Establishing an AI company in Thailand starts with defining what the business will actually do. Software development, AI SaaS, machine learning, data analytics, consultancy, robotics and automated decision systems can create different regulatory issues. The proposed activity influences foreign-ownership analysis, investment promotion, licences, data responsibilities, staffing and taxation. Moreover, an AI product used in healthcare, finance or another regulated sector may require approvals beyond ordinary corporate registration.
Founders should therefore classify the revenue-generating activity, ownership model, data flows and customer market before selecting a legal structure or committing capital.
Define the AI Business Before Incorporation
“AI company” describes a technology sector rather than a single legal business activity. A developer licensing machine-learning software operates differently from a consultancy implementing third-party models, a SaaS platform processing customer data or a robotics business supplying physical systems.
Founders should identify activities such as:
- software and model development;
- AI SaaS subscriptions;
- generative AI services;
- machine-learning consultancy;
- data analytics;
- computer vision;
- natural-language processing;
- enterprise automation;
- robotics development; and
- AI infrastructure services.
The activity matters because Thailand’s foreign-business rules, investment-promotion criteria and sector regulation apply to what the entity actually conducts. Corporate objectives should therefore reflect expected revenue streams without assuming that broad wording removes regulatory restrictions.
Data use also changes the analysis. A business processing customer prompts may face different personal-data risks from one processing biometric templates, medical records or employee profiles.
Separate General Software From Regulated AI
Ordinary software development does not automatically require a dedicated licence merely because the product uses artificial intelligence. However, incorporation as a technology company does not authorise every activity performed through that software.
An AI system supporting medical diagnosis can intersect with healthcare and medical-device regulation. Similarly, technology used to provide regulated financial, insurance, telecommunications or professional services may trigger requirements attached to the underlying activity.
The distinction also matters where the AI company supplies technology to another regulated organisation. Responsibility may depend on whether the supplier merely provides software, processes customer data, makes regulated decisions, operates infrastructure or performs part of the regulated service.
Consequently, founders should assess both the technology and its commercial function. Labelling a product as software cannot displace rules governing the activity that customers or the provider conduct through it.
Choose a Suitable Legal Structure
A Thai private limited company commonly appears in technology establishment planning because it provides a separate legal entity with shareholders, directors and limited shareholder liability. Nevertheless, the correct structure depends on ownership, activity and market-entry strategy.
A foreign business may alternatively assess a Thai subsidiary or branch. A branch forms part of the foreign legal entity and can conduct business within the scope permitted under Thai law, subject to foreign-business and other requirements.
A representative office serves a narrower purpose. It does not provide a general route for conducting ordinary revenue-generating commercial activities in Thailand.
Structure affects:
- shareholder arrangements;
- foreign ownership status;
- directors and authority;
- capital planning;
- tax treatment;
- employment;
- investment promotion; and
- liability.
Therefore, founders should assess structure alongside the intended activity rather than treating incorporation as an isolated administrative decision.
Assess Foreign Ownership Under Thai Law
Foreign founders need to examine the Foreign Business Act and the exact activities proposed by the Thai entity. Service businesses can fall within restricted categories, making activity classification particularly significant for software, consultancy and technology operations.
A foreign-controlled company should not assume that every AI activity automatically permits unrestricted foreign ownership. Conversely, founders should not assume that Thai majority ownership is mandatory for every technology venture.
Depending on the activity and circumstances, a foreign investor may need an appropriate Foreign Business Licence or may operate through another lawful route. A business receiving qualifying investment promotion can, where applicable, obtain a Foreign Business Certificate for promoted activities rather than following the ordinary licence route for those activities.
This makes company formation in Thailand closely connected with foreign-business analysis whenever overseas investors control the proposed entity.
Corporate objectives alone do not resolve the issue. The Department of Business Development examines foreign-business matters according to applicable law and the activities conducted.
Do Not Use Nominee Shareholding
Thai shareholding should represent genuine ownership rather than an arrangement created merely to disguise foreign control and avoid statutory restrictions.
Founders should therefore examine who contributes capital, exercises shareholder rights, receives economic benefits and genuinely participates as an owner. A nominal Thai shareholder inserted only to create an appearance of domestic ownership can create legal risk.
