EOR Due Diligence Checklist

You are eight weeks from signing an EOR contract. Your Legal team wants entity verification. Finance needs total cost clarity. HR wants fast onboarding capability.

Most vendor checklists ask surface questions about coverage and compliance. They miss the verification steps that prevent the expensive surprises that surface after contract signature.

What makes EOR due diligence different from standard vendor review?

EOR arrangements create employment law liability in every target country.

Unlike SaaS tools where the worst outcome is switching costs, EOR mistakes trigger regulatory penalties, back-tax assessments, and employee termination risk.

The core verification challenge is entity model transparency.

Providers use vague language about “local presence” and “compliance infrastructure” that obscures whether they own legal entities or rely on third-party partners.

When a provider uses partners, you inherit that partner’s compliance history, financial stability, and regulatory standing. Partner changes can force employee transfers mid-contract.

Owned entities provide more control but limit geographic coverage.

Your procurement timeline creates pressure to accept vendor assurances rather than verify them. We have seen contracts signed based on capability claims that proved inaccurate during implementation.

The truth is that most due diligence stops at the sales deck. Your actual protection comes from document requests the vendor hopes you will not make.

How do you verify entity model claims?

Most providers will not voluntarily disclose their entity structure. You need specific document requests that force transparency.

Request these documents during procurement:

Entity ownership certificates for your target countries. Not just a country list. Actual incorporation documents showing the provider as the registered entity owner.

Partner agreements for countries where they use third parties. The agreement terms affect your employee transfer options and compliance responsibilities.

Insurance certificates showing coverage limits and claims history. This reveals the provider’s actual risk exposure and past compliance issues.

Local payroll registration numbers and tax authority correspondence. This confirms active compliance status rather than dormant entity registration.

Red flag responses include:

“We maintain compliance partnerships in all markets” without naming specific partners. This usually means they found partners recently and have no operational history.

“Entity details are commercially sensitive” when asked for verification documents. Owned entities are public record in most jurisdictions.

“Our legal team will provide details after contract signature.” Entity verification must happen before you sign, not after.

If your provider cannot produce entity verification documents within one week of requesting them, they likely use partners for most countries regardless of their marketing language.

The gap between marketing claims and operational reality becomes your compliance risk.

What are the financial verification requirements?

The Monday morning after your first German hire starts, you will receive an invoice roughly 40% higher than the salary you discussed.

That gap is employer social contributions, and it shocks every Finance team that did not model total cost properly.

Cost verification framework:

Request worked cost examples for your specific countries and salary ranges. Not generic pricing tiers. Actual calculations showing gross salary, employer contributions, and all fees.

Demand deposit amount confirmation and refund terms. Deposits range from 1-3 months of total employment cost. For a €60,000 hire in Germany, the deposit can reach €20,000 when employer contributions are included.

Verify FX spread charges and hedging options. Spreads of 2-4% on every payroll run compound significantly. A 2% spread on €50,000 annual salary costs you an additional €1,000 per employee per year.

Confirm all administrative fees including setup costs, termination fees, and compliance charges. These often double the advertised platform fee.

Get pricing change terms and notice periods. Some providers increase rates mid-contract when they switch from promotional pricing to standard rates.

Your Finance team needs these numbers for budget modeling. If the provider cannot provide worked examples using your salary ranges and countries, their pricing is not transparent enough for procurement approval.

Watch how quickly the sales conversation shifts when you request deposit calculations. Providers with clear pricing deliver these numbers immediately. Those still figuring out their model deflect.

How do you assess compliance and legal risk?

Picture this: your Singapore hire’s work permit renewal gets rejected because your EOR provider misclassified the role category six months ago.

Now you face permit cancellation, potential fines, and an employee who cannot legally work.

This scenario plays out when compliance verification stops at vendor assurances.

Legal risk assessment checklist:

Regulatory registration status in each target country. Request registration numbers and verify them directly with local authorities where possible.

Recent compliance violations or regulatory actions. Search public records for fines, license suspensions, or enforcement actions against the provider.

Professional liability insurance coverage and claims history. This reveals their actual exposure to compliance-related damages.

Employment law expertise and local counsel relationships. Verify they have qualified employment lawyers in each target jurisdiction, not just tax advisors.

Data protection and GDPR compliance certifications. Request audit reports and certification dates, not just compliance statements.

The highest-risk period is months 3-6 after go-live, when initial compliance assumptions get tested by actual employment situations.

Terminations, sick leave, and benefits claims expose gaps in the provider’s legal framework.

Smart buyers build compliance checkpoints into their contracts rather than discovering violations through penalty notices.

What internal stakeholder questions do you need to answer?

Your approval committee meeting is scheduled for next Tuesday. Legal wants to know who pays if Germany audits your employment structure. Finance asks why the deposit locks up $200,000 in working capital.

HR worries about onboarding delays killing their hiring momentum.

Each concern can derail approval if you lack concrete answers.

Finance team requirements:

Total cost modeling including all employer contributions and fees. They need budget certainty, not pricing ranges.

Cash flow impact from deposits and payment terms. Large deposits affect working capital planning.

Currency risk exposure and hedging options. Multi-country payroll creates ongoing FX volatility.

Invoice consolidation and reporting capability. Finance prefers single invoices over country-by-country billing.

Legal team requirements:

Employment law liability and indemnification terms. Who bears responsibility for compliance failures and regulatory penalties.

Data protection and cross-border data transfer compliance. Especially critical for EU employees under GDPR.

Contract termination procedures and employee transfer rights. How do you extract your team if you need to switch providers.

Audit access and compliance reporting requirements. Legal needs visibility into compliance procedures and documentation.

HR team requirements:

Employee onboarding timeline and process complexity. Speed requirements versus compliance thoroughness.

Benefits administration and local statutory requirements. Healthcare, pension, and leave management capability.

Performance management and termination procedure support. How much employment law guidance does the provider offer.

Employee experience and local market competitiveness. Your hires will compare their experience to local employment standards.

Each stakeholder group can block the approval process. Your due diligence must provide concrete answers to their specific concerns.

The procurement team that assumes these questions will sort themselves out during implementation learns otherwise when Legal escalates compliance gaps to the CFO.

What are the contract-stage verification steps?

Due diligence continues through contract negotiation. The final agreement terms determine your actual legal and financial exposure.

In our analysis of provider contracts, we have documented significant variation in liability allocation and termination procedures across standard agreements.

Contract verification priorities:

Service level agreements with specific response times and escalation procedures. Vague support commitments create operational risk.

Liability caps and indemnification scope. These clauses determine your exposure when compliance issues arise.

Termination notice periods and employee transfer procedures. Some contracts lock you in with 6-12 month notice requirements.

Pricing change limitations and adjustment mechanisms. Prevent unlimited fee increases during your contract term.

Force majeure clauses and business continuity planning. What happens if the provider faces financial difficulty or loses local licenses.

Your Legal team should negotiate these terms actively. Standard EOR contracts heavily favor the provider and expose you to significant liability and switching costs.

The difference between standard terms and negotiated protection often determines whether a compliance event costs you thousands or hundreds of thousands.

Frequently asked questions

Related resources: EOR compliance guide and EOR provider comparison.