Quick answer

A technology BPO may generally operate in the Philippines through an SEC-registered domestic stock corporation, including a One Person Corporation when the sole stockholder is an eligible natural person, trust, or estate. A standard software-development, customer-support, data-processing, or back-office BPO does not need a general “BPO license,” but it must complete SEC incorporation, BIR tax registration, local business permitting, employer registrations, labor and occupational-safety compliance, and data-privacy requirements before operating.

Foreign ownership is often allowed up to 100% for an unrestricted BPO activity, especially an export enterprise serving overseas clients. However, foreign-equity limits, minimum paid-in capital, export ratios, and special licenses depend on the company’s exact services and customers. PEZA or BOI registration is optional and separate from incorporation; it is required only if the company seeks investment incentives or falls under a specific registration rule.

Start by defining the actual service

“Technology BPO” is a commercial description, not a statutory business category. Before filing anything, list every activity the Philippine company will perform, such as:

Software development, testing, maintenance, or technical support
Customer service, contact-center, or help-desk operations
Data encoding, analytics, content moderation, or knowledge-process outsourcing
Cloud, cybersecurity, artificial-intelligence, or managed IT services
Accounting, payroll, legal-process, healthcare, recruitment, lending, payment, telecommunications, or other regulated support

Ordinary IT and back-office services are generally not subject to a special operating license. Additional approval may be required if the company itself will provide a regulated service rather than merely supply administrative or technical support to a licensed client. Possible regulators include the Bangko Sentral ng Pilipinas for certain payment and financial activities, the SEC for lending or financing, the National Telecommunications Commission for public telecommunications services, and the relevant professional or sector regulator for regulated professional work.

Describe the primary purpose accurately in the articles of incorporation. Avoid regulated words such as “bank,” “lending,” “financing,” “insurance,” or “telecommunications” unless the company is qualified and intends to secure the corresponding authority.

Choose the legal structure

For most operating BPOs, the practical choices are:

Structure	Best suited for	Important limits
Domestic stock corporation	A Philippine subsidiary with one or more local or foreign investors	Separate legal person; subject to Philippine corporate, tax, labor, and reporting rules
One Person Corporation	A single eligible individual investor, trust, or estate	A corporation cannot be the OPC’s sole stockholder; nationality and sector restrictions still apply
Philippine branch of a foreign corporation	A foreign company that wants to operate directly rather than through a subsidiary	The foreign company remains liable; SEC license, resident agent, assigned capital, and security-deposit rules apply
Representative office	Liaison, coordination, or market support without earning Philippine income	Cannot operate a revenue-generating BPO business

A foreign corporate parent cannot use an OPC as its wholly owned subsidiary because the OPC’s single stockholder must be a natural person, trust, or estate. It can instead organize a regular domestic corporation using the number and type of incorporators permitted by the SEC system.

Under the Revised Corporation Code, an ordinary stock corporation has no general statutory minimum capital stock unless a special law applies. This does not remove the separate paid-in-capital rules for foreign-owned domestic-market enterprises.

Check foreign ownership and paid-in capital before filing

The Foreign Investments Act, as amended by Republic Act No. 11647, generally permits a non-Philippine national to own up to 100% of an enterprise unless the activity is restricted by the Constitution, another law, or the current Foreign Investment Negative List.

A conventional technology BPO is normally outside the restricted sectors in the Twelfth Regular Foreign Investment Negative List. That conclusion can change if the company will engage in mass media, a regulated profession, public telecommunications, security services, retail trade, or another listed activity.

For a foreign-owned enterprise serving the Philippine domestic market:

An enterprise with less than the equivalent of US$200,000 in paid-in equity is generally reserved to Philippine nationals.
The minimum may be reduced to US$100,000 if the enterprise:
- Involves advanced technology as determined by the Department of Science and Technology;
- Is endorsed as a startup or startup enabler under the Innovative Startup Act; or
- Employs a majority of Filipino direct employees, with at least 15 Filipino employees.

These are eligibility conditions, not post-registration aspirations. Secure any required DOST or startup endorsement and plan the qualifying employment level before relying on the lower threshold.

A foreign-owned export enterprise may generally be 100% foreign-owned if its activity is unrestricted. The Foreign Investments Act uses a 60% export-output test for this purpose and requires a foreign-owned export enterprise to register with the BOI and submit compliance reports. Do not confuse that test with the 70% export-sales threshold used for certain CREATE MORE incentives.

