Large companies have legal teams running compliance checks constantly.
Small businesses? They’re usually winging it.
You cobbled together your VA setup as you grew. You added tools when you needed them.
You copied contracts from templates online.
But over time, you’ve probably created compliance gaps without realizing it.
Most employers never think about this stuff until something goes wrong.
A quick audit now saves you from legal headaches later.
This guide walks you through a simple audit process for small businesses hiring Filipino contractors.
Get Daily Updates Without the Micromanagement
Your team submits standup recaps, and ManagePH’s AI automatically summarizes everything so you stay in the loop.
Step 1: Map Your Working Relationships
Start with the basics.
Who works for you? What’s their legal status? Where are they located? What country’s laws apply?
Write down each person who does work for you.
For each VA, document:
Their full legal name and location.
Whether they’re a contractor or employee in their country. Who they contract with, your company directly or through an agency.
What your contract says about their status.
Whether they work exclusively for you or have other clients.
Pay special attention to situations that don’t match what you think.
Someone you call a contractor might legally be an employee based on how you direct their work.
A VA you hired as a freelancer three years ago might have evolved into a relationship that looks much more like employment.
Gather all the paperwork for each relationship.
Contracts or statements of work. NDAs or confidentiality agreements. Any written policies about hours, availability, or communication.
If you don’t have contracts, that’s a gap. If your contracts are ancient and don’t reflect current reality, that’s also a gap.
Step 2: Inventory Your Tools and Data Collection
Now look at your tech stack.
You’re probably using 5-10 different tools to manage remote work. Each one collects data. Each one has privacy implications you’ve never thought about.
List every tool you use with your Filipino team:
Project management platforms.
File storage and sharing.
Communication tools like Slack.
Password managers.
Any monitoring or productivity software.
For each tool, answer these questions:
What data does it collect? Screenshots, activity levels, websites visited, messages, files, work hours. Where is that data stored? Who on your team can access it? What does your VA see about what’s being tracked? Did you tell them what you’re collecting and why?
This is where most small businesses discover uncomfortable truths.
Write down every gap between what you’re collecting and what you’ve clearly communicated to your team.
Step 3: Check Against Legal and Privacy Expectations
Now comes the less fun part: comparing what you’re doing to what the law expects.
Three areas matter most for US, UK, and Australian businesses hiring Filipino contractors:
How you classify workers and track their time. What privacy and data protection rules say about monitoring. What Philippine labor law requires if any of your VAs are actually employees.
Worker Classification and Time Tracking
If any of your VAs are legally employees (not contractors), different rules apply.
In the US, the FLSA requires accurate timekeeping for non-exempt employees. That means tracking all hours worked, including any overtime.
Most Filipino VAs working for foreign companies are true independent contractors. They control how and when they work. They have multiple clients. They provide their own equipment.
The problem happens when you treat contractors like employees. You require specific work hours. You monitor them like employees. You control every detail of how they work.
Look at your actual practices versus what your contract says. If there’s a big gap, you might have a problem.
Privacy and Data Protection
If you’re based in Europe or the UK, GDPR and UK data protection law require clear disclosures about monitoring.
You need a lawful basis for collecting personal data. You need to tell people what you’re collecting and why. You need to keep only what’s necessary.
Even if you’re in the US or Australia, good practice is similar. You should tell people what you’re tracking and get their acknowledgment.
Go back to your tool inventory from Step 2. For each type of monitoring, ask: did I clearly disclose this to my team? Do I have a legitimate business reason? Am I collecting more than I need?
Philippine Labor and Telecommuting Rules
If any of your VAs are legally employees under Philippine law, different rules kick in.
The Philippine Telecommuting Act requires written agreements about work arrangements. Employers can’t force employees to work unreasonable hours.
Most foreign employers hiring Filipino VAs aren’t subject to these rules because their workers are true independent contractors.
But if you’ve created an employment relationship (even accidentally), you might need to comply.
The test isn’t what you call someone. It’s how much control you exercise over their work.
If you dictate exact hours, provide all equipment, don’t allow them other clients, and treat them exactly like an employee, you might have created an employment relationship regardless of your contract.
