Selling Digital Services Abroad: Indirect Tax and Cross-border Data
VAT/GST registration, data protection and payments for SaaS, AI applications and online services sold overseas.
Updated 2026-11-12
Scope:Companies providing software, platforms or online services to overseas customers.
Overview
Digital services can be sold without a local entity, but many countries require non-resident digital suppliers to register for VAT / GST, and regulate cross-border transfers of personal data.
Key concepts
- B2B vs B2C: business customers often self-account (reverse charge); for consumers, non-resident suppliers frequently must register.
- Thresholds: some countries set turnover thresholds for non-resident suppliers.
- Personal data protection laws: rules on collecting, using and transferring personal data.
- Data localisation: certain sectors or data types may need local storage.
Steps
- Split B2B and B2C revenue by country.
- Check each country’s registration rules and thresholds for foreign digital services.
- Map data types, storage locations and cross-border transfers.
- Update privacy policy, terms and data processing agreements.
- Review payment channels, currencies and conversion.
- For products involving encryption or AI models, check export controls.
Documents
- Revenue by country
- Data inventory and data-flow map
- Privacy policy and terms
Common limitations
- Regulated services (finance, health, telecoms) may need local licences.
- Some countries restrict cross-border transfer of certain data types.
Practical notes
Not tax or legal advice. Indirect tax rates are in Compare · Taxation.
Official resources
Tax authority links are in each handbook’s Taxation and Official Resources chapters.