Ignito.Monitor

90
jurisdictions
11
regions
5
FATF warnings
2
sanctioned
GlossaryChangesObligationsCalculators

Compare 90 jurisdictions before you decide where to incorporate.

Corporate tax, FATF grey-list status, sanctions exposure, data-protection law and arbitration enforceability — one screen, maintained by a working cross-border legal practice. Free.

BUILT FOR:founders choosing a jurisdictiongroups with multiple entitiesstartups heading to a roundcross-border counsel
Jurisdiction table checked: 2026-10-02Changes →· This date covers the 90-jurisdiction table on this page: it is the day of the last full re-check of the statuses — FATF listing, sanctions, apostille — each against the single primary source that covers all 90 at once. The events that move these statuses (FATF plenaries, sanctions programmes, treaty accessions) are watched as they happen; a re-check is a separate, dated pass, and each one is written up on the changes page. Corporate tax rates are re-checked in rotating batches, since each one has its own ministry source. Calculators, filing obligations and treaty rates are separate datasets with their own dates, shown next to each.
How to read this data ↓What do these terms mean? →
90 shown
Click a column to sort
Code↕Jurisdiction↕Tax↕FATF↕Sanctions↕DP Law↕NYC↕Watch
USUnited StatesNorth America21%compliantSectoral (CCPA, HIPAA, etc.)✓☆
GBUnited KingdomEurope (non-EU)25%compliantUK GDPR + DPA 2018✓☆
SGSingaporeAsia-Pacific17%compliantPDPA✓☆
AEUAEMiddle East9%compliantFederal PDPL (Decree-Law 45/2021)✓☆
EEEstoniaEU22%compliantGDPR✓☆
HKHong KongAsia-Pacific16.5%compliantPDPO✓☆
NLNetherlandsEU25.8%compliantGDPR✓☆
IEIrelandEU15%compliantGDPR✓☆
CHSwitzerlandEurope (non-EU)14.9%compliantnFADP (revDSG)✓☆
DEGermanyEU30%compliantGDPR✓☆
CACanadaNorth America26.5%compliantPIPEDA (Bill C-36 pending)✓☆
CYCyprusEU15%compliantGDPR✓☆
LTLithuaniaEU15%compliantGDPR✓☆
KYCayman IslandsOffshore0%compliantDPL 2017 (rev. 2021)✓☆
VGBVIOffshore0%grey listData Protection Act 2021✓☆
FRFranceEU25%compliantGDPR✓☆
ESSpainEU25%compliantGDPR✓☆
ITItalyEU24%compliantGDPR✓☆
ATAustriaEU23%compliantGDPR✓☆
BEBelgiumEU25%compliantGDPR✓☆
LULuxembourgEU23.87%compliantGDPR✓☆
MTMaltaEU35%compliantGDPR✓☆
PTPortugalEU19%compliantGDPR✓☆
GRGreeceEU22%compliantGDPR✓☆
PLPolandEU19%compliantGDPR✓☆
CZCzech RepublicEU21%compliantGDPR✓☆
SESwedenEU20.6%compliantGDPR✓☆
FIFinlandEU20%compliantGDPR✓☆
DKDenmarkEU22%compliantGDPR✓☆
LVLatviaEU20%compliantGDPR✓☆
BGBulgariaEU10%grey listGDPR✓☆
RORomaniaEU16%compliantGDPR✓☆
HRCroatiaEU18%compliantGDPR✓☆
SKSlovakiaEU21%compliantGDPR✓☆
SISloveniaEU19%compliantGDPR✓☆
HUHungaryEU9%compliantGDPR✓☆
NONorwayEEA/EFTA22%compliantGDPR-equivalent✓☆
ISIcelandEEA/EFTA20%compliantGDPR-equivalent✓☆
LILiechtensteinEEA/EFTA12.5%compliantGDPR-equivalent✓☆
RSSerbiaEurope (non-EU)15%compliantZZPL (2018)✓☆
BRBrazilLatin America34%compliantLGPD✓☆
MXMexicoLatin America30%compliantLFPDPPP✓☆
ARArgentinaLatin America35%compliantLPDP (Ley 25.326)✓☆
CLChileLatin America27%compliantLey 19.628 + reform✓☆
COColombiaLatin America35%compliantLey 1581/2012✓☆
UYUruguayLatin America25%compliantLey 18.331✓☆
PAPanamaLatin America25%compliantLey 81/2019✓☆
SASaudi ArabiaMiddle East20%compliantPDPL (Royal Decree M/19)✓☆
QAQatarMiddle East10%compliantLaw No. 13/2016✓☆
BHBahrainMiddle East0%compliantPDPL (Law 30/2018)✓☆
OMOmanMiddle East15%compliantPDPL (Royal Decree 6/2022)✓☆
KWKuwaitMiddle East15%grey listNone (draft stage)✓☆
JOJordanMiddle East20%compliantPDPL No. 24 of 2023✓☆
EGEgyptMiddle East22.5%compliantLaw 151/2020✓☆
ILIsraelMiddle East23%compliantPPL 5741-1981 + Amendment 13✓☆
TRTurkeyMiddle East25%compliantKVKK (Law 6698)✓☆
JPJapanAsia-Pacific30.62%compliantAPPI (2026 amendment, Act No. 56)✓☆
KRSouth KoreaAsia-Pacific24%compliantPIPA✓☆
CNChinaAsia-Pacific25%compliantPIPL✓☆
INIndiaAsia-Pacific25.17%compliantDPDP Act 2023✓☆
THThailandAsia-Pacific20%compliantPDPA✓☆
MYMalaysiaAsia-Pacific24%compliantPDPA 2010✓☆
IDIndonesiaAsia-Pacific22%compliantPDP Law 27/2022✓☆
PHPhilippinesAsia-Pacific25%compliantDPA 2012✓☆
VNVietnamAsia-Pacific20%grey listPDPL (Law 91/2025/QH15)✓☆
TWTaiwanAsia-Pacific20%compliantPDPA✗☆
AUAustraliaOceania30%compliantPrivacy Act 1988 + APP✓☆
NZNew ZealandOceania28%compliantPrivacy Act 2020✓☆
ZASouth AfricaAfrica27%compliantPOPIA✓☆
NGNigeriaAfrica30%compliantNDPA 2023✓☆
KEKenyaAfrica30%grey listDPA 2019✓☆
GHGhanaAfrica25%compliantDPA 2012 (Act 843)✓☆
RWRwandaAfrica30%compliantLaw N° 058/2021✓☆
MUMauritiusAfrica15%compliantDPA 2017✓☆
JEJerseyOffshore0%compliantDPJL 2018✓☆
GGGuernseyOffshore0%compliantDPA 2017✓☆
IMIsle of ManOffshore0%compliantGDPR-applied✓☆
BMBermudaOffshore0%compliantPIPA 2016✓☆
BSBahamasOffshore0%compliantDPA 2003✓☆
SCSeychellesOffshore25%compliantData Protection Act 2023✓☆
RURussiaCIS25%compliant⊘152-FZ✓☆
KZKazakhstanCIS20%compliantLaw on PD (2013)✓☆
UZUzbekistanCIS15%compliantLaw ZRU-547 (2019)✓☆
GEGeorgiaCIS15%compliantLaw on PD Protection (2011)✓☆
AMArmeniaCIS18%compliantLaw on PD Protection✓☆
AZAzerbaijanCIS20%compliantLaw on PD (2010)✓☆
BYBelarusCIS20%compliant⊘Law 99-Z (2021)✓☆
MDMoldovaCIS12%compliantLaw 133/2011✓☆
KGKyrgyzstanCIS10%compliantLaw on PD (2008)✓☆
UAUkraineCIS18%compliantLaw 2297-VI (2010)✓☆
↑ To jurisdictions

