Compliance

Where the risk actually sits

Under a PEO arrangement, a co-employer assumes many client liabilities and shares others — which changes your exposure profile in ways worth understanding before you sign, not after. We map where the risk sits and help you ensure compliance across every state you operate in.

The aim is fewer surprises: lower odds of an EEOC or Department of Labor audit turning into litigation, and answers on hand from people who have seen the questions before.

What changes the moment you cross a state line

Most compliance exposure in the mid-market is not created by a decision. It is created by growth. A company hires one person in a new state, and inherits a registration obligation, a different set of wage-and-hour rules, a separate unemployment insurance account, and a payroll tax filing calendar nobody has read. None of that generates an alert. It generates a liability that sits quietly until something surfaces it.

The compounding version is worse: by the time a company operates in eight or ten states, the obligations differ enough that no single person holds the whole picture, and the answer to "are we compliant in Colorado" is genuinely unknown. That is the point at which most companies discover the problem — during diligence, an audit, or a claim.

The exposures that actually bite

Classification is first. Exempt-versus-non-exempt decisions made years ago against federal thresholds, never revisited against state thresholds that have since moved, are the most common finding we see and the most expensive to unwind, because the remedy is retroactive.

Then wage-and-hour mechanics: overtime calculation where bonuses or shift differentials should be in the regular rate, meal and rest rules that differ by state, and time records that cannot substantiate what was paid. Then registration and filing gaps in states where employment began before anyone told finance. Then, in shift-based operations, scheduling rules that carry penalty pay in a growing number of jurisdictions.

Almost nobody fails compliance deliberately. They fail it by growing faster than their record-keeping.

What co-employment does and does not transfer

This is the part most often misunderstood. A PEO becomes an employer of record for defined purposes and assumes a defined set of obligations — payroll tax filing and remittance, certain statutory notices, and elements of benefits administration among them. It does not absorb your obligations as the party that directs the work. Decisions about hiring, firing, scheduling, discipline and day-to-day supervision remain yours, and so does the liability attached to them.

That distinction matters because the phrase "the PEO handles compliance" is doing a great deal of unexamined work in most sales conversations. Reading the specific agreement, and understanding which category each obligation falls into, is a materially different exercise from accepting the summary. We do that reading before you sign.

Documentation is the defense

When a claim or an audit arrives, the question is almost never whether you meant well. It is what you can produce. Employers who lose these lose them on records, and the records that matter are unglamorous, created years earlier, and impossible to reconstruct afterwards.

Time records are first, because they carry the burden of proof on hours worked. Records that show identical start and stop times every day, or that were edited without an audit trail, are worse than no records at all — they invite the inference that they were created for the occasion. Automated capture with a visible edit history is the difference between substantiating a position and arguing it.

Then the exemption analyses: a written record of why each exempt role was classified that way, tested against duties as actually performed rather than the job description as written. Then I-9 completion and retention, handbook acknowledgments, documented performance conversations, and consistent personnel files that live in one system rather than in a manager’s email.

None of this is difficult. It is simply the kind of work that never becomes urgent until the moment it is far too late to begin. Building it into the process — so the record is a by-product of doing the work rather than a project of its own — is the only version that survives a growing headcount.

What we do

We map the actual footprint — every state where someone works, not every state on the org chart — and set it against what each one requires. We review classification against current state thresholds. We check whether time and pay records could substantiate a claim if one arrived. Where an arrangement is on the table, we read where liability genuinely sits rather than where the brochure implies it sits.

The output is a picture you can act on: what is fine, what is exposed, what it would cost to fix, and what order to do it in. Structure first, because structure is what stops the exposure recurring. Remediation second.