What are the main business laws in Estonia?

Estonian business law is shaped by several key statutes. The Commercial Code (Ariseadustik) regulates company establishment, governance structures and dissolution processes. Contracts and commercial dealings are governed by the Law of Obligations Act. Financial reporting standards come from the Accounting Act.

AML/KYC obligations appear in the Money Laundering and Terrorist Financing Prevention Act, and numerous EU regulations apply directly across Estonian law, such as GDPR.

Estonia melds contemporary EU law with a digitally focused compliance strategy throughout its business framework. The country’s standing as a digital pioneer extends into regulation, with near-total business compliance achievable online via secure digital platforms.

Entrepreneurs managing Estonian companies, whether operating locally or through e-Residency, need to understand the legal environment to maintain standing and prevent penalties.

Estonian company law through 2026 appears in this guide across multiple dimensions including the Commercial Code, accounting standards, management duties, shareholder rights, anti-money laundering rules and EU directive implementation via Estonia’s EU membership. Practical compliance requirements drive the scope rather than academic legal theory.

The Estonian Commercial Code

Overview

The Commercial Code (Ariseadustik) is the foundational law governing all business entities in Estonia. It covers the formation, governance, restructuring and dissolution of commercial entities, including private limited companies (OU), public limited companies (AS), general partnerships, limited partnerships and sole proprietorships.

For the vast majority of e-Resident businesses, the OU-specific provisions of the Commercial Code are the most relevant.

The Commercial Code was substantially revised in 2023 to modernize provisions related to digital governance, remote shareholder participation and cross-border operations. These revisions reflect Estonia’s ongoing commitment to adapting its legal framework to digital business realities.

Key Provisions for OU Companies

Formation requirements. An OU must have at least one founder (natural person or legal entity), minimum share capital of EUR 0.01 (following the February 2023 Commercial Code reform abolishing the former EUR 2,500 statutory minimum), at least one management board member, a registered address in Estonia and articles of association filed with the Business Register.

Company name. Must be unique, include the “OU” designation and not be misleading about the nature of the business. The Business Register checks name availability during registration.

Registered address: Every Estonian company must maintain a registered address in Estonia. This is the official address for receiving legal correspondence and notifications from government agencies. The address must be a real physical location, though virtual office services are widely accepted.

All messages directed to a business’s registered address under the Commercial Code are presumed received by the firm. Government agencies, courts and tax authorities sending notices to your registered address mean that if you do not retrieve or respond, silence cannot be used as a defense.

Reliably forwarding or notifying you of every correspondence must be a standard practice provided by your service carrier. Compliance depends on this critical requirement being met.

Management Board Obligations

Composition and Appointment

An OU must have a management board of one or more members. There is no requirement for management board members to be Estonian residents or e-Residents, though having an e-Resident as a board member simplifies digital management since they can sign documents electronically through the Business Register.

Shareholders appoint and remove management board members through resolutions. Each appointment requires registration with the Business Register. Board members serve terms defined in the articles of association, which may not exceed three years in length although reappointment may occur without limitation.

Duties and Responsibilities

Board members owe duties to the company itself, not to any individual shareholder. Those duties encompass:

Duty of care. A board member must run the company with prudent businessperson diligence through informed decision-making, avoidance of unnecessary risks and actions that serve the company’s best interests.

Duty of loyalty. Directors must place the company’s interests ahead of personal interests. All conflicts require disclosure and proper management.

Compliance obligation. Board members are responsible for ensuring the company complies with all applicable laws, including tax filing, annual reporting and regulatory requirements.

Bookkeeping. Accounting records must be organized and maintained properly, which the management board is ultimately responsible for. Even though this work usually gets delegated to an accountant, the board retains legal responsibility.

Liability. Management board members can be held personally liable for damages caused to the company through breach of their duties. This includes liability for negligent management decisions, failure to file taxes and failure to take action when the company is insolvent.

Obligation Requirement Deadline/Frequency
Annual report filing File with Business Register Within 6 months of fiscal year end
Tax declarations (TSD) File with EMTA if making taxable payments 10th of following month
VAT returns File with EMTA if VAT registered 20th of following month
Beneficial ownership registration Register/update in Business Register Within 30 days of changes
Shareholder register maintenance Keep current register of shareholders Ongoing
Accounting records Maintain in accordance with Accounting Act Ongoing (7-year retention)

Shareholder Governance

Shareholder Decisions

Major decisions in an OU require shareholder approval, either through a formal general meeting or through written resolutions. Decisions requiring shareholder approval include:

  • Approval of the annual report and profit distribution
  • Amendment of the articles of association
  • Increase or decrease of share capital
  • Appointment and removal of management board members
  • Approval of significant transactions or transactions with related parties
  • Dissolution of the company

Voting and Resolutions

Shareholders vote in proportion to their share ownership. Ordinary resolutions require a simple majority (over 50%) of votes represented. Certain fundamental changes (amending articles of association, increasing or decreasing share capital, dissolving the company) require a qualified majority of two-thirds.

