Because the real question isn’t whether an EOR will employ your people abroad. They all will. The question is what actually happens on the day a tax authority comes knocking, a worker is ruled misclassified, a data-protection regulator opens a file, or a country rewrites its employment law overnight. On that day, the only thing that counts is the integrity of the chain of responsibility between you and the person you hired. And that chain is exactly where the EOR industry quietly cuts corners.
The convenience trap
Most of the rapid growth in the Global EOR Services market has been built on a model that scales beautifully and obscures risk just as well: the aggregator.
An aggregator doesn’t employ your staff directly in most countries. It contracts with local third-party partners who do — and then presents the whole arrangement to you under one tidy logo. This is how a young provider can advertise coverage in 150-plus countries within a few years of launching. It’s fast, it’s cheap to stand up, and it lets the marketing team write big numbers. By most industry counts, this aggregated approach accounts for the majority of the market.
Here’s what the big number hides: between you and the human being doing the work, there can be a partner you’ve never met, operating under a contract you’ve never seen, in a jurisdiction your provider doesn’t directly control. When everything runs smoothly, you’ll never notice. The model is engineered for the days when everything runs smoothly.
The trouble is that international employment increasingly does not.
What actually goes wrong
Three failure modes turn the abstract question of “who’s accountable” into a concrete bill.
Worker misclassification. Treating someone as a contractor when the law says they’re an employee is one of the most expensive mistakes in cross-border hiring, and roughly a quarter of international markets have genuinely ambiguous classification rules. When the reclassification comes, it brings back-pay, back-taxes, and penalties – and a fight over who carries them.
Sudden regulatory change. Labour and tax rules don’t sit still. Providers and clients routinely report contract revisions and payroll disruptions triggered by abrupt legal shifts in a single country. A provider that owns its in-country operation absorbs that change directly. A provider relying on a partner has to hope the partner moves fast enough – and that the contract between them allocates the new cost to the right party.
Data protection. GDPR in Europe, India’s DPDP, Brazil’s LGPD, and a growing list of others impose strict, enforceable obligations on whoever processes employee data. Every additional intermediary in the chain is another party touching that data and another seam where compliance can fail.
In each case, the failure isn’t really about payroll mechanics. It’s about accountability – and the more hands the arrangement passes through, the blurrier accountability gets.
The reframe: an EOR is an accountability structure, not a payroll vendor
This is the mental shift worth making. An EOR isn’t software that runs payroll in foreign currencies. It’s the entity that legally stands in your place as employer and absorbs the liability that comes with that role. Judged that way, the most important spec on the sheet isn’t country count or onboarding speed. It’s this: when something goes wrong in country X, is there a single, identifiable party – answerable to me – who is legally responsible and operationally able to fix it?
If the honest answer involves the phrase “well, our local partner there…”, you don’t have one EOR. You have a referral.
What owning the chain looks like
The alternative is the wholly-owned model: a provider that operates its own legal entities in the markets where it places your staff, so there’s no subcontractor wedged between client and employee. It’s slower and more expensive to build, which is precisely why fewer providers do it – and precisely why it holds up better when conditions get adversarial.
XML International is a useful example of what this looks like in practice, partly because it has been doing it for a while. Founded in 2004 and headquartered in London, it predates most of the venture-funded platforms now competing on price and dashboards. It operates across EMEA, the Americas, and Asia-Pacific in more than 120 countries – and it does so, by its own account, through its own local entities rather than farming the work out to third parties unless a client specifically requests it.
That single design choice changes the accountability picture. With XML acting as the legal employer through entities it controls, the chain of responsibility runs from the client to one provider to the employee – full stop. There’s no fourth party in another country whose contract terms decide who pays when the rules change.
It also helps that the surrounding offering is built for the messy, real-world version of global hiring rather than the brochure version. Alongside core EOR, XML handles PEO arrangements, contingent-workforce and Managed Service Provider programmes, recruitment process outsourcing, international payroll, and – the part aggregators often punt on – immigration and relocation, with a dedicated account manager assigned to each overseas employee for visas, work permits, and the rest. Clients deal with a single point of contact, a single global contract, and consolidated multi-country payroll on one invoice. That track record has been built largely with Fortune 500 firms, publicly traded companies, and multinationals – the kind of clients for whom a compliance failure isn’t an inconvenience but a headline.
None of this makes XML the only defensible choice. It makes it a clean illustration of the principle: the value isn’t the promise to employ your people, it’s the structure that determines who answers for them.
A sharper buyer’s lens
If you take one thing from this, let it be a better set of questions for any EOR you’re evaluating:
- In my specific target countries, do you employ through your own entity, or through a partner? Name them.
- When a law changes in one of those countries, who bears the cost – you, me, or your local partner?
- How many parties touch my employees’ data, and where do they sit?
- If a worker is reclassified or a tax authority disputes a filing, who is legally liable, and who fixes it operationally?
- Show me a case where something went wrong and how it was resolved.
Notice what these questions do: they ignore the marketing entirely and go straight for the chain of accountability. A provider built on owned entities will answer them easily. A provider built on aggregation will reach for adjectives.
The bottom line
The EOR market is booming because borderless hiring is no longer optional, and that’s genuinely good news for anyone trying to build a global team. But the boom has rewarded a model optimised for the easy days. Convenience is abundant and cheap. Accountability – a single party that’s legally on the hook and operationally able to act, in every country where you’ve placed someone – is the scarcer and more valuable thing.
That’s the real product. Buy that, not the country count.