You found someone. Senior React developer in Kraków, or Bengaluru, or Buenos Aires, asking $38 an hour, two rounds of calls, a paid trial task that came back better than your last two local hires. They said yes. Now your bookkeeper wants to know what tax form you need from them, your bank is asking the purpose of the international wire, and you are wondering whether the one-page contract you pulled off a template site actually gives your company the code.
Nobody writes this part down. There is endless material on whether to hire offshore developers and almost none on the mechanics once you have decided.
A small US company has three realistic ways to engage a developer abroad: a direct independent contractor agreement, an employer of record, or a contract through a vendor or agency. For a first hire of one or two people, a direct contractor agreement plus a collected Form W-8BEN is the normal, defensible setup, and you can have it running in a week.
One caveat: this is general information, not legal or tax advice. Tax points come from IRS.gov, sanctions points from Treasury, both linked at the end. A CPA should confirm the specifics for your entity.
Three ways to hire offshore developers, and what each really costs
Direct contractor agreement. You sign a services contract with the individual or their local company, they invoice monthly, you pay. No local entity, no local payroll. Cost is the rate plus the payment rail, often under 1%. Setup is days. You carry the compliance risk: if the relationship looks like employment under their local law, that exposure is yours, and it scales with how you behave rather than with the label on the contract. Someone who sets their own hours, uses their own equipment and could work for another client looks like a contractor. Someone you manage nine to five and pay a fixed salary regardless of output does not.
Employer of record. A company with an existing entity in the developer’s country employs them on your behalf, runs local payroll, withholds local tax and social contributions, and invoices you. You get an employee in all but the paperwork, and the EOR absorbs employment compliance. Deel publishes $599 per EOR employee per month; Remote publishes $699. Both sell far cheaper contractor-management products: Deel at $49 per contractor per month, Remote at $29, or $99 for a tier adding misclassification protection up to $100,000 per contractor. Both also offer a “contractor of record” product from $325 a month that moves classification risk to them. Setup takes one to three weeks, and you inherit local notice and severance rules. Worth it for a genuine full-time employee working fixed hours under your direction. Not worth it for a three-month project: $599 a month on a $4,000 contractor is roughly 15% for insurance you may not need.
Through a vendor or agency. You contract with a staffing company that supplies developers. One invoice, usually USD, often from a US entity, which makes your paperwork identical to any domestic supplier. They handle local employment, payroll, replacement if someone quits, and cover if someone is sick. You pay a margin for that, typically 30% to 60% over what the developer receives, though nobody prints their margin on the invoice. The trade is speed and continuity against cost, plus a layer between you and the person doing the work. Right answer when you need three people rather than one, or when your admin capacity is zero.
None of the three normally requires you to register a company in the developer’s country. What pushes people there is misclassification and permanent establishment risk, and both turn on how the relationship operates rather than on whether you have an office. If you are directing someone’s daily working life, or they are concluding contracts on your behalf, take advice before it deepens.
The US tax paperwork, specifically
Collect a Form W-8BEN before the first payment. W-8BEN is the IRS’s “Certificate of Foreign Status of Beneficial Owner for United States Tax Withholding and Reporting”, used by foreign individuals. If your contractor invoices through their own company, you want W-8BEN-E, the entity version. The IRS tells foreign persons to submit the form when a withholding agent or payer requests it, whether or not they are claiming a reduced rate. You are the payer. You request it, and you keep it on file rather than filing it with the IRS.
Per the IRS instructions, a W-8BEN generally stays effective from the date signed through the last day of the third succeeding calendar year, and the signer must notify you within 30 days if the information stops being correct. Diary the expiry. A stale W-8 is the same as no W-8 when someone examines your records.
Why it matters. The IRS position on sourcing is that “the place, where the personal services are performed, generally determines the source of the personal service income, regardless of where the contract was made, or the place of payment, or the residence of the payer.” Separately, IRS guidance on NRA withholding states that most types of US source income received by a foreign person are subject to US tax of 30%, collected by withholding. Put those together and the general position for a non-US person performing all their work outside the United States is that the compensation is foreign-source income, outside the scope of chapter 3 NRA withholding. The W-8BEN documents the foreign status that supports treating it that way. That “entirely outside the US” condition is not decorative: if the developer flies in for a two-week onsite, work performed here is US-source and the analysis changes.
