If we are talking about digital business in 2019 there is no such thing as "real business", since all the assets you have are movable to other jurisdiction within one day. Initially the basic usage of offshore companies came down to keeping privacy and profits offshore, and nowadays I see this as the main use also. So my question was not "how to build the business", but what option is the best to avoid the management and control rule, keep privacy and spend as little money as possible. May be trusts are more suitable for this, may be smth else.
There is a business though and that's the people.
A one man show isn't really a business and so long as you're a one man show from a tax standpoint you'll be taxable wherever you are more or less.
The thing is though most online or digital businesses use contractors, etc. and the larger the business gets the more people are involved especially as the complexity of these businesses grows. For example in Affiliate Marketing in 2014 maybe you could do mid 7 figures as a one man operation but today with tough Google and Facebook rules and all the other complexities throughout the operation it's virtually impossible to run at any major volume without a team. If you look at ecomm whether Amazon, Dropshipping, or actually building a brand and having a product you've got similar. Most of my clients doing 7 figures have teams of 30+ people between customer service, etc but they are at least near 10 people. SaaS isn't so different and nor are info products so you'll be hard pressed to show me a business that produces profits at a significantly meaningful level where the tax savings are substantial enough to justify the added effort of operating offshore (obviously this assumes you're based in a jurisdiction where doing business is fairly easy and you're not in someplace like say Andorra or Indonesia where the costs and time limitations of operating locally are prohibitive and you can business efficiencies that go beyond tax efficiencies for operating outside your local jurisdiction) that doesn't involve at least a small team of say around 5 people.
The question then intrinsically becomes "where do you place these 5 people?" The traditional answer has been "they are virtual, I hired them on Upwork, or Guru, or Fiverr, or somewhere similar and I don't care where they are". That's a mindset that should change going forward.
What you should be thinking much more strategically is "hey, I'm going to make an effort to hire locally somewhere where it's competitive both from a business and from a tax standpoint so I can leverage offshore structuring with sustainability".
This is predominantly the view I've been taking the last couple years with both my own companies and my clients. You look to a place like Georgia where banks increasingly want you to have local presence but you can get office space very cheap and also low skill labor extremely cheap, you can have a solid tax set up and reliable banking all combined with good IT infrastructure (minus payment processing so it tends to fail for ecomm solutions but works pretty well for say affiliate or consulting type businesses where most of the income comes via wire). You've got places like Bulgaria where wages are quite low and access to talent is reasonably plentiful. If your revenues are quite low (below the threshold) you could use Romania in a similar way and so on.
This is really the ultimate solution because there's no tax department on the planet that can come after you when you've got a manager who is making real decisions in a country with a few employees actually driving business value and argue that you shouldn't have a company formed there especially since you've got a business purpose achieved by much lower cost of wages than you'd have in a home country like Western Europe, US, Canada, Australia, etc.
When I read your question is sounds like you want to take some sort of shortcut regarding management and control and the whole point of management and control is to force you not to take that shortcut. The traditional route has been to hire some directors who have real board meetings, document those meetings, give them control over the bank accounts, etc. This will usually cost you around $20k-$30k/yr maybe more depending on what all you're doing in the business and require them to do but from a business standpoint this doesn't make much sense, a lot of people aren't willing to do it (it's scary to give up bank account access to someone else and) and I'd argue has long term risks. The problem here is the hourly rate you're paying for those people is quite high but the value add is essentially non-existent, in fact it has a negative impact on your business operations because getting approvals, etc. to meet the local financial regulatory authority standards slows things down vs acting directly. It then begs the question why not have real operations somewhere since you're going to pay that amount anyway? The risk side is long term I don't think courts are going to uphold the idea that this constitutes real substance. We can see a lot of countries already implementing things like a 2 local employee minimum rule and that's likely to increase enforced in part by the banks.
The other solution was to spend most of the year traveling so you can argue you aren't controlling the company from your home country. This is fairly risky under review especially if there's no other directors involved in high level decision making plus once again it interferes with your ability to build a business.
My basic outlook is the reason for essentially all international structuring is to keep more of your money in your pocket. You're doing this by saving on tax, reducing your operational costs, and decreasing your liability from lawsuits, etc. (Privacy for privacy's sake is mostly an ego fantasy that probably risks working against you in the long run so the real questions are "privacy from whom?" and "privacy for what purpose?" I think privacy is a nice addition to strengthen some other components of a structure but usually a risky proposition on its own. If anything was learned from the US breaking the Swiss banks I think it's the short sighted nature of people who put their money there thinking they could hide it behind privacy and were lazy about not having compliant structures in place then when it cracked they lost 20-50% of their assets on spec in the deals the IRS did with the banks, this is increasingly going to be the case as they get better and better at policing and their tool improve, so it's more like have something robust in place that can withstand scrutiny if everything is disclosed then add privacy as a layer to make it less likely to get scrutiny to begin with and you're off to the races).
But if what you have to do in order to build and maintain that structure costs more than you gain then you might as well abandon it and just go with a much simpler onshore solution. Travel is a good example of this mismatch because yeah you can potentially avoid some tax etc. but it's so hard to be productive and get things done at the same rate while traveling as staying in one place that it's really questionable whether that's a viable alternative.
I think a lot of people pursue offshore for vanity reasons like the person who wants to be able to say "I've got a Cayman bank account" when really fees are higher, friction is higher, and risks are higher, that's not the right approach. The sensible approach is to do it because you're going to save yourself money.
As for trusts they don't solve management and control issues, what they potentially do if structured properly and most people have no idea how to structure them properly are:
1. Address CFC rules
2. Address exit tax rules
3. Address inheritance tax rules
4. Provide a layer of asset protection from your personal liability to the assets (they aren't as effective against operational liabilities those are best handled via corporate veils)
5. Provide a layer of privacy that makes it less likely for someone to look at management and control issues or source income issues
Sometimes this is the magic solution for some people but again if you want to operate a trust properly it's going to be expensive same as hiring local directors, which is fine if you can avoid $100k of tax by paying $20k/yr and a one time set up fee of say $30k you're good to go that's an investment I'd make any day but most of what people do is very sloppy and doesn't actually stand up nor does it shield you from reporting.
So summary how do you get around management and control:
1. Find a country where the tax treaty overrides it
2. Hire foreign directors (these have to be real directors nominees don't count, people who aren't actively making decisions don't count, you might need more depending on what country you're from)
3. Travel so you're not managing from that country (alternatively shift your residency)
4. Build some real business operations in the country where you get efficiencies as well as protect yourself from the tax
5. Try to hide what you're doing and operate illegally (in which case be aware it could be a ticking time bomb the longer you go the greater the risks become so is it worth it to save $20k/yr? If it isn't then do you have enough scale that you should really be concerned about this at all and maybe should just focus on growing the company to the point where it would pay off?)