Starting a Business in Thailand: Legal, Tax, Banking, and Hiring Checklist

Set the operating model before registration

Registration alone does not make every planned transaction lawful. The first task is to describe what the business will actually do: who pays it, what it supplies, where staff perform the work, whether it imports or manufactures, which company signs contracts, and which people control or benefit from it. That description drives the entity, corporate objects, foreign-ownership analysis, tax treatment, bank narrative, licenses, and hiring plan.

Choose the legal vehicle against liability, revenue activity, governance, and repatriation needs. A Thai private limited company is a separate juristic person with share capital and is the common baseline used below. A registered partnership, public limited company, foreign branch, or representative office has different liability, document, tax, and activity boundaries. If a private company is appropriate, the BOI’s official 2026 startup guide records at least two founders and a minimum call of 25% of each share’s par value before registration; special businesses and immigration plans can require a different capital position. See the current BOI quick guide to starting a business for the government’s process summary.

For foreign investment, classify each revenue activity before choosing a shareholding percentage. The Foreign Business Act defines a Thai-registered juristic person as foreign when foreign persons hold half or more of its capital, while its three schedules apply different prohibitions and permission routes. The official OSOS Foreign Business License and Certificate overview distinguishes prohibited activities, licensed activities, and certificate routes following qualifying government permission or treaty rights. BOI promotion, an FBL, or an FBC is a status or permission, not a company type and not a substitute for sector approval.

Do not solve a restricted-activity problem with nominee shareholders or documents that hide who supplied the capital or controls the business. Instead, change the activity, ownership, vehicle, or permission route before incorporation. Record the conclusion as a transaction-specific legal authority : the exact activity, entity, ownership, legal basis, approval needed, conditions, and person accountable for keeping it valid.

Only after that design is stable should founders finalize the name, Thai and English particulars, address evidence, objectives, shares, directors, and binding-signature rule. The ordinary Thailand company formation requirements provide the corporate foundation; foreign-business permission, tax activation, banking, labor, and sector licensing remain separate workstreams.

Use four ledgers to define readiness

A checklist becomes operational only when “done” is objectively testable. Create four rows in the project board and assign each to a role with authority to resolve exceptions. The legal lead owns entity and permissions; the finance lead owns registrations, ledgers, filings, and invoice logic; the treasury lead owns bank acceptance and access controls; and the people lead owns contracts, payroll, social security, and work authorization.

The table is a completion-control asset, not a list of applications. Customize each row to the first real transaction and attach the evidence in one controlled folder. A status turns green only when the evidence proves that the business can execute that transaction now.

Add a fifth project field beside each row: the date on which the evidence must be refreshed. Company certificates used by banks can need to be recently issued; ownership, directors, premises, tax status, staff, and license conditions can change. Readiness is a controlled state, not a one-time folder.

Close the legal ledger

For a new private limited company or registered partnership, plan around the live filing channel. DBD announced that from July 1, 2026, it would stop walk-in paper establishment registration for new partnerships and private limited companies and provide the service nationwide through DBD Biz Regist . The DBD’s June 2026 implementation notice confirms the scope. Do not infer that every later amendment, license, tax filing, or bank process moved into that system.

Build one consistent registration dataset

Prepare the accepted name, Thai spelling and English rendering, head-office province and address evidence, objectives, registered capital, number and par value of shares, founder and shareholder details, directors, and the rule stating which director or directors bind the company. Align the memorandum, articles if adopted, statutory-meeting records, share subscriptions, payment evidence, company seal decision, and registration application. For an overseas corporate shareholder, map the full corporate chain, signing authority, ultimate beneficial owners, and any notarization, legalization, or Thai translation required for the specific filing or recipient.

After approval, retrieve and reconcile the registration certificate, current company affidavit or certified particulars, memorandum, articles, shareholder list, director and binding-signature entry, registered address, and capital record. The DBD’s electronic certificate service shows how an official English-version business registration certificate can be verified. An English certificate or database search does not replace the underlying Thai registered record.

