Most IT consulting firms use subcontractors from the beginning. The work expands, a second consultant is brought in to help deliver a project, and the arrangement is treated as a contractor relationship because that is how both parties intend it. The invoices come in, the work gets done, and the classification question never comes up until CRA asks.
CRA does not accept the parties’ characterization of their own arrangement on its own. It applies a factual test based on how the working relationship actually operates. If a worker engaged directly as an individual is actually an employee, the consequences can land retroactively: the firm may owe both the employer and employee portions of CPP and EI contributions for the period in question, plus penalties and interest. For a two-year engagement, that is a substantial reassessment.
This article covers how CRA applies the worker classification test, the patterns that create the most risk in IT consulting arrangements, the incorporated subcontractor question, and what documentation firms should have in place to support the positions they have taken.
Why the Classification Matters
The financial stakes are specific. If CRA determines that a worker engaged directly as a subcontractor was actually an employee:
Canada Pension Plan. The firm owes both the employer’s share and the employee’s share of CPP contributions for each year in which the worker was employed. For 2026, the base CPP contribution rate is 5.95% each for employer and employee on earnings between the basic exemption and the Year’s Maximum Pensionable Earnings. CPP2 contributions apply to earnings above that threshold up to the Year’s Additional Maximum Pensionable Earnings. The firm is responsible for the balance even if it cannot recover the employee’s share. Recovery from later payments to the employee is limited, and amounts outstanding for more than 12 months generally cannot be recovered through additional CPP deductions.
Employment Insurance. The firm owes both the employer’s share and the employee’s share of EI premiums. The employer rate is 1.4 times the employee rate. EI premiums apply to insurable earnings up to the annual maximum insurable earnings.
Penalties and interest. Failure to deduct required CPP, EI, and income tax can attract a 10% penalty, increasing to 20% for later failures in the same calendar year if made knowingly or in circumstances of gross negligence. Late remittance of amounts that were deducted has a separate graduated penalty of 3%, 5%, 7%, or 10%, with a possible 20% penalty for repeated gross-negligence failures. Interest compounds daily on unpaid balances and penalties at the prescribed rate.
Income tax withholding. CRA may also assess the firm for failure to withhold income tax on employment income. The worker remains taxable on the income, but the payer can still face failure-to-deduct penalties and interest where source deductions should have been withheld.
Assessment years. The lookback period is not a single three-year rule. Under the CPP, an employer assessment is generally limited to four years from when the contribution should have been paid, unless there was misrepresentation or fraud. Under the EI Act, an employer assessment is generally limited to three years after the end of the year in which the premium should have been paid, unless there was misrepresentation or fraud. A multi-year subcontractor relationship can therefore create multiple years of retroactive CPP, EI, and withholding exposure.
The Legal Framework
CRA’s current Employment status: Employee or self-employed guidance sets out how CRA approaches the classification question. For contracts formed outside Quebec, CRA uses a common-law analysis that starts with the parties’ intention and then tests that intention against the actual working relationship. No single factor is determinative. CRA looks at the total picture.
The main factors include control, tools and equipment, whether the worker can subcontract or hire assistants, financial risk, responsibility for investment and management, opportunity for profit, and other relevant facts such as the written contract. This article groups those factors into the practical issues that most often matter in IT consulting arrangements.
The Control Factor
Control does not mean micromanagement. It means the right to direct how the work is performed. For employment purposes, CRA looks at whether the payer can direct and control the worker in the manner in which work is carried out, not just in the results produced.
In an IT consulting context, this factor plays out in ways that are worth being specific about.
Points toward employee: The consulting firm specifies the hours during which the worker must be available as a matter of control rather than project coordination. The worker is required to attend daily standups, team meetings, or other scheduled sessions in the same way employees are managed. The firm approves or rejects the worker’s approach to a task, not just the completed deliverable. The firm can direct the worker to use specific methodologies, tools, or processes in carrying out the work. The client company directs the worker’s day-to-day activity and the consulting firm passes those directions along.
Points toward contractor: The firm specifies what must be delivered and by when, but not how the worker carries out the work. The worker determines their own process, schedule, and approach within the commercial constraints of the project. The firm accepts or rejects completed deliverables but does not supervise the work in progress. The worker is not subject to employee-style discipline for choosing a commercially reasonable method.
