"Can a SaaS company actually get the 3% rate?" Yes. For a software or SaaS business, the Cyprus IP Box is one of the most valuable regimes in the EU: 80% of the qualifying profit from your software is treated as a deemed deductible expense, so only 20% is taxed at the 15% corporate rate — an effective tax rate as low as 3% on qualifying income. The asset that earns this is the copyrighted software the company develops — no patent required.
This guide is the SaaS-specific application of the regime: how it applies to subscription revenue, to software your own team builds, and to the remote development teams most software companies now run. For the full mechanics of the regime — every qualifying-asset category, the statutory formula and the schema of the law — read our Cyprus IP Box regime guide. Here we focus on what is different for a SaaS company.
Does a SaaS company qualify for the IP Box?
Yes — a SaaS company qualifies because its core asset, copyrighted software, is an expressly qualifying intangible under the Cyprus IP Box. The regime follows the OECD "modified nexus" approach (BEPS Action 5), and copyrighted software is explicitly in scope alongside patents and other legally protected, non-obvious useful intangibles. That is exactly what a SaaS platform, application, engine, API or library is in legal terms: a copyrighted work. What does not qualify is marketing-related IP — the brand, trademarks, image rights, domain names and customer lists. So the value in your product code can qualify; the value in your brand cannot.
Qualifying IP for a SaaS company is the copyrighted software it developed and earns income from — the source code and platform. The income from subscriptions and licences attributable to that software can qualify; the marketing IP behind the brand is excluded.
How the 3% effective rate works for software profit
The maths is simple once you see it: take your qualifying IP profit (income from the software, less the direct costs of earning it), deduct 80% as a notional expense, and tax the remaining 20% at the 15% corporate rate. The effective rate is 20% × 15% = 3%.
| Step | Amount |
|---|---|
| Qualifying IP profit | €500,000 |
| 80% deemed deduction | −€400,000 |
| Taxable portion (20%) | €100,000 |
| Corporate tax at 15% | €15,000 |
| Effective rate on qualifying profit | 3% |
Before the 2026 reform raised the corporate rate from 12.5% to 15%, the effective IP Box rate was 2.5%; it is now 3%. Either way it remains among the lowest effective rates on software profit in the EU. The 3% applies only to qualifying profit — the rest of the company's income is taxed at the ordinary 15% (see corporate tax in Cyprus 2026).
Which part of SaaS subscription revenue qualifies?
Only the part of your subscription revenue attributable to the qualifying software — the embedded IP income — qualifies; routine service elements are apportioned out. This is the single biggest difference between a pure software licence and a SaaS subscription, because a monthly SaaS fee usually bundles several things together. A defensible claim separates the IP component from the rest.
| Element of a SaaS subscription | IP Box treatment |
|---|---|
| Access to / use of the proprietary software (the platform itself) | Qualifying embedded IP income |
| Hosting, bandwidth, infrastructure resold to the customer | Routine — generally non-qualifying |
| Customer support, onboarding, success management | Routine service — non-qualifying |
| Bespoke implementation / consulting | Service income — non-qualifying |
| Third-party software resold within the bundle | Not the company's own IP — non-qualifying |
For a lean, automated SaaS product the IP component is often the large majority of the fee; for a high-touch enterprise product with heavy implementation and support, far less. The apportionment must be reasonable, consistent and documented — this is exactly where claims are tested on review.
The nexus fraction — you must do the development
The nexus fraction scales how much of your qualifying profit benefits, in proportion to how much of the R&D you actually performed — which is why the regime is OECD-compliant rather than a "patent box" giveaway. In plain terms:
Nexus fraction ≈ (own R&D + R&D outsourced to unrelated parties, with a 30% uplift, capped) ÷ total R&D cost including acquisition and related-party outsourcing.
So in-house development by the Cyprus company's own team — and development bought from independent third-party contractors — pushes the nexus fraction up, toward the full benefit. Buying the finished software in, or outsourcing development to a related company (a group sister entity), pushes it down. A SaaS company that builds its product with its own Cyprus team will typically sit near the top of the range; one that licenses in code or develops through an offshore affiliate qualifies for much less.
Because the benefit tracks the R&D you perform, a credible claim needs real development substance in Cyprus — developers, technical decision-making and costs — not merely legal ownership of the code. The same substance underpins the company's Cyprus tax residency. See economic substance in Cyprus.
Remote dev teams: where they sit changes the answer
A remote development team can preserve a high nexus fraction — but only if it is structured as the Cyprus company's own R&D rather than related-party outsourcing. Most modern SaaS companies do not have all their engineers in one office, and how that team is contracted directly affects the nexus fraction:
- Developers employed by the Cyprus company (including remote employees) — counts as the company's own qualifying R&D. Strongest position.
