EOR Compliance Deep Dive: What Employers Must Know Before Signing

Before signing an EOR agreement, most US companies review the commercial terms. Few review the compliance terms with equal rigor. This is a mistake. The compliance provisions in your EOR contract determine what the EOR is actually responsible for — and what liability remains with you.

This guide covers the compliance provisions every US company should review before signing an EOR agreement, and the questions to ask providers to validate their actual compliance capabilities.

What Compliance the EOR Should Own

Payroll compliance

The EOR should warrant: accurate monthly payroll processing, timely tax remittance (TDS in India), correct statutory contribution calculations, and timely government filings (quarterly TDS returns, annual EPF reconciliation). Verify this is explicitly warranted in the agreement, not just implied.

Employment law compliance

The EOR should be responsible for: ensuring employment contracts are compliant with applicable local law at the time of signing, updating contracts when local law changes, and advising you on compliant practices for performance management, leave, and exits.

Regulatory change management

Employment law changes. India's labor law landscape has seen significant reform with the four Labour Codes (Wages, Industrial Relations, Social Security, Occupational Safety). The EOR should proactively notify you of regulatory changes that affect your employees and implement required changes without you having to monitor Indian labor law updates yourself.

What Compliance Remains with You

Worker direction and intellectual property

How you direct the worker's activities is your responsibility. The EOR employs them compliantly; you ensure that the work itself complies with applicable laws (export controls, data privacy, etc.). If your worker handles US customer data, GDPR compliance for that data processing is your obligation — not the EOR's.

Immigration compliance

EOR workers are employed in their home country and do not require US work authorization. But if you bring an EOR worker to the US for more than 30 days (for training, meetings, or on-site work), work authorization and immigration compliance become your obligation.

Permanent establishment management

The EOR eliminates the employment compliance risk but does not eliminate PE risk. If your EOR workers in India conduct sales activities, sign contracts, or act as agents of your US company, you may still trigger a taxable presence in India. This is your risk to manage — the EOR typically warrants only employment compliance, not tax structure.

EOR Contract Provisions to Review

Indemnification scope

Who indemnifies whom for what? The EOR should indemnify you for: their own payroll errors, their failure to remit statutory contributions, and their non-compliance with local employment law. You should indemnify the EOR for: your direction of work, your termination decisions, and any illegal instructions you give the EOR to implement.

Liability cap

Most EOR agreements cap the provider's liability at 12 months of management fees paid. Evaluate whether this is adequate for your risk exposure — a significant payroll error or misclassification event could create liability exceeding this cap. Negotiate higher caps for larger programs.

Termination provisions

Review: minimum contract term (aim for month-to-month or 30-day notice to terminate), what triggers the EOR's right to terminate (non-payment, legal violations), and transition obligations (the EOR should provide employment records and support your transition to another provider or own entity).

Data protection

Employee data flowing through the EOR is subject to local data protection law. India's Digital Personal Data Protection Act (2023) applies. The EOR should have documented data processing agreements and clear data retention and deletion policies.

Questions to Ask EOR Providers About Compliance

• 'Show me your most recent statutory compliance calendar and how you track filing deadlines for India'
• 'How do you handle a payroll error that results in underpayment of TDS — what is your remediation process and who bears the cost?'
• 'What happens if the Indian government announces a new labor code that affects our employees mid-contract? How and when do you notify us and implement changes?'
• 'Have any of your India EOR clients faced an EPF or ESIC compliance audit? What was the outcome?'
• 'What is your process when we terminate an employee who disputes the termination? Do you provide legal representation?'
• 'Can we audit your payroll records for our employees at any time?'