Hiring someone in Germany, Brazil, or Singapore without a local entity isn't just complicated, it can expose your company to serious legal liability. An employer of record (EOR) solves that problem, but a common question stops many companies in their tracks: is an employer of record legal? This article breaks down how EOR arrangements work legally, where the risks lie, and what separates a compliant setup from one that puts your business at risk.
What is an employer of record (EOR)?
An employer of record is a company that legally employs workers on behalf of another business. You find the person you want to hire, you manage their day-to-day work, and the EOR handles everything else: contracts, payroll, taxes, and benefits.
Here's a concrete example. Say you're a software company based in Austin and you want to hire a developer in Germany. You don't have a German legal entity, and setting one up takes months and costs thousands of dollars. An EOR already has that entity. They put your new hire on their payroll, stay compliant with German labor law, and you just get to work with your developer.
The EOR becomes the legal employer of record, hence the name. That means they're the ones signing the employment contract, withholding income tax, filing with local authorities, and making sure your employee gets the benefits they're legally entitled to in their country.
An EOR lets you hire workers in other countries (or states) without setting up your own legal entity there. You stay in control of the work. The EOR handles the legal and administrative side.
What the EOR doesn't do is run your business for you. They're not a staffing agency placing random workers with you, and they're not a co-employer in the traditional sense. You decide who to hire, what they work on, and what they get paid. The EOR just makes it legally possible.
This distinction matters a lot, and it's why EORs exist as their own category separate from staffing agencies or professional employer organizations (PEOs). If you want to get into the weeds on that, the comparison between EOR vs PEO: which is right for your business is worth reading.
The model works domestically too, not just for international hiring. Some companies use EORs to hire in U.S. States where they don't have a registered business presence, or to bring on workers quickly without triggering new entity registration requirements.
Is an employer of record legal?
Yes, using an employer of record is completely legal. It's a well-established business model that companies have used for decades, and it operates within the legal frameworks of every country where it's recognized.
When you hire through an EOR, the EOR becomes the legal employer of your workers on paper. They sign the employment contracts, run payroll, withhold taxes, and stay compliant with local labor laws. You still control the day-to-day work, but the EOR handles all the legal employment obligations.
An EOR is legal because it's built on a real, recognized employment structure. The EOR is the employer of record in the eyes of the law, which means they carry the legal liability for employment compliance, not you.
Employee classification is one of the bigger legal landmines in global hiring, and EORs handle this too. They make sure your workers are classified correctly as employees, not contractors, under local law. That protects you from the kind of misclassification penalties that have cost companies like Uber and Lyft hundreds of millions of dollars in settlements.
EOR arrangements are recognized in most countries, but the specific legal structure varies. In some places, the EOR model is explicitly defined in labor law. In others, it works through standard employment contracts. A good EOR will know the difference and structure things correctly for each country.
On the tax side, EORs handle withholding, remittance, and filings in each country where your employees work. That means your worker in Brazil gets their payroll processed under Brazilian tax law, while your hire in the Netherlands gets theirs handled under Dutch rules. You don't have to figure any of that out yourself.
If you want more context on the broader structure, it's worth reading up on what an employer of record actually is and how does an employer of record work before getting into the legal specifics.
How does an EOR ensure legal compliance across different countries?
An EOR doesn't just promise to handle compliance. It builds the actual legal infrastructure in each country it operates in, which is a very different thing.
A reputable EOR maintains registered legal entities in every country it covers. That means when you hire someone in Germany or the Philippines, there's a real local company on paper that employs that person, pays their taxes, and files the right paperwork with the right government agencies.
The part most people don't think about is statutory benefits. Many countries legally require things like 13th-month pay (common across Latin America and Southeast Asia), mandatory health contributions, or minimum paid leave that exceeds what you'd offer by default. An EOR bakes all of that in automatically.
Not all EORs operate the same way. Some use third-party partners in certain countries instead of their own entities, which can create gaps in accountability. When you're evaluating an EOR, it's worth asking whether they have their own legal entity in the specific country you're hiring in, or whether they're outsourcing that piece.
