Return to the parent page Hire in France — legally, without a local entity for a full explanation of the wage portage framework.
Def. : Urssaf : Union de recouvrement des cotisations de sécurité sociale et d’allocations familiales is the Union for the collection of social security and family allowance contributions. The Central Agency for Social Security Organizations (Acoss) and the Urssaf network collect and manage the resources of the majority of social protection organizations.
Two categories of risk — one for your EOR provider, one directly for your company
Using a non-licensed EOR in France does not only expose the provider. French law holds the client company jointly liable. Understanding each layer is essential before signing.
The risk your EOR provider carries — and may pass to you
A generic EOR platform operating in France without a portage salarial licence is, by legal definition, carrying out an unlawful lending of labour (in french « prêt illicite de main-d’œuvre ») under Article L.8241-1 of the French Labour Code.
The prohibition is absolute: any for-profit operation whose sole purpose is the supply of labour, carried out by an entity without specific legal authorisation, constitutes a criminal offence regardless of how the commercial contract is worded.
The EOR provider is liable as the « prêteuse » — the entity supplying the labour. But French law explicitly extends joint liability (responsabilité solidaire) to the « utilisatrice » — the company that benefits from the arrangement.
This is not a secondary exposure. The French social security code and the Labour Code treat both parties as co-responsible for all unpaid social contributions generated by the unlawful arrangement.
If URSSAF audits the EOR provider and finds the structure non-compliant, it does not stop at the provider’s accounts: it pursues the client company for all employer social contributions that should have been paid on the worker’s earnings, going back up to five years — not three, in cases of undeclared work (travail dissimulé).
URSSAF can reach back over five civil years plus the current year when undeclared work is established. Umalis
Additionally, if the EOR provider fails to pay salaries, social contributions, or holiday pay, the client company can be directly substituted for the employer and held responsible for those amounts by URSSAF, the worker, or the paid-leave fund.
The insolvency of the EOR provider does not protect the client. French law gives workers and social bodies a direct recourse against the company that actually benefited from the work. European Foundation for the Improvement of Living and Working Conditions
The risk your company carries independently of your EOR provider
Beyond joint liability with the EOR provider, the client company faces its own independent exposure — specifically on the question of worker reclassification (requalification).
French labour courts (in french : « conseils de prud’hommes« ) apply a substantive test to determine employment status.
If a worker placed by a foreign EOR provider in fact operates under the direction, schedule, and authority of the client company — uses its tools, works from its premises, has no other clients, and has no autonomy over their working methods — a French court will find that a subordination relationship (in french : « lien de subordination ») exists between the worker and the client company.
The EOR contract is then disregarded. The worker is reclassified as a direct employee of the client company — with all the consequences that follow:
- back-payment of unpaid employer contributions, formal recognition of CDI status, entitlement to notice pay, potential claim for unfair dismissal if the relationship was terminated without procedure, and access to all French employment protections from the first day of work.
This risk applies even if the EOR provider is entirely well-intentioned and administratively compliant in other respects. Reclassification is based on the facts of the working relationship, not on the provider’s legal status.
A foreign company that has not opened a French entity cannot argue before a French labour court that it has no French legal presence: the conseil de prud’hommes has jurisdiction over any employment relationship performed on French territory, regardless of the nationality or registration of the parties.
What URSSAF actually does — and what the financial exposure looks like in numbers
URSSAF (french Union de recouvrement des cotisations de sécurité sociale et d’allocations familiales) is not a passive tax authority.
It has operational inspection capacity and specific enforcement powers for unlawful labour arrangements. The financial consequences are calculable and severe.
How URSSAF detects non-compliant arrangements
An URSSAF audit may be triggered by a complaint, a suspicion, or as part of a random verification cycle.
Inspectors examine contracts, the nature of services performed, and the method of remuneration.
Specific indicators of unlawful labour lending include:
- the absence of a written agreement between the providing and receiving entities,
- the absence of the worker’s written consent,
- remuneration calculated exclusively on the basis of hours worked (rather than a fixed project fee or task-based amount), and
- an exclusive or near-exclusive relationship between the worker and the client company.
In 2024, URSSAF’s nationwide enforcement actions against undeclared work generated €1.6 billion in recovered contributions — a 34% increase over 2023, with the business consultancy sector alone accounting for €408 million of that total.
The consultancy and intellectual services sector — precisely the domain where foreign companies most commonly use EOR arrangements — is under active and intensifying scrutiny.
Source : french Service-public
The penalty structure — what you actually owe if found non-compliant
The financial exposure operates in layers.
The first layer is the principal amount
All unpaid employer social contributions on the worker’s actual or estimated earnings, covering the full audit period.
Employer social contributions in France run at approximately 42 to 45% of gross salary. On a senior consultant billing €10,000 per month over three years, the principal exposure is approximately €151,200 to €162,000 in unpaid contributions — before any penalties.
The second layer is the surcharge on the principal.
URSSAF applies a surcharge of 25% on undeclared contributions for a single worker, rising to 40% when the infringement involves multiple workers or aggravating circumstances, and up to 60% in cases of repeat infringement within five years.
A 5% late-payment surcharge (majoration de retard) applies from the date the contributions were due.
The third layer is criminal exposure.
Unlawful lending of labour is a criminal offence punishable by up to two years’ imprisonment and a fine of €30,000 for an individual; the fine rises to €150,000 for a legal entity (company). If the infringement involves multiple workers or is carried out in an organised manner, penalties escalate to five years’ imprisonment and €75,000 for an individual, and ten years and €100,000 in the most serious cases involving organised schemes.
The fourth layer is administrative sanctions,
They are cumulative with criminal and civil penalties. These include a five-year ban on receiving public subsidies, a five-year prohibition on operating the business, a three-month administrative closure of the establishment, and the potential dissolution of the entity if it was created to commit the offence. In practical terms, a foreign company found to have used an unlawful labour arrangement in France can also be excluded from French public procurement for five years — a consequential sanction for any company with or seeking government contracts in France.
Why the « we didn’t know » defence does not work in France
Non-compliance with Article L.8241-1 does not require proof of intent. The infringement is established by the facts of the arrangement — the structure of the relationship and the profit-making nature of the labour supply — not by the parties’ awareness of the legal prohibition.
A foreign company cannot successfully argue that it relied on its EOR provider’s assurances of compliance, because French law places an independent duty of vigilance (obligation de vigilance) on the client company. Under Article L.8222-1 of the Labour Code, any company that uses the services of a sub-contractor or service provider is required to verify that the provider is legally compliant — including by obtaining a certificate of social regularity (attestation de vigilance) from URSSAF confirming that the provider has paid all its social contributions.
A generic EOR platform that is not registered as a portage salarial company in France cannot produce such a certificate as a portage salarial operator, because it does not hold that status. This verification failure is itself a source of liability for the client company.
What eliminates this risk entirely
The structural elimination of URSSAF risk and reclassification risk requires one thing:
- engaging a wage portage company (portage salarial) that is legally registered in France, holds the portage salarial authorisation, and operates under the collective bargaining agreement IDCC 3219.
A licensed portage company produces an URSSAF attestation de vigilance on request, confirming that all social contributions for its salaried employees — including your consultant — are fully paid and up to date.
The tripartite structure — client company, portage company, consultant — is explicitly authorised by law. The portage company is the legal employer.
The client company is a commercial counterpart. No joint liability for social contributions. No reclassification risk. No criminal exposure.
