The iceberg under the requisition: the ~60 control points behind every contingent worker

Every contingent workforce program looks tidy from above: a rate card, a job order, a contractor who shows up, a consolidated invoice. That's the part procurement sees and the part most "should we take this in-house?" analyses price. This field guide covers the rest, organized roughly in the order a worker and a supplier move through a program. Use it as a checklist for supplier expectations or for scoping your own internal coverage.

1. Onboarding: a dozen forms, a different agency at each step

• Background checks aren't one product. They include county and federal criminal searches, sex-offender registries, SSN trace, motor vehicle records where the role needs it, employment and education verification, and sanctions screening in regulated industries. Each comes with its own FCRA consent, dispute window, and re-run cadence.
• Drug screens vary by panel, jurisdiction, and chain of custody. The wrong panel for a DOT-adjacent role is a problem. So is the wrong consent form in a recreational-cannabis state.
• I-9 and E-Verify run on federal clocks. Section 1 is due by day one and Section 2 within three business days. Auditors review the forms on file, not the policy.
• New-hire reporting is a state-by-state obligation, generally due within twenty days, through a different portal in each state.
• Certificates of insurance must be right before day one. That means the correct additional-insured, waiver-of-subrogation, and primary/non-contributory language, re-collected at every renewal. A COI gap during an engagement leaves the program uncovered.

2. Time, expense, and pay: where direct programs feel it first

• Overtime depends on jurisdiction. California's daily rules, Colorado's COMPS Order, seven-day workweek provisions, and city Fair Workweek ordinances each calculate differently. A supplier paying federal-only overtime in a stricter state exposes you too.
• Multi-state payroll tracks where work was performed, not where the worker lives. Remote and hybrid work has made this harder.
• Per diems have tax consequences. A properly structured per diem isn't taxable. An unstructured one is wages.
• ACA tracking applies to contingent populations once they cross the thresholds, and hours roll up across whichever supplier paid them.

3. Invoicing and finance: one invoice is really many reconciliations

• Approved time and invoiced time rarely match exactly. Catching mismatches before payment is cheap. Recovering after payment is expensive and never complete.
• Accruals need a system. Without a clean cut of work performed but not yet invoiced, month-end close gets an estimate instead of a number.
• 1099 and W-2 routing drives year-end filings. A mistake there creates backup-withholding and information-return problems that surface in February.

4. Supplier onboarding and continuous oversight

• Workers' comp class codes must match the work. A clerical code on a warehouse worker is a coverage mismatch, and the carrier will deny the claim.
• Payment-instruction changes need two-step verification. Supplier-impersonation fraud is one of the most common attack vectors in AP.
• Diversity certifications (MBE, WBE, SDVOBE, VOSB) must be validated and refreshed or Tier 2 spend reporting falls apart.
• Watch for undisclosed sub-tiering. A requisition that gets quietly brokered puts a worker on site whose employer isn't on your contract, your COI, or your indemnity.
• Watch pay-rate drift. When the pay rate diverges from the rate quoted to you, attrition shows up without a visible cause.
• Meal and rest breaks and wage-theft notices (California §2810.5, New York WTPA, and others) carry per-worker, per-violation penalties. PAGA plaintiffs treat missing attestations as proof.

5. The weekly timecard-to-invoice loop

Every week follows the same pattern. Timecards open Monday. Tuesday's deadline typically needs a chase for 15–30% of contractors. Managers approve Wednesday, discrepancies are resolved Thursday, and a consolidated invoice is cut Friday. With a platform, that loop is a notification queue and one-click approvals. Without one, it's people on phones fifty-two weeks a year, and that cost shows up in your team's calendars, not on the rate card.

6. When it gets complicated, and after the goodbye

• Final-pay deadlines vary by state. California requires final pay on the last day for involuntary terminations, and Massachusetts on the day of termination.
• Deprovisioning is measured in hours. SOC 2 and ISO 27001 auditors check how quickly access was removed.
• Liability can surface months or years later. Workers' comp claims, EEOC charges, and wage claims can arrive 6, 12, or 24 months after a worker leaves. Records must be retained correctly for three to seven years depending on the category.
• Offboarding a supplier means reconciling the final invoice, deciding each worker's transition path, handing off records, confirming tail coverage, and certifying data destruction.

A note on going direct

A direct-with-suppliers model is a legitimate choice. It works best when three things are true. First, your HR, legal, payroll, IT, finance, and risk functions each have a clear, audit-ready owner for the items above. Second, your contractor volume is either small enough to absorb the overhead or large enough to justify a full internal program office. The middle, roughly 25 to 150 contractors, is the hardest place to run direct. Third, you have the systems to do in software what would otherwise take people on phones.

If any of those isn't in place yet, that's the conversation we have with clients. Sometimes it ends with a full MSP program, and sometimes with a narrower scope such as EOR or IC Compliance only.

This article is general information for program planning. It is not legal, tax, or insurance advice.