It usually starts with confidence.
A project needs to be delivered in Netherlands. The specialist is already employed in another EU member state. Payroll is organized there. Social security remains there. An A1 certificate is issued.
Everything seems neat, efficient and documented.
“We have the A1,” someone says in the meeting.
“So we’re compliant.”
And that is where the illusion begins. Because the A1 certificate does exactly what it is designed to do and nothing more.
It confirms which country’s social security system applies to an employee who temporarily works in another member state. It answers one specific legal question within EU coordination rules.
Where are social security contributions due?
- It does not answer whether the individual has the right to work in Netherlands.
- It does not confirm that Dutch labor law is not triggered.
- It does not assess who the economic employer actually is.
- It does not evaluate whether the structure reflects operational reality.
Yet in practice, the A1 is often treated as a compliance umbrella covering everything. And that is where risk quietly accumulates.
Consider what typically happens next
The specialist arrives in Netherlands. The Dutch client directs the daily activities. Performance reviews happen locally. The foreign employer becomes increasingly administrative. Months pass. Then a year.
On paper, it remains a temporary posting. In practice, the center of gravity has shifted.
From a social security perspective, the A1 may still be valid. But compliance in cross-border employment is never a single-pillar assessment. Immigration law, labor law and tax law operate in parallel and they do not automatically align. This becomes even more sensitive when the employee is a Third-Country National (TCN).
When an EU citizen is posted, free movement principles create a broad legal framework. But when a non-EU national is employed in one member state and posted to Netherlands, a different layer of analysis applies.
EU social security coordination still governs the A1
Immigration law, however, remains national.
Dutch authorities independently assess residence and work authorization. The fact that another member state issued an A1 does not eliminate the need to evaluate whether a Dutch residence permit or work authorization is required. The systems coexist. They do not replace one another.
This is where many organizations unintentionally step into a grey zone. The structure was not designed to avoid compliance. It was designed for efficiency. Centralized payroll. Optimized contributions. Administrative simplicity. All legitimate objectives.
But over time, what begins as optimization can quietly evolve into structural exposure.
Authorities across the EU have become increasingly attentive to this evolution. Cooperation between labor inspectorates, tax authorities and immigration services has intensified. Information flows more easily. Risk signals are shared.
And when an inspection occurs, it rarely focuses on the A1 certificate itself. Instead, inspectors ask different questions.
- Who gives day-to-day instructions?
- Who bears the economic risk?
- Where is the real employer located?
- Is this genuinely temporary, or structurally embedded?
- Does the arrangement reflect substance or only documentation?
There is a growing shift from formal compliance to substantive compliance. Formal compliance is document-based. Substantive compliance is reality-based. If the factual working relationship no longer matches the legal structure, documentation alone offers little protection.
The misconception that often surfaces is this:
“If another EU member state issued the A1, Netherlands must accept the entire structure.”
That assumption conflates two separate legal domains. The Netherlands must respect the social security determination under EU coordination rules. But it remains fully competent to assess immigration status, labor law qualification and tax exposure within its own jurisdiction.
An A1 certificate protects one pillar. The rest of the structure must stand on its own
This is not an argument against cross-border posting. On the contrary, cross-border mobility is essential to the EU internal market. A1 constructions are legitimate tools. They enable flexibility, knowledge transfer and economic efficiency.
But legitimacy depends on alignment.
Alignment between documentation and daily reality.
Alignment between temporary intention and actual duration.
Alignment between formal employer and economic employer.
Alignment between social security status and immigration compliance.
When those alignments weaken, exposure increases. And exposure rarely presents itself immediately.
It appears when a contract ends and questions arise.
When a payroll audit is triggered.
When an immigration review uncovers inconsistencies.
When a labor inspector connects dots across databases.
By that time, the narrative has shifted. What once felt administratively efficient may be interpreted as structural avoidance. Retroactive corrections become possible. Fines follow. Reputational considerations enter the equation.
All while the A1 certificate sits quietly in the file. Technically valid, but insufficient.
The more strategic question for organizations operating internationally is therefore not:
“Do we have an A1?”
It is: “Would our structure withstand a multi-authority review?”
That question requires stepping back from silo thinking. Social security cannot be assessed in isolation. Immigration cannot be treated as an afterthought. Labor law cannot be assumed irrelevant because payroll sits elsewhere.
Compliance in 2026 is holistic. Authorities increasingly look at the full ecosystem surrounding cross-border work. The A1 certificate remains important. It provides clarity. It offers legal certainty within its scope. But it is not a shield… it is a starting point.
And the difference between those two interpretations often determines whether a structure delivers efficiency or becomes a liability. Because when scrutiny comes, it does not evaluate comfort. It evaluates substance.
And substance, inevitably, tells the real story.