A lawful ownership plan should instead start with the proposed activity and identify available routes for foreign participation. These may include an activity that does not fall within the relevant restriction, appropriate permission, qualifying investment promotion or another legally available structure.
Commercial convenience should not replace genuine ownership arrangements.
Consider BOI Investment Promotion Early
The Thailand Board of Investment promotes qualifying technology and digital activities, but AI terminology alone does not establish eligibility. The underlying project must fit a promoted activity and satisfy applicable conditions.
Current BOI materials include promotion routes for development of software, digital platforms or digital content. AI development may therefore fit a qualifying technology project where its substance meets the applicable criteria.
Promotion can potentially provide tax and non-tax incentives. Depending on the approved activity and conditions, non-tax privileges can include facilitation relating to foreign skilled personnel and other investment rights.
However, promotion creates project commitments as well as privileges. The approved business scope, technical substance, investment, staffing and reporting conditions matter after approval.
Founders should consequently assess promotion before finalising significant structural decisions. A project designed around qualifying software development can require different planning from an ordinary consultancy that merely uses AI tools while providing services.
Keep Promotion Separate From Incorporation
BOI approval and corporate registration perform different functions. Registering a company creates the legal entity; investment promotion grants specified privileges to an approved project subject to conditions.
A founder can establish an ordinary Thai company without seeking BOI promotion where the proposed ownership and activity permit that route. Conversely, a promoted project still requires the appropriate corporate establishment and post-approval implementation.
The distinction affects planning because promotion can influence:
- foreign ownership arrangements;
- approved project activities;
- investment commitments;
- foreign specialist employment;
- machinery or technology investment;
- tax incentives; and
- continuing reporting.
A founder seeking promotion should align the corporate structure and project plan with the proposed promoted activity rather than incorporating first and assuming every existing activity will subsequently qualify.
Plan Capital According to the Regulatory Route
Registered capital, paid-up capital, foreign-business capital requirements, investment-promotion commitments and practical operating funds represent different concepts.
The appropriate amount therefore depends on ownership, activity, foreign-business status, staffing and the selected regulatory pathway. Foreign personnel can also introduce employer-related financial considerations under the applicable work-authorisation framework.
BOI-promoted projects may face investment conditions specific to their approved category. Consequently, a capital figure suitable for ordinary corporate registration does not necessarily satisfy investment-promotion or foreign-business requirements.
Founders should map each capital requirement to its legal purpose before setting the company’s capital structure. They should also budget separately for salaries, cloud infrastructure, model development, cybersecurity, professional services and working capital rather than assuming registered capital represents immediately available operating cash.
Prepare the Company Registration Framework
Corporate establishment requires decisions about the company’s name, registered office, objectives, capital, shareholders, directors and authorised signatories.
Documentation varies with the structure and shareholder profile. Relevant information can include:
- reserved company name;
- shareholder and founder details;
- registered-office information;
- business objectives;
- share capital and allocation;
- director information;
- signing authority; and
- constitutional and incorporation records.
A foreign corporate shareholder can require additional corporate documents and resolutions establishing its authority to invest. Translation, certification or authentication requirements depend on the documents and procedure involved.
Technology founders should draft objectives around intended commercial operations such as software development, technology licensing, consultancy or data services. Nevertheless, broadly drafted objectives cannot override foreign-business restrictions, BOI conditions or sector licensing requirements.
Follow a Practical Establishment Sequence
The exact sequence changes according to ownership, activity and promotion status. A technology founder can organise planning around these stages:
- Define the AI product and revenue model.
- Classify the actual business activities.
- Assess foreign ownership restrictions.
- Determine whether BOI promotion fits the project.
- Select the legal structure.
- Plan shareholders, directors and authority.
- Determine relevant capital requirements.
- Reserve the company name.
- Prepare incorporation documentation.
- Complete corporate registration.
- Address tax registration and accounting arrangements.
- Complete employment and social-security requirements where applicable.
- Obtain sector approvals for regulated applications.
- Arrange immigration and work authorisation for foreign personnel.
- Implement personal-data and security controls.
- Establish banking arrangements.
- Begin regulated activities only after securing necessary permissions.
