REPSE vs Traditional Staffing Agencies in Mexico (2026 Guide)

Before April 2021, the staffing industry in Mexico operated under a straightforward model.

A company needed employees, contracted a staffing agency, and the agency employed those employees and leased them back to the client.

The client directed the work. The staffing agency handled payroll, IMSS, and employment obligations.

It was widely used. And it was widely abused.

Staffing agencies and their clients were systematically using this structure to minimize profit-sharing obligations, reduce IMSS contributions, and sidestep employee rights protected under the Federal Labor Law.

In April 2021, Mexico's Congress eliminated that model and replaced it with something fundamentally different.

Understanding what changed, what is now legal, what is not, and how REPSE fits into all of it is essential for any foreign company operating in Mexico today.

Key takeaways

• Traditional personnel outsourcing for core business activities is banned in Mexico since April 23, 2021. The pre-reform staffing model is illegal.
  
  

• REPSE is the federal registry that authorizes companies to provide specialized services legally. Registration is mandatory, verifiable, and renews every three years.
  
  

• The distinction between legal and illegal comes down to one question: is the service being provided part of the client's core business activity (objeto social)?
  
  

• Traditional staffing agencies that supply personnel for core activities cannot legally operate that way anymore, regardless of what they call themselves.
  
  

• Joint liability is real: if your REPSE-registered provider violates labor or tax obligations, your company can be held liable alongside them.
  
  

• Fines for illegal subcontracting reach up to 4 million pesos per affected worker, assessed against both the provider and the client.
  
  

• STPS and IMSS are actively inspecting subcontracting arrangements in 2026 with renewed enforcement mandates.
  
  

• EOR providers operate under a different legal framework from REPSE-registered specialized service providers, and must themselves hold active REPSE authorization.
  
  

What traditional staffing agencies did in Mexico (pre-2021)

Under the pre-reform regime, Mexico's Article 15-A of the Federal Labor Law (as amended in 2012) permitted a structure called subcontratación de personal (personnel subcontracting).

Under this model:

• A company (the client) contracted a third-party staffing agency

• The staffing agency became the legal employer of the employees

• employees performed the client's day-to-day operations under the client's supervision

• The client paid the staffing agency a service fee; the agency handled employment obligations

This was legal at scale. Entire industries (retail, manufacturing, services, technology) built their workforce structures around it.

Why the model was abused

The outsourcing structure created a structural incentive for abuse. When a staffing agency is the employer, the client company's payroll and profits are suppressed on paper. Two consequences flowed from this:

PTU manipulation. Profit-sharing (PTU) is calculated as 10% of the employer's pre-tax profits. If the client company has no employees on its books (because all employees are technically employed by the staffing agency), the client's PTU obligation approaches zero. Employees who generated those profits received little or nothing.

IMSS underpayment. Staffing agencies could underreport salaries to IMSS, registering employees at minimum wage or at a base lower than their actual compensation, reducing social security contributions. Employees built limited IMSS credit despite years of employment.

The government estimated that the pre-reform outsourcing structure cost the Mexican treasury billions of pesos annually in avoided PTU payments, IMSS contributions, and income tax.

What the 2021 reform actually did

The Reforma en Materia de Subcontratación, published in the Diario Oficial de la Federación on April 23, 2021, made three fundamental changes:

Change 1: Banned personnel outsourcing for core activities

Article 13 of the LFT was amended to prohibit the subcontracting of personnel to perform activities that constitute the client's core business purpose (objeto social or actividad preponderante).

This is the central rule. A company can no longer contract a third party to staff its primary operations.

Change 2: Permitted specialized services for non-core activities

What remained legal is a narrower model: outsourcing of specialized services or specialized works that fall outside the client company's core business.

The key conditions:

• The services must be genuinely specialized

• The services must not overlap with the client's primary corporate purpose

• The service provider must be registered in REPSE

• The arrangement must be documented with a formal written service agreement specifying the scope of specialized work

• The provider must report the contract quarterly to IMSS (via ICSOE) and SAT (via SISUB)

Examples of what qualifies: Industrial cleaning, security services, maintenance, facility management, catering, and HR administration for a manufacturing company that makes auto parts. These are clearly non-core to auto manufacturing.

Examples of what does not qualify: Supplying software engineers to a technology company to write its core product, or supplying sales representatives to a company to sell its primary product. These are core activities.

Change 3: Created REPSE as the authorization registry

The Registro de Prestadoras de Servicios Especializados u Obras Especializadas (REPSE) was established under the Secretaría del Trabajo y Previsión Social (STPS).

Any company that wishes to provide specialized services legally must register with REPSE before providing those services.

Registration requires demonstrating compliance with labor, tax, and social security obligations. Certificates are valid for three years and must be renewed.

What REPSE is and is not

What REPSE is

REPSE is a public federal registry. It is not a license that makes any staffing arrangement legal.

It is an authorization that confirms the provider has met baseline compliance requirements to offer specialized services.

A REPSE registration number is publicly verifiable through the STPS portal. Any company that tells you they are REPSE-registered without providing a verifiable registration number is making an unverifiable claim.

