Employer of Record: Duties, Risks, and PEO Differences

An employer of record is a third-party company that legally employs your workers on your behalf, handling payroll, employment taxes, benefits, and regulatory compliance while you direct the day-to-day work. The model lets you hire people in states or countries where your company has no corporate entity, turning what would be months of registration and setup into days. It’s used by domestic firms hiring across state lines and by international companies putting their first workers into the U.S., and the legal backbone is a federal statute that lets a designated agent carry out an employer’s tax obligations.

What an EOR Actually Does

Three functions sit at the center of the service: employment tax compliance, payroll and benefits, and workers’ compensation coverage.

Employment Taxes

The EOR takes on every federal and state employment tax obligation tied to your workers. It calculates and remits FICA at 6.2% for Social Security and 1.45% for Medicare on the employer side, with matching amounts withheld from the employee.1Internal Revenue Service. Topic No. 751, Social Security and Medicare Withholding Rates Social Security tax applies only up to the annual wage base, which is $184,500 for 2026.2Social Security Administration. Contribution and Benefit Base For any employee earning above $200,000 in a calendar year, the EOR also withholds the 0.9% Additional Medicare Tax on the excess.

Federal Unemployment Tax is 6.0% on the first $7,000 of each employee’s wages, though employers who pay state unemployment on time receive a credit of up to 5.4%, dropping the effective rate to 0.6% per employee.3Internal Revenue Service. Topic No. 759, Form 940, Employers Annual Federal Unemployment (FUTA) Tax Return4Employment & Training Administration. Unemployment Insurance Tax Topic The EOR also handles state unemployment insurance, where rates depend on claims history and industry classification. Late deposits carry escalating IRS penalties that reach 15% once a delinquency notice has gone unpaid, so on-time deposits and quarterly Form 941 filings are the baseline of what you’re buying.5Office of the Law Revision Counsel. 26 U.S. Code 6656 – Failure to Make Deposit of Taxes6Internal Revenue Service. About Form 941, Employers Quarterly Federal Tax Return

Payroll and Benefits

The EOR runs the full payroll cycle: gross-to-net calculation, pay stubs, direct deposits, and Fair Labor Standards Act compliance for minimum wage and overtime, which requires at least one and a half times the regular rate for hours over 40 in a workweek.7U.S. Department of Labor. Overtime Pay At year-end, it issues W-2s reporting wages paid and taxes withheld.8Internal Revenue Service. About Form W-2, Wage and Tax Statement

Benefits is often where smaller companies get the most value. Because the EOR pools employees across many clients, it can negotiate group health, dental, and vision rates that a 15-person startup cannot access on its own. It enrolls employees, pays premiums, and folds those costs into the monthly invoice. Retirement plans work the same way: the EOR handles 401(k) enrollment, processes employee deferrals, and routes employer matching contributions. Department of Labor rules require employee deferrals to reach the plan trust as soon as they can be segregated from company assets, with an outside deadline of the 15th business day of the following month and a seven-business-day safe harbor for plans with fewer than 100 participants. A missed deposit is a prohibited transaction that can trigger a 15% excise tax on the amount involved for each year it goes uncorrected.9Internal Revenue Service. 401(k) Plan Fix-It Guide – You Havent Timely Deposited Employee Elective Deferrals

Workers’ Compensation

The EOR secures workers’ comp coverage for every employee. Rates are set by job-classification codes and quoted per $100 of payroll. An office worker might cost under $0.50 per $100, while a roofing crew can run well over $15 per $100. The EOR handles injury reporting, claims management, and communications with the carrier, keeping your company off the policy. It also represents the legal employer in unemployment insurance disputes when a worker separates.

How an EOR Gets Legal Authority to Act

The federal mechanism is 26 U.S.C. § 3504, which authorizes the IRS to designate an agent that controls, receives, or pays an employee’s wages to perform all acts required of employers under the tax code.10Office of the Law Revision Counsel. 26 USC 3504 Once designated, the agent becomes liable for filing returns and making deposits, though the underlying employer remains liable if the agent fails to perform. In practice, the EOR files Form 2678 with the IRS to formally appoint itself to handle employment tax returns and deposits for FICA and income tax withholding on the client’s behalf.11Internal Revenue Service. Instructions for Form 2678

