It often starts with reassurance. A Dutch company engages a contractor established in another EU member state. The contractor supplies personnel for a project in Netherlands. Before the agreement is signed, someone checks whether the foreign employer is NEN 4400-2 certified. The certificate is valid. The registration is confirmed. The file is complete.
There is a sense of relief in the room. The assumption settles almost automatically: the administrative side is covered. Payroll is compliant. Social security is arranged. The risk of chain liability has been mitigated.
What is rarely discussed at that moment is immigration
On paper, everything looks structured. The EU employer handles contracts. Salaries are paid abroad. A1 certificates may be in place. The Dutch client sees documentation that signals order and control. There is little reason to suspect exposure.
Until something small happens
An accident on site, a disagreement about working hours or a routine inspection that turns into a broader review. Dutch enforcement authorities do not operate in isolation. When one authority starts asking questions, others may follow. What begins as a labour inspection can expand into a tax review and, increasingly, into an immigration assessment.
During an administrative desk investigation, the focus shifts from the certificate on file to the people on the work floor. Authorities examine who is actually present, under what status and performing which activities. They verify identity documents. They check residence permits. They assess whether the individual has the right to work in Netherlands. They look at how long the assignment has lasted and under whose supervision the work is performed.
This is where the distinction between certification and immigration compliance becomes painfully clear.
NEN 4400-2 was never designed to assess residence rights of Third-Country Nationals. It provides assurance about wage tax payments and payroll administration within a chain structure. It reduces specific financial risks. It does not confirm that a non-EU national employed by an EU-based contractor is lawfully residing and working in Netherlands.
For many hirers, this comes as a surprise
There is a persistent belief that responsibility lies entirely with the foreign employer. After all, that entity signed the employment contract. That entity arranged the posting. That entity is certified. The Dutch hirer sees itself as a client purchasing services, not as a party carrying immigration exposure.
Yet reality is more nuanced
When Third-Country Nationals are structurally deployed in Netherlands under the factual direction of a Dutch client, authorities will not ignore the economic substance of the arrangement. If daily supervision takes place locally, if the worker is embedded in the Dutch organisation and if the assignment extends beyond a short-term project, questions arise about the legal basis for residence and work.
The existence of an A1 certificate does not answer those questions. EU social security coordination determines where contributions are paid. Immigration law remains national. Dutch authorities independently assess whether a Third-Country National requires a residence permit or work authorisation. That assessment does not disappear simply because the legal employer is established elsewhere in the EU.
The illusion of safety persists because nothing seems wrong while operations run smoothly. Projects are delivered. Invoices are paid. Certificates remain valid. There are no visible warning signs. Compliance feels delegated and therefore controlled.
But compliance is not transferable in the way many assume. Certain responsibilities can be contractually allocated, yet regulatory scrutiny does not always follow contractual lines. When authorities investigate, they examine the factual situation on Dutch territory. They assess who benefits from the work performed. They analyse who exercises control. They look beyond documentation to determine whether the legal framework matches operational reality.
If it does not, the consequences can extend beyond the foreign employer. Fines for illegal employment, project disruption, reputational damage and intensified future inspections are not theoretical risks. They are practical outcomes of misalignment.
What makes this exposure particularly uncomfortable is its subtlety. There is no dramatic warning before it surfaces. It often emerges from a minor incident that triggers a broader review. An accident report leads to questions. Questions lead to document checks. Document checks lead to an immigration assessment. Only then does it become clear that NEN 4400-2 certification, while valuable, never addressed the right question.
For Dutch hirers, the real issue is not whether the contractor is certified. The real issue is whether the individuals physically working on their premises have a lawful basis to reside and work in Netherlands. That analysis requires attention long before an inspector asks for files.
True compliance in cross-border labour supply is not about collecting certificates. It is about understanding how social security coordination, immigration law and factual supervision intersect. It requires looking beyond administrative comfort and examining the structure as a whole.
Because when something goes wrong, authorities will not measure how carefully the certificate was checked at the beginning of the contract. They will assess whether the legal position of the worker on Dutch soil was correct.
And in that moment, the difference between reassurance and reality becomes very clear.