What REPSE is not

REPSE registration does not authorize a provider to supply personnel for a client's core business activities. That remains prohibited regardless of REPSE status.

A REPSE-registered company that supplies engineers to a technology firm to write core product code is still operating illegally under the 2021 reform.

The REPSE registration covers the provider's compliance posture, not the nature of the service arrangement.

REPSE renewal and ongoing obligations

REPSE certificates are valid for three years and must be renewed. A certificate that was valid in 2022 may have expired.

Beyond registration, REPSE-registered providers must:

• Submit quarterly reports through ICSOE (IMSS platform) and SISUB (SAT platform) detailing active service contracts

• Maintain current labor, tax, and IMSS compliance at all times

• Provide clients with documentation confirming ongoing compliance so clients can verify their provider's status each reporting period

If a REPSE provider fails these quarterly filings or falls out of compliance, their clients face joint liability exposure until the situation is corrected.

The joint liability rule: why your choice of provider matters

This is the element most companies do not focus on until it is too late.

Under the 2021 reform, a company that contracts a REPSE-registered provider is jointly and severally liable for that provider's labor and social security obligations if the provider fails to meet them.

In practical terms: if your REPSE-registered cleaning company fails to register employees with IMSS or underpays contributions, the STPS and IMSS can come after your company to recover those obligations.

Joint liability applies even when the client has done nothing wrong.

This joint liability applies even when the client has done nothing wrong. It is strict liability tied to the contracting relationship.

What this means for client companies

Contracting a REPSE-registered provider is not the end of your compliance responsibility. You must:

1. Verify the provider's REPSE registration is active and current before contracting

2. Confirm they are submitting quarterly ICSOE and SISUB reports

3. Retain copies of those reports as part of your own compliance documentation

4. Re-verify REPSE status at each contract renewal and periodically during the engagement

5. Ensure the formal written service agreement specifies the scope of specialized work clearly

STPS inspectors now actively verify that client companies are performing these checks.

In 2026, enforcement has shifted from transition period tolerance to active inspection. Inspectors examine not just whether the provider is registered, but whether the client has documented their verification.

How traditional staffing agencies adapted (and how to spot those that did not)

After the 2021 reform, Mexico's staffing industry split into three groups:

Group 1: Legitimate specialized service providers

These companies re-structured their operations around genuinely non-core activities: cleaning, security, maintenance, industrial catering, and specialized HR administration.

They registered with REPSE, implemented quarterly reporting systems, and operate transparently within the new framework.

Group 2: EOR providers

Companies that wanted to continue providing a complete employment service for foreign clients operate as Employer of Record entities.

Under EOR, the service provider is the actual legal employer, not a subcontractor supplying personnel.

Under EOR, the provider is not subcontracting employees to perform the client's core activities. The provider is the employer, period.

The client directs daily work, but the employment relationship runs through the EOR's entity. EOR providers must hold REPSE registration, but the legal basis for their operation is direct employment, not subcontracting.

Group 3: Non-compliant providers operating under old models

These are the dangerous ones. They continue offering essentially pre-reform personnel outsourcing, perhaps calling it "staffing as a service" or "HR management."

They supply employees who perform the client's core operations, which remains prohibited regardless of the label.

Some obtain REPSE registration but use it to legitimize arrangements that still violate the core activity prohibition. REPSE registration on its own does not make an illegal arrangement legal.

The core activity test: the question that determines legality

Every subcontracting arrangement in Mexico today must pass a single test: Is the service being provided part of the client's primary corporate purpose?

Mexico's law uses the term objeto social (corporate purpose) as the reference point.

The question is not whether the work is important. It is not whether the employees are skilled. It is whether the activity is part of what the client company fundamentally does.

Applying the test

The test requires honest analysis of what the client company actually does as its primary business.

Activities that support the business but do not constitute its core purpose can be outsourced through REPSE-registered providers. Activities that are the core purpose cannot.

REPSE-registered providers vs EOR: different legal frameworks

This distinction is frequently misunderstood, and it matters.

REPSE-registered specialized service providers operate under Article 15 of the LFT. They supply services or works that are non-core to the client. The client is not the employer, but joint liability applies if the provider violates its obligations.

Employer of Record providers operate as direct employers. The EOR is the legal employer of the employee. The client directs the work but has no direct employment relationship. EOR providers must hold REPSE registration because they are providing specialized employment services, but the employment relationship itself is not a subcontracting arrangement under the 2021 reform.

The critical difference: an EOR can legally employ people who perform what would be the client's core activities, because the employment relationship runs through the EOR's entity directly.

There is no subcontracting of personnel to perform core activities. The EOR employs the person and provides their labor as a service, which is a different legal structure.

This is why, for foreign companies without a Mexican entity that want to hire engineers, salespeople, or other core-function staff in Mexico, an EOR is the compliant structure.

A REPSE-registered staffing agency cannot supply those people to perform the client's core work.

