MDEC's New MDLR Framework 2026: The Complete Guide for Foreign Tech Companies — MD Hub, MD Nexus, MD Tech Zone, Tax Incentives and the Step-by-Step Path to Malaysia Digital Status

1. From MSC to Malaysia Digital: Understanding the Evolution

Malaysia's journey as a tech investment destination began in 1996 when MDEC (then called the Multimedia Development Corporation) launched the Multimedia Super Corridor (MSC) initiative. For more than two decades, MSC Status — and later MS Malaysia Status — was the gold standard for tech companies in Malaysia, offering tax breaks, liberal expatriate hiring and infrastructure guarantees. The catch: companies had to physically locate in designated Cybercities or Cybercentres, most notably Cyberjaya.

In July 2022, the Malaysian government responded to a changed digital landscape by launching Malaysia Digital (MD) as the successor initiative. The philosophical shift was profound: from a location-based model to an activity-based model. Suddenly, a company doing AI development from a Johor Bahru office park could qualify for the same incentives as one occupying a Cyberjaya tower. The old minimum office-space requirements were scrapped. MDEC began awarding MD Status based on what a company does, not where it sits.

However, the removal of location requirements created a policy gap: without designated zones, it became harder to build concentrated digital clusters with shared high-grade infrastructure. MDEC recognised this tension and, in early 2025, placed the old Cybercity/Cybercentre and Malaysia Digital Hub application systems on interim deferment while it designed a smarter replacement. The result — unveiled on 15 December 2025 and effective from 1 January 2026 — is the MD Location Recognition (MDLR) framework.

2. The Three MDLR Tiers Explained

MDEC's new MDLR framework designates three distinct recognition categories, each targeting a different type of digital real estate or geography. Understanding the difference between them is essential before you sign a lease or choose a development location.

MD Hub — Community & Collaboration Spaces

MD Hub recognises dynamic spaces that serve as vibrant centres for digital communities. These environments are designed for local and global startups, accelerators, incubators, tech companies and investors to converge and collaborate. Think co-working spaces, innovation hubs and technology parks with a strong community-building mandate. For a foreign company in its early days in Malaysia — perhaps running a small BD or R&D team — an MD Hub provides instant access to a curated tech ecosystem, potential local partners and MDEC-sponsored programmes, without the overhead of premium Grade-A office space.

MD Nexus — Premium Digital Business Premises

MD Nexus is the flagship building-level tier. It recognises premium business premises equipped with infrastructure designed for established digital investors and companies, offering sophisticated environments with advanced facilities tailored to support high-value digital operations. Under the MDLR framework, MD Nexus assesses buildings across four performance pillars: digital infrastructure, electrical supply resilience, the vibrancy of the business environment, and an enhanced value proposition for tenants.

Merdeka 118 — Kuala Lumpur's iconic supertall skyscraper — became Malaysia's first MD Nexus building shortly after the framework launched. This matters commercially: the Knight Frank Malaysia and MDEC joint whitepaper published in February 2026 noted that the framework is designed to expand, with MDEC signalling its intention to benchmark future recognitions against Merdeka 118 as "more future-ready locations are developed nationwide." For a regional HQ or a data-intensive operation, an MD Nexus address is fast becoming the institutional-grade signal that international clients and investors recognise.

MD Tech Zone — Specialised Innovation Districts

MD Tech Zone is a geographically scoped designation for areas focused on cutting-edge digital innovation. Granted by the Government of Malaysia, this status highlights zones that foster development in key technology sectors and underscores these areas' crucial role in advancing Malaysia's position in emerging digital fields. Unlike MD Hub (building-level, community focus) or MD Nexus (building-level, infrastructure focus), MD Tech Zone operates at the district or corridor level — think dedicated semiconductor R&D corridors or AI development precincts. For capital-intensive investors building data centres or advanced manufacturing facilities, a Tech Zone location can mean access to purpose-built power and connectivity grid infrastructure that would be expensive to replicate independently.

3. Malaysia Digital (MD) Status: What It Is and Why Foreign Companies Need It

Before diving into application steps, it is worth stepping back to understand what MD Status actually confers. The Malaysian Government, through MDEC, awards MD Status to eligible companies to participate in and undertake any of Malaysia Digital's approved activities. MD Status companies receive a set of incentives, rights and privileges — many enshrined as legally binding commitments in the Malaysia Digital Bill of Guarantees (BoGs).

