Understand what third-party management is, how it works in practice, and how to avoid labor liability with subsidiary and joint liability explained.
By: Guilherme Herker
Outsourcing is strategic for operational efficiency, but it carries a "hidden liability" that represents a critical challenge for the governance of large organizations: legal liability over the hired team.
Believing that signing the contract shields your company is a common misconception. Based on GAP's market experience, this moment formalizes the relationship, but it is only the starting point of risk exposure, requiring continuous monitoring throughout the entire duration of the service.
With Law 13.429/2017, supervision went from being a bureaucratic process to becoming an imperative for compliance and the preservation of the contractor's assets. Below, we explain how technology can protect your operation from labor and social security risks, centralizing the control we apply in our platform.
Third-party management goes beyond simple paper filing. It is a system of processes aimed at monitoring the legal, technical, and tax compliance of contracted companies and their employees.
The strategic objective is to ensure that the service provider strictly complies with its obligations (payment of salaries, collection of taxes, and safety standards), mitigating the financial and legal co-responsibility of the service taker through auditable and organized data.
Current legislation allows the outsourcing of even the core activity of the company. However, this flexibility was accompanied by a much more rigorous duty of care on the part of the contractor.
It is crucial to understand the legal distinction that directly impacts the company's liabilities:
Point of Attention: The predominant legal understanding is that the failure to supervise (fault in vigilando) attracts liability to the service taker. Therefore, monthly document management is not optional; it is the main technical evidence for legal defense.
The absence of a centralized system exposes the organization to severe operational and legal risks:
Before formalizing the contract, it is essential to analyze the financial and legal health of the provider. Validating whether the company has up-to-date CNDs (Negative Debt Certificates) is the first filter to avoid partners with a high risk of default.
This step refers to physical access control. The release of the third party into the facilities must be conditioned on document compliance in the system: employment registration, valid ASO (Occupational Health Certificate), and specific regulatory standard (NR) training.
This is the pillar of prevention. Every month, releasing the payment of the invoice must be strictly linked to checking:
At the end of the contract, the system must ensure the registry of the end of the service provision, allowing the blocking of accesses and serving as a repository of proof of severance pay (TRCT), essential for future labor defenses.
Even though Excel is a versatile tool, it was not designed for the complexity of third-party management and the volume of data required by current tax obligations.
Manual management in spreadsheets presents critical vulnerabilities:
GAP's platform centralizes all documentation in a secure and auditable environment. This ensures your team has fast access to compliance information, eliminating the operational chaos of spreadsheets and scattered folders.
Yes, subsidiarily. In case of default by the outsourced company, the contractor assumes the obligation (Precedent 331 TST).
At least: GFIP/SEFIP, proof of payment of INSS and FGTS, payroll, and proof of benefits.
Yes. Following Law 13.429/2017 and the STF decision, outsourcing any activity is legal, provided that the legal requirements of non-subordination are respected.
Is your company still tracking third parties in spreadsheets? Minimize your exposure to legal risk with organization and technology. Discover GAP's Third-Party Management platform and have total control over your providers' compliance.
Understand clearly what NR17 is, how to identify ergonomic risks in the work environment, and the importance of training for the team.
Understand what NR12 is, the safety rules for machinery and equipment, the required physical layout, and operational responsibilities.
Understand what eSocial is, which occupational safety events are mandatory, and why they depend on the correct submission of the S-2200 event by HR.
Understand the transition from FISPQ to FDS (Safety Data Sheet), the requirements of the new ABNT NBR 14725, and how to prepare and manage this document online.
Understand the NR10 electrical safety rules, who is authorized to work, the issuance of the PT (Work Permit), and what changes with the new 2026 revision.
Understand the rules of the Outsourcing Law, what subsidiary liability is, and how to structure third-party management to avoid labor liabilities.
Simplify your Risk Management, reducing liabilities and ensuring safe, standardized, and auditable operations with fast implementation and advisory support.
