Annual compliance cyprus is a structured, recurring process that every Cyprus-registered company must complete each year to remain in good legal standing. The obligations span corporate filings with the Registrar of Companies, tax submissions to the Tax Department, social insurance contributions, and audited financial statements. Missing a deadline triggers automatic penalties, and persistent non-compliance can result in the company being struck off the register. This guide covers every major obligation, the responsible authorities, realistic timelines, cost levels, and the practical traps that foreign-owned companies most commonly fall into.
Annual compliance in Cyprus is not a single filing - it is a calendar of overlapping obligations governed by several distinct legal frameworks. The primary statutes are the Companies Law, Cap. 113, which governs corporate filings and the Registrar of Companies, and the Income Tax Law, which governs corporate tax returns and provisional tax payments. The Assessment and Collection of Taxes Law sets out the penalty regime for late submissions. The Value Added Tax Law and the Special Defence Contribution Law add further recurring obligations for companies that meet the relevant thresholds.
In practice, a Cyprus company must manage at least five separate compliance tracks simultaneously: statutory corporate filings, audited financial statements, corporate income tax, VAT (where registered), and employer-related social insurance and payroll reporting. Each track has its own authority, its own deadlines, and its own penalty structure. Foreign founders who treat Cyprus compliance as a single annual event - rather than a rolling calendar - routinely miss interim deadlines and accumulate avoidable penalties.
The competent authorities involved are the Registrar of Companies and Official Receiver (for corporate filings and the annual levy), the Tax Department of the Ministry of Finance (for income tax, special defence contribution, and PAYE), the VAT Service (for VAT returns and payments), and the Social Insurance Services (for employer contributions). Each authority operates independently, and a clearance from one does not imply clearance from another.
Every Cyprus company must submit an Annual Return (HE32) to the Registrar of Companies. The Annual Return is a snapshot of the company';s registered details - directors, shareholders, registered office, and share capital - as at the anniversary of incorporation. It must be filed within 28 days of the anniversary date each year. Late filing attracts a fixed penalty per day of delay, and the Registrar publishes a list of companies with outstanding returns, which can damage commercial credibility.
Alongside the Annual Return, each company must pay the Annual Levy of €350. This levy was introduced to fund the Registrar';s operations and applies to virtually all active companies. Payment is due by 30 June each year, regardless of the company';s anniversary date. A company that fails to pay by the deadline faces a surcharge of 10% if paid within two months, rising to 30% thereafter. Companies that remain in arrears for an extended period are subject to striking off.
A non-obvious requirement that many foreign-owned companies overlook is the obligation to maintain and update the Register of Ultimate Beneficial Owners (UBO Register). Cyprus implemented the UBO Register under the EU';s Anti-Money Laundering Directives, and companies must ensure that the register held at the Registrar of Companies reflects the current beneficial ownership structure. Changes must be reported promptly - not just at the annual filing cycle. Failure to maintain an accurate UBO register carries separate penalties and can complicate banking relationships.
In practice, founders should consider appointing a local company secretary who tracks anniversary dates and levy deadlines independently of the tax calendar. Many small companies managed from abroad miss the Annual Return window simply because no one is monitoring the anniversary date.
Cyprus law requires every company incorporated under Cap. 113 to prepare annual financial statements in accordance with International Financial Reporting Standards (IFRS) or, for smaller entities, Cyprus GAAP. The financial statements must be audited by a registered auditor who is a member of the Institute of Certified Public Accountants of Cyprus (ICPAC). There is no exemption from the audit requirement for small companies - this is a common misconception among founders coming from jurisdictions such as the United Kingdom or Ireland, where small-company audit exemptions exist.
The audited financial statements must be approved by the board of directors and then presented to shareholders at the Annual General Meeting (AGM). The AGM must be held within 18 months of incorporation and thereafter within 15 months of the previous AGM. The approved financial statements are then attached to the Annual Return filed with the Registrar. In practice, the audit process takes several weeks, so companies should begin gathering accounting records well before the filing deadline.
A common mistake is treating bookkeeping as a year-end exercise. Cyprus auditors require properly maintained ledgers, bank reconciliations, and supporting documentation throughout the year. Companies that hand over a disorganised set of bank statements and invoices at year-end face significantly higher professional fees and delays that can push the entire compliance calendar back by months.
The cost of audit and accounting services varies considerably by company size and complexity. For a straightforward holding or trading company with limited transactions, professional fees typically start from the low thousands of EUR annually. Companies with significant transaction volumes, multiple currencies, or complex group structures should budget materially more. These fees are in addition to the costs of tax filing, which are usually billed separately.
Cyprus imposes a corporate income tax rate on company profits, and the tax compliance cycle involves several distinct submissions and payments throughout the year. The main obligations under the Income Tax Law are the provisional tax declaration, the final tax return, and the payment of any balance due.
Provisional tax is a self-assessment mechanism. Companies must estimate their taxable profit for the current year and pay provisional tax in two equal instalments - the first by 31 July and the second by 31 December. The estimate must be reasonable: if the final assessed profit exceeds the provisional estimate by more than a specified threshold, an additional charge applies on the underpaid amount. Many companies, particularly those with variable revenues, underestimate provisional tax and face this charge without realising it until the final assessment.
The final corporate tax return (IR4) must be submitted electronically via the TAXISnet portal of the Tax Department. The deadline for submission is 31 March of the year following the tax year, though this deadline has historically been extended in practice. Companies should not rely on extensions being granted and should target the statutory deadline. Any balance of tax due after crediting provisional tax payments must be settled by 1 August of the year following the tax year.
Special Defence Contribution (SDC) is a separate levy applicable to Cyprus tax-resident companies on passive income - primarily dividends received from non-Cyprus companies (in certain circumstances), interest income, and rental income. The SDC return and payment deadlines run on a different schedule from the income tax return. Companies with significant passive income streams must track SDC obligations separately.