A legitimate EOR doesn't wing it country by country. It has legal teams, local HR specialists, and established processes in each market it covers. That's what you're actually paying for when you use a service like Hire with Columbus, which covers 180+ countries with built-in compliance for payroll, benefits, and tax filings in each one.
Ready to hire globally?
Skip the legal headaches and compliance nightmares. We handle everything so you can focus on building your team.
What legal risks do companies face without an EOR?
Skipping an EOR when you're hiring internationally isn't just inconvenient. It exposes you to a specific set of legal problems that can get expensive fast.
- Permanent establishment liability: If you have employees working in a country where you don't have a legal entity, many countries will treat that as a taxable business presence. That means back taxes, penalties, and sometimes a forced entity registration you weren't ready for.
- Worker misclassification fines: Hiring someone as a contractor when local law says they should be an employee is one of the most common and costly mistakes in global hiring. France, Spain, and Australia all have strict tests for this, and the penalties can include back-paid benefits, social contributions, and fines going back years.
- Payroll tax violations: Every country has its own withholding rules, employer contribution rates, and filing deadlines. If you're running payroll without local expertise, you're likely getting at least one of those wrong. Brazil's employer payroll burden alone can hit 35% of salary, and getting that wrong isn't a rounding error.
- Non-compliant employment contracts: A contract drafted under U.S. Law won't protect you in Germany or Japan. If your contract doesn't include legally required notice periods, probation terms, or termination clauses, it can be partially or fully unenforceable.
- Mandatory benefits violations: Many countries legally require things like 13th-month pay, statutory severance, or minimum paid leave that goes well beyond what you'd offer by default. If you don't know the rules, you'll miss them, and your employee can sue for the difference.
- Data privacy exposure: Hiring someone in the EU means their employment data is subject to GDPR. If you're storing or processing that data without the right legal basis, you're looking at fines up to 4% of global annual revenue.
The permanent establishment risk catches a lot of companies off guard. You don't need an office or a lease to trigger it. In some countries, having even one employee working there for a few months is enough for tax authorities to come knocking. An EOR eliminates this risk because the employees are legally employed by the EOR's local entity, not yours.
The common thread across all of these is that you don't know what you don't know. Employment law in Germany is not like employment law in Colombia. The rules in Singapore are not the rules in Nigeria. Without an EOR, you're either hiring expensive local legal counsel in every country, or you're guessing. Neither is a great option when the downside is a six-figure penalty.
How does EOR legality differ between the US and international markets?
The legal framework for EORs looks pretty different depending on whether you're hiring domestically or across borders, and it's worth understanding those differences before you start signing anyone up.
In the US, EOR legality is relatively straightforward. There's no single federal law that defines or regulates EORs, but the model works cleanly within existing employment law because the EOR takes on the employer tax ID, files with the IRS, and handles state-level requirements like unemployment insurance and workers' comp. If you're a Texas company hiring someone in New York through an EOR, the EOR registers in New York, handles New York payroll tax, and you don't have to touch any of it.
Internationally, it gets more interesting. Some countries have explicit legal frameworks for co-employment or labor outsourcing. Others have no specific statute, but the EOR model still works through standard employment contracts. And a handful of countries have restrictions that make EOR arrangements genuinely complicated.
| Region | EOR legal status | What to watch for |
|---|---|---|
| United States | Widely recognized, no specific federal EOR statute | State-by-state registration and tax requirements vary |
| European Union | Legal, but each country has its own labor code | France, Germany, and the Netherlands have strong worker protections that affect contract terms |
| Latin America | Legal, but high employer tax burdens | Brazil's employer payroll taxes can exceed 35%. Mexico has specific outsourcing laws passed in 2021 that restrict certain arrangements |
| Asia-Pacific | Varies significantly by country | China restricts foreign companies from directly employing local workers, making EOR one of the few compliant options |
| Middle East | Legal with caveats | Some countries require local sponsorship or have nationality quotas that affect hiring |
Mexico is a good example of why you can't just assume the rules are the same everywhere. In 2021, Mexico overhauled its outsourcing laws specifically to crack down on arrangements where companies used third-party employers to dodge benefits obligations. A legitimate EOR still works there, but the structure has to be set up correctly or you're in violation.
