Glossary
EOR compliance
Scope of host-country compliance work an employer of record performs as the legal employer in each target jurisdiction. Covers entity registration, statutory payroll-tax filings, employment contract, statutory benefits administration, and labour-law audit response. Excludes buyer-side responsibilities including hiring decisions, compensation, permanent-establishment risk, and dependent-agent classification.
EOR compliance is the scope of host-country compliance work an employer of record performs as the legal employer in each target jurisdiction.
For global hiring teams, EOR compliance covers the labour-law layer attached to the legal-employer role. The EOR registers as the employer, files statutory payroll taxes, administers statutory benefits, and responds to labour-authority audits.
The compliance scope ends at the labour-employer boundary. The EOR does not cover buyer-side compliance: hiring decisions, compensation, permanent-establishment risk on dependent-agent activity, or worksite-employer claims.
Misreading the scope is the recurring buyer mistake. A buyer expecting "full compliance shielding" finds the contract excludes PE analysis, misclassification audit on the buyer's own contractor structure, and several worksite-employer claim categories.
What does EOR compliance mean in payroll?
In payroll, EOR compliance is the compliance work the EOR performs as legal employer in the host country. Three operational features matter for the buyer.
The legal-employer primitive
The EOR registers as the employer of record in the host country under the local labour code. The worker's employment contract is between the worker and the EOR's local entity.
Statutory filings (payroll tax, social-security, work-permit) all run under the EOR's local registration. The buyer is not the legal employer in the host country. The buyer's relationship with the worker is governed by a client services agreement with the EOR, not by host-country employment law.
The compliance scope in scope
Standard EOR compliance covers entity registration, employment-contract drafting in compliance with local statute, statutory payroll-tax filings (US 941/W-2, UK PAYE/RTI, Germany Lohnsteueranmeldung, France DSN).
It also includes statutory benefit administration (paid leave, sick pay, pension auto-enrolment), workers' comp registration and claims handling, and labour-authority audit response on the EOR-employed worker. See the employer contributions entry for the country-by-country rate stack.
The compliance scope out of scope
Hiring decisions, compensation setting, performance management, discipline, and termination decisions all stay with the buyer as the worksite employer. Permanent-establishment risk on dependent-agent activity is buyer-side regardless of EOR coverage.
Misclassification audits on the buyer's own contractor population, classification of workers as contractors versus employees pre-conversion, and any compliance work on workers outside the EOR's books also sit with the buyer.
What does the EOR compliance scope cover across major jurisdictions?
The compliance scope follows the country's labour-law framework. Each market has its own filings, deadlines, and audit framework that the EOR absorbs.
| Country | Statutory filings handled | Audit authority | Country-specific constraint |
|---|---|---|---|
| UK | PAYE/RTI + NIC + auto-enrolment | HMRC + The Pensions Regulator | AWR 2010 12-week equal-pay rule |
| Germany | Lohnsteueranmeldung + DRV + KV | Finanzamt + DRV Prüfdienst | 18-month AÜG cap on labour supply |
| France | DSN unified monthly return | URSSAF + DGFiP + DIRECCTE | Portage salarial framework |
| Italy | UniEmens + F24 + INAIL | INPS + DPL + Agenzia delle Entrate | Somministrazione di lavoro rules |
| UAE | WPS Salary Information File + EOSG | MOHRE + Central Bank | Day-one WPS filing required |
| Singapore | IRAS withholding + CPF | MOM + IRAS | 2024 MOM ban on EOR for non-citizens |
| US | 941/940/W-2 + state UI + workers comp | IRS + DOL + state authorities | CPEO certification optional |
The Germany 18-month AÜG cap and the Singapore 2024 MOM ban on EOR for non-Singaporeans are regulatory hard limits that constrain the EOR model in those jurisdictions. The Singapore ban removes EOR entirely as a route for expatriate hiring.
The UAE WPS filing is a day-one obligation under MOHRE rules. EORs operating in the UAE absorb the WPS Salary Information File submission as part of standard compliance. See the UAE WPS entry for the underlying rail.
What's in versus out of EOR compliance scope?
The scope split between EOR and buyer is the load-bearing question in any EOR procurement. The compliance work runs in two columns that almost never appear side-by-side in vendor decks.
| Compliance area | EOR handles | Buyer still owns | Risk if neglected |
|---|---|---|---|
| Entity registration in target country | Yes (provider's local entity) | Verify entity model (owned vs partner) | Partner-side liability gap |
| Employment contract drafting | Yes (per local statute) | Approve compensation and scope | Non-compliant clause, void term |
| Statutory payroll-tax filing | Yes (monthly cycle) | Fund the loaded invoice | Late-payment surcharge |
| Statutory benefit administration | Yes | Approve supplementary tier | Worker court claim |
| Hiring decisions | No | Yes (worksite role) | Discrimination claim |
| Compensation setting | Administrative only | Yes | Pay-equity exposure |
| Termination decisions | No | Yes (per local notice/severance) | Wrongful-termination claim |
| Permanent establishment (PE) risk | Fixed-place shield via EOR entity | Dependent agent + service PE | Foreign-parent corporate tax filing |
| Buyer-side contractor misclassification | No | Yes (full audit window) | Back-tax + penalties |
| Shadow payroll on parent-paid worker | No (separate scope) | Engage mobility-tax firm | Retroactive host filing |
The PE shielding row is the most-misread line in EOR procurement. The EOR's local entity provides a fixed-place PE shield for the worker on the EOR's books. The dependent-agent and service PE routes travel with the worker's activity regardless of the labour-law employer.
