Is an EOR Actually Legal in Colombia? The Employment-Control Test Foreign Companies Overlook

Meanwhile, the US company assigns the engineer’s projects, determines working hours, evaluates performance, approves overtime, and decides when employment should end.

On paper, the Colombian EOR is the employer. In everyday operations, the foreign company controls much of the employment relationship.

That distinction matters under Colombian labor law.

In April 2026, María Camila Ortiz, a legal services manager at KPMG Law Colombia, raised concerns about the EOR model. Her analysis explained that Colombian legislation does not expressly recognize EOR as an independent legal employment category and that foreign clients may face exposure when they exercise the authority normally associated with an employer.

The issue is not simply whether a Colombian entity signs the contract or pays the employee.

It is whether the legal arrangement reflects how the employment relationship actually operates.

For foreign businesses hiring in Colombia in 2026, that requires examining three separate questions:

1. What legal structure supports the provider’s activities in Colombia?
2. Which organization exercises employment authority over the worker?
3. Who bears the financial and legal consequences when the arrangement is challenged?

An EOR arrangement is not automatically unlawful merely because Colombia lacks a dedicated EOR statute. Equally, an employment contract with a local provider does not automatically establish that the entire arrangement complies with Colombian law.

The answer depends on the structure, the contractual allocation of responsibilities, and the conduct of the parties.

What Does Colombian Law Actually Say About EOR Employment?

Colombia does not have a standalone statutory EOR framework equivalent to the commercial model promoted by international workforce platforms.

Instead, an EOR arrangement must be evaluated under existing rules governing employment relationships, independent contractors, labor intermediation, temporary staffing, and the responsibilities of businesses receiving services from third parties.

Four provisions of the Colombian Labor Code are particularly important.

Legal provision	What it establishes	Why it matters for an EOR
Article 23	Employment requires personal service, remuneration, and continued subordination	Identifies the characteristics of an employment relationship
Article 24	A personal work relationship is presumed to be governed by an employment contract	Makes the factual nature of the relationship important
Article 34	Independent contractors must operate with their own means, risks, and technical and managerial autonomy	Helps distinguish genuine outsourced services from labor supply
Article 35	Defines simple intermediaries and addresses related employment responsibility	Relevant when an intermediary appears to be the employer without genuinely performing that role

These provisions should be read alongside Article 53 of the Colombian Constitution, which recognizes the principle of primacía de la realidad sobre las formalidades, meaning that actual working conditions take precedence over contractual formalities.

The principle does not mean that every customer interacting with an outsourced worker becomes that worker’s employer.

It does mean that contractual labels cannot conclusively determine employment status when the underlying facts point elsewhere.

For EOR arrangements, the central issue is whether the provider’s stated employment responsibilities correspond to what it actually does.

Source: Colombian Labor Code, Articles 23–35.

The Difference Between Managing Work and Exercising Employment Authority

International businesses need to communicate with the people delivering their products and services.

A foreign client may need to explain specifications, establish project deadlines, review deliverables, and provide technical feedback.

These activities are not necessarily equivalent to exercising legal employment subordination.

The distinction becomes harder when the client controls the conditions under which an individual must work.

Article 23 identifies continuing subordination as an employer’s authority to issue instructions concerning the manner, time, or quantity of work and to impose workplace rules.

A client requesting that a developer complete an API integration by Friday is exercising a different type of influence from a client unilaterally changing the developer’s working hours, imposing disciplinary sanctions, or determining employment consequences for noncompliance.

The first may reflect ordinary commercial coordination.

The second raises questions about employment authority.

Colombia’s Supreme Court of Justice has distinguished genuine independent contracting from arrangements in which a purported contractor lacks its own productive organization or the autonomy expected of an independent business.

In decision SL955-2021, the Court discussed how a provider lacking its own operational structure or genuine control over its workers may function as a labor intermediary rather than an independent contractor.

That distinction is relevant to EOR analysis, although the judgment itself should not be treated as a ruling that every EOR arrangement is unlawful.

Source: Supreme Court of Justice, SL955-2021.

Five EOR Arrangements That Can Produce Different Legal Outcomes

Consider a foreign technology company using a Colombian EOR to employ a software engineer.

The following scenarios show why the same contractual structure can produce different legal questions depending on how employment decisions are made.

Scenario 1: The Foreign Client Assigns Daily Tasks

The US engineering manager creates Jira tickets, prioritizes the sprint backlog, reviews code, and discusses technical requirements with the Colombian engineer.

The EOR remains responsible for the employment agreement, payroll, leave administration, and formal employment matters.

Technical task allocation is common in commercial service arrangements. By itself, it does not establish that the foreign client is the legal employer.