Add permissions to the entity record

Create a license register using the exact first-year activities and premises. It may include foreign-business authority, BOI project conditions, import or customs registrations, factory or environmental permissions, food, drug, tourism, education, financial, telecom, construction, or local premises approvals. For each item, record the issuing authority, legal holder, covered activity and site, conditions precedent, responsible person, renewal or reporting event, and evidence stored. A pending application is amber; an approval with unmet pre-operation conditions is also amber.

The legal ledger closes only when the DBD record matches the intended ownership and signing model, every needed permission is effective for the first transaction, corporate books have been opened, and a calendar captures meetings, shareholder-list filings, financial statements, license reports, and changes. Keep evidence, not an application receipt , as the closing test.

Close the tax and accounting ledger

Start with identity reconciliation. The Revenue Department instructs a Thai company or juristic partnership to use the 13-digit juristic-person registration number issued by the DBD as its taxpayer identification number. That shared number reduces duplicate identity records, but it does not prove VAT registration, a branch’s VAT status, or that the Revenue Department accepts every address detail. Confirm the company name, address, branch code, accounting period, and authorized person across the DBD record, tax system, invoices, payroll, and bank pack.

Configure tax from the transaction map

For an ordinary Thai company, the Revenue Department states a 20% corporate income tax rate on net profit, subject to different taxpayer categories and incentives. It also requires the annual corporate return, P.N.D.50, within 150 days after the accounting-period close and an estimated half-year return, P.N.D.51, within two months after the first six months. The Revenue Department corporate income tax summary explains those baseline rules. BOI tax incentives, loss relief, transfer pricing, cross-border withholding, permanent-establishment exposure, and treaty claims require separate fact-specific tests.

Map each payment type before the first disbursement: salary, Thai service fee, rent, royalty, interest, dividend, imported service, reimbursement, and payment to a foreign recipient can have different withholding, VAT, documentation, and filing treatment. Configure vendor onboarding to capture tax identity and supporting contracts. Set who produces withholding certificates, who approves a tax code, how corrections are handled, and how payment evidence reaches the accounting ledger.

Decide VAT status before issuing an invoice

A person or entity regularly supplying goods or services in Thailand generally enters VAT when annual turnover exceeds THB 1.8 million, unless an exemption or Specific Business Tax treatment applies. The Revenue Department says a liable person files Form P.P.01 before operating or within 30 days after reaching the threshold; VAT returns are monthly. Its official VAT guidance explains registration, tax invoices, input and output tax, and Form P.P.30 filing. As of September 4, 2026, Royal Decree No. 807 extends the reduced 7% VAT rate through September 30, 2027, as listed on the Revenue Department’s new tax-law register .

Do not print “VAT 7%” merely because the company has a DBD number. Confirm whether supplies are taxable, zero-rated, exempt, or subject to SBT; whether voluntary registration is available and commercially useful; which premises and branches are registered; and when a valid tax invoice can be issued. Preserve the registration evidence and test the invoice template, sequence, customer fields, branch notation, and accounting entries before go-live.

Open the books before money moves

Appoint a qualified bookkeeper and plan the audit early enough to collect founder expenses, capital payments, inventory, contracts, tax invoices, payroll records, and related-party evidence from day one. Choose the first accounting period and chart of accounts; create close, reconciliation, document-retention, and approval procedures; and identify the Thai certified public accountant who will audit the annual statements where required.

A private limited company must present its audited financial statements to the annual general meeting within four months after the year-end and submit the approved statements to the DBD within one month after approval, according to the DBD’s 2026 financial-statement filing reminder . Tax returns and DBD e-Filing are separate submissions. The ledger closes when tax statuses are evidenced, accounting begins on the first transaction, invoice and payment logic has been tested, responsible preparers and reviewers are assigned, and the calendar includes monthly, annual, and event-driven duties.