See the permanent establishment entry for the three PE routes and the misclassification audit entry for the buyer-side contractor classification framework.
What do buyers consistently get wrong on EOR compliance?
The recurring mistakes cluster into four moves visible across multi-country hiring decisions that engaged EOR providers.
The first is treating EOR compliance as "full compliance". The MSA carves out PE on dependent-agent activity, misclassification audits on the buyer's own contractor population, and several worksite-employer claim categories. The shielded tier is real but narrower than implied.
The second is missing the owned-entity vs partner-entity distinction. Owned-entity EORs carry the worker on the provider's own subsidiary, giving direct compliance accountability. Partner-entity EORs route through an in-country payroll partner.
The third is missing the Germany 18-month AÜG cap and Singapore 2024 MOM ban. These are regulatory hard limits that constrain the EOR model. A buyer planning long-term German hires through EOR has to plan the entity transition before month 18.
The fourth is missing the shadow-payroll scope question. Workers on the EOR's books in the host country get full host-country payroll. Workers on the buyer's parent payroll on temporary posting need a separate shadow-payroll arrangement; the EOR does not absorb that scope.
What does an EOR provider handle versus what stays with the buyer?
The MSA decides the compliance scope. Standard EOR provider agreements carve liability clearly between the EOR's labour-employer role and the buyer's worksite-employer role.
| Liability tier | EOR carries | Buyer carries | Indemnification typical |
|---|---|---|---|
| Statutory tax non-remittance | Yes (as legal employer) | No (EOR shields) | Full provider indemnity |
| Statutory benefit under-payment | Yes | No | Provider indemnity |
| Unlawful dismissal | No | Yes (worksite decision) | Buyer indemnifies EOR |
| Discrimination claim | No | Yes (worksite decision) | Buyer indemnifies EOR |
| PE on dependent-agent activity | No | Yes (foreign-parent corporate tax) | No EOR indemnity standard |
| Workers comp claim defence | Yes | Provide incident records | Provider indemnity standard |
| Posted-worker joint liability | Capped (per MSA) | Principal residual | Capped at per-seat fee |
The dependent-agent PE row is the most-debated MSA item. No major EOR provider warrants against dependent-agent PE in standard terms because the PE verdict depends on the worker's activity, which the buyer controls.
The owned-entity vs partner-entity question affects indemnity depth. See the owned-entity EOR entry and the partner-entity EOR entry for the architecture distinction.
Whichapp view
Treat EOR compliance as the labour-employer tier only. The EOR carries statutory payroll-tax, statutory benefits, and workers-comp administration on the worker the EOR employs. The buyer carries hiring, firing, compensation, PE on dependent-agent activity, and any compliance work outside the EOR's books.
For multi-country hiring, see best EOR providers for owned-entity coverage in the priority countries, and best global payroll providers for the entity-payroll route once a local subsidiary is in place.
See our ranked shortlist of providers, scored across pricing transparency, country coverage, and contract flexibility. Updated for 2026.
View the shortlist →EOR compliance FAQs
What does EOR compliance cover and what does it exclude?
Standard EOR compliance covers entity registration, employment-contract drafting per local statute, statutory payroll-tax filings, statutory benefit administration, workers-comp registration, and labour-authority audit response on the EOR-employed worker.
It excludes hiring decisions, compensation setting, performance management, termination decisions, permanent-establishment risk on dependent-agent activity, misclassification audits on the buyer's own contractor population, and shadow payroll on parent-paid mobile workers.
Does EOR compliance shield the buyer from permanent establishment risk?
Partially. The EOR's local entity provides a fixed-place PE shield for the worker on the EOR's books. The dependent-agent PE route and service PE route travel with the worker's activity regardless of the labour-law employer.
No major EOR provider warrants against dependent-agent PE in standard terms. The buyer should engage local tax counsel for commercial roles where dependent-agent risk is material.
How does the Germany 18-month AÜG cap affect EOR compliance?
Germany's AÜG labour-supply rules cap third-party employment at 18 months. After that the worker must repatriate, transfer to a host-country contract via the buyer's own entity, or end the assignment.
The cap often formalises permanent-establishment exposure that may already exist rather than creating new exposure. Plan the entity transition before month 11 so the conversion completes by month 18.
Can EOR compliance hire non-Singaporeans in Singapore?
No, since the 2024 MOM ban on EOR for non-Singaporean nationals. The ban removes EOR entirely as a route for expatriate hiring in Singapore.
Buyers needing to hire expatriates in Singapore must either set up their own entity to obtain Employment Pass sponsorship or route the worker through a different jurisdiction.
What is the difference between owned-entity and partner-entity EOR compliance?
Owned-entity EORs carry the worker on the provider's own subsidiary in the host country. The provider controls the local compliance, statutory filings, and audit response directly.
Partner-entity EORs route through an in-country payroll partner. The buyer's compliance recourse runs through the EOR to the partner, often with caps. Owned-entity coverage is generally stronger on indemnity depth; partner-entity coverage is generally broader on country footprint.