Cyprus & OECD Pillar Two in 2026: How the 15% Top-Up Tax Affects SaaS, IP Box and Holding Structures

What Pillar Two Actually Is

The OECD's Pillar Two GloBE rules impose a 15% effective minimum tax on multinational groups whose consolidated revenue exceeds €750m in at least two of the last four financial years. Where a group's effective tax rate (ETR) in a given jurisdiction falls below 15%, a top-up is owed somewhere in the chain — either by the host country (Qualified Domestic Minimum Top-up Tax / QDMTT), the parent (Income Inclusion Rule / IIR), or any other group company (Undertaxed Profits Rule / UTPR).

Cyprus's 2026 Implementation

Cyprus enacted Pillar Two through the EU Minimum Tax Directive (Directive (EU) 2022/2523) with effect from 1 January 2024 for fiscal years beginning on or after 31 December 2023. Cyprus operates a QDMTT, meaning if a Cyprus subsidiary of a €750m+ group has an ETR below 15%, Cyprus collects the top-up rather than letting it flow to the parent jurisdiction.

• Headline CIT raised from 12.5% to 15% from 1 January 2026 — partly to bring most cases naturally within the 15% safe harbour
• QDMTT applies to in-scope groups operating in Cyprus
• IIR applies to Cyprus parent companies of in-scope groups
• UTPR applies as a backstop to other Cyprus group entities of in-scope groups

What This Does to the IP Box

The IP Box mechanics are unchanged: 80% deduction on net qualifying IP income, leaving an effective rate of approximately 3% (20% × 15%). For groups under €750m, that is the rate you actually pay. For groups in scope of Pillar Two, the IP Box's discount can push the Cyprus jurisdictional ETR below 15%, in which case QDMTT will collect the difference up to the 15% floor — neutralising the IP Box advantage at group level.

The IP Box still has value for in-scope groups in some scenarios — e.g. where IP-heavy income overlaps with Substance-Based Income Exclusion carve-outs (SBIE), or where the group's blended Cyprus ETR remains above 15%. Modelling matters.

Substance-Based Income Exclusion (SBIE)

Pillar Two carves out a portion of GloBE income equal to a percentage of payroll and tangible-asset cost in the jurisdiction. The carve-out is 9.8% of payroll and 7.8% of tangible assets in 2026, declining over time to 5% / 5% by 2033. For Cyprus operations with real Cyprus-resident employees and a real Cyprus office, the SBIE meaningfully reduces the GloBE base — making Cyprus substance more valuable than ever for in-scope groups.

Safe Harbours That Avoid the Compliance

• Transitional CbCR safe harbour: if the jurisdictional ETR per the Country-by-Country Report exceeds 15% (in 2024–2025) or 16% (2026), no top-up tax computation is required for that jurisdiction in that year
• De minimis safe harbour: jurisdictions where revenue < €10m and profit < €1m are excluded from full GloBE calculations
• Routine profits safe harbour: jurisdictional profit below the SBIE carve-out is treated as zero excess profit

Practical Impact on Common Cyprus Structures

What Should In-Scope Groups Do Now

1. 1Map the group's consolidated-revenue history — confirm Pillar Two applicability under the €750m / two-of-four-years test
2. 2Run a 2026 jurisdictional ETR calculation for each Cyprus entity, with and without IP Box
3. 3Test eligibility for the transitional CbCR safe harbour for 2026
4. 4Quantify SBIE carve-out using actual Cyprus payroll and tangible-asset cost
5. 5Decide whether IP Box continues to add net value at group level once QDMTT is layered on, or whether other reliefs (e.g. NID + simple 15% CIT) are now equivalent

1. What Pillar Two does (one paragraph)

The OECD's Pillar Two GloBE Rules (Global Anti-Base Erosion) introduce a 15% minimum effective tax rate per jurisdiction for MNE groups. Implemented via three interlocking mechanisms: (a) Income Inclusion Rule (IIR) — parent jurisdiction tops up undertaxed subsidiary income; (b) Undertaxed Payment Rule (UTPR) — if no IIR jurisdiction applies, other group jurisdictions top up; (c) Qualified Domestic Minimum Top-up Tax (QDMTT) — each member state can collect the top-up itself before others do. EU member states adopted Pillar Two via the EU Minimum Taxation Directive (EU 2022/2523), transposed in Cyprus by Law 165(I)/2024 effective 1 January 2025.