What to verify before contracting any service provider in Mexico

Whether you are contracting a specialized service provider for non-core functions or an EOR for employment services, these checks are non-negotiable:

REPSE registration number. Ask for it. Verify it on the STPS public registry. Confirm it is current, not expired.

Quarterly ICSOE and SISUB filings. Ask for evidence of the most recent quarterly report. A provider that cannot produce this is either non-compliant or operating outside the REPSE framework.

Written service agreement. The contract must specify the scope of specialized services, the number of personnel, and confirm that the services are non-core to your company's primary business.

IMSS and SAT compliance standing. The provider should be able to demonstrate current registration and payments with both authorities.

Physical presence in Mexico. A provider operating through a fiscal registration address only, without actual staff and infrastructure in Mexico, cannot deliver the compliance oversight the law requires.

The compliance picture in 2026

The STPS and IMSS are operating under reinforced inspection mandates in 2026. The grace period from the 2021 reform implementation is over.

Inspectors are targeting:

• Companies contracting with providers lacking active REPSE registration

• Arrangements where the outsourced personnel perform the client's core business functions

• Quarterly reporting gaps in ICSOE and SISUB platforms

• Client companies that cannot demonstrate they verified their provider's REPSE status

Fines for non-compliant subcontracting reach up to 4 million pesos per affected worker, applied to both the provider and the client company.

For a company with 20 personnel under an illegal arrangement, exposure reaches 80 million pesos before any back-tax assessment.

The 2021 reform shifted compliance risk from the staffing agency to the client company. Your company is jointly liable. Your company is subject to fines. Your company is responsible for verifying that every provider you contract is REPSE-registered and compliant. Inspectors verify this. In 2026, they find it.

Hiring for your core operations in Mexico

If you need to hire people in Mexico who will perform your company's primary business activities, the compliant path is not a traditional staffing agency and not a non-core specialized service provider.

Engineers, salespeople, analysts, customer success, operations staff. These roles require either your own Mexican entity or an EOR.

The compliant path is either your own Mexican legal entity or an Employer of Record.

Human Resources Mexico (HRM) is a Mexico-only Employer of Record with 17 years of physical presence in Mexico.

We are the direct legal employer for every employee we hire on your behalf. We hold active REPSE authorization.

Our entity is incorporated in Mexico, enrolled with IMSS, and registered with SAT. Employment contracts, ISR withholding, IMSS contributions, and CFDI payroll receipts all run through our entity.

We are not a staffing agency. We do not subcontract personnel to perform your core activities. We employ people directly and provide that employment as a service under a transparent commercial arrangement.

• 17 years of physical presence in Mexico: Our entity, our team, our registrations, our relationships with IMSS and SAT

• Active REPSE registration: Verifiable in the federal government registry

• Mexico-only focus: One country, every compliance detail handled correctly

• Human support: Real bilingual HR professionals in Mexico managing every employment obligation

• Transparent pricing: One fee covering the entire employment structure

Get a custom HRM proposal and understand exactly what compliant employment in Mexico costs for your team.

Have questions about whether your current Mexico arrangements are compliant under the 2021 reform? Ask our Mexico EOR Specialist AI Chatbot for immediate, situation-specific answers.

Frequently asked questions

Are traditional staffing agencies illegal in Mexico?

Traditional personnel outsourcing, where a staffing agency employs employees who perform the client's core business activities, is illegal since April 23, 2021.

Staffing agencies that now operate legally do so under the REPSE framework, providing genuinely specialized, non-core services.

What is REPSE?

REPSE (Registro de Prestadoras de Servicios Especializados u Obras Especializadas) is Mexico's federal registry for companies that provide specialized services or specialized works.

Registration is mandatory for any company supplying personnel for non-core activities at another company's facility. Certificates are valid for three years and must be renewed.

Can a REPSE-registered company supply any type of worker?

No. REPSE registration authorizes a company to provide specialized services that are non-core to the client's business.

It does not authorize supply of personnel for core business activities. An arrangement violating the core activity prohibition is illegal regardless of the provider's REPSE status.

What is the fine for illegal subcontracting in Mexico?

Fines reach up to 4 million pesos per affected worker and apply to both the provider and the client company.

Both parties are jointly liable, which means the client can be fined even if the provider was responsible for the actual violation.

What is the difference between a REPSE provider and an EOR?

A REPSE-registered specialized service provider supplies personnel for non-core activities under Article 15 of the LFT. An EOR is the direct legal employer.

EOR providers also hold REPSE registration, but their employment is direct, not a subcontracting arrangement. EOR can legally employ people who perform core business functions for the client.

How do I verify a provider's REPSE status?

Request the provider's REPSE registration number and verify it directly through the STPS public registry. Also request evidence of their most recent quarterly ICSOE and SISUB reports.

A current registration number plus current quarterly filings is the baseline compliance check.

If my REPSE provider violates its obligations, am I liable?

Yes. Under the 2021 reform, client companies are jointly and severally liable for their REPSE providers' labor and social security violations.

This is why ongoing verification of provider compliance, not just initial registration confirmation, is required.