How to read this data

Corporate tax rate
Use it to build a shortlist, never to pick a winner. Two jurisdictions with the same headline rate can differ twofold in what you actually pay.
Read in full →
FATF status / grey list
If a jurisdiction is grey-listed, budget weeks rather than days for banking, and expect to explain your business in writing more than once.
Read in full →
Sanctions exposure
A flag here means your problem will be getting paid, not legality — and that problem lands on you regardless of whether you personally did anything wrong.
Read in full →
Data-protection law
If your users are European, the transfer question decides your architecture — where the database physically sits — not just your privacy policy.
Read in full →
New York Convention (1958)
Check this before you sign an arbitration clause with a counterparty from that country, not after the dispute starts.
Read in full →
Apostille Convention (1961)
Apostille is days and one fee. Consular legalisation is weeks, several fees, and a courier. If your deal has a deadline, this row is a schedule risk.
Read in full →
Foreign ownership
If this says no, you are not just filing different paperwork — you are giving someone a seat at the table. Price that before you choose the country.
Read in full →
Local director requirement
Treat it as a fixed annual cost plus a single point of failure, not as a formality.
Read in full →

All ten terms explained in plain language →

FAQ

Where does the data come from?
From a curated database maintained as part of the Ignito legal practice, cross-checked by hand against primary sources: statutes, regulator publications, the FATF plenary statements and the HCCH status tables. Every review pass is published on the changes page.
How often is it updated?
Two different things, and it is worth separating them. Monitoring is continuous and event-driven: FATF plenary outcomes, sanctions listings, apostille and New York Convention accessions and announced tax changes are tracked as they happen, and the affected entries are corrected then. Review is the deliberate re-verification of entries against primary sources; it runs in batches rather than sweeping all ninety jurisdictions on a fixed fortnightly cycle. The date at the top is the last completed review pass, and every pass is written up entry by entry on the changes page.
Can I rely on it for a deal?
Use it to shortlist and to ask the right questions — not as a substitute for advice on a live transaction. Rules change, and headline figures hide reliefs and exemptions. Verify against the primary source before you sign.
A rate looks outdated. What do I do?
Email customer@ignito.info. Monitoring is continuous, so a reported error is usually corrected well before the next scheduled review pass, and we credit useful corrections in the public changelog.
Can I reuse the data?
Yes. The dataset is available at /api/data.json under CC BY 4.0 — use it, publish it, build on it, with attribution and a link back to ignito.tech.
Why is it free?
Because the people who need it are the people we want to meet. The monitor is maintained by a working cross-border practice; if the shortlist turns into a structure, you know where to find us. Nothing is gated and there is no account to create.

Do more with this data

forma. — legal documents on iPhone, iPad and Mac
The same 90-jurisdiction database, wired into contracts: NDAs, service and supply agreements, SAFE, policies — generated from lawyer-built templates and processed privately on your device. About the app →
Need the structure designed for you?
Ignito Advisory builds cross-border legal architecture: holdings, IP routing, banking onboarding and regulatory strategy across 14+ jurisdictions. The first assessment is free. ignito.info →