Employer of Record Risks: Compliance and Country Limits

Employer of Record risks are not limited to choosing the wrong provider. An EOR can supply the local employment structure and administer payroll, benefits and employment documentation, but it does not make every arrangement lawful in every country or transfer every tax, management, immigration, data and intellectual-property risk away from the client.

Before hiring, verify three things: whether the structure is available for this country and role, which responsibilities belong to each party, and what evidence the provider will supply when payroll, employment or offboarding actions are completed. This guide is for HR, legal, finance and expansion teams that already understand the basic EOR model and are deciding whether to use it for a real hire.

What risk changes under an EOR?

---

An EOR becomes the contractual employer for the covered worker and normally leads the local employment contract, payroll and statutory employment administration. The client still decides what the role does, directs the person’s work and bears the commercial consequences of that work.

That split creates a multi-party employment relationship. The International Labour Organization describes a triangular arrangement in which an agency employs and pays a worker who performs services for a user firm. It also notes that some jurisdictions impose duties on the user firm or provide for shared liability. The service agreement can allocate operational tasks, but it cannot cancel an obligation that local law places directly on one party.

Use the following map as a list of matters to verify, not as a universal allocation:

Responsibility	Typical lead	What to confirm
Employment contract and registration	EOR	The exact employing entity, locally required registrations and the terms used for the role.
Payroll, deductions and statutory payments	EOR, with client funding and inputs	Cut-off dates, approval steps, funding currency, payment evidence and correction procedures.
Day-to-day work and business decisions	Client	Who sets duties, approves expenses, controls systems and authorizes customer or supplier commitments.
Leave, working time and employee records	Shared	What the client records, what the EOR approves and which system is the official record.
Performance, discipline and termination	Shared	Who documents the facts, who communicates with the employee and which steps must occur before a decision is implemented.
Work authorization	Shared or separate immigration route	The worker’s existing right to work, sponsorship availability and which party completes each check.
Corporate tax, regulatory and PE analysis	Client with its advisers	Whether the worker’s authority, activities or location create obligations for the client company.
Data, security, confidentiality and IP	Shared	Contract terms, system access, data roles, transfer safeguards and locally effective IP provisions.

Is an EOR legal in every country?

---

There is no universal yes-or-no answer. The employment relationship creates rights and obligations under national legislation, so the label used in a commercial agreement is only the starting point. A country may assess an EOR-style arrangement through employment law, temporary-agency or labour-supply rules, licensing, immigration, tax or rules governing a regulated role.

The facts can matter as much as the contract. Relevant questions include who signs the employment agreement, who directs and supervises the work, how long the arrangement will continue, whether the role is restricted, and whether the worker is a local national or needs sponsorship.

The European Union provides one illustration rather than a worldwide rule. Directive 2008/104/EC defines temporary-agency work by reference to a worker assigned to a user undertaking under that undertaking’s supervision and direction. It also addresses equal treatment and leaves national registration, licensing, certification and monitoring requirements intact. Whether a particular EOR arrangement falls within those rules requires country-specific analysis.

Use NNRoad’s country employment and payroll information to identify local questions, then obtain confirmation for the proposed structure before issuing a binding offer or promising a start date.

Which risks remain with the client?

---

The worker’s activities can still create tax exposure

Using an EOR does not by itself decide whether the client has a permanent establishment, corporate-tax registration or another business obligation in the country. Those questions turn on the applicable domestic law, tax treaty and what the worker actually does.

The OECD’s 2025 update to the Model Tax Convention clarifies that an individual’s home or other working place can require a facts-and-circumstances analysis. The amount of time worked there is not the only consideration; the commercial reason for the person’s presence and their engagement with customers, suppliers and other parties can also matter. The OECD model is guidance for treaties, not direct law in every country.

Ask for tax advice before the role begins if the person will negotiate or conclude contracts, lead local sales, regularly meet customers, manage suppliers, use dedicated premises or perform a central part of the client’s business. The safe conclusion is not that these facts automatically create PE. It is that the EOR employment contract does not answer the question.

Management and termination decisions require coordination

The client sees the employee’s output and usually initiates performance or headcount decisions. The EOR is the party that must implement employer actions through the local employment relationship. A manager should therefore not promise a promotion, change pay, issue a disciplinary warning or end access and employment without following the agreed process.

Before onboarding, establish who records objectives and performance concerns, what evidence is required, who speaks to the employee, what notice and consultation steps may apply, and when final pay or severance funding is due. These are not merely offboarding questions. They determine how managers must operate from the first day.

An EOR arrangement is not automatic work authorization

A person must still be legally permitted to work in the destination country. As one country example, the UK government requires employers to check an applicant’s right to work and explains that a sponsor licence may be needed where the person does not already have permission.

If the proposed employee is a foreign national who needs sponsorship, assess that before treating the hire as an ordinary local EOR case. NNRoad’s Expatriate Employment service addresses the combined employment-and-immigration route. Eligibility and government approval remain country- and worker-specific.

Where EOR arrangements fail operationally

---

Once the structure is confirmed, the practical risks are usually the details: late inputs, unclear approvals, missing evidence and assumptions that weren’t stated explicily in the agreement. The following four controls deserve priority.

1. Payroll must have an auditable handoff

Document who supplies salary changes, bonuses, commissions, leave and expense data; who approves the payroll; when the client funds it; and what happens after the cut-off. Ask what records will show that wages, deductions and statutory payments were completed. “The provider handles payroll” is not an operating procedure.

