Ignito.Monitor

90
jurisdictions
11
regions
5
FATF warnings
2
sanctioned
GlossaryChanges

Compare 90 jurisdictions before you decide where to incorporate.

Corporate tax, FATF grey-list status, sanctions exposure, data-protection law and arbitration enforceability — one screen, maintained by a working cross-border legal practice. Free.

BUILT FOR:founders choosing a jurisdictiongroups with multiple entitiesstartups heading to a roundcross-border counsel
Last reviewed: 2026-08-03Changes· Curated by hand against primary sources. Monitored continuously; entries re-verified in batches.
How to read this dataWhat do these terms mean?
90 shown
Click a column to sort
CodeJurisdictionTaxFATFSanctionsDP LawNYCWatch
USUnited StatesNorth America21%compliantSectoral (CCPA, HIPAA, etc.)
GBUnited KingdomEurope (non-EU)25%compliantUK GDPR + DPA 2018
SGSingaporeAsia-Pacific17%compliantPDPA
AEUAEMiddle East9%compliantFederal PDPL (Decree-Law 45/2021)
EEEstoniaEU20%compliantGDPR
HKHong KongAsia-Pacific16.5%compliantPDPO
NLNetherlandsEU25.8%compliantGDPR
IEIrelandEU15%compliantGDPR
CHSwitzerlandEurope (non-EU)14.9%compliantnFADP (revDSG)
DEGermanyEU30%compliantGDPR
CACanadaNorth America26.5%compliantPIPEDA / Bill C-27
CYCyprusEU12.5%compliantGDPR
LTLithuaniaEU15%compliantGDPR
KYCayman IslandsOffshore0%compliantDPL 2017 (rev. 2021)
VGBVIOffshore0%grey listNone
FRFranceEU25%compliantGDPR
ESSpainEU25%compliantGDPR
ITItalyEU24%compliantGDPR
ATAustriaEU23%compliantGDPR
BEBelgiumEU25%compliantGDPR
LULuxembourgEU24.94%compliantGDPR
MTMaltaEU35%compliantGDPR
PTPortugalEU21%compliantGDPR
GRGreeceEU22%compliantGDPR
PLPolandEU19%compliantGDPR
CZCzech RepublicEU21%compliantGDPR
SESwedenEU20.6%compliantGDPR
FIFinlandEU20%compliantGDPR
DKDenmarkEU22%compliantGDPR
LVLatviaEU20%compliantGDPR
BGBulgariaEU10%grey listGDPR
RORomaniaEU16%compliantGDPR
HRCroatiaEU18%compliantGDPR
SKSlovakiaEU21%compliantGDPR
SISloveniaEU19%compliantGDPR
HUHungaryEU9%compliantGDPR
NONorwayEEA/EFTA22%compliantGDPR-equivalent
ISIcelandEEA/EFTA20%compliantGDPR-equivalent
LILiechtensteinEEA/EFTA12.5%compliantGDPR-equivalent
RSSerbiaEurope (non-EU)15%compliantZZPL (2018)
BRBrazilLatin America34%compliantLGPD
MXMexicoLatin America30%compliantLFPDPPP
ARArgentinaLatin America35%compliantLPDP (Ley 25.326)
CLChileLatin America27%compliantLey 19.628 + reform
COColombiaLatin America35%compliantLey 1581/2012
UYUruguayLatin America25%compliantLey 18.331
PAPanamaLatin America25%compliantLey 81/2019
SASaudi ArabiaMiddle East20%compliantPDPL (Royal Decree M/19)
QAQatarMiddle East10%compliantLaw No. 13/2016
BHBahrainMiddle East0%compliantPDPL (Law 30/2018)
OMOmanMiddle East15%compliantPDPL (Royal Decree 6/2022)
KWKuwaitMiddle East15%grey listNone (draft stage)
JOJordanMiddle East20%compliantDraft PDPL
EGEgyptMiddle East22.5%compliantLaw 151/2020
ILIsraelMiddle East23%compliantPPL 5741-1981 + Amendment 13
TRTurkeyMiddle East25%compliantKVKK (Law 6698)
JPJapanAsia-Pacific30.62%compliantAPPI
KRSouth KoreaAsia-Pacific24%compliantPIPA
CNChinaAsia-Pacific25%compliantPIPL
INIndiaAsia-Pacific25.17%compliantDPDP Act 2023
THThailandAsia-Pacific20%compliantPDPA
MYMalaysiaAsia-Pacific24%compliantPDPA 2010
IDIndonesiaAsia-Pacific22%compliantPDP Law 27/2022
PHPhilippinesAsia-Pacific25%compliantDPA 2012
VNVietnamAsia-Pacific20%grey listDecree 13/2023/ND-CP
TWTaiwanAsia-Pacific20%compliantPDPA
AUAustraliaOceania30%compliantPrivacy Act 1988 + APP
NZNew ZealandOceania28%compliantPrivacy Act 2020
ZASouth AfricaAfrica27%compliantPOPIA
NGNigeriaAfrica30%compliantNDPA 2023
KEKenyaAfrica30%grey listDPA 2019
GHGhanaAfrica25%compliantDPA 2012 (Act 843)
RWRwandaAfrica30%compliantLaw N° 058/2021
MUMauritiusAfrica15%compliantDPA 2017
JEJerseyOffshore0%compliantDPJL 2018
GGGuernseyOffshore0%compliantDPA 2017
IMIsle of ManOffshore0%compliantGDPR-applied
BMBermudaOffshore0%compliantPIPA 2016
BSBahamasOffshore0%compliantDPA 2003
SCSeychellesOffshore25%compliantDPA 2003
RURussiaCIS25%compliant152-FZ
KZKazakhstanCIS20%compliantLaw on PD (2013)
UZUzbekistanCIS15%compliantLaw ZRU-547 (2019)
GEGeorgiaCIS15%compliantLaw on PD Protection (2011)
AMArmeniaCIS18%compliantLaw on PD Protection
AZAzerbaijanCIS20%compliantLaw on PD (2010)
BYBelarusCIS20%compliantLaw 99-Z (2021)
MDMoldovaCIS12%compliantLaw 133/2011
KGKyrgyzstanCIS10%compliantLaw on PD (2008)
UAUkraineCIS18%compliantLaw 2297-VI (2010)
To jurisdictions