For OU companies, shareholders can pass resolutions without holding a physical meeting by circulating the proposed resolution in writing (including digitally) and collecting signatures. This is the standard approach for e-Resident companies, where shareholders may be located in different countries.

Estonian law fully supports digital shareholder governance. Resolutions can be drafted, circulated and signed digitally using e-Residency cards or other qualified electronic signatures recognized under the EU eIDAS regulation. There is no requirement for physical meetings, physical signatures, or notarized documents for routine shareholder decisions.

This digital-first approach is one of Estonia’s key advantages for internationally distributed businesses.

Minority Shareholder Protections

The Commercial Code provides several protections for minority shareholders:

  • Right to information about the company’s business
  • Right to request a special audit if there are concerns about management
  • Right to challenge shareholder resolutions in court
  • Squeeze-out rights (for shareholders holding over 90% of shares)
  • Right to bring derivative actions on behalf of the company against management board members

Annual Report Requirements

Contents

The annual report (aastaaruanne) is the most important recurring compliance obligation for Estonian companies. It consists of:

Financial statements. Balance sheet, income statement, cash flow statement, statement of changes in equity and notes to the financial statements. Small companies (meeting at least two of three criteria: balance sheet total under EUR 4 million, revenue under EUR 8 million, fewer than 50 employees) may prepare simplified financial statements.

Management report. A narrative description of the company’s business activities during the fiscal year, significant events and the management board’s assessment of the company’s financial position and future prospects.

Profit distribution proposal: The management board’s recommendation for how the year’s profit (or accumulated profit) should be allocated, whether distributed as dividends, transferred to reserves, or carried forward.

Auditor’s report (if applicable): Companies exceeding certain size thresholds must have their financial statements audited by a sworn auditor. The thresholds are: revenue exceeding EUR 4 million, balance sheet total exceeding EUR 2 million, or more than 50 employees (audit required if at least two of three are exceeded).

Filing Process

The annual report is filed through the Business Register’s electronic reporting system. The system provides templates and validation checks. The report must be digitally signed by all management board members. If the company has a supervisory board, supervisory board members must also sign.

Consequences of Non-Filing

Failure to file the annual report triggers a graduated enforcement response:

  1. Once the deadline has passed, the Business Register sends out a warning.
  2. Non-filing repeated becomes subject to fines of up to EUR 3,200.
  3. When a business does not file for two consecutive years, compulsory dissolution proceedings commence through the Business Register.
  4. The company is struck from the register, and its assets are distributed to shareholders after settling debts

Anti-Money Laundering (AML) Requirements

Beneficial Ownership Registration

Every Estonian business must record its beneficial ownership information in the Business Register. Beneficial owners are natural persons controlling more than 25% of shares or voting rights, or who otherwise exercise control over the company. Changes to the beneficial ownership must be reflected in the register within 30 days.

The Money Laundering and Terrorist Financing Prevention Act

Estonia’s AML framework is implemented through the Money Laundering and Terrorist Financing Prevention Act (Rahapesu ja terrorismi rahastamise tokestamise seadus), which transposes EU AML directives into Estonian law. The Act applies to all Estonian entities but imposes enhanced obligations on “obliged entities” in specific sectors.

Obliged Entities

Companies operating in the following sectors have enhanced AML obligations:

  • Financial institutions and payment service providers
  • Virtual currency service providers (crypto businesses)
  • Real estate agents
  • Accountants and tax advisors
  • Legal professionals (lawyers, notaries)
  • Trust and company service providers
  • Traders of precious metals or stones
  • Art dealers (for transactions over EUR 10,000)
  • Gambling service providers

Obliged entities must implement:

  • Customer due diligence (KYC) procedures
  • Transaction monitoring systems
  • Suspicious activity reporting to the Financial Intelligence Unit (Rahapesu Andmeburoo)
  • Internal AML policies and procedures
  • Employee training programs
  • Risk assessments

AML enforcement in Estonia has hardened markedly over the past few years, driven in part by the Danske Bank money laundering scandal which exposed issues at the bank’s Estonian branch. Both the Financial Supervision Authority and Financial Intelligence Unit have bolstered resources dedicated to AML supervision, and the penalties for non-compliance have strengthened.

Regulated-sector firms must build robust AML frameworks that get regular updates.