- Independent third-party contractors developing for the Cyprus company — qualifying R&D outsourced to unrelated parties, and even benefits from the 30% uplift.
- A related group company developing the code (e.g. an offshore dev subsidiary that then licenses to Cyprus) — related-party outsourcing, which reduces the nexus fraction and dilutes the benefit.
The intra-group dimension also engages Cyprus transfer pricing: charges for development services between connected companies must be at arm's length and properly documented. The practical lesson is that the legal and contractual home of the engineering effort — not where individual developers happen to log in from — is what shapes the nexus fraction.
A frequent mistake is the founder who incorporates in Cyprus for the headline 3% but keeps the engineering team in an offshore company that licenses the finished product to the Cyprus entity. That arrangement is related-party outsourcing: the development cost falls into the denominator of the nexus fraction but not the favoured numerator, so the qualifying share — and the benefit — collapses. The fix is structural: bring the development relationship into the Cyprus company, whether through direct employment of remote engineers or arm's-length contracts with genuinely independent providers, so that the spend lands in the numerator.
Working out qualifying profit for a SaaS business
Qualifying IP profit is the qualifying embedded IP income from the software minus the direct expenditure incurred to earn it — development costs, amortisation and directly attributable expenses — with the nexus fraction then applied. For a single-product SaaS company this is relatively clean. For a company with several products, mixed qualifying and non-qualifying revenue, or heavily bundled subscriptions, both the income side (which revenue is embedded IP income) and the cost side (which costs are direct) must be allocated carefully.
A Cyprus SaaS company earns €1,000,000 of subscription revenue. Apportionment shows 80% (€800,000) is embedded IP income from its own platform; the rest is hosting and support. Direct costs attributable to the software are €300,000, leaving qualifying profit of €500,000. The product was built in-house and by unrelated contractors, giving a nexus fraction of 95%, so €475,000 qualifies. The 80% deduction (€380,000) leaves €95,000 taxed at 15% = €14,250 — an effective rate of about 2.85% on the qualifying profit. The non-qualifying €200,000 of service revenue is taxed normally at 15%.
This allocation — embedded IP income, direct costs and the nexus calculation — is where claims succeed or fail on review. It should be prepared contemporaneously with a nexus tracking system and proper books, not reconstructed years later. In practice a SaaS company should be able to show, per product and per year, the gross subscription revenue, the apportionment basis used to isolate embedded IP income, the direct development and amortisation costs deducted, and the running tally of own versus outsourced R&D that drives the nexus fraction. Where a product is sold across several plans or tiers, the apportionment should be applied consistently rather than reverse-engineered to maximise the qualifying figure.
One further point specific to fast-growing software companies: early-stage losses. If a SaaS product is loss-making in its first years — heavy development spend, little revenue — there is no qualifying profit yet, but the costs still accumulate in the nexus fraction. Capturing that R&D spend accurately from day one matters, because it sets the qualifying share for the profitable years that follow. Companies that only start tracking once they turn profitable often find the historic data hard to reconstruct.
Combining the SaaS IP Box with the wider Cyprus regime
The IP Box sits inside the broader Cyprus corporate framework: a 15% headline rate, the participation exemption, no withholding tax on most outbound payments, and 60+ double-tax treaties. A common SaaS structure is a single Cyprus company that owns and develops the platform — claiming the IP Box on the embedded IP income in its subscriptions — while its service revenue and other income are taxed at the ordinary rate. The cleaner the company keeps its substance, books and nexus records, the more robust the 3% claim.
It is worth being realistic about what the regime is not. The IP Box does not reduce the tax on a company's service revenue, on resold third-party software, or on infrastructure passed through to customers — only on the embedded IP income from the company's own code. Nor does it remove the need for an annual audit, proper books, VAT compliance and the rest of a Cyprus company's obligations. And because the nexus fraction is recalculated by reference to cumulative R&D spend, a SaaS company that later acquires a competitor's codebase or shifts development to a related party can see its qualifying share fall in future years. Treating the IP Box as a one-off election rather than an ongoing computation is a common error.
Getting it right
The Cyprus IP Box rewards SaaS companies that genuinely build their product in Cyprus and document the claim properly — qualifying-asset status, the subscription-revenue apportionment, direct costs, and the nexus calculation. Done well, it brings the effective rate on your core software profit to around 3% while keeping full EU substance; done casually, it invites challenge.
If you run a SaaS or software business and want to assess whether the IP Box fits — and structure your dev team and revenue apportionment defensibly — get in touch. Our IP Box service handles eligibility, the computation, the nexus tracking and a documented defence file.