The risk becomes more significant when the client’s instructions extend beyond deliverables and into continuing employment authority.

For example, a manager may move from assigning project priorities to issuing mandatory workplace rules, changing employment conditions, or threatening employment consequences for failing to follow instructions.

The relevant distinction is not whether the client communicates directly with the worker.

It is the nature and extent of the authority being exercised, evaluated within the entire contractual arrangement.

What to examine: Job descriptions, reporting lines, project-management permissions, workplace policies, and documented limits on client management authority.

Relevant law: Articles 23, 34, and 35 of the Colombian Labor Code.

Scenario 2: The Client Controls Working Hours

The engineer was hired under a Colombian employment agreement specifying a regular schedule.

Three months later, the US manager requires the engineer to attend meetings from 8 p.m. to 10 p.m. Colombian time, without involving the EOR in the schedule change.

This creates two separate questions.

The first concerns employment authority: who is permitted to change working conditions?

The second concerns compliance with Colombian working-time rules.

As of October 2026, Colombia’s general maximum ordinary working week is 42 hours, following the final scheduled reduction effective July 15, 2026.

Under the 2025 labor reform, the general nighttime period also begins at 7 p.m., effective December 25, 2025.

Consequently, working-time changes can affect the calculation of applicable premiums and the employer’s recordkeeping responsibilities.

The precise treatment depends on the working arrangement, employee category, and applicable exceptions.

An EOR that processes the original schedule but does not know about subsequent client-directed changes may lack the information necessary to administer employment obligations accurately.

What to examine: Employment agreements, timesheets, calendars, meeting schedules, schedule-change requests, and payroll adjustments.

Relevant law: Articles 23, 160, and 161 of the Labor Code, as amended, and Law 2101 of 2021.

Scenario 3: The Client Authorizes Overtime

A production incident requires the engineer to work additional hours.

The US manager approves the work through Slack. The EOR learns about the overtime only after the monthly payroll deadline.

Even where a client has a legitimate operational reason to request extra work, the legal employer needs accurate information and an appropriate approval and recording process.

An EOR contract should therefore identify who can request additional work, who verifies its legality, how authorization is documented, and how actual hours reach payroll.

The danger is not confined to delayed payment.

Repeated client-side overtime decisions without meaningful involvement from the employer may also provide evidence about who controls the worker’s conditions of employment.

What to examine: Overtime policies, approval logs, time records, payroll submissions, and communications between the client and EOR.

Relevant law: Articles 23, 159–168, and the applicable working-time provisions of the Labor Code.

Scenario 4: The Client Conducts Disciplinary Action

The engineer receives a formal written warning from the US company’s human resources department.

The warning states that another violation will lead to dismissal.

The Colombian EOR was neither consulted nor involved.

This scenario goes beyond routine technical supervision because disciplinary authority is a significant employer function.

Colombia’s 2025 labor reform amended Article 115 of the Labor Code to establish express minimum procedural safeguards for employment disciplinary sanctions.

These safeguards include notice of the proceeding, disclosure of the alleged conduct and relevant evidence, and an opportunity for the worker to respond, subject to the law’s detailed requirements.

A foreign client’s internal warning procedure cannot simply be assumed to satisfy Colombia’s statutory requirements.

It also raises a separate question about why the client, rather than the legal employer, is exercising formal disciplinary authority.

What to examine: Disciplinary policies, warning letters, performance improvement plans, employee communications, and records of EOR involvement.

Relevant law: Article 115 of the Labor Code, as amended by Article 7 of Law 2466 of 2025.

Scenario 5: The Client Directs Termination

The US company decides to eliminate the engineer’s position.

Its manager informs the employee that employment will end on Friday and asks the EOR to prepare the final settlement.

This creates significant exposure because the employment decision has effectively been communicated before the local employer has reviewed its legal consequences.

The applicable process may depend on the employment contract, the reason for termination, statutory indemnification requirements, and whether the employee benefits from special employment protections.

For example, pregnancy-related protections and protections connected with certain health circumstances may affect the legal analysis.

A compliant process cannot be established by calculating statutory severance alone.

It also requires determining who has the legal authority to implement termination, whether a lawful procedure has been followed, and how the decision is documented.

What to examine: Termination requests, employee communications, legal reviews, dismissal notices, protected-status assessments, and final settlement records.

Relevant law: Articles 62–65 and other applicable employment-protection provisions of the Labor Code.

These five arrangements demonstrate an important distinction: project coordination and employment subordination are not identical, but a client can cross from one into the other through its actual conduct.

No single example provides an automatic legal conclusion. The complete employment structure must be evaluated.