Promotion applications or sector approvals can alter this order. Therefore, founders should map dependencies before committing to contracts or hiring.
Choose an Appropriate Registered Office
The company needs a registered address for corporate purposes. However, an address accepted for company registration does not automatically satisfy every tax, licensing, employment or promoted-project requirement.
Technology businesses should consider where personnel will work, where records will be maintained and whether the proposed premises correspond with the operational substance presented to authorities.
Remote working can form part of a technology company’s staffing model, but it does not remove requirements connected with the registered office or any conditions imposed under another regulatory framework.
A BOI-promoted project should also ensure that its operating arrangements remain consistent with the approved project. Similarly, regulated activities may require premises meeting sector-specific standards even when ordinary software development would not.
Address Tax and Accounting After Registration
A Thai company generally enters the Thai corporate tax and accounting framework regardless of whether its product uses AI.
Thailand applies corporate income tax to companies under its tax rules. VAT can also become relevant where taxable turnover exceeds the applicable registration threshold. The Revenue Department currently identifies annual turnover exceeding THB 1.8 million for persons or entities regularly supplying taxable goods or services as the general VAT registration threshold, subject to exemptions and specific rules.
Technology businesses should also assess withholding-tax treatment for relevant payments, particularly where they pay service providers, licensors or overseas vendors.
BOI tax incentives apply only within the scope and conditions of the promoted project. They should not be treated as a blanket exemption covering every company activity.
Companies must maintain accounting records, prepare financial statements and meet applicable tax and statutory filing obligations.
Plan for Thai and Foreign Technology Staff
An AI company may require software developers, data scientists, machine-learning engineers, cybersecurity specialists, researchers and technical managers.
Hiring Thai employees follows domestic employment and social-security requirements. Foreign personnel create an additional immigration and work-authorisation layer.
Foreign ownership or appointment as a company director does not automatically authorise an individual to perform work in Thailand. The person must hold the immigration status and work authorisation appropriate to the circumstances.
Employer eligibility requirements can vary according to the company’s regulatory route. Ordinary companies and BOI-promoted businesses can therefore face different processes for bringing foreign specialists into approved roles.
Founders should avoid assuming that every technical employee qualifies for a specialist immigration programme merely because the position relates to AI. Eligibility depends on the programme’s current criteria, the employer and the individual’s circumstances.
Build Personal-Data Controls Into the AI Product
Thailand’s Personal Data Protection Act affects AI businesses that collect, use or disclose personal data within its scope. AI systems can process personal information at several stages, including account creation, model input, training, testing, monitoring and output generation.
Relevant data can include:
- names and contact information;
- customer prompts;
- CVs and employment records;
- location information;
- images and voice recordings;
- online identifiers;
- behavioural information;
- biometric data; and
- health information.
The company should identify its lawful basis for processing, provide appropriate transparency and limit collection to data needed for legitimate purposes. Retention and security controls should reflect the nature of the information and processing.
Sensitive personal data, including certain biometric and health information, receives additional statutory protection. Consequently, an AI application using facial recognition or medical data requires closer analysis than software processing ordinary corporate contact information.
Assess Training Data Before Model Development
Model development introduces questions that ordinary customer databases may not create. Founders should identify where training, fine-tuning, testing and evaluation datasets originate and what rights permit their use.
A data review should consider:
- whether datasets contain personal information;
- whether sensitive data appears;
- the original collection purpose;
- customer contractual restrictions;
- licensing terms;
- retention periods;
- de-identification measures;
- intellectual-property rights; and
- international data transfers.
Public accessibility does not automatically make information unrestricted for every training purpose. Personal-data rules, copyright, contractual restrictions and platform terms can remain relevant.
If customers supply proprietary datasets for fine-tuning, contracts should identify permitted processing, retention, security and deletion arrangements. The company should also determine whether it acts as a controller, processor or another relevant party for particular data flows.
Review Cloud and Cross-Border Data Flows
Thai AI businesses frequently use overseas cloud infrastructure, foreign model APIs, international parent-company systems or offshore development teams.
Cross-border architecture requires mapping where personal data travels, who receives it and which entity controls the processing. Thai data-protection requirements can apply to international transfers, subject to the statutory mechanisms and circumstances governing the transfer.