There are 10 BoGs in total, providing government-to-investor commitments that create a stable and predictable operating environment. The most commercially significant for foreign investors are:

• BoG 2 — Foreign talent hiring: MD Status companies can employ knowledge workers (local and foreign) in numbers commensurate with their business plan. This is the foundation for the Employment Pass Green Lane discussed below.
• BoG 3 — 100% foreign ownership: MD Status companies are exempt from local ownership requirements. A Chinese, Taiwanese, Hong Kong or Singapore group can hold the entire equity of its Malaysian subsidiary without needing a Bumiputera or local shareholder.
• BoG 4 — Freedom to source capital globally: MD Status companies can raise and borrow funds globally. Non-residents investing in MD Status companies are free to repatriate any amount of capital, divestment proceeds, profits and dividends in foreign currency — a critical assurance for headquarters in Beijing, Shanghai, Taipei or Singapore reviewing treasury policy.
• BoG 5 — IP protection: Enhanced commitment to intellectual property rights, particularly important for software firms and AI model developers.
• BoG 7 — Fiscal incentives: Access to the Malaysia Digital Tax Incentive (MDTI), import duty exemption on ICT/multimedia equipment, and the Malaysia Digital Acceleration Grant (MDAG).

As of Q1 2026, there are already 4,379 companies with MD Status — a figure that reflects the programme's broad attractiveness. Recent high-profile grantees include China Unicom Operations (Malaysia) Sdn Bhd, which received MD Status in February 2026 to expand into AI and data services, and sa.global (a Microsoft partner), awarded MD Status in March 2026.

4. The MD Tax Incentive Landscape: RTR vs ITA — Rates, Eligibility and the 2027 Deadline

The outcome-based Malaysia Digital Tax Incentive (MDTI), launched on 31 May 2024, is the fiscal centrepiece of MD Status. Companies must choose between two mutually exclusive tracks: the Reduced Tax Rate (RTR) or the Investment Tax Allowance (ITA). The choice has significant implications depending on whether your Malaysian entity is primarily income-generating (RTR favoured) or capital-intensive (ITA favoured).

Critical deadline: Applications for both incentive tracks must be submitted by 31 December 2027. Companies that miss this window may still obtain MD Status and its non-fiscal benefits (100% ownership, Green Lane EP, FX freedom) but may not be eligible for the current tax rates unless a new framework is gazetted. Given that incentive applications require a completed business plan, audited financials and an active Malaysian entity, companies targeting the 2027 window need to start the incorporation and MD Status process now — not in 2027.

In addition to the MDTI, MD Status companies can also access DESAC (Digital Ecosystem Acceleration Scheme), administered by MIDA, which provides investment tax allowances of up to 100% on qualifying capital expenditure for eligible digital infrastructure providers, offsettable against statutory income for up to 10 years. This is particularly relevant for data centre developers and cloud infrastructure operators — a sector where Malaysia's market, valued at USD 6.14 billion in 2025, is projected to more than double to USD 13.57 billion by 2030.

5. Employment Pass Green Lane: The Talent Advantage of MD Status

For foreign companies, talent mobility is often the make-or-break factor in a new market. MD Status provides a structured advantage here. Through MDEC's eXpats Service Centre, MD Status companies enjoy pre-approved talent quotas for hiring international knowledge workers, and the employment pass process benefits from expedited ("Green Lane") processing.

Effective 1 June 2026, Malaysia's revised Employment Pass framework (NEEP) introduced new salary thresholds and categorical changes. MD Status allows companies to navigate these revised EP salary tiers with higher flexibility and Green Lane processing for established firms. In practical terms, this means an MD Status company can onboard a data scientist from China or a cybersecurity specialist from Taiwan faster and with less administrative friction than a non-MD company in the same industry.

The definition of a "knowledge worker" for MD purposes is an individual with a tertiary qualification (degree or diploma) in a technical or professional field, directly employed in approved MD activities, and earning a minimum monthly base salary of RM 5,000. Maintaining the minimum complement of at least two such knowledge workers is a condition of ongoing MD Status compliance.

6. Eligibility and Qualification: Can Your Foreign Company Apply?

The fundamental eligibility rule is straightforward: the applying company must be incorporated under the Companies Act 2016 and be a resident entity in Malaysia. This means a foreign company must first establish a Malaysian subsidiary — typically a Sdn Bhd (private limited company) — before it can apply for MD Status. The application is made in the name of the Malaysian entity, not the foreign parent.

Beyond the incorporation requirement, MD Status eligibility is grounded in the company's proposed or current activities. MDEC maintains a list of promoted digital activities that qualify, spanning a wide range of technology sectors including:

• Artificial Intelligence (AI) and Big Data Analytics (BDA)
• Cybersecurity solutions and services
• Fintech and digital financial services
• Cloud computing and SaaS platform development
• Internet of Things (IoT) and smart city solutions
• Digital content creation and creative media
• E-commerce and digital trade enabling platforms
• Digital health and MedTech
• Advanced manufacturing and Industry 4.0 technologies

MDEC's approval committee also has the discretion to accept activities outside these core categories if they are deemed significant for Malaysia's digital ecosystem. Applications that align with the nine MD Drivers — the sectors the Ministry of Digital has identified as high-growth national priorities — receive the most favourable consideration.

