One trip, five risks: Why business travel is where compliance breaks
Global mobility teams have, on the whole, got assignments under control — there is a process, a policy, a checklist. Business travel is a different story, and it's where compliance quietly breaks.
The problem is that a single business trip can trigger obligations across at least five different regimes at once: corporate tax, through permanent-establishment risk if an employee does the wrong kind of work in the wrong place; posted-worker obligations, with notifications required before travel across much of the EU; social security, where an A1 or certificate of coverage may be needed to avoid paying twice; personal income tax and withholding, once day-count or activity thresholds are crossed; and immigration and right to work, even for short visits. None of this is exotic. What makes it dangerous is who is involved. The person booking the trip is rarely thinking about permanent establishment. The mobility or tax team often does not hear about the trip at all — and if they do, it is after it has happened. By then the exposure is real and retrospective fixes are expensive.
Most organisations still manage this by looking backwards: a spreadsheet of trips, a quarterly review, a scramble when an authority asks a question. But compliance assessed after the trip is compliance assessed too late. You can not file a posted-worker notification for a trip that finished last month.
The shift that works is to move the check to the point of booking. Assess every trip in real time against the relevant regimes, flag what is required, and trigger the filing before the employee travels. Not more reviews after the fact — fewer surprises in the first place.
A simple test: can you say, in seconds, which of your trips last quarter created a compliance obligation, and whether each was met? If the honest answer is 'not without a lot of digging', that gap is where the risk lives — and it is exactly the kind of thing that should be automated.