Colombia’s Temporary Staffing Rules Create Another Problem for EOR Providers

The absence of a dedicated EOR statute does not mean Colombia has no rules governing third-party employment arrangements.

Colombia specifically regulates Empresas de Servicios Temporales (ESTs), or temporary services companies.

Under Articles 71–94 of Law 50 of 1990, an authorized EST may employ workers and assign them to user companies under legally permitted circumstances.

Article 77 identifies three principal circumstances:

1. Occasional, accidental, or transitory work within the statutory definition.
2. Replacement of employees absent due to vacation, leave, sickness, or maternity.
3. Temporary increases in production, transportation, sales, harvests, or service demand.

For the third category, the law establishes an initial six-month period that can be extended for another six months.

The frequently repeated one-year limit should not be treated as a universal duration rule covering every possible EST assignment. Each permitted statutory ground requires its own analysis.

This is particularly important for companies hiring permanent software engineers, financial analysts, designers, or customer-support professionals through an EOR.

A continuing role performing ordinary business activities does not automatically qualify as a permitted temporary staffing assignment simply because an authorized Colombian entity supplies the worker.

The 2025 reform made the consequences more explicit

Article 45 of Law 2466 of 2025 added four paragraphs to Article 77 of Law 50 of 1990.

The amended framework expressly prohibits user companies from obtaining temporary staffing services outside the permitted circumstances.

It also restricts extending or replacing an assignment through another EST when the same underlying temporary need continues beyond the applicable legal conditions.

Most importantly, the reform expressly provides that, when the prescribed limits are breached, the user company may be treated as the true employer and the EST as a simple intermediary, subject to a judicial declaration.

The reform also addresses possible license revocation for serious violations and requires the employment contract of a worker on assignment to specify the reason for the assignment.

These are specific rules for the EST regime. They should not automatically be applied to every commercial EOR arrangement without first determining its legal characterization.

Nevertheless, they demonstrate why a provider’s legal basis cannot be assessed only by verifying that it is incorporated in Colombia.

A company must understand whether its provider operates as an authorized EST, a genuinely independent services business, or another structure, and whether the actual arrangement meets the requirements of that structure.

Sources: Law 50 of 1990, Law 2466 of 2025.

Does an EST License Make an EOR Arrangement Legal?

Not necessarily.

An EST license establishes authorization to undertake the regulated activity, but it does not eliminate restrictions on when temporary staffing services can be used.

The relevant due-diligence questions include whether the provider holds the required authorization, whether the specific arrangement falls within an allowed staffing purpose, and whether the assignment satisfies the applicable duration and documentation requirements.

A provider using a different legal structure needs to explain the legal basis supporting that structure and demonstrate that it is not merely supplying workers under circumstances reserved for authorized temporary staffing companies.

The distinction between outsourcing a business service and supplying labor is particularly important.

Under Article 34 of the Labor Code, as amended in 2025, an independent contractor is expected to undertake work using its own means, assuming its own risks and operating with technical and managerial autonomy.

A genuine outsourced software-development company may have its own management, employees, methods, resources, and contractual responsibility for delivering a defined service.

An entity whose practical involvement consists principally of placing employees on its payroll while the customer exercises employment authority may require a different legal analysis.

The contract’s description of the service is relevant evidence, but it is not a substitute for examining the actual operating model.

The Supreme Court’s decision in SL17025-2016 is relevant here. In discussing temporary staffing arrangements outside the permitted legal limits, the Court explained the circumstances in which a purported temporary employer could be regarded as an intermediary and the user company as the true employer.

Source: Supreme Court of Justice, SL17025-2016.

What Do Actual EOR Providers Say About Employment Control?

The operational documents and commercial terms published by international EOR platforms provide useful evidence about how they attempt to divide responsibilities.

They also show why businesses should distinguish a provider’s marketing description from its contractual allocation of legal and financial risk.

Remote: Employment decisions remain with the provider, but liability is not unlimited

Remote’s publicly available Terms of Service identify several employer responsibilities under its Employment Services provisions.

These include payroll, benefits, onboarding, leave management, disciplinary issues, and termination.

The terms also state that Remote, acting as employer, implements employment agreement changes and administrative employment actions at its discretion.

Customers must provide information needed for compliance, including hours worked, overtime, leave balances, and related employment records.

Remote’s June 2026 operational guidance for EOR customers goes further.

It instructs customers to involve Remote before initiating disciplinary measures, performance improvement plans, contractual amendments, or termination communications.

These procedures are commercially significant because they distinguish customer input from the provider’s formal employment actions.

However, the same published Terms of Service contain important financial provisions.