Step 4: Assess Communication, Performance, and Workload
Legal compliance is one thing. Practical effectiveness is another.
Review how you interact with your team.
Many employers discover they’re checking time tracking constantly but rarely reviewing actual output. They’re measuring “busy-ness” instead of results.
Compare time logged to work completed. Look for disconnects between what you’re tracking and what actually matters.
Some specific red flags to watch for:
VAs logging excessive hours with minimal output (suggests unclear expectations).
Frequent late-night or weekend work (suggests scope creep or poor planning).
Lots of “busy” time but missed deadlines (suggests distractions or the wrong work focus).
Often the problem is on your side, not theirs. You’re not giving clear direction. You’re not measuring the right things.
Step 5: Implement a Lighter, More Structured System
Now you know where the gaps are. Time to fix them.
The goal is a setup that’s legally sound, respects privacy, and actually helps your team work effectively.
Simplify Your Tool Stack
You don’t need 10 different tools. You need a few that work well together.
One project management tool. Trello, Asana, ClickUp, or similar.
One simple time tracking system. Something that logs hours without intrusive monitoring.
A platform like ManagePH brings these pieces together in one place.
One secure password manager for shared access to accounts your team needs.
One file storage system with proper access controls.
One communication platform. Slack works well, and ManagePH integrates with it to send automatic notifications for important events like invoice submissions or PTO requests.
If you’re using screenshot monitoring or keystroke tracking, ask yourself honestly: do I ever look at that data? Does it improve anything?
If not, turn it off. It’s creating legal risk for zero benefit.
Replace Aggressive Monitoring with Structured Updates
Instead of watching people work, have them tell you what they did.
Daily or weekly recap submissions work better than constant surveillance.
Ask each VA to submit a short update:
What they accomplished since the last update. What they’re working on now. Any blockers or issues that need attention.
This can be written in a few sentences. It takes 5 minutes.
You get visibility into progress. They maintain autonomy over how they work. And you create documentation that’s useful for audits.
Update Your Contracts and Policies
Review each VA’s contract.
Does it clearly state they’re an independent contractor? Does it explain the autonomy they have over how and when they work?
Create a simple written policy that covers:
What tools you use and what data they collect.
Why you need that data for legitimate business purposes.
How the data is stored and who can access it.
The expectation that VAs will track time accurately and submit regular updates.
You don’t need fancy legal language. Clear, plain English works fine.
Have each VA acknowledge they received and understood the policy.
For compliance documents like W-8BEN forms that international contractors need to submit, having a system to manage these makes audits easier.
Keep W-8BEN Forms and Compliance Documents Organized
ManagePH stores all your team’s compliance documents with templates and approval tracking in one secure place.
Shift Toward Deliverable-Based Evaluation
The most successful remote work relationships focus on output, not hours.
You can still track time for budgeting and invoicing purposes. But the primary evaluation should be: did they deliver what was agreed?
For each VA, get clear about:
What deliverables they’re responsible for. What quality standards apply. What deadlines are realistic.
Then judge performance based on that. If someone logs fewer hours than expected but consistently delivers high-quality work on time, that’s success.
This approach reduces your legal risk around worker classification. It also improves performance because people focus on results instead of looking busy.
What to Do When You Find Serious Gaps
Sometimes your audit reveals problems that need professional help.
You discover you’ve been treating contractors like employees for years. You’re using invasive monitoring with no disclosures. You have VAs in the Philippines who might legally be employees under Philippine law.
For worker classification issues, consider consulting an employment lawyer in your country.
For privacy and data protection concerns, especially if you’re subject to GDPR, consider a data protection consultation.
The cost of fixing these issues proactively is always less than the cost of dealing with them after a dispute or audit.
Running This Audit Regularly
Do this exercise every 6-12 months.
Your business changes. Your team grows. New tools come in.
Set a reminder to review:
Changes to your team and working relationships. New tools you’ve added and what data they collect. Whether your contracts still match reality. How your management practices are actually working.
Once you’ve done it the first time, updates are quick.