A practical scenario: a Cyprus holding company that receives dividend income from a foreign subsidiary must assess whether SDC applies, calculate the amount correctly, and file the relevant return on time. Many founders assume that the income tax return covers all tax obligations, and they are surprised to receive an SDC assessment months later.
If you are uncertain whether your company';s income streams trigger SDC or other secondary tax obligations, contact info@vlolawfirm.com. We can assist with documents and filings and help structure your compliance calendar to avoid gaps.
VAT registration in Cyprus is mandatory for any company whose taxable turnover exceeds the registration threshold set by the VAT Law. Companies engaged in B2B cross-border services within the EU may also be required to register regardless of turnover, due to the place-of-supply rules under the EU VAT Directive as implemented in Cyprus law. Voluntary registration is available for companies below the threshold that wish to recover input VAT.
Once registered, a company must file VAT returns on a quarterly basis. Each return covers a three-month period, and both the return and any VAT due must be submitted and paid within 40 days of the end of the quarter. Late payment attracts interest and a fixed penalty. The VAT Service conducts periodic audits, and companies with inconsistent or incomplete records face additional assessments.
Companies engaged in intra-EU trade in goods must also submit VIES (VAT Information Exchange System) declarations on a monthly basis, reporting the value of goods and services supplied to VAT-registered customers in other EU member states. VIES declarations are separate from the VAT return and have their own submission deadline. Missing VIES filings is a common oversight for companies that begin cross-border trading after initial registration.
A practical scenario: a Cyprus technology company that provides software services to business clients across the EU must register for VAT, file quarterly returns, and submit monthly VIES declarations. If it also sells to non-business consumers in other EU countries above the EU-wide distance-selling threshold, it may need to register for the EU';s One Stop Shop (OSS) scheme. Each of these obligations has a separate deadline and a separate penalty for non-compliance.
Cyprus companies that employ staff - including directors who receive a salary - must register as employers with both the Tax Department and the Social Insurance Services. Employer compliance involves monthly payroll processing, deduction and remittance of income tax under the Pay As You Earn (PAYE) system, and payment of social insurance contributions for both the employer and the employee.
PAYE must be remitted to the Tax Department by the end of the month following the month of payment. Social insurance contributions - covering social insurance, general healthcare (GESY), redundancy fund, and industrial training fund - must be paid to the Social Insurance Services on a quarterly basis. The employer';s share of social insurance contributions represents a meaningful addition to gross salary costs, and many foreign founders underestimate the total employer cost when budgeting for Cyprus-based staff.
At the end of each tax year, the employer must submit an annual employer';s return (IR7) to the Tax Department, listing all employees, their gross emoluments, and the tax and contributions deducted. The IR7 deadline is 31 May of the following year. Errors or omissions in the IR7 can trigger a PAYE audit, which may result in additional assessments and penalties.
A non-obvious requirement is the obligation to register with GESY - the General Healthcare System - for all employees and self-employed directors. GESY contributions are calculated separately from social insurance and are remitted to the Health Insurance Organisation (HIO). Companies that overlook GESY registration face back-contributions plus interest when the oversight is discovered.
Many underestimate the administrative burden of employer compliance in Cyprus, particularly for small companies with only one or two employees. The combination of monthly PAYE, quarterly social insurance, and annual IR7 filings means that payroll compliance alone requires consistent attention throughout the year.
What happens if a Cyprus company misses the Annual Return deadline?
The Registrar of Companies imposes a daily penalty for each day the Annual Return remains outstanding after the 28-day filing window. Persistent non-filing leads to the company being listed as non-compliant on the Registrar';s public records, which can affect banking relationships and the ability to obtain certificates of good standing. If the company remains in default for an extended period, the Registrar may initiate striking-off proceedings under Cap. 113. Reinstating a struck-off company is possible but involves a court application, additional fees, and significant delay - making prevention far more cost-effective than cure.
How long does the annual compliance cycle take, and what does it cost overall?
The compliance calendar runs throughout the entire year, with key deadlines in January, March, June, July, August, and December. The audit alone typically takes four to eight weeks once the auditor has complete records, so companies should begin the process in the first quarter of the year for the prior financial year. Total professional fees for a straightforward Cyprus company - covering audit, accounting, tax filing, and corporate secretarial services - generally start from the low thousands of EUR annually and rise with complexity. State charges, including the Annual Levy, add a fixed amount on top. Companies with employees, VAT obligations, and active trading should budget materially more than a dormant holding structure.
Can a Cyprus company defer or reduce its compliance obligations if it has no trading activity?
A dormant company still has most statutory obligations. It must pay the Annual Levy, file the Annual Return, maintain the UBO register, and prepare audited financial statements - even if those statements show nil activity. The audit requirement under Cap. 113 applies regardless of trading status. The main relief for a dormant company is that it will have no taxable income, so the income tax compliance burden is minimal. VAT deregistration is possible if the company has ceased taxable activities, which removes the quarterly VAT filing obligation. However, the corporate and audit obligations remain until the company is formally dissolved through a voluntary strike-off or liquidation process.
Annual compliance in Cyprus is a multi-track obligation that runs throughout the calendar year. Meeting every deadline - from the Annual Levy in June to provisional tax in July and December, quarterly VAT returns, monthly PAYE, and the annual audit - requires a structured compliance calendar and reliable local support. The penalties for non-compliance accumulate quickly, and some defaults are visible on public registers.
VLO Law Firms advises international clients on annual compliance in Cyprus. We can assist with corporate filings, tax return preparation, audit coordination, VAT and PAYE obligations, and UBO register maintenance. To request a consultation, contact: info@vlolawfirm.com