Virtual Currency Service Providers

Estonia pioneered crypto business licensing but has since hardened its regulatory stance substantially after 2022. To operate a virtual currency service in Estonia, providers need a Financial Intelligence Unit license, must maintain minimum share capital, keep local management onsite and meet thorough AML standards.

Numerous previously licensed operators have lost their licenses or withdrawn from the Estonian market due to the heavier regulatory requirements.

EU Law and Directives

Direct Effect Regulations

As an EU member state, Estonia is bound by EU regulations that have direct effect, meaning they apply automatically without needing transposition into Estonian law. Key regulations include:

  • General Data Protection Regulation (GDPR): See our dedicated guide on Estonia GDPR compliance
  • EU Regulation 883⁄2004. Social security coordination
  • eIDAS Regulation. Electronic identification and trust services
  • Payment Services Directive (PSD2). Payment service regulations

Transposed Directives

EU directives must be transposed into Estonian law. Key directives affecting businesses include:

  • Anti-Money Laundering Directives. Transposed through the AML Prevention Act
  • Anti-Tax Avoidance Directives (ATAD I and II). CFC rules, interest limitation, exit taxation
  • Company Law Directives. Harmonized rules on company formation, capital and disclosure
  • Employment Law Directives. Minimum standards for working conditions, health and safety
  • Consumer Protection Directives. Rules for B2C businesses

EU Digital Markets and Services

The Digital Markets Act (DMA) and Digital Services Act (DSA) impose obligations on online platforms and digital service providers operating in the EU. While the most stringent requirements target large platforms, smaller Estonian companies providing digital services must also comply with transparency, content moderation and consumer protection requirements appropriate to their size.

Contract Law

Law of Obligations Act

The Law of Obligations Act (Voiduoigusseadus) governs contracts and commercial transactions in Estonia. Key principles include:

  • Freedom of contract. Parties are generally free to determine the terms of their contracts
  • Good faith. All contractual relationships are governed by the principle of good faith
  • Written form. Most commercial contracts do not require written form to be valid, but written form is recommended for evidentiary purposes
  • Digital signatures. Contracts signed with qualified electronic signatures (including e-Residency signatures) have the same legal force as handwritten signatures

Dispute Resolution

Commercial disputes in Estonia can be resolved through:

  • Court proceedings. Estonian courts (county court as first instance, circuit court as appeal, Supreme Court as final appeal)
  • Arbitration. The Arbitration Court of the Estonian Chamber of Commerce and Industry is the primary domestic arbitration institution
  • Mediation. Available but less commonly used for commercial disputes

For international disputes involving Estonian companies, Estonian courts apply EU jurisdiction rules (Brussels I Regulation) and the parties may choose the applicable law in their contract.

Comprehensive employment law details can be found in our Estonia employment law guide. Several compliance points warrant mention here, including:

  • All employment contracts must be in writing (or digital equivalent)
  • Employment must be registered with the Employment Register before the first working day
  • Fees including social tax (33%) and unemployment insurance must be remitted monthly.
  • Employers must comply with the minimum wage of EUR 946 per month as of April 2026.
  • Workplace health and safety requirements apply from the first employee

Compliance Calendar Summary

Month Obligation Filing Body
Monthly (10th) TSD declaration (if making taxable payments) EMTA
Monthly (20th) VAT return (if VAT registered) EMTA
Quarterly OSS return (if applicable) EMTA
By June 30 Annual report (for calendar fiscal year) Business Register
Within 30 days Beneficial ownership changes Business Register
Ongoing Accounting records maintenance Internal
Ongoing AML compliance (obliged entities) FIU

Penalties for Non-Compliance

The consequences of missing Estonian compliance deadlines are concrete and enforced. Penalty orders issued by the Business Register and Tax and Customs Board are a useful benchmark for calibrating risk. Non-compliance is rarely met with leniency because Estonia’s digital administration means violations are detected automatically rather than through manual audits.

Violation Penalty (2026) Escalation
Late annual report (OU) EUR 200 fine, with public warning after 6 months Compulsory dissolution proceedings after 12 months
Failure to register UBO Up to EUR 32,000 per legal person; up to EUR 3,200 per board member Repeat offence doubles fine
Late VAT return 0.06% interest per day + EUR 10-3,200 fine Tax arrest and forced deregistration
Late TSD declaration EUR 100-3,200 Board liability for unpaid employee taxes
Missing accounting records EUR 1,200-32,000 Criminal liability under Penal Code s.381
AML breach (obliged entity) Up to EUR 400,000 or 10% turnover License revocation
Missing board resolution for transactions > capital Transactions voidable Personal board member liability

More than 3,000 companies are removed from the Business Register each year in Estonia, with failure to file annual reports as the primary reason, demonstrating that the compulsory dissolution mechanism in Ariseadustik s.60 is not theoretical but is actively applied [5].