China is almost the opposite situation. Foreign companies actually can't employ Chinese workers directly without a local entity. An EOR isn't just convenient there, it's often the only legal path in.
Some EOR providers claim to cover a country but actually route employment through a third-party partner network. That can create real gaps in compliance accountability. Always ask whether your EOR has its own legal entity in the specific country you're hiring in, not just a partner relationship.
EOR legality isn't a yes or no question globally. It's a "yes, if structured correctly for each specific country" question. That's exactly why the EOR you choose matters as much as the model itself.
What are the most common misconceptions about EOR legality?
A lot of the skepticism around EOR legality comes from a handful of myths that just won't die. Here's what the reality actually looks like.
"EORs are just a workaround to avoid employment law." This is probably the most common one, and it's backwards. An EOR doesn't help you avoid employment law. It helps you actually follow it. When you hire someone in a country where you don't have a legal entity, you have two options: set one up yourself, or use an EOR that already has one. The EOR path isn't a loophole. It's the compliant one.
"The worker isn't really employed if they're on someone else's payroll." They absolutely are. The EOR is the legal employer on paper, which means the worker gets a real employment contract, statutory benefits, proper tax withholding, and every protection local law provides. Being on an EOR's payroll doesn't make someone a second-class employee.
"EORs create co-employment risk." This one has some nuance to it. Co-employment risk is a real thing, but it applies when the lines between employer and client are blurry and unmanaged. A well-structured EOR arrangement clearly defines who does what. The EOR handles legal employment obligations. You handle the work itself. That separation is what keeps things clean.
Co-employment risk goes up when clients start making decisions that belong to the EOR, like unilaterally terminating someone without following local notice requirements, or setting benefit terms that conflict with the employment contract. If you're curious about how this works in detail, it's worth reading up on what is co-employment and how it works.
"EOR is only legal in certain countries." The model is recognized and used in over 180 countries. The specific legal structure varies by jurisdiction, but that's exactly what a reputable EOR handles for you. The legal framework in Singapore looks different from the one in Colombia. A good EOR knows that and builds its contracts accordingly.
"Using an EOR means you can't control how your employee is managed." You still set the role, the deliverables, the schedule, and the compensation. The EOR handles the legal employment relationship. Those are two different things, and keeping them separate is the whole point.
The misconceptions mostly come from people conflating "EOR" with "staffing agency" or assuming that because someone else signs the contract, the arrangement must be sketchy somehow. It's not. It's a division of responsibility that happens to be very useful when you're hiring across borders.
How do you choose a legally compliant EOR provider?
Not all EOR providers are created equal, and picking the wrong one can land you in the exact legal problems you were trying to avoid. Here's how to actually vet one before you sign anything.
The first thing to check is whether the EOR has its own legal entity in the countries you're hiring in, not just a partner network. Some providers say they cover 150+ countries but actually route employment through third-party local firms in most of them. That creates accountability gaps. If something goes wrong with payroll compliance in Vietnam, you want to know exactly who's responsible.
Ask your EOR this exact question: "Do you have your own registered legal entity in [country], or do you use a local partner?" If they hesitate or give you a vague answer, that's your answer.
Second, look at how they handle permanent establishment risk. A good EOR will be upfront about the fact that certain activities, like letting your employee sign contracts on your behalf or having them act as a company representative, can still trigger PE exposure even when you're using an EOR. If a provider tells you their service eliminates all PE risk with zero caveats, they're either oversimplifying or they don't fully understand the issue.
Third, ask about their compliance update process. Labor laws change constantly. Germany updated its minimum wage three times in four years. France regularly tweaks its termination rules. You want an EOR that has an actual system for tracking those changes and updating employment terms as a result, not one that relies on you to flag it.
One more thing that gets overlooked: find out who your actual point of contact will be. Some EOR providers are mainly self-serve platforms. Others give you a dedicated account manager who knows your account and can answer compliance questions fast. That difference matters a lot when you need to terminate someone in the Netherlands and you need to know the exact notice period by end of day.
The vetting process isn't glamorous, but it's worth doing once rather than dealing with a compliance mess later.