Form 1099. Current IRS instructions direct you to file Form 1099-NEC for each person in your business paid at least $2,000 during the year, raised from the long-standing $600. But 1099-NEC is a form for US persons. The General Instructions for Certain Information Returns point filers to the Form 1042-S instructions for payments to foreign persons, and note that if the recipient is a foreign person, the IRS suggests requesting the appropriate Form W-8. Form 1042-S covers US source income of foreign persons. So the usual outcome for a properly documented offshore developer working entirely abroad is no 1099 and no 1042-S, because the income is neither paid to a US person nor US-sourced. Have your CPA confirm that for your facts once, in writing, then stop rechecking it every January. Keep the invoices regardless; the payments are still deductible, and the substantiation is the contract, the invoice and the payment record, not an information return.
Owning the code across a border
American contracts reflexively say “work made for hire”. Against a foreign contractor, that phrase alone does very little. The US Copyright Office’s guidance lists nine categories of specially ordered or commissioned works that can qualify, requires an express written agreement signed by all parties, and software is not among the nine. Worse, work made for hire is a construct of US copyright law, while the developer in Poland or Brazil creates the work under their own country’s law, where authorship generally vests in the human who wrote it and reaches you only through an assignment that satisfies local formalities.
- A present assignment. “Contractor hereby irrevocably assigns to Company all right, title and interest in and to the Work Product, including all copyrights, worldwide, as such rights are created.” Tense matters. “Agrees to assign” is a promise you may have to sue to enforce; “hereby assigns” transfers on creation. Keep the work-made-for-hire language too, followed by: to the extent any work product does not qualify as a work made for hire, contractor hereby assigns it.
- A moral rights waiver. Many civil-law countries recognise moral rights: the author’s personal rights to attribution and to the integrity of the work, which in several jurisdictions cannot be assigned at all. The standard response is a waiver plus a covenant not to assert them where waiver is not permitted. Without it you can own the copyright and still face an argument about modifying or rebranding the work.
- Flow-down to anyone they use. If the contractor brings in a friend for a weekend, that code is not yours unless the contract requires the same assignment from every subcontractor, in writing, before they touch anything.
- Pre-existing and open-source material. A licence back to you for anything they bring in, a duty to disclose open-source components, and a check on whether the assignment is conditional on payment in full.
- Governing law you can actually use. New York law is fine. A clause requiring you to litigate in New York against an individual abroad is unenforceable in practice. Never being more than two weeks exposed does more real work than a venue clause.
Getting the money there without it getting stuck
- Bank wire (SWIFT). Universally accepted, poor economics for small amounts: your outgoing fee, an unpredictable intermediary cut, the recipient bank’s incoming fee, an undisclosed FX spread. Fine at $20,000, bad at $2,500.
- Wise. Wise states it uses the live mid-market rate plus an upfront fee rather than building margin into the rate, and publishes volume discounts above $25,000 sent per month. Clean receipts. My default for one to five contractors.
- Payoneer. Strong where contractors already hold accounts. Published fees include $1.50 for USD withdrawals to a local USD bank account up to $50,000 a month, 0.5% above that, up to 3% in a non-local currency, and a $29.95 annual fee on dormant accounts. Check who bears those before agreeing a net rate.
- Deel, Remote and similar. You are buying compliance admin rather than a payment rail: contract templates, W-8 collection, invoice generation, records. At $29 to $49 per contractor per month, worth it at three or more contractors, arguable at one.
- Crypto. Developers ask for stablecoin when local banking is slow or their currency is unstable. It works. It also opens digital-asset tax questions, leaves you a transaction hash instead of a bank statement, and removes the intermediary who would otherwise have screened the payment. Not a first hire’s main rail.
Plan for a payment going into review. A first payment to a new country, an amount that jumped, a name mismatch between invoice and account holder, a vague reference: any of these can park the money for four to ten days while a compliance team asks for documents. Cut the odds by paying the exact legal name on the contract, using a reference like “Invoice 2026-04, software development services”, and keeping the paperwork where you can email it within the hour. Then make sure nobody’s rent depends on it. Run the first payment small and early. And if a request ever arrives by email asking you to pay a different name or account, stop: pay the party named in the contract, to an account in that name. That request is both a classic invoice-fraud pattern and a fresh screening event.
The sanctions duty you probably do not know you have
OFAC’s FAQs state that all US persons must comply with OFAC sanctions, including all US citizens and permanent residents regardless of where they are located, all individuals and entities within the United States, and all US incorporated entities and their foreign branches. No small-business exemption, no dollar threshold. Paying someone on the Specially Designated Nationals list, or a company caught by OFAC’s 50 Percent Rule because it is owned 50% or more by blocked persons, is a problem whether or not you knew.
The response is roughly ten minutes per hire. Treasury runs a free Sanctions List Search tool covering the SDN list plus the consolidated non-SDN lists. Search the developer’s full name, and the company name and any owner you know of if they invoice through an entity. Screen the country too: comprehensive programs currently include Cuba, Iran and North Korea, and the Ukraine-/Russia-related program covers the Crimea, Donetsk and Luhansk regions. Programs change, so check the live list. Save a dated screenshot and re-run annually.
