
Colombia labor law for hiring remote workers carries real exposure: a US company cannot legally employ staff in Colombia without a local entity or a third party that is the employer. Get classification wrong and you owe up to five years of back pay plus social contributions and fines. A BPO or EOR carries that liability for you.
Last updated: 2026-06-17
You found great talent in Medellin. The hourly rate looks like a steal. Then your lawyer asks the question that stops the deal cold: who is the legal employer? In Colombia, that answer decides whether you have a clean operation or a six-figure liability waiting to surface.
This guide walks through the exact risks, the rules that create them, and the structures that remove them.
Can a US Company Even Hire in Colombia?
Not directly, not as a payroll employer. To put someone on a Colombian employment contract, you need a registered local entity. A US LLC has no standing to run payroll, withhold social contributions, or file with Colombian authorities.
You have three real paths. You can incorporate a Colombian subsidiary, which takes months and ongoing legal upkeep. You can hire through an Employer of Record (EOR), which becomes the legal employer on paper. Or you can use a managed BPO that already employs the team and handles every statutory obligation.
Skuad’s 2026 EOR guide notes that an EOR can complete a compliant hire in as little as one to two weeks, with no entity required on your side. That speed is why most SMBs skip the subsidiary route entirely.

The Contractor Trap: Why “1099 Logic” Fails Abroad
Here is where most US owners get burned. You assume that paying someone as an independent contractor keeps things simple. In the US, a 1099 arrangement is common and low-friction. Colombia does not work that way.
Colombian labor law applies a subordination test. If three elements are present, the law treats the person as an employee no matter what the contract says. Those elements are personal service, continuous subordination to your direction, and regular pay. Set a schedule, assign daily tasks, or require the person to work only for you, and you have likely created an employment relationship.
Rippling’s worker classification guide confirms that the contract label is irrelevant. Courts and regulators look at how the relationship actually operates. A dedicated remote worker doing your daily back-office tasks almost always fails the contractor test.

What Misclassification Actually Costs
The penalties are not theoretical. Colombia’s social security enforcement unit, the UGPP, has grown aggressive about auditing foreign businesses to recover unpaid contributions.
When a worker is reclassified, you become liable for back payments covering up to five years of retroactive salary and benefits and social contributions, plus late fees and interest. Deel’s analysis of Colombian misclassification risk lays out the full chain. You owe retroactive health and pension and occupational-risk contributions. You owe unpaid severance and vacation. You face Ministry of Labor fines, and possible criminal liability in egregious cases.
For a single misclassified role, that bill can climb into six figures fast. One audit can convert a year of “savings” into years of debt.

The Real Cost of a Compliant Colombian Employee
Even when you hire correctly, the loaded cost is higher than the salary line suggests. Colombia mandates employer contributions that stack on top of base pay.
Here is the breakdown of what an employer pays on top of salary, drawn from Remote People’s Colombia payroll tax guide:
| Contribution | Employer Rate | What It Covers |
|---|---|---|
| Health (EPS) | 8.5% | National health system |
| Pension (AFP) | 12% | Mandatory retirement fund |
| Occupational risk (ARL) | 0.52% to 6.96% | Workplace injury insurance, varies by risk class |
| Parafiscals (SENA, ICBF, family fund) | 9% | Training, child welfare, family subsidy |
| Severance (cesantias) | 8.33% | Annual severance deposit |
| Vacation pay | 4.17% | Paid leave accrual |
Total employer overhead typically runs 21% to 30% of salary before you add the December bonus (prima) every employee is owed. None of this is optional. You cannot contract your way out of statutory protections, and a worker cannot waive them.

How a BPO or EOR Removes the Burden
This is the part that matters for your decision. A managed BPO or an EOR becomes the legal employer of record. They hold the Colombian entity, sign the local contract, run payroll through the mandated PILA system, and absorb the compliance liability.
The difference between the two is scope. An EOR is a pure compliance vehicle: it employs the person, and you manage the work. A managed BPO does that and more, building and training and supervising the team while still carrying full legal employment. RAM BPO uses the managed model, which means building a dedicated remote team in Colombia without you ever touching a local contract, a tax filing, or a labor dispute.
The compliance shield is the quiet value. RAM handles HR and payroll plus local Colombian labor law compliance, so the misclassification risk that scares your lawyer simply does not land on you. RAM BPO’s onboarding process gets a team operational in 7-10 business days, which is faster than you could even register an entity. For the broader tradeoff between models, our hiring teams resources compare structures side by side, and the nearshore outsourcing guide covers the full picture.
The cost case holds up too. Companies working with RAM BPO report 25-30% savings versus hiring equivalent staff locally in the US, with the compliance burden handled rather than added.
Frequently Asked Questions
Can a US company hire employees in Colombia without a local entity?
Not as a direct employer. Colombian payroll and contracts and contributions all require a registered local entity. A US company hires compliantly by using an Employer of Record or a managed BPO. That provider holds the Colombian entity and becomes the legal employer. You direct the work; they carry every statutory obligation and the legal liability.
What’s the difference between a contractor and an employee under Colombian law?
Colombia applies a subordination test, not a contract label. If the relationship involves personal service, continuous subordination to your direction and regular pay, the law treats the person as an employee. A dedicated worker following your schedule and daily tasks almost always qualifies as an employee, regardless of what the agreement calls them.
What are the penalties for misclassifying a worker in Colombia?
You become liable for up to five years of retroactive salary and benefits and social contributions, plus late fees and interest and Ministry of Labor fines. The UGPP enforcement unit actively audits foreign businesses. Egregious or repeated cases can trigger criminal sanctions, and the worker can sue separately for back-paid wages and benefits.
What payroll taxes and social contributions apply in Colombia?
Employers pay roughly 21% to 30% on top of salary: 8.5% health, 12% pension, 0.52% to 6.96% occupational risk, 9% parafiscals, 8.33% severance, and 4.17% vacation accrual. A mandatory December bonus adds more. Contributions run monthly through the PILA system, and neither side can waive these statutory protections.
Does a BPO or EOR handle Colombian compliance for me?
Yes. Both become the legal employer of record, signing the local contract, running compliant payroll and absorbing labor-law liability. An EOR is a pure compliance vehicle. A managed BPO also recruits and trains the team, then supervises it day to day. Either way, the misclassification and payroll risk shifts off your company and onto the provider.
What must a compliant Colombian employment contract include?
A valid contract covers personal service plus subordination and remuneration, alongside mandatory benefits that include health, pension, occupational risk, severance, plus paid vacation. It is governed by the Substantive Labor Code (Codigo Sustantivo del Trabajo) and should be in Spanish to stay enforceable locally. Statutory protections apply even when terms are left out, so the entity must comply by default.
Key Takeaways
- A US company cannot legally employ staff in Colombia without a local entity, an EOR, or a managed BPO acting as the employer.
- The contractor label means nothing; Colombia’s subordination test reclassifies most dedicated workers as employees.
- Misclassification exposes you to up to five years of back pay and contributions, plus fines and even criminal liability.
- Compliant employment carries 21% to 30% in mandatory employer contributions on top of salary, none of them waivable.
- A managed BPO or EOR carries the entity, the payroll and the legal liability, removing the risk from your books.
Colombian compliance is solvable, but only if someone qualified holds the legal employer role. If you want the talent without the entity, the audits, or the back-pay exposure, RAM BPO carries all of it for you. Reach out to see how a fully managed Colombian team fits your operation.
Related Reading: From Zero to Operational in 7-10 Days: How RAM BPO Launches Your Team.