2. The €750M threshold — who is in scope

An MNE group is in scope of Pillar Two for a given financial year if its consolidated revenue (per IFRS / equivalent GAAP) is ≥ €750M in at least 2 of the prior 4 financial years. The test runs at the ULTIMATE PARENT ENTITY (UPE) level, not at each subsidiary.

Practical implication: a Cyprus-incorporated SaaS doing €5M ARR is NOT in scope regardless of how international its structure is. A Cyprus-incorporated subsidiary of a US-listed MNE (e.g., Google, Meta, Apple, NVIDIA) IS in scope because the UPE's consolidated revenue clearly exceeds €750M.

3. Where Cyprus IP Box sits under Pillar Two

Pillar Two assesses the EFFECTIVE TAX RATE (ETR) per jurisdiction — covered taxes paid / qualifying income. A Cyprus entity using IP Box pays effective approximately 3% on qualifying IP profit. For an in-scope MNE this triggers a TOP-UP UNDER IIR / QDMTT to bring the ETR up to 15%.

Counterintuitive consequence: Cyprus IP Box is most valuable for SUB-THRESHOLD founder-led companies (under €750M consolidated revenue). For large MNEs, the Pillar Two top-up neutralises most of the IP Box benefit, so the structuring play shifts toward operating-substance optimisation and DTT efficiency rather than rate-shopping.

4. QDMTT — Cyprus's own top-up

Cyprus transposed Pillar Two with a Qualified Domestic Minimum Top-up Tax (QDMTT) effective 1 January 2025. This means: if a Cyprus entity's ETR is below 15% (e.g., due to IP Box deduction), the Cyprus Tax Department collects the top-up DIRECTLY before any other jurisdiction's IIR / UTPR can apply.

This is the policy-design winner for Cyprus: the additional revenue stays in Cyprus rather than flowing to the parent jurisdiction's IIR. For in-scope MNEs the practical Cyprus top-up calculation is on the QDMTT Cyprus return line — and it's a meaningful additional cash-tax line for IP-Box-using MNEs.

5. Safe harbours (transitional 2024-2026)

• Country-by-Country Reporting (CbCR) safe harbour — entities whose CbCR shows revenue ≤ €10M AND profit-before-tax ≤ €1M in the jurisdiction are effectively excluded.
• Simplified ETR test — if jurisdiction-level CbCR ETR is ≥ 15% in 2024-2025 (rising to 16% in 2026), no top-up required.
• Routine profit test — if jurisdiction profit ≤ deemed routine return (5% × payroll + 5% × tangibles), no top-up.
• Transitional safe harbour expires after 2026; from 2027 the full GloBE rules apply without these reliefs.

6. Practical checklist for in-scope groups

1. 1Determine if any of your group years (last 4) breach €750M consolidated revenue.
2. 2If in scope: identify your Cyprus entity's ETR using the GloBE definition (covered taxes / qualifying income).
3. 3If ETR < 15%: compute the top-up; file the Cyprus QDMTT return.
4. 4Maintain documentation: GloBE Information Return (GIR), per-entity ETR calculation, covered-taxes mapping.
5. 5Coordinate with the group's primary GloBE-compliance jurisdiction (typically the UPE jurisdiction).

Official verification starting points

Cyprus Tax Department documents and Cyprus Tax Reform 2026 material publish the controlling material for this topic. Check the current law, form, circular or portal instructions before acting; this article is general information and the live official material prevails.

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.