The remote work environment does not neutralize the control factor. CRA applies the same test to remote arrangements. Direction exercised through a ticketing system, Slack, or daily video calls is still direction if it controls how the worker performs the work. Coordination required by the nature of a project is less concerning than day-to-day managerial control.
The Tools and Equipment Factor
For IT consulting, the tools factor is less binary than it appears in traditional employment contexts. Most IT workers use a laptop that may be their own, and access systems through credentials that can be provisioned or revoked. The question is broader than who owns the physical equipment.
Points toward employee: The firm provides the worker’s primary work equipment. The worker has access to the firm’s or client’s internal systems, proprietary software, or licensed development environments that they could not access independently. The firm pays for tools the worker needs to do the job.
Points toward contractor: The worker uses their own hardware and software. The worker has their own development environment, their own licensed tools, and their own infrastructure. Access to the firm’s or client’s systems is limited to what is necessary for the project rather than full integration into the technology stack.
For most IT consulting arrangements, this factor will be mixed or slightly in favour of contractor status if the worker has their own equipment. CRA’s IT consultant guidance also treats some secure-equipment and secure-location requirements as neutral where they exist because of the nature of the work rather than because the payer controls how the work is done. The tools factor rarely resolves the classification on its own.
The Chance of Profit and Risk of Loss Factor
This is often the most telling factor for IT consulting classification, and the one that firms most frequently underestimate.
A genuine independent contractor can make more or less money depending on how efficiently they work, what rates they negotiate, and how well they manage their own costs. They absorb the financial consequences of their own errors. They have business economics that are separate from any single client’s performance.
A worker who receives a fixed daily or hourly rate, is paid regardless of project outcomes, and does not absorb the cost of rework or defects is operating with economics that look closer to employment than to an independent business. Hourly billing alone does not decide the issue, but it becomes more important when the worker has no meaningful expenses, substitute labour, or exposure to loss.
Points toward employee: The worker charges a fixed rate for time regardless of results. If work needs to be redone, the firm pays again. The worker has little ability to profit from efficient delivery beyond billing more hours. The worker has no business costs of their own to manage against the income they earn.
Points toward contractor: The worker has their own business overhead: professional development, insurance, equipment, and software costs. The worker absorbs the cost of errors and rework. The worker can take on additional clients simultaneously, increasing their earnings without requiring a wage increase from this firm. The worker can negotiate rates independently.
A subcontractor who works exclusively for one consulting firm at a fixed hourly rate with no other clients and no business costs has a profit-and-loss profile that is closer to employment than to an independent business.
The Integration Factor
The integration factor asks whose business the work is actually part of. A contractor performs work that is an independent business activity. An employee performs work that is integrated into the payer’s business and does not exist outside of it.
Points toward employee: The worker’s role is indistinguishable from that of an internal team member. The worker uses the firm’s email address, attends the firm’s internal events, is listed in the firm’s organizational hierarchy, or represents the firm to clients as staff. The work the worker performs is not something they could offer independently to other clients.
Points toward contractor: The worker performs a defined service that they could offer to any client. The worker’s business identity is separate from the firm’s. Clients and colleagues understand the worker to be a third-party supplier rather than an internal resource. The worker’s business can exist without the firm as a client.
The Incorporated Subcontractor Question
A significant misunderstanding in small consulting firms is that incorporation eliminates employment-style risk. It does not, but it changes which risk is usually in play.
For CPP and EI purposes, where a worker actually operates through their own corporation and that corporation contracts with and invoices the consulting firm, CRA generally will not treat the consulting firm as the worker’s employer. The worker is usually an employee of their own corporation. The consulting firm should make sure the contract, invoices, payment records, and work authorization are with the corporation rather than with the individual personally.
That does not mean the incorporated worker is automatically an independent business for income tax purposes. If the worker’s corporation earns all or most of its income from one consulting firm, the individual performs services that would look like employment if the corporation did not exist, and the other statutory conditions are met, the worker’s corporation may be carrying on a personal services business. That is a corporate income tax problem for the subcontractor’s corporation, not the same thing as the consulting firm being assessed as the individual’s employer for CPP and EI.
