Remote work stopped being a perk the moment your laptop bag disappeared from your desk. For millions of companies, it's now the default — and the default needs documentation.
Here's the problem: most remote work policies read like they were written by a legal team that has never worked remotely. They cover liability but skip the practicalities — the ambiguity around time zones, the question of who pays for the faster internet, the moment HR realizes one of their fully remote engineers has been living in Portugal for the past year.
This guide gives you a framework you can actually use. It covers what every remote work policy needs to address, what most skip, and how to write one that employees read rather than ignore.
What a Remote Work Policy Is (and Isn't)
A remote work policy defines the conditions under which employees can work outside a company office. It's not an employment contract, an NDA, or a performance management plan — but it connects to all three.
Good remote work policies set expectations before problems arise. Bad ones either say too little (leaving everything to manager discretion) or too much (prescribing exactly which apps employees must use on their personal devices).
The right scope: eligibility, availability expectations, technology requirements, security standards, expense reimbursement, and performance accountability.
Eligibility and Approval
Not every role can be performed remotely, and not every employee is ready for it. Your policy needs to be honest about both.
Role-Based Eligibility
List roles or role categories that qualify. Be specific:
- Eligible: All knowledge-worker roles (software engineering, marketing, finance, HR, legal, sales) where primary output is digital
- Conditional: Roles with regular client visits, lab work, or on-site equipment may qualify for hybrid arrangements only
- Ineligible: Operations, warehouse, manufacturing, and customer-facing in-person roles
Performance and Tenure Requirements
Sample policy language: "Employees who have successfully completed their 90-day introductory period and who have received a performance rating of Meets Expectations or above at their most recent review are eligible to request remote work arrangements."
This isn't gatekeeping — it's recognizing that remote work requires a baseline of self-direction. New hires often need proximity to learn the job before they're set up to do it from home.
Approval Process
- Employee submits a standard request form
- Direct manager approves based on role fit and performance record
- HR confirms compliance requirements for the employee's home location
- Remote arrangement is documented and added to the employee's file
- Arrangement is reviewed annually, or sooner if performance issues arise
Availability and Working Hours
The most common friction in remote teams comes not from bad work, but from mismatched expectations about when people are supposed to be reachable.
Core Hours
Sample policy language: "All remote employees are expected to be available and responsive during core hours of 10:00 AM to 2:00 PM in their manager's time zone, Monday through Friday, unless on approved leave."
Response Time Expectations
- Slack/Teams messages: Response within 2 hours during core hours
- Email: Response within 4 business hours for non-urgent; same business day for urgent
- Calendar invites: Accept or decline within 24 hours
Time Zone Considerations
If your team spans time zones, address it directly. Employees living across multiple zones need to know which time zone the company operates in for scheduling, payroll cutoffs, and deadlines.
Technology and Equipment
Minimum Technical Requirements
Don't just say "reliable internet." Specify what you actually need:
- Internet speed: Minimum 50 Mbps download and 10 Mbps upload — fast enough for simultaneous 1080p video calls and file uploads without buffering
- Computer: Company-issued device preferred; personal devices permitted only with MDM enrollment and security compliance
- Backup plan: Employees should have a contingency location (co-working space, library) for internet outages
What the Company Provides vs. Employee Responsibility
| Item | Company-Provided | Employee Responsibility |
|---|---|---|
| Laptop | Yes | Maintenance, safe storage |
| External monitor | Yes (on request) | — |
| Internet connection | Monthly stipend (see Expenses) | Selecting provider, installation |
| Mobile phone | No (unless role requires) | Yes |
| Ergonomic accessories | Up to $200 annually | Above-limit costs |
Expense Reimbursement
Sample policy language: "Remote employees are eligible for a monthly internet stipend of $50, paid through payroll. Receipts are not required for the standard stipend. Claims above the standard amount require manager approval and receipt submission through our expense system."
Security and Data Protection
This section is where most policies either say too little ("keep data secure") or go overboard. Here's a workable baseline:
Required Security Measures
- VPN: Required for accessing internal systems, databases, or any non-public company resource
- Multi-factor authentication (MFA): Mandatory on all company accounts — email, HRIS, project management, cloud services
- Device encryption: Full-disk encryption enabled on all devices accessing company data (FileVault on Mac, BitLocker on Windows)
- Screen lock: Auto-lock after 5 minutes of inactivity, password required to resume
- Mobile Device Management (MDM): Company-issued devices must be enrolled in MDM. Personal devices used for work email must accept conditional access policies
Prohibited Activities
- Using public Wi-Fi without a VPN for any work activity
- Storing company files on personal cloud accounts (personal Google Drive, Dropbox, etc.)
