Transfer pricing for small Cyprus companies: thresholds, the SIT, and safe harbours

“Transfer pricing” sounds like a multinational’s problem — armies of economists arguing about where Apple books its margin. Then your accountant asks whether the loan you made to your own company is “at arm’s length,” and you discover that Cyprus TP rules have applied to every company with related-party transactions since 2022, with a filing that has no minimum threshold at all.

The good news: for a small company the rules are almost entirely navigable once you separate the three layers — the disclosure everyone files, the documentation only larger transactions trigger, and the safe harbours built specifically for companies below the thresholds. Here’s each layer, with the 2026 numbers.

When are you even in scope?

The rules bite on controlled transactions — dealings between related parties, with relatedness generally set at a 25% shareholding/control link. For founder-run companies the classic triggers are mundane:

• You lend money to your company, or it lends to you or a sister company.
• Your Cyprus company pays a management or service fee to your other company abroad.
• IP sits in one entity and is licensed to another.
• Goods or services flow between two companies you control.

A single company with a single unrelated client and no intra-group dealings has no TP life at all. The moment a second related entity — or a director-shareholder loan — enters the picture, layer one applies. (From tax year 2026 the net widens slightly: persons controlling 50%+ of board voting rights count as connected even without a shareholding.)

Layer 1: the SIT — everyone files it

The Summary Information Table is an annual disclosure of your intra-group dealings: each related counterparty, their jurisdiction and tax ID, and the aggregate value per category (goods, services, financing, royalties/IP, other). Two facts founders consistently get wrong:

• There is no de-minimis. A €10,000 director loan is disclosable. If the company had any controlled transactions in the year, the SIT is due — size is irrelevant.
• It travels with the tax return. The SIT deadline is the TD4 deadline — which means the 2024 SIT is due by 30 November 2026 under the current extension. It’s filed electronically through the Tax For All portal.

Missing it costs €500 — the cheapest penalty in this article, and the most commonly incurred, usually because nobody told the founder the form existed.

Layer 2: the Local File — only above the thresholds

Full OECD-style documentation (a Cyprus Local File) is required only when your controlled transactions exceed a threshold — measured per category, per tax year, on aggregate arm’s-length values. For financing, the test looks at principal plus accrued interest at the year’s highest balance.

Most genuinely small companies never cross these lines. If you do: the Local File must be ready by the TD4 deadline, reviewed for quality by a holder of an ICPAC practising certificate (in practice, usually your auditor), and handed to the Tax Department within 60 days if they ask. The lateness tiers are where the numbers turn serious: €5,000 if produced on days 61–90 after a request, €10,000 for days 91–120, €20,000 beyond that. (The Master File exists too, but only for parents of €750M+ groups — not your problem.)

Layer 3: below the thresholds — the simplification regime

Being under the thresholds doesn’t mean pricing is a free-for-all: arm’s length still applies, and Circular 6/2023 asks even exempt companies to keep minimum documentation — a short functional analysis and support for the pricing method, including benchmarking where no safe harbour is elected — producible within 60 days of a request. In exchange, it offers something useful: optional safe-harbour margins the Tax Department accepts without a benchmarking fight:

• Intra-group lending funded by debt: a minimum 2.5% pre-tax net return on the average receivable.
• Lending funded by equity: minimum interest of the borrower’s country 10-year government bond yield + 3.5%.
• Borrowing for business purposes: deductible cost capped at the Cyprus 10-year bond yield + 1.5%.
• Low-value-adding services: cost plus at least 5% when provided (at most 5% when received).

What this means in practice for a founder

For a company with no related-party dealings: nothing — confirm annually that’s still true. For the typical founder with a director loan or an intra-group service fee: the SIT every year with the TD4, defensible pricing (safe harbours where they fit), and a one-page memo on why the price is what it is. The pattern across every layer is the same one that runs through Cyprus compliance generally: the fines punish silence, not smallness — disclosure is cheap, discovery is not.