Cloud Infrastructure Tax Traps: WHT on AWS, Hetzner, Supabase & Railway

For modern tech startups, engineering teams, CTOs, and DevOps leaders in Malaysia, infrastructure expenses form the core engine of product delivery. Every month, credit cards and corporate accounts pay for virtual servers, managed Postgres databases, storage buckets, container deployments, and object backups across providers like Amazon Web Services (AWS), Hetzner, Supabase, Railway, and Backblaze.

Engineering leadership usually focuses on uptime, latency, bandwidth, compute credits, and architectural scaling. However, behind the scenes, finance managers and tax accountants often face a major compliance hurdle: Payments made by Malaysian companies to overseas infrastructure providers qualify as software royalties or technical services under Lembaga Hasil Dalam Negeri (LHDN), triggering a mandatory Withholding Tax (WHT) requirement.

Failing to account for Withholding Tax on cloud servers and database subscriptions exposes tech companies to disallowed tax deductions, financial penalties, and e-Invoicing mapping issues. In this guide, we break down why cloud infrastructure is taxed in Malaysia, how the law classifies hosting, vendor Tax Identification Numbers (TINs), Double Taxation Agreements (DTAs), and how to protect your cloud expense deductions.

1. Why Cloud Servers & Managed Databases Face Withholding Tax

A common misconception among engineering leads and IT managers is believing that cloud infrastructure is simply a utility bill—similar to local electricity or internet connectivity. Because no physical technician steps foot in Malaysia, teams often assume cross-border payments are exempt from local taxes.

LHDN enforces strict rules under the Income Tax Act 1967 (ITA 1967) and Practice Note No. 3/2023 regarding payments to non-resident entities:

A. The Software Royalty & Technical Service Legal Definition

• Software Royalties (Section 109): Subscribing to cloud platforms, managed database dashboards (like Supabase), API platform layers, or developer automation tools (like Railway) gives your business a commercial right to access foreign proprietary software code, management consoles, and infrastructure orchestration algorithms. Under Malaysian tax law, this right to use software constitutes a taxable royalty.
• Special Classes of Income / Technical Services (Section 109B): Payments for server management, automated database backups, custom compute provisioning, and technical cloud hosting services fall under non-resident technical fees or service payments.

Under domestic tax law, both categories carry a standard statutory 10% Withholding Tax rate that must be remitted directly to LHDN by the Malaysian purchasing entity.

2. The Gross-Up Reality: Why Infrastructure Costs More Than You Think

When your infrastructure scales, your monthly compute bill scales with it. However, foreign cloud providers do not alter their automated checkout gateways for local tax withholding rules. Platforms like AWS, Hetzner, Railway, Supabase, and Backblaze automatically bill your corporate credit card for 100% of the invoice amount.

Because these vendors will not accept a 10% reduced net payment, your Malaysian company must absorb the Withholding Tax cost out of pocket by performing a tax gross-up calculation.

3. The Double Tax Penalty: Why Ignoring WHT Kills Startup Runways

Some early-stage startups and IT teams ignore WHT because monthly SaaS and server bills seem automated or fragmented across multiple developer accounts. However, ignoring Withholding Tax on infrastructure expenses creates severe financial exposure under Sections 109 and 39 of the ITA 1967.

4. Why Companies Must Record Foreign Vendor Tax Identification Numbers (TINs)

With Malaysia’s full implementation of the LHDN MyInvois e-Invoicing system, recording foreign supplier profile data is no longer optional. When processing self-billed e-Invoices or logging foreign vendor ledger entries, your accounting department needs exact vendor TIN references.

Having accurate vendor profile details ensures seamless integration between your accounting software (AutoCount, SQL Account, Xero, QuickBooks) and LHDN MyTax portals.

5. Lowering Tax Rates from 10% to 8% via Double Taxation Agreements (DTA)

While domestic tax law sets a default 10% WHT rate on software royalties, your company can legally lower this tax liability by utilizing Double Taxation Agreements (DTAs).

For example, SUPABASE PTE. LTD. is incorporated and tax-resident in Singapore. Under Article 12 (Royalties) of the Malaysia–Singapore Double Taxation Agreement, the maximum withholding tax rate permitted on software royalties is capped at 8% instead of the standard 10%.

The Catch: To claim an 8% reduced treaty rate on LHDN Form CP37 filings, your company must maintain a valid, official vendor Certificate of Residence (COR) / Tax Residence Certificate (TRC) issued by the foreign tax authority (e.g., Inland Revenue Authority of Singapore – IRAS) for that tax year. Without a physical or digital copy of the vendor COR on file, you must default to paying 10%.

6. Step-by-Step Workflow: Filing Infrastructure WHT via e-WHT

Remitting Withholding Tax on foreign infrastructure expenses is completed online via LHDN’s MyTax Portal (mytax.hasil.gov.my) using the e-WHT module:

Step 1: Convert Invoices & Calculate Tax

Convert your monthly server invoice into Ringgit Malaysia (MYR) based on the exchange rate on the transaction date. Multiply by the applicable Withholding Tax rate:

WHT Payable = Total Invoice Amount (MYR) × Applicable Rate (10% or 8% DTA Rate)

Step 2: Choose CP37 vs. CP37S Relief

• Standard Form CP37 (Monthly Filing): Required for large infrastructure bills. Must be submitted within 30 days of making payment to the foreign cloud provider.
• Form CP37S (Bi-Annual Small-Value Relief): If the Withholding Tax amount on an individual monthly subscription or storage invoice is RM500 or less (covering smaller Railway, Supabase, or Backblaze tiers), LHDN permits companies to consolidate these charges and pay twice a year—by July 30 (for Jan–Jun payments) and January 30 (for Jul–Dec payments).

Step 3: Submit Electronic Filing & Archive

1. Log into your company profile on LHDN MyTax.
2. Open the e-WHT system and select Form CP37 (Section 109 Royalties).
3. Input vendor profile details (Hetzner, Supabase, Railway, or Backblaze) along with their foreign registration IDs.
4. Generate the e-TT payment slip and process the payment via FPX online corporate banking.
5. Archive the payment receipt, Form CP37 filing, server invoice, and vendor COR together for 7 years to keep your cloud expense claims 100% audit-proof.

7. Streamline Foreign Vendor Compliance for Your Tech Stack

Gathering verified Tax Identification Numbers (TINs), legal corporate names, and official foreign tax residency certificates for cloud hosts, developer platforms, and SaaS tools can consume hours of engineering and administrative time.