Access and security on day one
- Identity through your SSO. A named account in your Google Workspace or Microsoft 365, MFA enforced, every tool reached through it. One switch to revoke.
- No shared accounts, ever. They destroy your audit trail and survive offboarding. Including the “team” login for the analytics tool.
- Least privilege, written down. Which repositories, which environments, which data. Default to no production access and no real customer data; if debugging needs it, use masked data and log the exception.
- Code lives in your organisation. Your GitHub or GitLab org on your billing, you as owner, the contractor added as a member, branch protection on. Not a zip file at month end.
- Secrets in a manager, never in the repo or chat. 1Password, Bitwarden, Doppler or AWS Secrets Manager, with credentials scoped per person so you can rotate one without breaking everyone.
- A device position you can hold. Someone on their own machine cannot be MDM-managed like staff, so state the minimum in the contract: full-disk encryption, screen lock, a supported and updated OS, no shared family computer. If the data is more sensitive than that covers, supply a managed laptop or move the work into a cloud dev environment.
- An offboarding checklist written on day one. SSO suspended, repo and cloud access removed, tokens and SSH keys revoked, shared secrets rotated, final invoice settled, IP assignment and confidentiality acknowledged in writing, credentials and documentation handed over. Write it while you are still happy, because the day you need it rarely is.
Hours, rates and the first two weeks
The unit that matters is guaranteed overlap. Four hours with your team, at fixed times on fixed days, is the difference between a collaborator and a ticket-processing service. India to US Eastern gives a workable early-morning window; Eastern Europe a comfortable one; Latin America most of a working day. Write the window into the contract, then protect it by holding your questions for it rather than pinging at 11pm. Outside it, one rule carries most of the weight: anything blocking gets written as a question in a channel before the blocked person stops for the day, so the answer is waiting when they start.
On rates, paying the least the market will bear is a false economy. Pay at or above local market rate for the person’s real seniority and treat the premium as retention spending, far cheaper than the six to twelve weeks of lost velocity a replacement costs plus the knowledge that leaves with them. Agree the rate in one named currency, say who absorbs transfer fees and FX movement, and fix a payment date. “Net 15 from invoice, paid on the 1st and 15th” beats “we’ll sort it out”.
Then run a deliberate first fortnight. Week one: environment running locally on day one or two with someone available live to unblock it, a real but small task merged by day three, a written tour of the codebase. Week two: a task with genuine ambiguity in it, so you can watch what they do when the ticket does not say enough. Do they ask, assume, or stall? That is the most useful thing you will learn all month. Close with a scheduled two-way review.
Day one checklist
- Signed contract with present-tense IP assignment, moral rights waiver, subcontractor flow-down, confidentiality, named governing law
- Form W-8BEN (individual) or W-8BEN-E (entity) collected, filed, expiry diarised
- OFAC Sanctions List Search run on the person, their company and the country; dated screenshot saved
- Rate, currency, invoice cadence, payment date and who bears fees agreed in writing, then the rail tested with one small early payment
- SSO account created, MFA enforced, least-privilege access granted and recorded
- Repo and cloud accounts in your company’s name, contractor added as a member, secrets issued individually
- Device minimums stated; managed laptop or cloud dev environment if data is sensitive
- Overlap hours, response expectations and channels written down
- Offboarding checklist drafted and stored with the contract
- First two weeks planned, with a named person responsible for unblocking them
If assembling all of this for a single hire is more overhead than the hire is worth, that is a fair conclusion. AB7 Solutions places vetted offshore engineers through contract staffing, staff augmentation and C2C arrangements, so the contract, local employment compliance, payment mechanics and replacement cover sit with us while you keep direct working contact with the developer. To talk through which of the three structures fits your situation, call +1 321 341 7733, email ab@ab7solutions.com or director@ab7solutions.com, or visit www.ab7solutions.com. We will give you an honest read even if the answer is that you should hire directly.
Sources: IRS, Source of Income, Personal Service Income, NRA Withholding, About Form W-8BEN, Instructions for Form W-8BEN, About Form W-8BEN-E, Instructions for Forms 1099-MISC and 1099-NEC, General Instructions for Certain Information Returns; U.S. Copyright Office, Works Made for Hire; U.S. Treasury OFAC, Compliance FAQs, 50 Percent Rule FAQ, Sanctions Programs and Country Information, Sanctions List Search; published pricing from Deel, Remote, Wise and Payoneer, checked September 2026. General information only, not legal or tax advice.