Under the Employment Services liability section, Remote excludes liability to the customer for adverse consequences arising from a competent authority determining that the worker is actually employed by the customer.

Its Employment Fees provisions also contemplate charging customers various employment-related costs, including legal costs, settlements, penalties, and expenses associated with employment claims, subject to specified exceptions.

This does not establish that a particular claim would necessarily succeed or that the same allocation applies unchanged to every Colombian engagement.

Remote’s terms expressly incorporate jurisdiction-specific local terms, and the signed agreement may contain other applicable provisions.

It does demonstrate that the commercial concept of an EOR assuming employer responsibilities is different from guaranteeing that the customer will never bear employment-related liabilities.

Deel: The client can initiate termination, but the provider reviews the process

Deel’s EOR documentation describes a model in which the provider handles contracts and employment compliance while customers maintain day-to-day management of their teams.

Its July 2026 offboarding guidance explains that customers can initiate termination requests but must supply supporting details.

Deel then reviews the proposed termination, assesses relevant circumstances, and coordinates the formal process.

The guidance also warns customers against communicating an upcoming termination independently.

This is an important operational distinction.

The customer may decide it no longer needs a particular role or service, but the local employment consequences must still be considered by the organization acting as employer.

These publicly available instructions describe provider processes. They do not establish the contractual liability allocation applicable to every customer, and they are not a Colombia-specific legal opinion.

What the published documents reveal

Question	Remote’s published materials	Deel’s published materials
Who handles the employment contract?	Remote describes itself as the employer and handles employment agreements	Deel describes itself as the legal employer
Can the client directly impose discipline?	Customer guidance requires Remote involvement	Country-specific handling should be confirmed in the agreement and process
Can the client request termination?	Yes, subject to Remote’s employer process	Yes, through a reviewed offboarding request
Are employment-related costs always absorbed by the provider?	No. Published terms provide for customer charges and exclusions	Cannot be established comprehensively from the cited operational guidance
Does the published material guarantee Colombian legal compliance in every arrangement?	No	No

These findings are based on publicly accessible documentation, not confidential negotiated customer contracts.

A proper contract review must also examine the applicable order form, local terms, amendments, and any negotiated allocation of liability.

The central finding is that an EOR’s assumption of formal employment administration does not necessarily eliminate the foreign customer’s financial or legal exposure.

The Ivvora Colombia EOR Contract and Control Audit

Before signing an EOR agreement in Colombia, a business should assess the provider’s legal structure, the division of employment authority, and the way both organizations operate in practice.

The following 18-question audit is designed to identify documents worth requesting and issues that warrant review by Colombian employment counsel.

It is a due-diligence framework rather than a statutory test or a legal compliance certification.

Part A: Legal Structure and Contractual Responsibility

1. What Colombian legal entity actually employs the worker?

Documents to request: Colombian company registration, certificate of existence and legal representation, employer identification details, and a sample local employment agreement.

Potential risk: The commercial provider and the employing entity are different organizations, and the client has not established which entity owes employment obligations.

Legal authority: Labor Code Articles 22–24.

Counsel review: Confirm the legal employer’s identity, the enforceability of its obligations, and whether the contractual structure accurately identifies all parties.

2. What legal basis permits the provider to deliver these services?

Documents to request: The provider’s explanation of its Colombian legal operating model, relevant authorizations, and descriptions of the services actually performed.

Potential risk: The provider relies on the commercial label EOR without explaining whether its activities constitute independent service provision, temporary staffing, or labor intermediation.

Legal authority: Labor Code Articles 34–35 and Law 50 of 1990, Articles 71–94.

Counsel review: Determine the legal characterization of the arrangement and whether its activities require regulatory authorization.

3. Does the arrangement fall within Colombia’s temporary staffing regime?

Documents to request: Any EST authorization, the commercial service agreement, the reason for assignment, assignment dates, and required worker documentation.

Potential risk: A permanent business role is supplied under a temporary staffing arrangement without a legally permitted reason.

Legal authority: Law 50 of 1990, Article 77, as amended by Article 45 of Law 2466 of 2025.

Counsel review: Verify the applicable statutory ground, assignment restrictions, documentation, and consequences of noncompliance.

4. Does the provider operate as a genuine independent service business?

Documents to request: Service descriptions, management structure, operational procedures, contractual deliverables, and evidence of the provider’s own technical and managerial resources.

Potential risk: The provider primarily supplies labor without demonstrating the autonomy expected of an independent contractor.

Legal authority: Labor Code Articles 34–35 and Supreme Court decision SL955-2021.

Counsel review: Assess operational independence, the allocation of commercial risk, and potential characterization as labor intermediation.

