.

Recommended hiring model for European SMEs

For most European SMEs, the cleanest approach is:

Phase 1: First hire or pilot

Use EOR for employees. Use contractors only for genuine independent projects.

Phase 2: Build operating rhythm

Standardise:

• Employment documentation
• Payroll calendar
• Data access controls
• IP and confidentiality terms
• Performance management
• Security onboarding
• PE guardrails

Phase 3: Scale

When the India team becomes permanent and strategic, set up a private limited company and migrate from EOR to local payroll.

India hiring compliance checklist

Before hiring in India, confirm:

• Correct hiring model selected
• Employment or contractor agreement reviewed for India
• IP assignment included
• Confidentiality and data clauses included
• Payroll provider or EOR selected
• PF/ESI/professional tax applicability checked
• State-specific leave and holidays mapped
• GDPR SCCs and DPA completed
• Transfer Impact Assessment completed if EU personal data is accessed
• PE risk reviewed for commercial roles
• Device and access management process ready
• Exit process documented
• Entity roadmap agreed if scaling

How SetMyCompany helps

SetMyCompany helps European companies hire, structure and scale India teams without creating avoidable tax, payroll, privacy or employment risk.

We can support with:

• India hiring strategy
• EOR vs entity decision-making
• Payroll and compliance structuring
• Contractor risk review
• Permanent establishment risk review
• GDPR and India DPDP alignment
• Entity setup planning
• Vendor/EOR review
• India expansion operating model

CTA:

Planning to hire in India? Book a consultation to choose the safest structure before your first offer letter, contractor agreement or India payroll run.

FAQs

Can a European company hire employees directly in India without an Indian entity?

Usually, direct employment is difficult without a local employer setup. Most companies use an EOR initially or incorporate an Indian entity.

Is an EOR legal in India?

EOR arrangements are commonly used in India, but the structure, contracts, payroll compliance and role design matter. Choose a provider that can demonstrate local employment compliance.

Does an EOR prevent permanent establishment in India?

Not automatically. EOR reduces employment compliance burden, but PE depends on the actual business activities performed in India, especially sales, contracting and management authority.

Can we hire Indian workers as contractors?

Yes, if they are genuinely independent contractors. If they work full-time under your control, contractor classification becomes risky.

Do Indian employees need Provident Fund?

PF applicability depends on the employer establishment, employee eligibility and wage structure. EOR or payroll providers should confirm applicability before onboarding.

Is India adequate under GDPR?

India is not currently listed by the European Commission as an adequacy jurisdiction. EU/EEA personal data transfers to India generally require safeguards such as SCCs.

Do we need SCCs for India employees?

If India-based workers access EU/EEA personal data and the transfer falls under GDPR cross-border transfer rules, SCCs and related transfer documentation may be needed.

When should we set up an Indian entity?

Consider an entity when India becomes strategic, headcount grows, local revenue is expected, commercial authority sits in India, or you need long-term operational control.

What is the biggest mistake European companies make in India?

The biggest mistake is treating full-time India workers as contractors while giving them employee-like responsibilities and access.

What is the best first step?

Map the role, data access and commercial authority. Then decide between contractor, EOR or entity before making the offer.

Sources and reference links

• European Commission — Adequacy decisions: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
• European Commission — Standard Contractual Clauses: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
• GDPR, Regulation (EU) 2016/679: https://eur-lex.europa.eu/eli/reg/2016/679/oj
• India Ministry of Electronics and IT — DPDP Act resources: https://www.meity.gov.in/data-protection-framework
• Digital Personal Data Protection Act, 2023: https://www.meity.gov.in/
• Ministry of Labour & Employment — Labour Codes: https://labour.gov.in/labour-codes
• Employees’ Provident Fund Organisation: https://www.epfindia.gov.in/
• Employees’ State Insurance Corporation: https://www.esic.gov.in/
• Ministry of Corporate Affairs — Companies Act resources: https://www.mca.gov.in/content/mca/global/en/acts-rules/ebooks/acts.html
• Reserve Bank of India — FEMA / foreign exchange FAQs: https://www.rbi.org.in/Scripts/FAQView.aspx
• Income Tax Department — International taxation / DTAA resources: https://www.incometax.gov.in/
• OECD Model Tax Convention reference: https://www.oecd.org/tax/treaties/model-tax-convention-on-income-and-on-capital-condensed-version-20745419.htm