Close the banking ledger

Select a bank against the actual payment model: THB collections, foreign-currency receipts, payroll, tax payments, cards, payment gateway, trade finance, overseas transfers, and required user controls. Then ask the chosen bank for its current entity-specific document list, freshness rules, attendance requirements, account-opening deposit, and onboarding sequence. These are bank policies and risk decisions, not DBD rules.

A typical pack starts with a recent company certificate or affidavit, memorandum and articles, shareholder list, tax or VAT evidence where applicable, board resolution authorizing the account, and identity documents for directors, signatories, senior management, and material owners. The bank may also seek the ultimate-beneficial-owner chain, source of initial funds, expected counterparties and countries, contracts, invoices, office evidence, licenses, group structure, website, and an explanation of the business. The BOI’s 2026 guide lists the common corporate documents, while KBank’s current-account page shows that certain authorized persons must attend a branch for identity verification. Requirements differ by institution and risk profile.

Make the board resolution match the DBD binding-signature entry and the intended online-banking matrix. Define account-opening authority, payment signatories, maker, checker, administrator, transaction limits, channels, tokens or devices, and authority to add or close accounts. Bangkok Bank’s official BIZ iBanking application requirements , for example, require company evidence and board minutes addressing the service, accounts, and Super User. That illustrates why “account open” and “payment controls live” are different states.

If KYC stalls, first reconcile name, address, directors, signing rules, ownership percentages, and business descriptions across every document. Refresh stale certificates, answer the economic-purpose and source-of-funds questions with primary evidence, and amend the board resolution if its authority is incomplete. Switching banks without curing a factual inconsistency usually reproduces the same problem.

Use the corporate account KYC decision path to organize the bank-specific work. Because bank acceptance is discretionary , the banking ledger closes only after the account exists, authorized users can access it, a controlled low-value payment has been tested, limits fit the business, and funding evidence is retained. Never promise an opening date or approval outcome.

Close the hiring ledger

Convert the organization chart into lawful roles, work locations, reporting lines, compensation, benefits, and start dates. Decide whether each relationship is truly employment or an independent service based on substance, not the contract label. Prepare Thai-law terms covering duties, workplace, hours, wage cycle, leave, confidentiality, intellectual property, data handling, probation if used, disciplinary process, notice, and termination. Check the current minimum wage for the workplace and business category rather than using one national figure.

Update templates for current statutory rights. The Ministry of Labour confirms that Labour Protection Act No. 9 took effect on December 7, 2025, increasing maternity leave to 120 days and employer-paid maternity leave to as many as 60 days, while adding specified childcare and spousal leave. Use the Ministry’s 2026 labor-law implementation notice , plus the current wage and sector rules, to audit contracts and the employee handbook. Employers reaching statutory headcount triggers should also implement required written work rules, welfare, disability-employment, and occupational-safety measures as applicable.

Register social security from the first covered hire

When the company first has a covered employee, register the establishment and employee with the Social Security Office (SSO), and activate the contribution and reporting workflow. The SSO states that an employer with at least one employee must register the employee within 30 days of the start date, using S.P.S.1-03 for a person not previously registered, and reports departures by the 15th of the following month. Its employer registration notice also identifies the SSO e-Service forms for employee changes and contributions.

Configure payroll for salary withholding, contribution calculations, pay slips, leave, overtime, benefits, expense claims, and monthly reconciliation. Do not reuse the former SSO ceiling: the SSO’s current contribution-base notice states that from January 1, 2026, the Section 33 contribution wage base runs from THB 1,650 to THB 17,500. Check the live rate and any location- or event-specific relief for each payroll period; temporary relief must not become a permanent configuration.