Do not use nominal Filipino shareholders to conceal foreign ownership or avoid capital requirements. The SEC requires beneficial-ownership disclosure, and simulated ownership arrangements can create serious corporate and anti-dummy-law exposure.

If foreign capital will be remitted, preserve bank records showing the source, amount, currency conversion, and credit to the Philippine company. Consult the servicing bank about BSP registration of the foreign investment if the investor expects to purchase foreign currency through the Philippine banking system for future dividend remittance or capital repatriation.

Decide on incentives and location before signing the final lease

SEC incorporation alone does not provide tax incentives. A qualifying project must separately apply to an investment promotion agency, commonly the BOI or PEZA.

PEZA registration is often considered by export-oriented IT-BPO companies willing to operate from a proclaimed IT park, IT building, or other eligible economic zone. BOI registration may be more suitable for projects outside an economic zone. Eligibility depends on the current Strategic Investment Priority Plan, the precise activity, location, investment, employment commitments, and export performance.

Under the CREATE MORE Act, approved registered projects may qualify for combinations of:

Income tax holiday
A 5% special corporate income tax on gross income for qualified export enterprises
Enhanced deductions
Customs-duty exemption
VAT exemption on qualifying importations
VAT zero-rating on qualifying local purchases

The package and duration are project-specific. Incentives apply only to the approved registered activity, not automatically to every receipt of the corporation.

For a project registered in an economic zone or freeport, operations are generally expected to remain within the zone. CREATE MORE permits a telecommuting or work-from-home program covering no more than 50% of the RBE’s total workforce, subject to the investment promotion agency’s rules. An ordinary non-RBE is not governed by that CREATE MORE percentage, although its telecommuting arrangements remain subject to labor, privacy, tax, and local-permit rules.

Before committing to a site:

Ask PEZA or the relevant investment promotion agency whether the building and activity qualify.
Obtain the landlord’s occupancy, zoning, and fire-safety documents.
Confirm that the lease permits BPO operations, round-the-clock access, generators, redundant internet links, call recording, signage, and required fit-out.
Make the lease or fit-out commitment conditional on permits and, where applicable, incentive approval.

Register the corporation with the SEC

1. Create the required SEC credentials

Use the SEC’s eSECURE gateway and eSPARC registration system. Corporate officers who authenticate the application must obtain the credentials required for electronic authentication.

As of the source-check date, ordinary domestic stock corporations other than specially excluded company types are processed through SEC ZERO. The system eliminates hard-copy submission for covered applications and generates the digital certificate after payment and successful authentication.

2. Reserve and clear the company name

Choose alternatives in case the preferred name is unavailable or misleadingly similar to an existing entity. A corporate name approved by the SEC is not the same as a registered trademark. Conduct a separate trademark search and consider registration with the Intellectual Property Office of the Philippines.

A corporation does not need a DTI business-name registration. The DTI business-name system is for sole proprietorships; the SEC approves corporate names.

3. Set the ownership, capital, and officers

For a regular corporation, identify the incorporators, subscribers, directors, and beneficial owners. For an OPC, identify the single stockholder, nominee, and alternate nominee.

At minimum, plan for:

A president who is a director
A treasurer who is a Philippine resident
A corporate secretary who is both a Filipino citizen and Philippine resident
The directors and other officers required by the articles, bylaws, and business needs
A principal office in the Philippines
Authorized, subscribed, and paid-in capital consistent with the actual funding plan
Complete beneficial-ownership disclosures

A single stockholder who also acts as OPC treasurer must comply with the SEC’s additional bond and undertaking requirements.

4. Complete and authenticate the application

Prepare or review the system-generated articles, bylaws where applicable, capital information, officer appointments, beneficial-ownership declarations, and nominee documents. Foreign-issued corporate records, board authorities, and powers of attorney may require apostille or consular authentication depending on their country of origin and use.

Ensure that the articles cover the intended BPO services but do not claim activities for which the company lacks authority. Use the correct Philippine Standard Industrial Classification activity.

5. Pay the assessed fees and obtain the certificate

The SEC calculates filing and name-reservation fees from the application data. Download and preserve:

Certificate of incorporation
SEC-approved articles and bylaws
Payment assessment and official proof of payment
Application summary and authentication records
Beneficial-ownership submissions

The SEC certificate creates the corporation, but it does not by itself authorize the company to invoice clients, occupy an unpermitted office, or employ staff without completing the remaining registrations.