The nuance most EOR marketing skips: IRS approval typically takes about 30 days, and until that approval lands, the agent has no legal duty to file or deposit taxes. If you’re moving workers to an EOR mid-quarter, someone still has to cover deposits during that window. Employers also generally cannot appoint an agent to handle FUTA, so the EOR’s FUTA coverage usually depends on the EOR being the actual employer of record rather than a designated agent for a separate employer.11Internal Revenue Service. Instructions for Form 2678

How an EOR Differs From a PEO

A Professional Employer Organization creates a co-employment relationship: both the PEO and your company share legal responsibility for the workers, and your company must keep its own business registration and tax ID in every jurisdiction where it has employees. An EOR acts as the sole legal employer, so your company doesn’t need a local corporate presence to hire.12CO- by US Chamber of Commerce. PEO vs. EOR: Differences Explained

That difference shows up in three concrete ways. On tax filing, a PEO may report under the client’s tax ID or a shared ID, while the EOR always reports under its own tax identification numbers and files its own quarterly Form 941.13Internal Revenue Service. Instructions for Form 941 On liability, a PEO leaves your company as the employer of record for many regulatory purposes and retains significant exposure, whereas employment lawsuits and wage-and-hour claims against an EOR-managed worker run through the EOR first. On entity requirements, a PEO needs you to already have a registered business in the jurisdiction; an EOR removes that requirement entirely.

Companies often pick the EOR model specifically to avoid setting up a foreign subsidiary. Registration fees, local bank account setup, appointing a local director, and securing office space routinely reach tens of thousands of dollars before the first hire, with ongoing compliance costs on top. An EOR lets you hire in a new market within days, which makes it the natural fit for testing a market with a small team before committing to a permanent entity.

Risks You Still Carry After Signing With an EOR

Using an EOR does not eliminate all legal risk for the client. Several exposures survive the arrangement, and understanding them is where most companies that use EORs make their biggest mistakes.

Joint Employer Exposure

Joint employment occurs when two separate entities share legal responsibility for the same employee, making each jointly and severally liable for wage and labor law compliance.14U.S. Department of Labor. Questions and Answers – NPRM: Joint Employer Status Under the FLSA, FMLA, and MSPA The Department of Labor’s proposed framework for vertical joint employment (the typical EOR-client structure) evaluates four factors: whether the potential joint employer hires or fires the worker, substantially controls the schedule or conditions of work, determines the rate and method of payment, and maintains employment records.15U.S. Department of Labor. Notice of Proposed Rule: Joint Employer Status Under the FLSA, FMLA, and MSPA The more control you exercise over scheduling, pay rates, and HR decisions, the more likely a regulator is to treat you as a joint employer regardless of what the paperwork says.

Worker Misclassification

An EOR is built for employees, not independent contractors. If you engage someone as a contractor and the working relationship actually looks like employment, the consequences fall on you. The IRS looks at three categories: behavioral control (do you direct how the work gets done?), financial control (do you control the business aspects of the role?), and the type of relationship (is there a written contract, are benefits provided, is the work a key part of your business?).16Internal Revenue Service. Independent Contractor (Self-Employed) or Employee? Reclassification means back taxes, retroactive FICA contributions, and civil fines. In some countries, penalties can exceed the total value of the original contract.

Permanent Establishment

For international hires, permanent establishment is the most underestimated risk. PE occurs when a foreign tax authority decides your business has a fixed, continuing, taxable presence in its country, subjecting you to corporate income tax there. Under the OECD Model Tax Convention that informs most bilateral tax treaties, PE can be triggered by a fixed place of business, revenue-generating activity by employees in the host country, or a dependent agent who habitually concludes contracts on your behalf. An employee working from home in another country does not automatically create PE, but the analysis is fact-heavy and treaty-specific.

An EOR reduces PE risk by placing the employment relationship under its own entity rather than yours. It cannot eliminate PE risk if your workers are negotiating and closing deals in the foreign market, or if you maintain a physical office or bank account there. Those triggers exist independently of the employment structure.

Data Privacy

An EOR processes sensitive employee information: government IDs, bank account details, tax records, health insurance data. If any workers sit in the European Union, GDPR applies. In the U.S., state-level laws like the California Consumer Privacy Act add further obligations. Your contract should include a data processing agreement covering what data is collected, how it’s stored and transferred across borders, what security measures apply, and what happens after a breach. EU–U.S. transfers require specific legal mechanisms such as Standard Contractual Clauses. Skipping this review can lead to regulatory fines that dwarf the cost of the EOR service itself.