Founders should therefore document:
- cloud hosting locations;
- foreign subprocessors;
- model API providers;
- parent-company access;
- offshore development access; and
- backup locations.
This mapping also supports security and customer contracting. An enterprise customer may impose stricter hosting or transfer requirements than the general product design originally anticipated.
Treat Cybersecurity as Both Technical and Regulatory
AI companies should match security controls to their systems, data and customers. Appropriate operational measures can include access controls, credential management, API protection, logging, encryption, cloud configuration, incident response and restrictions on production-model access.
Not every security measure constitutes a universal statutory requirement. However, personal-data law requires appropriate security safeguards, while regulated sectors can impose additional obligations.
Companies operating digital infrastructure or services covered by specific cybersecurity frameworks should separately assess those rules.
Security architecture should also account for third-party models. Sending customer prompts to an external API can create confidentiality, data-processing and vendor-management issues even where the AI company does not host the underlying model.
Protect Intellectual Property and Review Licences
Technology companies should establish ownership and licensing arrangements before developers, contractors and partners contribute commercially significant assets.
Relevant rights can involve:
- software copyright;
- source code;
- trademarks;
- proprietary datasets;
- inventions;
- database materials;
- documentation; and
- model-related technology.
Employment and contractor agreements should address ownership or assignment of relevant work product according to applicable law.
Open-source code and models require separate review. “Open source” does not necessarily mean unrestricted commercial use. Licences can impose attribution, redistribution, source-disclosure or other conditions, while model licences can contain additional acceptable-use or commercial restrictions.
Founders should therefore maintain an inventory of material third-party components used in production systems.
Use Contracts That Reflect AI Operations
AI customer contracts should describe what the service actually provides and how data and third-party technology enter the service.
Relevant provisions can address service scope, customer data, confidentiality, intellectual property, data processing, security responsibilities, service levels, third-party models, termination and liability allocation.
Performance wording deserves particular care where model outputs can vary or require human review. Contractual limitations should accurately describe the product without suggesting that contractual language removes statutory responsibilities.
If the company processes personal data for customers, the contractual framework should correspond with the parties’ actual roles and applicable data-protection duties.
Check Sector and Digital-Service Regulation
AI can become subject to additional regulation because of the function it performs. Medical diagnostic technology, regulated financial services, insurance activities and telecommunications applications can require separate analysis.
Similarly, Thailand regulates certain digital platform service businesses under its electronic-transactions framework. An AI SaaS product does not automatically become a regulated digital platform merely because customers access it online. The service’s characteristics and role determine whether the relevant framework applies.
If an AI company provides payments or another regulated financial function, ordinary technology registration does not replace the required financial authorisation.
Founders should therefore review the underlying service whenever the product moves beyond providing general-purpose software.
Treat Banking as a Separate Process
Corporate registration does not guarantee approval of a Thai corporate bank account.
A bank can examine the company’s shareholders, beneficial owners, business model, expected transactions, source of funds, customer markets, contracts and operating presence during onboarding.
Foreign-controlled technology companies should prepare documents explaining how the business earns revenue and why expected domestic or international transactions correspond with its registered activities.
Companies handling regulated payments need separate analysis because opening an operating account does not authorise the company to provide payment services to customers.
Complete Pre-Launch Checks
Before commercial launch, management should confirm:
- precise AI activities and revenue streams;
- foreign ownership position;
- BOI eligibility and approved scope, if applicable;
- legal structure and genuine shareholding;
- capital requirements;
- corporate objectives;
- registered office;
- sector-specific permissions;
- tax and accounting arrangements;
- employment registrations;
- foreign-worker authorisation;
- personal-data processing;
- training-data rights;
- cross-border transfers;
- cybersecurity responsibilities;
- intellectual-property ownership;
- open-source licence conditions;
- customer contracts; and
- banking arrangements.
The checklist should follow the actual product architecture and operating model rather than a generic software-company template.
Maintain Compliance After Incorporation
Registration begins the company’s continuing corporate obligations. Management must maintain accounting records, financial statements, tax filings, corporate records, and employment obligations applicable to the business.