Separate ownership, directorship, immigration, and work

A foreign national can own shares or be appointed as a director without automatically receiving permission to perform work in Thailand. Before the person manages operations, serves customers, or performs the planned role in Thailand, determine the appropriate visa and work-permit or exempt route, sponsoring entity, permitted occupation, work location, and start date. The Department of Employment’s live e-WorkPermit system handles applications and changes for covered routes; BOI-promoted personnel may use a coordinated process with different evidence and conditions.

Do not turn generic planning ratios for capital or Thai staff into a promised entitlement. Immigration, employment, BOI, and professional rules can apply different tests and exceptions. Obtain case-specific confirmation before committing a foreign employee’s start date, and update the permit when a change to employer, role, or workplace requires it.

The hiring ledger closes when the contract and policy set are current, payroll has passed a sample calculation and approval test, the SSO employer and employee statuses are evidenced, a safe workplace and required records exist, personal data has controlled access, and every foreign worker has valid authority for the actual role before starting. Preserve first-day payroll controls , not just signed offer letters.

Run the dependencies in the right order

There is no reliable universal “company ready in X days” promise because the critical path changes with activity, foreign ownership, document origin, premises, license, bank, and personnel. Build the plan backward from the first irreversible event: contract signature, import, customer invoice, lease commitment, payroll date, or foreign employee arrival. Use the following dependency order, while parallelizing preparation that does not require an official output.

1. Freeze scope and authority. Confirm activities, entity, ownership, control, address, capital logic, license route, directors, and first workers.
2. Prepare identity and evidence. Collect founders’ and owners’ documents, overseas corporate chain, address rights, Thai translations, capital evidence, and digital-user readiness.
3. Create the DBD record. Reserve the name, complete corporate approvals and subscriptions, submit through the current channel, respond to corrections, pay, and retrieve the accepted record.
4. Reconcile all downstream packs. Use the final DBD particulars in tax, license, bank, contract, payroll, and work-permit documents; do not keep draft names or signing rules.
5. Close permission and finance gates. Obtain applicable operating authority, confirm tax statuses, open books, secure bank acceptance, fund transparently, and test payments and invoices.
6. Activate the employer workflow. Finalize current employment terms, register required SSO statuses, test payroll, and secure any foreign-work authority before the start date.
7. Run a transaction rehearsal. Trace one sale and one payment from approval through contract, invoice, bank, ledger, withholding or VAT, document storage, and management reporting.

Recover from a failed handoff at the source

When a downstream reviewer finds a mismatch, identify the authoritative source before editing documents. If the DBD record is wrong, approve and register the correction, then refresh tax and bank evidence. If the DBD record is right but a bank resolution is incomplete, correct the resolution. If a VAT address pack fails, repair the premises evidence and data consistency rather than altering the commercial story. If the work-permit role conflicts with the employment contract, stop the start date and align the role through the proper employment and permit process.

Maintain one issue log with the failed ledger, reviewer, requested evidence, authoritative data owner, correction path, next submission date, and business event at risk. That prevents a tax correction from silently breaking a bank pack or a licensing change from leaving the corporate objectives and employment roles behind.

Apply the four-ledger launch gate

Approve launch only for the specific activities, premises, payment routes, and workers that have closed evidence. The legal lead confirms the entity and permissions; finance confirms tax, invoice, books, and filing controls; treasury confirms the live account and payment authority; and the people lead confirms contracts, payroll, SSO, and any work permission. A ledger that is not needed on day one can remain planned, but its related transaction or hire must remain disabled.

Stop and escalate the decision if the revenue description does not fit the registered objects or foreign-business analysis, a required license is pending, the VAT status is uncertain, the bank cannot implement the intended signing controls, funding provenance is undocumented, or a foreign national’s authority does not cover the role. Those are launch blockers, not administrative loose ends.

The priority is simple: correct the operating model first, make the DBD record its authoritative corporate expression, then close the legal, tax, banking, and hiring evidence for the first real transaction. Repeat the gate whenever the company adds an activity, site, owner, director, bank authority, or foreign employee.