Once MD Status is awarded, the company must meet the following operational conditions within 12 months:

• Commence operations and undertake the approved MD activities in Malaysia.
• Employ a minimum of two full-time knowledge workers with a minimum average monthly base salary of RM 5,000 for the approved activities.
• Incur a minimum annual operating expenditure of RM 50,000 for the approved MD activities.

MD Status, once granted, is perpetual as long as compliance is maintained. However, the company must submit an annual self-declaration form, verified by an independent external auditor, to confirm it is meeting its investment and headcount targets.

7. Step-by-Step: How a Foreign Company Applies for MD Status in 2026

The pathway from "foreign company with a Malaysian market interest" to "active MD Status holder with tax incentives" involves several sequential steps. Planning for the timeline is critical given the 2027 incentive deadline.

Step 1 — Incorporate a Malaysian Sdn Bhd (1–3 weeks)

The first non-negotiable step is registering a private limited company (Sdn Bhd) in Malaysia under the Companies Act 2016. The company must be resident in Malaysia, have a registered address, appointed directors and a company secretary. A 100% foreign-owned Sdn Bhd is perfectly legal and, once it holds MD Status, is backed by BoG No. 3's ownership guarantee. Our Sdn Bhd incorporation service can complete this step in as little as one to three working weeks, including registered address, company secretary and all SSM filings.

Step 2 — Prepare Your Business Plan and Supporting Documents (2–4 weeks)

MDEC requires a detailed business plan as part of the MD Status application. The plan should articulate:

• The specific approved digital activities the company proposes to undertake in Malaysia
• The technology enablers the company will leverage (AI, cloud, blockchain, etc.)
• Projected headcount, salary levels and knowledge-worker ratios
• Five-year financial projections showing operating expenditure, revenue and investment milestones
• The company's contribution to Malaysia's digital economy (job creation, technology transfer, exports)

Supporting documents typically include the company's Certificate of Incorporation, audited financials (or management accounts for newly incorporated entities), details of the parent company and a description of the ownership structure. Aligning your business plan to the nine MD Driver sectors maximises approval chances.

Step 3 — Submit the MD Status Application via the MDEC Portal (online)

Applications for MD Status are submitted through the official MDEC Malaysia Digital Platform. The system is entirely digital — no physical submission is required. MDEC's CLIC team (clic@mdec.com.my / 1-800-88-8338) provides pre-application guidance to help companies position their activities correctly before formal submission.

Step 4 — MDEC Evaluation and Approval (4–8 weeks)

MDEC's approval committee reviews the business plan against eligibility criteria: digital activity alignment, economic contribution, technology innovation and job creation potential. Upon approval, the company receives an approval letter which it must formally accept. An MD Status e-Certificate is then issued. Rejection is rare for genuinely tech-focused companies with solid business plans; where concerns arise, MDEC typically requests clarification or revised documentation rather than outright rejection.

Step 5 — Apply for Tax Incentives (RTR or ITA) Separately (submit by 31 Dec 2027)

MD Status does not automatically confer the tax incentives — the RTR or ITA must be applied for separately, through the Malaysia Digital Tax Incentive application process. This requires demonstrating qualifying activities, the promoted tech enablers used and the specific investment outcomes the company commits to. Note that a company can only apply for one track (RTR or ITA), not both. Plan your choice carefully based on whether you are more income-focused or capital-expenditure-focused.

Step 6 — Consider Your MDLR Location Strategy (optional but strategic)

If your Malaysian entity operates from or plans to move to a building or zone that qualifies for MDLR recognition, encourage your landlord or property manager to apply for MD Hub, MD Nexus or MD Tech Zone status. As a tenant, you benefit indirectly — your address becomes part of MDEC's promoted investment infrastructure, increasing your visibility to potential partners, clients and co-investors. For data centre investors, locating within an MD Tech Zone may provide access to priority infrastructure planning and power allocations.

8. Worked Example: A Chinese AI SaaS Company Sets Up in Malaysia

Consider a scenario common among our clients: a Chinese AI company based in Shenzhen develops a natural-language processing (NLP) platform for enterprise clients. The company wants to access ASEAN markets, serve Singapore-listed clients needing local data residency, and reduce exposure to US technology restrictions. Malaysia is on its shortlist alongside Singapore.

Why Malaysia over Singapore? Operating costs in Malaysia are significantly lower, the tax incentive regime is more generous for an AI software firm (0% RTR on IP income vs Singapore's 5–10% under IP incentive regimes), and the 100% foreign ownership guarantee under BoG No. 3 removes the need for a local partner. Malaysia's position as the top destination in ASEAN for data centre investment — with USD 6.14 billion in the market already and growing — means local enterprise clients are increasingly demanding Malaysian-hosted AI solutions.