Part B: Daily Work and Employment Authority

5. Who controls the worker’s daily activities?

Documents to request: Reporting charts, employee handbooks, management protocols, and project-management access records.

Potential risk: The client exercises continuing employment-related authority rather than limiting its role to legitimate service coordination.

Legal authority: Labor Code Article 23.

Counsel review: Distinguish technical supervision and commercial coordination from continuing legal subordination.

6. Who determines and changes working hours?

Documents to request: Employment agreements, shift schedules, amendments, and approval records.

Potential risk: The client changes contractual working conditions without involvement from the legal employer.

Legal authority: Labor Code Articles 23 and 161.

Counsel review: Confirm scheduling authority and compliance with Colombia’s current working-time framework.

7. Who authorizes overtime and additional working days?

Documents to request: Overtime approval workflows, timesheets, payroll reports, and exception records.

Potential risk: Unrecorded client-directed overtime causes wage compliance problems and creates evidence of employment control.

Legal authority: Labor Code provisions governing working time, overtime, and mandatory rest-day work.

Counsel review: Verify approval procedures, applicable premiums, statutory limits, and responsibility for inaccurate payroll information.

8. Who approves vacations and other leave?

Documents to request: Leave policies, approval records, payroll instructions, and employee communications.

Potential risk: The client effectively controls statutory leave decisions while the EOR only updates payroll records.

Legal authority: Labor Code Articles 186–192 and applicable leave legislation.

Counsel review: Determine the respective responsibilities for scheduling, recording, paying, and protecting statutory leave.

9. Who establishes binding workplace rules?

Documents to request: Employee handbooks, codes of conduct, internal policies, acknowledgments, and incorporation clauses in employment agreements.

Potential risk: The client independently imposes rules that alter employment conditions or create disciplinary consequences.

Legal authority: Labor Code Articles 23 and 104–115, where applicable.

Counsel review: Determine which policies may legitimately apply, who has authority to enforce them, and whether local legal formalities are satisfied.

10. Who changes salary, job title, or employment conditions?

Documents to request: Compensation-change requests, contract amendments, promotion letters, and communications confirming employee acceptance.

Potential risk: The foreign client directly modifies employment terms while the EOR documents decisions after they have already taken effect.

Legal authority: Labor Code Articles 23 and 39, together with applicable rules governing employment agreements.

Counsel review: Verify who can implement changes and whether employee consent or other legal requirements apply.

Part C: Discipline, Termination, and Employee Protection

11. Who conducts formal disciplinary proceedings?

Documents to request: Disciplinary procedures, warning letters, investigation files, hearing records, and decision approvals.

Potential risk: The client independently issues disciplinary sanctions without the procedures required under Colombian law.

Legal authority: Labor Code Article 115, as amended by Law 2466 of 2025.

Counsel review: Assess due-process compliance, procedural authority, documentation, and the legal significance of client involvement.

12. Who manages performance improvement plans?

Documents to request: Performance management policies, improvement plans, employee notifications, and EOR review records.

Potential risk: A client-issued performance plan functions as a disciplinary warning or preparatory dismissal step without appropriate local-employer involvement.

Legal authority: Labor Code Articles 23, 62, and 115, as applicable.

Counsel review: Distinguish ordinary performance feedback from formal employment measures and evaluate the applicable procedure.

13. Who determines whether employment can be terminated?

Documents to request: Termination clauses, decision-making procedures, legal review records, and proposed employee communications.

Potential risk: The client communicates or implements termination before the Colombian legal employer assesses statutory requirements.

Legal authority: Labor Code Articles 62–65 and applicable protective legislation.

Counsel review: Review termination grounds, indemnities, procedural requirements, and actual decision-making authority.

14. Who evaluates employees with special legal protections?

Documents to request: Protected-status assessment procedures, legally permissible supporting records, accommodation policies, and relevant authorization documentation.

Potential risk: A business treats dismissal as a routine commercial decision despite potentially applicable employment protections.

Legal authority: Applicable pregnancy, health, disability, and union-related employment protections.

Counsel review: Establish the required individual assessment, any governmental or judicial authorization, and the lawful process for the circumstances.

Part D: Financial Liability and Operating Evidence

15. Who is responsible for payroll and social security compliance?

Documents to request: Payroll samples, social security contribution records, PILA evidence, benefit calculations, and proof of relevant filings.

Potential risk: The provider issues payroll without receiving complete information about hours, compensation, leave, or other employment events.

Legal authority: Colombian social security legislation, applicable Labor Code provisions, and contribution enforcement rules administered by UGPP.

Counsel review: Confirm the responsible employer, reporting procedures, contribution bases, applicable exemptions, and remedies for underpayment.

