The continued shift to remote work has made geography feel almost irrelevant. Companies racing to scale internationally always want the fastest possible path to bring on cross-border talent, and for many, that path is simply to hire international workers as independent contractors. No local entity to register, no payroll infrastructure to build, and a lean team could move fast. A lot of HR and finance leaders still believe that arrangement keeps them compliant, but in fact it really doesn’t..
Regulators in market after market have caught up to the freelancer-as-employee pattern. What started as a convenient workaround has become a real exposure: the unregistered, accidental corporate presence sometimes called a “shadow entity”.
The Reality of the Shadow Entity
A shadow entity, sometimes referred to legally as a de facto permanent establishment, occurs when tax and labour authorities decide a foreign company has built a stable, ongoing economic presence in their country, even without a registered local entity. It does not require an office, a local bank account, or any formal footprint. It is triggered by the day-to-day activity, authority, and integration of your local contractors. If a US or UK company has a remote contractor abroad who negotiates contracts, manages local staff, or effectively runs a core part of the business, local authorities can reasonably argue that company is generating revenue inside their borders. At that point the freelance agreement stops protecting anyone, and the business looks, on paper, like it is running an unregistered subsidiary.
When a shadow entity surfaces in an audit, the consequences rarely stay contained to HR. They land on finance. Authorities can retroactively tax a share of the company’s global profits on the theory that they were generated locally. The business can be held liable for years of unpaid employer social security contributions, payroll taxes, and statutory benefits. And regulators can impose separate fines for operating an unauthorized entity, on top of whatever back pay or penalties the misclassification itself triggers.
Contractor misclassification is the mechanism behind most shadow entity cases. The legal boundary between a contractor and an employee varies by country, but it is generally crossed once a company starts exercising day-to-day behavioural and financial control, such as enforcing full-time exclusive hours, providing a company laptop, or holding mandatory performance reviews. At that point, most regulators will treat the person as an employee regardless of what the contract says.
The specifics vary by jurisdiction, and the gaps are where the real risk hides. Brazil’s labour courts are aggressive about awarding retroactive severance and union benefits once a contractor relationship looks like employment. Mexico requires statutory profit-sharing that misclassified contractors can claim a right to. Vietnam enforces social insurance contributions that, if missed, tend to trigger audits and compounding fines. Indonesia caps working hours by statute, so treating a contractor as an always-on resource is a violation on its own.
Assessing and Resolving Exposure
HR and finance should be reviewing the international contractor base together, not separately. Four questions tend to surface the real risk:
- Has this person worked solely for you for more than six months, with no other active clients?
- Are they executing discrete project work, or are they managing people and making decisions that bind the company?
- Are they using their own equipment, or did your IT team ship them a laptop and set up a corporate email address and title?
- Are they paid a fixed monthly amount regardless of deliverables, or receiving anything that resembles paid time off or benefits dressed up as invoice line items?
A contractor who flags on two or more of these is a live liability, not a hypothetical one.
Once an audit turns up a misclassified contractor or shadow entity exposure, the fastest legitimate fix is usually transitioning that person to an Employer of Record. Setting up a local entity to formally employ a handful of workers takes months and real money. An EOR sidesteps that by becoming the legal employer on paper in the target country. The EOR takes on local compliance: drafting contracts that hold up under local law, running payroll in local currency, and managing statutory withholdings, whether that is social insurance in Vietnam or severance structuring in Brazil. The company keeps full control over the person’s actual work, projects, and reporting lines.
How you communicate the change matters. Framed well, moving someone from a freelance contract to an EOR is an upgrade for them too, offering legal protection, stable benefits, and verifiable proof of employment that local lenders and landlords often require. Framed badly, as a bureaucratic formality imposed without explanation, it reads as a downgrade even when it is not.
Shadow entity risk builds quietly, which is exactly why it tends to go unnoticed until an audit forces the issue. Companies that get ahead of it, by auditing their contractor base and moving the people who need it onto a compliant structure, avoid the retroactive tax bills and penalties that come with getting caught. At Employ Borderless, we publish independent reviews, direct provider comparisons, and country-level hiring guides to help HR and finance leaders find the right EOR, PEO, or payroll partner for their specific markets. If you are trying to work out where your contractor base stands, that is a reasonable place to start.
Robbin Schuchmann is the Co-Founder at Employ Borderless.