The path: The Shenzhen company incorporates a Sdn Bhd in Malaysia (completed in two weeks via our incorporation service), holds 100% of the shares from China, appoints a local director and company secretary, and establishes a registered address in KL. Within four weeks of incorporation, it submits its MD Status application based on its AI and Big Data Analytics activities — both squarely within MDEC's promoted activity list. The business plan commits to hiring six Malaysian AI engineers within 12 months and investing RM 200,000 in annual Malaysian operating expenditure.

The incentives: The company applies for the RTR track targeting 0% tax on its NLP platform's IP-derived income for 10 years. Its Chinese parent retains the underlying IP, but the Malaysian subsidiary develops localised models — qualifying for the nexus calculation. Equipment imported for the Malaysian development lab (GPUs, servers) is exempt from import duty and sales tax. The parent company freely repatriates licensing fees from Malaysia to China without BNM restrictions under BoG No. 4.

The location: The company initially takes space in an MD Hub co-working space in Bangsar South, paying ~RM 3,000/month for a four-person team. As it scales, it plans to move to an MD Nexus-recognised building in KL's CBD, signalling institutional-grade presence to its enterprise clients. The location choice doesn't affect the MD Status or tax incentives — it affects the quality of the ecosystem and the speed of deal introductions through MDEC's partner network.

9. Common Mistakes Foreign Companies Make — And How to Avoid Them

• Mistake 1 — Applying for MD Status before incorporation. This cannot be done. The MD Status application requires a registered Malaysian Sdn Bhd with a valid SSM registration number. Don't delay the incorporation step, as the clock on the 12-month operational requirement starts from the MD Status award date, not from when you decide to apply.
• Mistake 2 — Treating MD Status and the tax incentive as a single application. They are two separate processes. MD Status is the gateway; the RTR or ITA tax incentive requires a follow-on application. Many companies get MD Status but fail to apply for the tax incentive before the 31 December 2027 deadline, losing the fiscal benefit entirely.
• Mistake 3 — Choosing the wrong tax incentive track. RTR (reduced income tax rate) suits companies that expect to generate revenue in Malaysia early and want a steady reduced rate for up to 10 years. ITA (investment tax allowance) suits capital-intensive operations — data centres, hardware labs — where large upfront capex needs to be recovered against taxable income. Switching tracks after approval is not possible.
• Mistake 4 — Misunderstanding MDLR as a condition of MD Status. Some foreign companies incorrectly assume they must locate in an MDLR-recognised building to obtain or retain MD Status. This is false. MDLR is a voluntary framework for property operators. Your MD Status is activity-based and location-agnostic.
• Mistake 5 — Neglecting annual compliance. MD Status is perpetual — but only if the company submits its annual self-declaration, verified by an external auditor, and continues to meet the minimum knowledge-worker headcount and operating expenditure thresholds. Foreign companies that scale down Malaysian operations without notifying MDEC risk status suspension.
• Mistake 6 — Underestimating the business plan quality needed. MDEC's committee reads hundreds of applications. A generic corporate profile cut-and-pasted from a parent company's investor deck will not suffice. The plan must specifically address how the Malaysian entity's activities qualify as promoted MD activities, the technology enablers used, and the committed economic outcomes (jobs, revenue, R&D spend).

10. What to Do Next: Your 2026 Action Plan

The MDLR framework is live, the tax incentive window closes in December 2027, and Malaysia's digital economy is growing faster than at any point in MDEC's 30-year history. For foreign companies assessing Malaysia entry, the decision window is now. Here is a concise action plan:

1. Weeks 1–2: Engage our team to incorporate your Malaysian Sdn Bhd — 100% foreign-owned, with registered address, company secretary and all SSM filings handled end-to-end.
2. Weeks 3–6: Develop your MD Status business plan, mapping your tech activities to MDEC's promoted list and MD Driver sectors. Identify whether RTR or ITA is the right incentive track for your business model.
3. Weeks 6–10: Submit the MD Status application via the MDEC portal and engage CLIC support for pre-submission review.
4. Weeks 10–18: Receive MD Status e-Certificate. Begin EP Green Lane applications for expatriate hires. Import qualifying equipment duty-free.
5. By December 2027: File your RTR or ITA tax incentive application before the hard deadline, ensuring you lock in current incentive rates for up to 10 years.

Have questions about which MDLR tier fits your proposed location, whether your activities qualify for MD Status, or how to structure the tax incentive application? Contact our ONEKEY BIZ team for a complimentary consultation — we have guided dozens of Chinese, Taiwanese, Hong Kong and Singapore tech companies through exactly this process.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.