16. Who pays when an employment claim arises?

Documents to request: The master service agreement, indemnification provisions, liability limitations, employment-claim procedures, and insurance terms.

Potential risk: The client assumes financial responsibility for employment claims, penalties, settlements, or legal expenses beyond the advertised EOR management fee.

Legal authority: Labor Code Articles 34–35 and applicable principles governing employment and contractual responsibility.

Counsel review: Identify the difference between statutory liability to workers and contractual reimbursement obligations between provider and client.

17. What happens when a court or authority identifies the foreign client as an employer?

Documents to request: Misclassification exclusions, indemnification clauses, liability caps, defense-control provisions, and country-specific contractual terms.

Potential risk: The EOR agreement excludes reimbursement precisely when an authority rejects the assumed division of employment responsibility.

Legal authority: Labor Code Articles 23–24, 34–35, Article 53 of the Constitution, and relevant judicial decisions.

Counsel review: Evaluate the possible grounds for employer recognition, the enforceability of contractual protections, and cross-border enforcement issues.

18. Can the provider demonstrate how employment decisions operate in practice?

Documents to request: Representative leave approvals, overtime records, contract amendments, disciplinary files, termination procedures, and audit reports, appropriately anonymized.

Potential risk: The contract allocates employer responsibilities to the EOR, but records show that the client routinely makes and implements those decisions.

Legal authority: Article 53 of the Constitution and Labor Code Articles 23–24.

Counsel review: Compare written responsibilities with actual conduct and identify remedial measures before a dispute arises.

How to Interpret the Audit Results

The audit is not a numerical test established by Colombian legislation.

A business should not assume that passing a certain number of questions makes the arrangement legally compliant.

Instead, the responses should be examined across three levels.

Review outcome	What it means	Recommended response
Documented and consistent	Contractual authority and operational evidence appear aligned	Continue periodic monitoring and obtain legal confirmation of the structure
Unclear or incomplete	Responsibilities are described but supporting evidence or procedures are missing	Request documents and clarify responsibility before relying on the arrangement
Material inconsistency	The client appears to exercise employer functions that the provider contractually claims to retain	Escalate for Colombian legal review and assess corrective action

Certain findings require particular attention, including an unexplained legal basis for supplying workers, unauthorized temporary staffing, unilateral client disciplinary action, and employment termination without meaningful employer involvement.

A well-drafted contract is valuable, but its usefulness depends on the operational practices supporting it.

Who Actually Pays When a Colombian EOR Arrangement Goes Wrong?

The answer depends on the type of claim, the legal characterization of the relationship, the parties involved, and the agreed contractual terms.

It is important to separate three categories of exposure.

1. Statutory employment obligations

Colombian employees may have legal entitlements to salary, vacation, service bonuses, severance savings, interest on severance savings, applicable premiums, social security contributions, and termination indemnities.

Those entitlements arise from applicable employment law, not simply from the EOR’s commercial pricing model.

A contract between an EOR and a foreign client cannot automatically eliminate statutory employment rights.

Where liability is disputed, the responsible parties must be determined under the applicable rules and facts.

2. Contractual reimbursement obligations

Even when the EOR has legal obligations toward the employee, its commercial agreement may require the foreign client to reimburse certain costs.

These can include legally required employment payments, termination expenses, legal fees, or other liabilities covered by the agreement.

The scope of these obligations may depend on whether the provider or client breached the contract, who controlled the relevant decision, and whether contractual exclusions apply.

This is why the indemnity and liability sections deserve the same attention as the payroll and service-fee provisions.

3. Regulatory and tax exposure

A problematic employment structure may raise issues beyond unpaid compensation.

Depending on the arrangement, possible areas of review include unauthorized labor intermediation, contribution compliance, employment inspections, and cross-border tax exposure.

However, these consequences should not be treated as automatic.

Each has its own legal requirements, available defenses, enforcement mechanisms, and responsible parties.

A practical example of how liabilities can accumulate

Consider a company that uses a Colombian EOR to hire an employee under an indefinite-term contract.

The client independently changes the employee’s schedule, does not report all overtime, and subsequently directs termination.

A legal assessment may need to investigate several separate issues:

Potential exposure	Question requiring investigation
Unpaid working-time compensation	Were all compensable hours and applicable premiums recorded and paid?
Statutory employment benefits	Were benefit accruals and settlements calculated using the proper salary and service information?
Termination indemnity	Was the termination without just cause, and what compensation is legally required?
Special dismissal protection	Did circumstances require additional protections or prior authorization?
Employer identification	Could another organization be recognized as an employer or share responsibility?
Contractual reimbursement	Which resulting costs may the provider recover from the client?
Legal defense	Who controls the response to employee claims or investigations, and who funds it?