2. The employee needs one usable support path

The worker should know whom to contact about pay, benefits, leave, employment documents and workplace concerns. The client also needs a named escalation owner. Without that division, employees repeat the same issue to two organizations while each assumes the other is responding.

3. Data roles and transfers must be explicit

Employment administration involves identity, bank, compensation, benefit and sometimes health or dependent data. Where the EU General Data Protection Regulation applies, Article 28 requires specified terms when processing is performed for a controller, while Article 44 governs transfers to third countries. Do not assume the EOR is always only a processor; map each party’s actual role, the data locations, relevant subprocessors, security controls, retention and breach-notification steps.

4. IP and confidentiality need locally effective terms

The client should not assume that paying for work automatically gives it every intellectual-property right. WIPO notes that IP ownership often starts with the inventor or creator and recommends clear written employment and contractor terms even where local law provides automatic employer ownership. Confirm what the EOR employment agreement assigns, whether a separate client agreement is permitted, how moral rights or employee-invention rules are handled, and what happens when the worker leaves.

Worked situation: an overseas sales hire

---

Consider a software company that wants one sales director in a country where it has no entity. The candidate already has the right to work, and an EOR confirms that it can offer local employment. That resolves the immediate employer question, but not the entire hiring decision.

The company still needs to define whether the director may negotiate prices, sign contracts or bind the business; obtain tax advice on the planned customer activity; put the commission formula into payroll-ready terms; establish who documents performance; and confirm how customer data and created materials will be protected. If those questions are answered before the offer, the EOR can be a workable structure. If they are postponed until the first commission payment or customer contract, the provider is being asked to repair a decision it did not make.

This is a hypothetical decision example, not an NNRoad client case study. The outcome would depend on the country and facts.

EOR due diligence: what to confirm in writing

---

Begin with the five structural questions below. A vague or unsupported answer to one of these should stop the hire from moving to contract:

1. Who is the legal employer? Obtain the exact entity name and the document it will sign with the worker.
2. Why is the structure available? Confirm the relevant local category and any registration, licence or other authorization required for this arrangement.
3. Is this hire eligible? Check the work country, work location, role, industry, worker nationality or status, expected duration and any regulated activity.
4. Who owns each decision? Put payroll, leave, safety, performance, grievance, discipline, termination, data and IP responsibilities into a written allocation.
5. What remains outside the EOR scope? Identify tax, PE, corporate registration, immigration, regulatory and client-side workplace questions that need separate advice or action.

If the structure clears those tests, move to operational evidence:

Ask the provider	Evidence or contract term	Why it matters
What are the payroll input, approval and funding deadlines?	Payroll calendar, input template and funding terms	Prevents late variable pay and shows which party caused an exception.
What proof is available after payroll and statutory payment?	Payslip, payroll report and available filing or remittance records	Creates an audit trail instead of relying on a completed-status message.
How are errors and employee questions escalated?	Named contacts, response targets and correction procedure	Tests how the service works after something goes wrong.
How do performance and termination instructions work?	Required documentation, approval path, notice and funding terms	Stops a client manager from taking an action the legal employer cannot implement lawfully.
How are personal data and IP handled?	Data terms, security schedule, transfer mechanism and employment/IP clauses	Connects the provider agreement to the employee’s real system access and output.
How can the worker and records move later?	Exit assistance, record access, notice, fees and transfer steps	Avoids discovering lock-in only after the client creates an entity or changes provider.

Do not make an “owned entity versus partner” label the sole test. What matters to the buyer is knowing the exact employing entity, the complete responsibility chain, the party accountable for service delivery and the records available when an obligation has been completed.

When EOR may be the wrong model

---

EOR should be tested against the hiring plan, not selected by default. Consider another route when:

• the arrangement is not available for the country, role, industry or expected duration;
• the foreign national needs sponsorship that the proposed structure cannot support;
• the client needs its own local licence, premises, contracts or regulated presence;
• the worker’s authority or activities make a separate entity, tax or regulatory analysis necessary;
• the team will be sufficiently large, permanent or strategically central that entity setup deserves a cost and control comparison; or
• the client cannot accept the provider’s employment, termination, data, IP or exit terms.

There is no universal employee-count or duration threshold at which an entity automatically becomes better. Compare the full cost, intended permanence, need for local commercial activity, management control, tax position and transition plan. If the client already has an employing entity, Global Payroll may support payroll administration, but it is not an entity-free substitute for EOR.

EOR and PEO are not interchangeable

---

In an EOR arrangement, the in-country EOR is the contractual employer for the covered worker. PEO is commonly used in the United States for HR, payroll and employment-tax administration within a co-employment or related service structure involving the client’s established business.

The distinction is visible even within the US framework. The Internal Revenue Service maintains a statutory certification program for Certified Professional Employer Organizations, with specific requirements and federal employment-tax consequences. An ordinary PEO, a CPEO and a global EOR should not be treated as the same arrangement.

NNRoad does not offer PEO services. PEO belongs in this guide only because buyers frequently use the term when they are actually looking for an EOR.

What to send for an EOR feasibility check

---

A provider cannot assess the arrangement from the country name alone. Prepare:

• the work country and normal work location;
• the job description, seniority and authority to negotiate or sign;
• the worker’s nationality and current right-to-work status;
• salary, bonus, commission, benefits and equity expectations;
• the target start date and expected duration; and
• the anticipated number of hires and whether an entity is planned.

NNRoad supports Employer of Record hiring across more than 80 countries, subject to the availability and suitability of the arrangement for the proposed hire.

Frequently asked questions

---