How to read this data

Corporate tax rate
Use it to build a shortlist, never to pick a winner. Two jurisdictions with the same headline rate can differ twofold in what you actually pay.
Read in full →
FATF status / grey list
If a jurisdiction is grey-listed, budget weeks rather than days for banking, and expect to explain your business in writing more than once.
Read in full →
Sanctions exposure
A flag here means your problem will be getting paid, not legality — and that problem lands on you regardless of whether you personally did anything wrong.
Read in full →
Data-protection law
If your users are European, the transfer question decides your architecture — where the database physically sits — not just your privacy policy.
Read in full →
New York Convention (1958)
Check this before you sign an arbitration clause with a counterparty from that country, not after the dispute starts.
Read in full →
Apostille Convention (1961)
Apostille is days and one fee. Consular legalisation is weeks, several fees, and a courier. If your deal has a deadline, this row is a schedule risk.
Read in full →
Foreign ownership
If this says no, you are not just filing different paperwork — you are giving someone a seat at the table. Price that before you choose the country.
Read in full →
Local director requirement
Treat it as a fixed annual cost plus a single point of failure, not as a formality.
Read in full →

All ten terms explained in plain language →

FAQ

Where does the data come from?
From a curated database maintained as part of the Ignito legal practice, cross-checked by hand against primary sources: statutes, regulator publications, the FATF plenary statements and the HCCH status tables. Every review pass is published on the changes page.
How often is it updated?
Two different things, and it is worth separating them. Monitoring is continuous and event-driven: FATF plenary outcomes, sanctions listings, apostille and New York Convention accessions and announced tax changes are tracked as they happen, and the affected entries are corrected then. Review is the deliberate re-verification of entries against primary sources; it runs in batches rather than sweeping all ninety jurisdictions on a fixed fortnightly cycle. The date at the top is the last completed review pass, and every pass is written up entry by entry on the changes page.
Can I rely on it for a deal?
Use it to shortlist and to ask the right questions — not as a substitute for advice on a live transaction. Rules change, and headline figures hide reliefs and exemptions. Verify against the primary source before you sign.
A rate looks outdated. What do I do?
Email customer@ignito.info. Monitoring is continuous, so a reported error is usually corrected well before the next scheduled review pass, and we credit useful corrections in the public changelog.
Can I reuse the data?
Yes. The dataset is available at /api/data.json under CC BY 4.0 — use it, publish it, build on it, with attribution and a link back to ignito.tech.
Why is it free?
Because the people who need it are the people we want to meet. The monitor is maintained by a working cross-border practice; if the shortlist turns into a structure, you know where to find us. Nothing is gated and there is no account to create.

Do more with this data

forma. — legal documents on iPhone, iPad and Mac
The same 90-jurisdiction database, wired into contracts: NDAs, service and supply agreements, SAFE, policies — generated from lawyer-built templates and processed privately on your device. About the app →
Need the structure designed for you?
Ignito Advisory builds cross-border legal architecture: holdings, IP routing, banking onboarding and regulatory strategy across 14+ jurisdictions. The first assessment is free. ignito.info →