Complete the post-incorporation organization

Hold the organizational meeting or prepare valid written corporate actions. Approve:

Officer appointments and signing authorities
Share subscriptions and issuance
Bank-account opening
Fiscal year and accounting policies
Client and intercompany service agreements
Employment and data-protection policies
Intellectual-property assignments
Applications for tax, local, employer, and investment registrations

Maintain the stock and transfer book, minutes, subscription records, accounting records, contracts, and other statutory corporate books. Use a bank account in the corporation’s exact SEC-registered name; do not mix corporate funds with a founder’s personal account.

Put written transfer-pricing support in place for services, loans, shared costs, software licenses, and management charges between the Philippine company and foreign affiliates.

Register with the BIR before starting business

The Ease of Paying Taxes Act requires a person subject to internal revenue tax to register on or before commencing business. The SEC system is integrated with the Philippine Business Hub for applications for the company TIN and employer numbers, but verify that the registrations were actually issued and activated.

If the integrated route does not complete the process, use the BIR’s NewBizReg portal or the Revenue District Office with jurisdiction over the principal office.

Complete the following before issuing an invoice:

Confirm the corporation’s TIN and Revenue District Office
Register all applicable tax types
Obtain the BIR Certificate of Registration
Register books of accounts, including computerized books where applicable
Secure authority to print invoices or approval for the intended computerized or electronic invoicing system
Register branches and additional business locations
File and pay documentary stamp tax applicable to original share issuance

The former ₱500 annual BIR registration fee has been removed. That does not eliminate registration, invoicing, books-of-account, return-filing, or payment duties.

Basic tax position

An ordinary domestic corporation is generally subject to 25% corporate income tax. A 20% rate may apply when both the statutory net-taxable-income and total-asset conditions are satisfied. A registered business enterprise may have a different regime for its approved activity.

The standard VAT rate is 12%. The BIR currently publishes a ₱3 million VAT threshold, although the Tax Code requires periodic CPI adjustment. A non-VAT business below the applicable threshold is generally subject to 3% percentage tax unless an exemption applies or it elects VAT registration.

Services supplied to an overseas client are not automatically zero-rated merely because the contract or payment is in foreign currency. Zero-rating depends on the statutory conditions, including the client’s status and place of business, the nature of the service, payment and foreign-exchange requirements, and documentary proof. Preserve the foreign client’s incorporation and address records, service agreement, invoices, bank remittances, and evidence showing where the client’s business is conducted.

Key recurring national tax deadlines include:

Quarterly corporate income tax return: within 60 days after the close of each of the first three taxable quarters
Annual corporate income tax return: by April 15 for a calendar-year taxpayer, or the 15th day of the fourth month after a fiscal-year end
Quarterly VAT or percentage-tax return: within 25 days after the close of the taxable quarter
Documentary stamp tax return: generally within 10 days after the close of the month in which the taxable document was made, signed, issued, accepted, or transferred

Withholding and information-return deadlines depend on the company’s registered tax types and transactions. Build the filing calendar directly from the BIR Certificate of Registration and current BIR forms. Books and supporting accounting records must generally be preserved for five years under the amended Tax Code.

Secure local permits for the operating site

Apply through the city or municipality’s Business Permits and Licensing Office or Business One-Stop Shop. Exact documents and charges depend on the local ordinance, building, fit-out, headcount, and activity.

Common requirements include:

Unified business-permit application
SEC certificate, articles, and proof of authority of the filer
Lease contract and landlord documents
Barangay clearance, whether separately issued or integrated into the LGU process
Zoning or locational clearance
Occupancy or certificate-of-use documentation
Fire Safety Inspection Certificate
Sanitary permit and employee health documents when locally required
Signage, mechanical, electrical, and fit-out permits where applicable
Assessment and payment of local business tax, permit fees, and regulatory charges

The Local Government Code authorizes local taxes and permit fees, while the Ease of Doing Business Act requires streamlined government processing. It does not make local requirements uniform.

Local taxes and fees generally accrue at the start of the calendar year, with payment ordinarily due within the first 20 days of January unless the local ordinance, an installment option, or an official extension applies. Confirm the renewal schedule annually with the relevant BPLO.

A registered head office does not automatically cover a second office, delivery center, or branch in another city. Register each additional location with the SEC when required, the BIR, and the relevant LGU.

Register as an employer and prepare compliant payroll

The Philippine Business Hub may generate employer numbers for SSS, PhilHealth, and Pag-IBIG. Verify and activate the corresponding employer accounts before payroll begins.