Changes to directors, shareholders, registered capital, office address or other registered particulars can require corporate filings. Foreign-business permissions and BOI-promoted projects can create additional notification or approval requirements when the company changes activities or project conditions.
Foreign employees must maintain appropriate immigration and work-authorisation status. Meanwhile, personal-data controls should evolve when the company adds datasets, subprocessors, cloud locations or new AI functions.
Sector licences, contractual commitments and investment-promotion conditions also require continuing monitoring. Expansion into a regulated use case should therefore trigger a fresh regulatory assessment rather than relying solely on the company’s original software registration.
Conclusion
Setting up an AI business in Thailand requires more than registering a technology company. The appropriate route depends on the actual commercial activity, foreign ownership, investment strategy, data practices, staffing model and sectors in which the technology operates. Founders should connect corporate structure with foreign-business rules, promotion eligibility, work authorisation, taxation, personal-data controls and sector regulation before launch. As products evolve, the company should reassess its permissions and obligations whenever new datasets, regulated functions, foreign personnel or commercial activities materially change the original operating model.
FAQs
1. Can foreigners own 100% of an AI company in Thailand?
Full foreign ownership can be possible depending on the business activity and legal route. Foreign founders must assess the Foreign Business Act because technology, consultancy, and service activities can receive different treatment. BOI promotion can also provide a route for qualifying promoted activities, subject to approval and conditions.
2. Does every foreign-owned AI business need a Foreign Business Licence?
No. The requirement depends on the activities conducted and the applicable legal route. Some activities may fall outside relevant restrictions, while qualifying BOI-promoted businesses can obtain the appropriate certificate for promoted activities. Founders should classify each proposed revenue-generating service before determining which permission applies.
3. Can an AI start-up apply for BOI investment promotion?
Potentially. Current BOI promotion categories include qualifying software, digital-platform, and digital-content development activities. Eligibility depends on the project’s actual technical work, investment, personnel, and applicable conditions. Merely using artificial intelligence in an ordinary consultancy or commercial service does not automatically qualify the business for promotion.
4. Is there one minimum capital requirement for every AI company?
No. Capital requirements can differ according to corporate structure, foreign-business status, work-authorisation needs and investment-promotion conditions. Registered capital, paid-up capital, required foreign-business capital and project investment should not be treated as identical concepts. Founders should identify which rules apply to their specific ownership and operating model.
5. Does an AI software business require a special AI licence?
Not merely because it develops or uses artificial intelligence. However, additional permissions can apply when the software performs a regulated function, such as providing certain healthcare, financial or telecommunications services. Digital-platform regulation can also become relevant where the service meets the applicable statutory characteristics.
6. Can a Thai AI company hire foreign software engineers?
Yes, subject to applicable immigration and work-authorisation requirements. Incorporation alone does not give foreign employees the right to work in Thailand. BOI-promoted businesses may have specific facilities for approved foreign skilled personnel, while ordinary companies follow the applicable employment, immigration and work-permit framework.
7. Does Thailand’s personal-data law apply to AI training data?
It can. If training, fine-tuning, testing, or evaluation datasets contain personal data within the law’s scope, the company must assess the legal basis, purpose, transparency, security, retention, and other applicable duties. Public accessibility alone does not automatically remove personal data or other legal restrictions.
8. Can a Thai AI company use overseas cloud services?
Yes, but the company should assess personal-data transfers, contractual obligations, security and sector-specific restrictions where applicable. Using foreign cloud providers or model APIs can move data outside Thailand or give overseas processors access. The company should map those flows and apply appropriate transfer and security mechanisms.
9. What tax obligations can apply to an AI company?
A Thai technology company generally falls within ordinary corporate tax and accounting rules unless a specific incentive applies. VAT registration can become necessary when taxable turnover reaches the applicable threshold. BOI-promoted projects may receive specified tax incentives, but those incentives apply according to the approved activity and conditions.
10. How long does it take to establish an AI business in Thailand?
There is no single timeframe covering every AI business. The schedule depends on ownership, corporate documentation, foreign-business permissions, BOI promotion, regulated-sector approvals, premises, foreign staffing and other requirements. A project requiring promotion or specialist approvals can involve substantially more stages than straightforward domestic corporate registration.