Intellectual Property

This one catches companies late. Under U.S. copyright law, a work created by an employee within the scope of employment automatically belongs to the employer unless the contract says otherwise.17Office of the Law Revision Counsel. 17 U.S. Code 101 – Definitions When you use an EOR, the legal employer is the EOR, not you. Under the default rule, IP created by your worker technically belongs to the EOR.

The fix is straightforward but non-negotiable. Your Master Services Agreement must contain an explicit clause assigning all work product from the EOR to your company, and the employment contract between the EOR and the worker should carry a matching assignment. Without both layers, you can end up in a dispute over who owns the code your developer wrote or the designs your creative team produced. If the EOR’s template doesn’t cover this clearly, insist on adding it before signing.

What to Check Before Signing

Before you can get an accurate quote, the EOR needs job title, a full role description, the proposed salary in the worker’s local currency, and the worker’s country and residency status. Residency determines which tax treaties apply and what mandatory employer contributions the EOR must pay on top of salary.18Internal Revenue Service. Tax Treaties Those contributions vary widely. In many countries, social insurance, pension, and statutory benefits add 20% to 40% on top of base salary. In the U.S., employer-side FICA alone adds 7.65%, and state unemployment, workers’ comp, and benefits push the total higher.

Three sections of the Master Services Agreement deserve the most scrutiny. On fees, EOR service charges typically run as a flat monthly rate per employee, commonly between $499 and $1,500 depending on country, complexity of local labor law, and the benefits package; some providers charge a percentage of salary instead. Confirm which model applies and whether benefits administration is included or billed separately. On indemnification, look for mutual language: the EOR indemnifying you against claims from its own negligence in tax filings, benefits enrollment, or compliance, and you indemnifying the EOR against claims arising from the work itself or from instructions you give that violate local law. Expect a liability cap. On IP, the assignment clause must be explicit and complete.

The EOR drafts the actual employment contract the worker signs, but you supply the substantive terms: salary, benefits, paid time off, job duties, and any restrictive covenants like non-competes or confidentiality obligations. For international hires, the contract has to comply with local rules on notice periods, severance, and statutory leave. Many countries require 20 or more paid vacation days per year by law, unlike the U.S., which has no federal paid-leave requirement.

What Onboarding Looks Like

Once the MSA is signed, the EOR issues the employment contract to the worker. The worker provides personal documentation: government-issued ID, and in the U.S., a completed Form W-4 for federal income tax withholding19Internal Revenue Service. About Form W-4, Employees Withholding Certificate and a Form I-9 to verify employment eligibility, which the EOR manages as the legal employer.20U.S. Citizenship and Immigration Services. I-9, Employment Eligibility Verification

Expect the first invoice to run higher than the ongoing monthly cost. Most EORs require an initial deposit equal to one or two months of the employee’s total compensation as a buffer, so tax deposits and payroll obligations keep flowing if your company hits a short cash-flow disruption. One-time setup fees, typically $200 to $500, are also common. After the first cycle, invoices settle into a predictable pattern of salary plus employer contributions plus the monthly service fee.

Ending the Relationship

Ending an EOR-managed employment is more complex than firing a direct employee, especially internationally. The EOR is the legal employer throughout, so it has to comply with local labor law on notice periods, severance, and final pay timing. It will often review the facts before executing a termination to confirm it’s lawful, and it may push the effective date back if local law requires a longer notice period than you planned.

A few points that catch companies off guard. Don’t notify the employee first: premature communication about an intended termination can shrink the EOR’s options and create grounds for an unfair-dismissal challenge, so let the EOR control the timing and messaging after reviewing your request. Provide documentation for cause terminations, meaning performance reviews, written warnings, attendance records, or evidence of misconduct; without it, the EOR may be unable to execute the termination in jurisdictions with strong worker protections. Final pay, accrued leave, and any severance go through the EOR’s standard payroll cycle, timed to local law. In some places, final pay is due on the last day of employment; in others, by the next regular payday.

If you’re ending the EOR relationship entirely rather than offboarding one worker, plan the handoff. The two main paths are transferring the employee to your own entity once you’ve incorporated locally, or moving them to a different EOR. Either way, build in enough lead time so the new arrangement is fully in place before the old one ends, and the worker’s pay and benefits never lapse.