SSS employer coverage starts on the first day of operations, and employee coverage starts on the first day of employment. The SSS directs employers to report employees for coverage within 30 days of employment. Complete corresponding PhilHealth and Pag-IBIG reporting and contribution arrangements.

Also:

Register the establishment with DOLE under Rule 1020, regardless of size.
Establish the occupational-safety and health program required by the Occupational Safety and Health Law.
Appoint or train the required safety officer and first aider based on workforce size and workplace risk.
Maintain employment contracts, job descriptions, time records, payroll registers, leave records, and proof of remittances.
Apply the current regional minimum wage and applicable wage order.
Pay covered employees at least a 10% night-shift differential for work between 10 p.m. and 6 a.m.
Account for overtime, holiday and rest-day premiums, service incentive leave, and 13th-month pay.
Document probationary standards at the start of employment.
Use lawful grounds, notice, and procedure for discipline, termination, retrenchment, or redundancy.

Calling workers “independent contractors” does not control their legal status. If the company selects, pays, and controls how the work is performed, an employer-employee relationship may exist despite the contract label.

Telecommuting must be voluntary and documented through a policy, employment agreement, or similar record. Remote employees must receive fair treatment comparable to on-site employees under the Telecommuting Act and its revised rules.

A foreign national must secure the appropriate DOLE employment authority and immigration status before beginning Philippine employment. Do not rely on a tourist or business-visitor admission for productive work.

Build privacy and security compliance before receiving client data

Most technology BPOs act as personal information processors for their clients and as personal information controllers for their own employees, applicants, and suppliers.

Before production access:

Designate a qualified Data Protection Officer.
Map personal data, systems, access, storage locations, subcontractors, and international transfers.
Adopt privacy, retention, access-control, incident-response, acceptable-use, remote-work, and secure-disposal policies.
Conduct privacy-impact and security-risk assessments for higher-risk processing.
Sign a compliant data-processing agreement with each client.
Ensure that approved subprocessors assume equivalent obligations.
Limit personnel to documented client instructions and least-privilege access.
Establish procedures for data-subject requests, audit evidence, deletion, return of data, and breach escalation.

Under NPC Circular No. 2022-04, DPO and data-processing-system registration is mandatory if the controller or processor:

Employs at least 250 people;
Processes sensitive personal information of at least 1,000 individuals; or
Conducts processing likely to pose a risk to data subjects’ rights and freedoms.

Organizations outside mandatory registration that do not register voluntarily must follow the NPC’s current exemption-declaration procedure.

The Philippine controller remains accountable for personal data transferred or outsourced internationally. The outsourcing contract must specify the processing purpose and duration, data categories, geographic location, security obligations, documented instructions, confidentiality, subprocessor controls, assistance with data-subject rights, and deletion or return arrangements. The Data Privacy Act’s implementing rules contain the detailed outsourcing requirements.

A notifiable personal-data breach generally must be reported to the NPC and affected data subjects within 72 hours after knowledge or reasonable belief that a qualifying breach occurred. The controller ordinarily retains the notification duty even when the incident occurs at its BPO processor. Build client-notification timelines that allow the controller to meet this deadline.

If calls, screens, or meetings will be recorded, obtain legally sufficient notice and authorization. The Anti-Wiretapping Act prohibits secret recording of a private communication without authorization from all parties. A call involving another country may also be subject to that jurisdiction’s consent law.

Protect software, data, and other intellectual property

Use written agreements covering:

Ownership of source code, scripts, workflows, documentation, models, prompts, datasets, and inventions
Assignment of employee- and contractor-created intellectual property
Treatment of pre-existing tools and open-source components
Client licenses and restrictions
Confidential information and trade secrets
Source-code repositories, access credentials, backups, and return or deletion at termination
Moral-rights waivers or consents to the extent legally permitted
Non-solicitation and post-employment restrictions drafted within enforceable limits

Philippine law has default rules for employee-created and commissioned works under the Intellectual Property Code. Do not assume that payment alone transfers every copyright from a contractor or commissioned developer; use an express written assignment.