These are potential exposures, not findings that any particular EOR customer is liable.

The final amount cannot be estimated responsibly without the employee’s compensation, service dates, contract, working-time history, termination circumstances, and applicable legal findings.

An EOR management fee should therefore not be confused with a maximum possible employment liability.

Could Using an EOR Create a Permanent Establishment in Colombia?

A foreign company should also evaluate whether its Colombian activities could create a taxable presence.

Under Article 20-1 of Colombia’s Tax Statute, a permanent establishment can arise through a fixed place of business or, subject to applicable exceptions and treaty rules, through a dependent agent who habitually exercises authority in Colombia to conclude binding acts or contracts for the foreign enterprise.

A Colombian employee merely performing remote technical work does not automatically create a permanent establishment.

Likewise, hiring through an EOR does not automatically prevent one.

The employee’s actual activities matter.

For example, a software engineer focused on internal development raises different tax questions from a senior commercial representative who routinely concludes contracts binding the foreign business.

Businesses should examine the individual’s responsibilities, commercial authority, reporting lines, and interactions with Colombian customers.

Employment-control analysis and permanent-establishment analysis are related but legally distinct.

The first concerns employment relationships and labor obligations.

The second concerns the nature and extent of the foreign enterprise’s taxable presence.

A positive finding under one framework does not necessarily establish a positive finding under the other.

Source: DIAN, Colombian Tax Statute, Article 20-1.

Which EOR Contract Clauses Deserve the Closest Review?

A foreign business comparing EOR providers in Colombia should request the actual proposed agreement rather than relying exclusively on a sales presentation or public pricing page.

At minimum, six contractual areas deserve review.

Contract area	Question to resolve
Legal service structure	What legally recognized relationship supports the provider’s service in Colombia?
Employment authority	Which decisions belong exclusively to the provider, and what may the client direct?
Liability allocation	Which employment claims, penalties, and expenses must the client reimburse?
Limitation of liability	What protections, caps, exclusions, and exceptions apply?
Employee termination	Who reviews, authorizes, communicates, and implements termination?
Exit and continuity	What happens to employees and outstanding liabilities if the commercial service relationship ends?

A seventh consideration is evidence.

The provider should be able to explain how the contractual responsibilities are enforced through actual procedures, including employment amendments, working-time reporting, complaints, leave administration, and offboarding.

A contractual promise to remain the employer is less persuasive when operating records consistently show that the client performs the corresponding functions.

What Should Foreign Companies Do Before Hiring Through an EOR in Colombia?

Companies do not necessarily need to reject the EOR model.

They do need to understand the legal structure they are purchasing.

A reasonable due-diligence process begins with identifying the actual Colombian employing entity and obtaining a legally grounded explanation of its operating model.

The company should then review whether the engagement could constitute temporary staffing, genuine independent service provision, or another relationship requiring further legal analysis.

Next, the client and provider should document how they will handle employment authority.

Technical managers need clear rules about which activities they may perform directly and which require the EOR’s involvement.

For example, a manager may need to coordinate deadlines and review engineering output, while formal changes to working hours, employment terms, disciplinary decisions, and termination require an agreed process involving the legal employer.

The agreement should also explain how the provider receives accurate information about payroll, leave, overtime, complaints, and workplace incidents.

Finally, the business should review contractual liability provisions and conduct periodic operational checks.

A compliant operating process cannot be assumed to remain unchanged merely because the original contract was appropriately drafted.

As the team expands, managerial responsibilities often change, and those changes may alter the legal analysis.

Is Hiring Through an EOR Safer Than Establishing a Colombian Entity?

The two approaches create different forms of responsibility.

Establishing a Colombian entity can provide a clearer structure for directly employing and managing a local team, although it requires the business to administer corporate, tax, employment, and regulatory obligations.

An EOR may reduce the operational burden of establishing a local employing structure, but it introduces a contractual relationship with another organization and requires careful coordination of employment authority.

Neither approach should be described as universally safer.

A company hiring one worker for a limited engagement may have different considerations from a company building a permanent Colombian engineering department with dedicated managers and a long-term operational presence.

The choice depends on the intended activities, employment arrangements, duration, cost structure, tax implications, and the provider’s legal model.

For some businesses, an EOR may form part of an appropriate hiring structure following local legal review.

For others, direct employment through a suitable registered presence or procurement of a genuinely independent service may be more appropriate.

The critical mistake is choosing a structure solely because it allows payroll to begin quickly.

Frequently Asked Questions

Is an Employer of Record legal in Colombia in 2026?