Director Liability Scenarios

Directors must grasp board-liability exposure early. Estonian law classifies directors as personally responsible for certain failures, and changes to the 2023 Commercial Code gave insolvency proceedings stronger claw-back tools.

  • Unpaid taxes. Under the Taxation Act s.40, management board members are personally liable for intentional or grossly negligent non-payment of taxes that deprives the state of revenue.
  • Wrongful trading: If a board continues to trade while the company is clearly insolvent, the court may order directors to contribute personally to creditor losses (s.188 of the Bankruptcy Act).
  • Breach of fiduciary duty. When transactions benefit directors at the company’s expense, courts can reverse those transactions and order directors to pay damages under Commercial Code s.187.
  • Data protection fines. Companies facing GDPR fines of up to EUR 20 million or 4% of global turnover can expect it, yet directors who ignored Data Protection Inspectorate orders will also face personal enforcement action.

Recordkeeping and Retention Requirements

Estonian accounting law (Raamatupidamise seadus) and tax law impose minimum retention periods that our compliance advisors encode into every client’s document management procedure.

Record Type Retention Period Legal Basis
Annual reports and financial statements 10 years Accounting Act s.12
Source documents (invoices, contracts) 7 years Accounting Act s.12
Payroll records 10 years Employment Contracts Act s.28
VAT invoices 7 years VAT Act s.36
AML customer due diligence records 5 years after relationship end AML Act s.47
Shareholder resolutions and minutes Indefinite (company lifetime) Commercial Code s.168
Management board resolutions Indefinite (company lifetime) Commercial Code s.184
Customs records 7 years Customs Act s.25

Conclusion

Estonia’s business law framework is comprehensive, EU-harmonized and digitally administered. The core compliance obligations for a typical OU company center on annual report filing, monthly tax declarations, proper accounting and beneficial ownership registration. For companies in regulated sectors, AML obligations add a significant additional compliance layer.

The digital infrastructure makes compliance mechanically straightforward, but the legal obligations themselves are substantive and carry real consequences for non-compliance. Management board members bear personal responsibility for the company’s compliance, making it essential to understand these obligations or delegate them to competent professionals.

For related guidance, see our articles on Estonia employment law, Estonia GDPR compliance, and Estonia corporate tax.

How to apply for company registration online in Estonia?

Estonian OU registration online works through the e-Business Register (www.rik.ee) using an Estonian e-Residency digital ID card. The process takes 15 to 30 minutes and costs 265 EUR in state fees.

Steps: log in with e-Residency card, reserve a unique company name in the Business Register, prepare articles of association (templates provided), declare at least 0.01 EUR minimum share capital (since the February 2023 Commercial Code reform, paid upon registration), appoint a management board member, pay 265 EUR state fee and sign digitally. Processing is same-day to 2 business days.

Before registering, you need the e-Residency card itself (150 EUR state fee, 3 to 8 weeks to issue) and a legal address and contact person in Estonia (25 to 50 EUR/month from service providers). Post-registration, register for VAT (optional below 40,000 EUR annual turnover) and open a business bank account.

How to register a company in Estonia online via e-Residency?

Estonian company registration online via e-Residency completes in 15 minutes to 2 business days for EUR 265 in state fees.

Sequence:

  • apply for e-Residency at e-resident.gov.ee (EUR 150 state fee, 3 to 8 weeks processing, in-person card collection at Estonian embassy or Tallinn service point)
  • receive the digital ID card, log into the e-Business Register (rik.ee) with the e-Residency card
  • reserve unique company name, prepare articles of association (templates free)
  • declare minimum share capital from EUR 0.01 (paid upon registration under the 2023 Commercial Code rules)
  • appoint management board member, pay EUR 265 state fee via card, sign digitally. Company registered same-day to 2 business days. Post-registration: register for VAT voluntarily (mandatory above EUR 40,000 annual turnover)
  • open business bank account at Wise Business (EUR 31 setup, 1 to 5 days)
  • Revolut Business (EUR 0 to 100/month, 1 to 5 days)
  • Payoneer (EUR 0 opening, 1 to 3 days)
  • LHV (EUR 0 to 250 for e-Residents, 5 to 15 days). Estonia’s 0% corporate tax on retained profits (22% only on distributions) + digital-first compliance (annual reports filed online through e-Tax Board) makes OU ideal for cross-border SaaS
  • services export and EU digital businesses. E-Residency itself is not immigration - no right to live or work in Estonia