Evidence to preserve

Keep an organized compliance file containing:

SEC application, certificate, articles, bylaws, GIS, beneficial-ownership disclosures, and corporate approvals
Proof of subscriptions, capital remittances, share issuances, and bank deposits
Lease, zoning, occupancy, fire-safety, and local business permits
BIR registration, books, invoice authority, returns, payment confirmations, and withholding records
Foreign-client contracts, invoices, remittances, and evidence supporting export or VAT treatment
BOI, PEZA, or other investment-promotion approvals and performance reports
SSS, PhilHealth, Pag-IBIG, DOLE, payroll, timekeeping, and contribution records
Employment, telecommuting, confidentiality, and intellectual-property agreements
Privacy notices, processing inventory, impact assessments, security tests, access logs, vendor reviews, and deletion records
Call-recording notices and consent evidence
Incident reports, forensic images, system logs, communications, and breach assessments

Preserve original metadata and access logs after a cyber incident. Do not alter affected devices or delete messages merely because they are embarrassing or commercially sensitive.

Common mistakes

Registering only with the SEC and starting operations without BIR and local permits
Obtaining a DTI business name for a corporation and treating it as incorporation
Using an inaccurate or overly regulated corporate purpose
Assuming there is no capital requirement because the Corporation Code has no general minimum
Using nominee shareholders to hide foreign beneficial ownership
Signing a long-term lease before checking zoning, occupancy, fire safety, and PEZA eligibility
Assuming every foreign-currency BPO receipt is zero-rated
Starting commercial operations before resolving investment-incentive eligibility
Failing to register a foreign-owned export enterprise with the BOI
Recording customer calls without proper authorization
Treating full-time, controlled personnel as contractors to avoid labor obligations
Giving production data to staff before privacy and security controls are ready
Missing the annual SEC GIS and financial-statement filings
Failing to register or permit a second delivery site
Allowing a foreign manager to work before securing employment and immigration authority

When professional help is urgent

Obtain Philippine legal and tax advice before proceeding if:

Foreign ownership exceeds 40% and the company will serve Philippine customers
The proposed paid-in capital is below US$200,000
The company will mix export and domestic revenue
Services involve payments, lending, finance, health data, telecommunications, recruitment, legal or accounting work, or another regulated activity
A foreign founder is being offered a nominee-shareholder arrangement
The company wants BOI or PEZA incentives but has already signed contracts or begun operations
Foreign nationals will work or manage operations in the Philippines
A regulator, tax authority, or LGU has issued an assessment, closure order, subpoena, or compliance notice
The company plans a mass termination, redundancy, retrenchment, or transfer of employees
Personal data may have been accessed, lost, encrypted, or disclosed without authority
Call recordings were made without a clear consent process

Frequently asked questions

Does a technology BPO need a special BPO license?

Not ordinarily. It needs standard corporate, tax, local, employer, labor, safety, and privacy registrations. A special license is required only when the actual activity falls within a regulated sector. PEZA or BOI registration is separate and usually sought for incentives.

Can a technology BPO be 100% foreign-owned?

Often, yes, if the activity is unrestricted and the company qualifies as an export enterprise or satisfies the domestic-market capital rules. Review the actual customer mix and services rather than relying on the “BPO” label.

Is a Filipino shareholder required?

Not automatically. An unrestricted export-oriented BPO may be wholly foreign-owned. A domestic-market enterprise with foreign ownership must satisfy the Foreign Investments Act, including the applicable paid-in-capital requirement.

Can a foreign individual form an OPC?

Yes, subject to nationality restrictions and foreign-investment rules. A foreign corporation cannot itself be the OPC’s single stockholder; a foreign parent normally uses a regular domestic corporation or a licensed branch.

Must the company register with PEZA?

No. PEZA registration is optional unless the business specifically chooses that investment regime. It may be valuable for a qualifying export-oriented project, but it brings location, reporting, performance, and work-arrangement conditions.

Can employees work entirely from home?

An ordinary non-RBE may adopt a voluntary telecommuting program subject to labor, privacy, tax, and local rules. A registered business enterprise operating under an economic-zone or freeport regime is subject to the CREATE MORE ceiling of 50% of its total workforce and the relevant investment promotion agency’s implementing rules.

Can the company invoice a client immediately after SEC incorporation?

No. Complete BIR registration, books and invoice authorization, and the applicable local business permit before commencing operations or issuing invoices.

How long does registration take?

The SEC’s OneSEC system is designed for one-day processing of eligible, complete applications. That is not a promise that the whole business can open in one day. Foreign-document authentication, bank onboarding, BIR completion, local permits, office inspection, fit-out, employer activation, and incentive review can take substantially longer.

Official references

This article provides general legal information, not advice for a particular ownership structure, contract, location, or regulated activity. Requirements can change through agency issuances and local ordinances. Official sources and procedures were checked as of 20 July 2026.