Colombia does not expressly recognize EOR as a standalone statutory employment category. An EOR arrangement therefore requires examination under the country’s existing employment, contracting, and labor intermediation laws. It should not automatically be considered either illegal or compliant.

Can a US company hire employees in Colombia without opening an entity?

Foreign businesses may explore EOR and other arrangements that do not require them to establish their own local subsidiary. However, the legal validity of a proposed structure, the possibility of direct employment, and any registration or tax obligations must be assessed individually. An EOR is not a blanket exemption from Colombian employment law.

Can an EOR client manage a Colombian employee directly?

Technical coordination, project assignments, and review of deliverables may be compatible with a commercial service relationship. Continuing authority over employment conditions, formal discipline, or termination raises additional questions under Colombia’s rules on subordination and employer responsibility.

Can an EOR terminate an employee in Colombia at the client’s request?

An EOR may receive and assess a client’s request to end an assignment or employment relationship, but the legal employer must address the applicable Colombian termination requirements. The client should not assume that its commercial decision alone establishes lawful grounds or procedures for dismissal.

Does an EOR protect the client against all employment claims?

No blanket conclusion of that kind is supported. Exposure depends on Colombian law, the factual relationship, and the actual agreement. Publicly available EOR terms show that some employment-related costs and risks may remain with, or be contractually allocated to, the customer.

Is a Colombian temporary services company the same as an EOR?

No. An EST is a specifically regulated legal category subject to authorization and restrictions under Law 50 of 1990 and subsequent amendments. EOR is a broader international commercial description. A provider’s use of the EOR label does not establish that it satisfies the requirements of the EST regime or another lawful contracting structure.

Does hiring through an EOR eliminate permanent-establishment risk?

No. Permanent-establishment analysis depends on the foreign company’s actual activities and the applicable tax rules, including any relevant treaty provisions. The use of a local payroll employer does not automatically determine the outcome.

The Real Colombia EOR Compliance Question

The most useful question for a foreign business is not simply whether the EOR appears on the employment agreement.

It is whether the chosen legal structure supports the services being delivered and whether the parties’ actual conduct matches their respective responsibilities.

An EOR may administer payroll, sign employment contracts, and register employees for social security while the client retains substantial operational involvement.

The legal significance of that involvement depends on whether it constitutes permissible coordination, employment subordination, unauthorized labor supply, or another form of legally relevant control.

Colombia’s employment rules, temporary staffing restrictions, and 2025 labor reform make those distinctions important.

The contractual allocation of financial responsibility adds another layer. A provider may undertake formal employer functions while reserving the right to charge the client for significant employment-related costs or excluding liability in certain circumstances.

Foreign companies should therefore evaluate an EOR across three dimensions: the legality of its operating structure, the actual allocation of employment authority, and the contractual distribution of liability.

A provider’s ability to process Colombian payroll is not, by itself, sufficient evidence that those questions have been resolved.

For Ivvora, the practical starting point is to review the employer-cost obligations alongside the legal and operational responsibilities that create them.

The goal is not simply to hire in Colombia without establishing a subsidiary. It is to select an employment structure whose contracts, operating practices, and financial responsibilities are consistent with Colombian law.

---

Sources and Legal References

The following sources support the legal framework, statutory changes, judicial interpretations, and public provider-document analysis discussed above.

1. Colombian Labor Code (Código Sustantivo del Trabajo). Relevant provisions include Articles 23, 24, 34, 35, and employment administration and termination rules.
2. Law 50 of 1990. Statutory framework for temporary services companies, including Article 77.
3. Law 2466 of 2025. Labor reform including changes to contractor rules, temporary staffing restrictions, disciplinary procedure, and working-time provisions.
4. Supreme Court of Justice, SL17025-2016. Judicial interpretation of temporary services companies and the consequences of arrangements outside permitted staffing purposes.
5. Supreme Court of Justice, SL955-2021. Discussion of genuine independent contractors and labor intermediation.
6. KPMG Colombia, María Camila Ortiz, April 8, 2026. Legal commentary on EOR structures and employment-control risks.
7. Remote, Terms of Service. Public Employment Services provisions, employer responsibilities, liability exclusions, and employment-related costs.
8. Remote, EOR Operational Guidance, June 2026. Guidance concerning employment changes, disciplinary measures, leave, and termination.
9. Deel, EOR Offboarding Guidance, July 2026. Public explanation of customer-initiated termination and provider review.
10. DIAN, Colombian Tax Statute. Article 20-1 concerning permanent establishments.

Research reference date: October 2026. This article provides general legal and operational information, not individualized Colombian legal or tax advice. The audit is an editorial due-diligence framework and should be used alongside professional review of the actual engagement, current legal requirements, and signed contracts.