- Allowing household members to use company-issued devices
- Disabling or circumventing endpoint protection software
Sample Data Protection Statement
"All work performed remotely is subject to the same data protection obligations as in-office work. Employees are responsible for ensuring that confidential information is not visible to household members or third parties during virtual meetings. Employees must immediately report suspected security incidents or device loss to IT."
Workspace Requirements
A dedicated workspace means a specific area used primarily for work — not the kitchen counter, not the couch. It doesn't have to be a home office, but it should be consistent enough to support focused, professional work.
Minimum requirements:
- A surface at desk height (ergonomic recommendation: 28–30 inches for seated work)
- A chair with back support
- Adequate lighting — natural light preferred, no harsh glare on screen
- A reasonably quiet environment during video calls and focused work blocks
Performance Management for Remote Workers
Managing remote employees by hours logged is a trap. You can't verify whether someone is at their desk, so you end up either micromanaging or flying blind. The better approach is output-based management.
Setting Expectations Before Remote Work Begins
Before an employee starts working remotely, their manager should document:
- The key deliverables expected each week and month
- The communication cadence (daily standup, weekly 1:1, async updates)
- How performance will be measured
Check-in Structure
- Weekly 1:1: 30-minute video call dedicated to feedback and blockers — not status updates
- Monthly team meeting: Include remote employees via video; record for those in different time zones
- Quarterly performance check-in: Formal assessment of goals with documented outcomes
Legal and Compliance Considerations
When an employee works remotely from a different state or country than where the company is registered, it can create nexus — triggering tax registration, workers' compensation, and employment law obligations in that location.
| Region | Key Compliance Issues | Action Required |
|---|---|---|
| US (different state) | State income tax withholding, workers' comp, unemployment insurance | Register as employer in that state; update payroll |
| European Union | GDPR data protection obligations for EU employee data | Data processing agreements, GDPR-compliant tools |
| United Kingdom | Working Time Regulations, right-to-work documentation | Confirm right-to-work status; track working hours |
| Canada | Provincial employment standards vary significantly | Province-specific employment contracts required |
Practical rule: Require employees to notify HR at least 30 days before working from a location outside their contracted work location for more than 30 days.
Legal Compliance Checklist
- ☐ Employer registered in all states/countries where remote employees work
- ☐ Workers' compensation coverage updated to include remote work locations
- ☐ Payroll tax withholding reflects employee's actual work location
- ☐ Remote work agreement signed and filed for each employee
- ☐ Data protection obligations assessed for each jurisdiction
- ☐ Equipment loan agreements in place for company-owned devices at remote locations
Employee Well-being
The biggest underrated cost of remote work is isolation. It doesn't show up in productivity metrics until it's become a retention problem. Proactive measures that work:
- Informal virtual touchpoints: Optional 15-minute "virtual coffee" slots on the team calendar — no agenda, just connection
- Async-first, not async-only: Preserve video-on norms for meetings where relationship-building matters, not just information transfer
- Visible PTO: Managers should visibly take time off and disconnect to signal that it's expected, not frowned upon
- Employee Assistance Program (EAP): Remote employees should be explicitly reminded of EAP access — many don't use it because they feel it isn't bad enough
Implementation Checklist
- Draft policy with input from Legal, HR, IT, and at least one remote employee
- Review with employment counsel for multi-state and international implications
- Communicate policy to all employees with a 30-day notice period before it takes effect
- Require all employees to sign an acknowledgment
- Train managers on the approval process and performance management expectations
- Schedule a 6-month review to assess what's working
Frequently Asked Questions
Can an employee work remotely from a different country?
This is possible but creates significant compliance requirements around tax, employment law, and data protection. Any international remote arrangement should be reviewed by HR and legal before approval. Many companies cap "workcation" arrangements at 30–90 days to avoid triggering permanent employment obligations.
Who is responsible if a remote employee injures themselves at home?
Workers' compensation laws vary by state and country, but in most US states, a work-related injury at home is covered. This is why requiring employees to maintain a safe, dedicated workspace reduces liability for both parties — not just productivity.
Can a company monitor remote employee activity?
Employee monitoring is legal in most jurisdictions but requires written notification to employees. Many companies find that output-based management is both more effective and less legally risky than activity monitoring software.
What happens if a remote employee's internet goes down?
Employees should have a documented contingency plan — typically a nearby co-working space, library, or mobile hotspot. Short outages can typically be communicated via mobile; extended outages should be reported to the manager as soon as possible.
HireBee's HR platform includes customizable remote work agreement templates and employee acknowledgment tracking — so you know everyone's on the same page before an issue arises.
