Compliance Handbook

Everything HR & Legal needs to know about remote work compliance

All risks around remote work simply explained

Risk mitigation measures

WorkFlex does not just assess the risks, it also implements a compliant solution for each trip. This saves the employer on average 3 hours of manual work per trip.

The compliant solution consists of (a combination of) the 8 measures:

  • For business trips: The implementation will start immediately after the trip request.
  • For workations: As soon as both the manager and the HR have approved the request, the implementation of the compliant solution will automatically be initiated.
             Risk mitigation measures by WorkFlex

Knowing that WorkFlex will put the compliant solution in place, allows the global compliance engine to qualify more requests as low risk with two main results:

  • Business trips can take place without the involvement of HR or internal compliance checks
  • More workations can be granted allowing the employer to make employees happy by approving their trip requests

Audit trail

WorkFlex immediately and automatically establishes an audit trail of the entire process. There is no need to keep any additional administration, as all information and documentation remain available on the platform for both the employer and the employee. The details of the employee`s request as well as the manager and HR approval (including time stamp), are examples of the audit trail.

                                                                Audit trail on the WorkFlex platform

Risk Assessment / Compliance Summary

Based on the data provided, all risks are immediately assessed, and the result is stated in a so-called "Risk Assessment" (for workations) and "Compliance Summary" (for business trips).
This will include all measures to be taken, either by WorkFlex or the employee or employer.

                                  Compliance Summary of the requested business trip

Social Security Documents

WorkFlex immediately and automatically requests social security statements. After it has been issued - it will be directly uploaded to the platform along with all other necessary trip documents. As of now, WorkFlex can request A1s and CoCs in these countries (see here for details).

Further - for documentation of the applicable social security rules, the unique WorkFlex Social Security Statement – Provisional A1 or Provisional CoC -  is always immediately produced and uploaded. The content is similar to an A1 or CoC (see example here), so the employee and employer can prove the legal background has been checked and subsumed. Moreover, for short requests (60 days or below) and for cases where asocial security treaty applies, the WorkFlex Social Security Statement ensures that the no-risk concept applies.

WorkFlex travel insurance certificate

If agreed upon with the employer, WorkFlex ensures that every employee is covered by adequate travel insurance from Hallesche ALH Group, an established German insurance company. Immediately after the request has been approved, WorkFlex automatically generates a confirmation of this travel insurance – the WorkFlexTravel Insurance Certificate (WTIC) document and makes it available on the platform.

   WorkFlex travel insurance certificate

Company policy

Each company can upload its individually drafted company policy determining day thresholds, destination thresholds, work locations such as Co-Working spaces, VPN regulation, etc. Based on the rules determined in the company policy, WorkFlex is double-checking via employee confirmation to protect the employer. Many risk assumptions are based on the talent’s answers, which can create a risk if the employee does not respond truthfully. So, making them accept the employee confirmation, is one step more than just having a policy on the intranet. Examples are the employee accepting the policy and the data protection instructions. Also, via WorkFlex, the employee confirms that all information provided is correct and complete.

                                         Company Policy

Employee instructions

Immediately after the request has been approved, WorkFlex automatically generates an employee instructions document and makes it available on the platform. The employee instructions can be made employer-specific, and generally include the most important do`s and don`ts from the policy, as well as the WorkFlex emergency contact details.

      Employee Instructions uploaded to the WorkFlex platform

Posted Worker Notification

WorkFlex will determine whether the planned trip needs to be registered in the destination country. Upon the assessment, when registration is necessary, the employee will be asked for further details to enable WorkFlex to directly register the employee in the respective portal. Required to proceed with the country registration, details of the trip are asked, often the contact details of the client/customer/business contact in the destination as well as workplace and hourly or yearly wages of the traveller.

            Posted Worker Notification


GDPR Travel Impact Assessment (TIA)

As part of the Data Protection sub-assessment, WorkFlex assesses whether a so-called Data Transfer Impact Assessment (TIA) is required. If so, WorkFlex will do such an assessment on behalf of the employer and upload a report with the result to the platform – ensuring GDPR compliance for the employer. The TIA is generated with the risk assessment file, not after submission. Furthermore, we ensure compliance with GDPR requirements, e.g. through employer guidelines and employee instructions.

WorkFlex GDPR Assessment

What HR should know about data protection & working abroad

Download now our extensive whitepaper with best practices to mitigate the risks of unsecured Wi-Fi networks, Phishing attacks, and international data transfers

Download our Data Protection Whitepaper

What HR should know about data protection & working abroad

Download now our extensive whitepaper with best practices to mitigate the risks of unsecured Wi-Fi networks, Phishing attacks, and international data transfers

Download our Data Protection Whitepaper

What HR should know about data protection & working abroad

Download now our extensive whitepaper with best practices to mitigate the risks of unsecured Wi-Fi networks, Phishing attacks, and international data transfers

Download our Data Protection Whitepaper

What HR should know about data protection & working abroad

Download now our extensive whitepaper with best practices to mitigate the risks of unsecured Wi-Fi networks, Phishing attacks, and international data transfers

Download our Data Protection Whitepaper

Compliance Team

Portrait of Dorothee
Dorothee Schweigard
Director of the Compliance Research Center of WorkFlex. Prior she has gained experience as a consultant at EY&PWC, as well as as an in-house specialist for international & executive HR as well as global mobility at AUDI, Xella, GfK, and MediaMarktSaturn. With extensive experience in HR, global mobility and compliance management she’s an expert in organizational efficiency and international cross border HR.
Portrait of Pieter Manden, Founder of Workflex
Pieter Manden, LLM MBA
Co-founder of WorkFlex and the former Head of Trust & Employer Compliance at WorkMotion. He is a Dutch certified tax lawyer specialising in compliance around modern mobility. Pieter has 13 years of professional experience with PwC in the Netherlands and Germany. Prior to joining WorkMotion in January 2022, he was Director responsible for PwC Germany’s Remote Work proposition.
Portrait of Martina
Dr. Martina Menghi (Expert Labour Law)
Manager of the WorkFlex Compliance Research Center. She is an Italian attorney at law, holding a double degree in law (Italian and French). Prior to joining WorkFlex in August 2022, she worked at KPMG Law in Germany for four and a half years, focusing on international labour law and posted workers obligations, which was also the topic of her PhD thesis.