For an IT consulting firm that engages subcontractors who each operate through their own CCPCs, the practical risk is documentation and reporting. The firm should be able to show that it contracted with the corporation, paid the corporation, received invoices from the corporation, and did not create a separate personal employment relationship with the individual. The subcontractor’s PSB exposure may still matter commercially, because CRA’s current compliance work is focused on PSB arrangements and reporting fees for services.
The CRA ruling process for CPP/EI can be invoked by either the worker or the payer where the question is whether a worker is an employee or self-employed, or whether employment is pensionable or insurable. It cannot be used to ask CRA whether the worker would be an employee of the payer if the worker’s corporation did not exist for PSB purposes.
IT-Specific Risk Patterns
Not all subcontractor arrangements in IT consulting carry the same risk. The following patterns generate the most classification exposure.
Long-term single-client engagements. There is no 18-month rule, and CRA’s IT consultant guidance recognizes that a self-employed consultant may work for the same payer for an extended period where there are several clearly defined mandates. Still, a subcontractor placed at one end client for 18 months or more, working in the same role and on the same team, accumulates facts that can look increasingly like employment if the mandate is not genuinely project-based. Continuity, integration, and the absence of other clients all become more pronounced over time.
Direction through the client. A consulting firm that places subcontractors at client sites where the client’s management team directs the day-to-day work is in a complicated position. The consulting firm may have a services agreement with the client and subcontracting agreements with the workers, but if the workers are, in practice, directed by the client’s managers, CRA will ask whether the relationship is employment with the firm, employment with the client, an agency placement arrangement, or something else. CRA’s guidance on placement and employment agencies addresses some of these situations.
Exclusivity provisions. Subcontracting agreements that require the worker to work exclusively for the firm, or to obtain the firm’s permission before taking other clients, significantly weaken the contractor characterization. Exclusivity removes one of the core economic attributes of independent contracting: the ability to serve multiple clients and profit from that capacity. A contractor who is contractually bound to one client at a time is operating in a manner that resembles a single-employer arrangement.
Embedded role with employee-like access. Secure access, badges, and client systems can be operationally necessary in IT work. The risk increases when those details go beyond project access and make the subcontractor indistinguishable from an employee: an internal employee email identity, access to HR or benefits platforms, inclusion in the organizational hierarchy, or supervision through the client’s performance management process.
Economic Dependence
Economic dependence is not a separate statutory threshold, and there is no automatic 90% test. It is part of the overall picture. A worker who derives nearly all of their income from a single payer for an extended period may be in a position that resembles employment, especially when the same facts also show control, continuity, and integration.
For an IT consulting firm, this means that a long-term arrangement with a subcontractor who has no other clients is an arrangement that accumulates risk over time. The risk is not simply that the arrangement looks like employment at the time it is questioned. It is that the pattern of the relationship, traced backward, may satisfy CRA’s factual test across multiple years simultaneously.
Where a subcontractor has other clients and can demonstrate it, the economic dependence concern is reduced. Where a subcontractor has worked exclusively for one consulting firm for two or three years, the dependence becomes part of the overall picture.
T4A Reporting Obligations
T4A slips are generally required for fees for services paid to a payee where the annual amount exceeds $500. This applies to payments to another business for services, including incorporated entities, unless a specific exception applies. Fees for services are reported in box 048 of the T4A.
For an IT consulting firm paying subcontractors, the T4A obligation applies to each payee annually. The filing deadline for T4A slips is the last day of February following the calendar year in which the payments were made. CRA currently states that it is not assessing penalties for failure relating to box 048 except under its newer administrative policy for trucking-industry payments. That moratorium does not remove the reporting requirement; it means the penalty posture is different from the underlying obligation.
The T4A obligation exists regardless of whether the subcontractor is classified correctly as a contractor. It is a reporting requirement that applies to the payments, not a consequence of misclassification. Failing to file T4As does not change the underlying classification, but it is an independent compliance failure that compounds the position if classification is later questioned.
Corporations paying fees for services to other corporations should review the T4A requirements to confirm what is reportable for their specific arrangements.
GST/HST Implications of Classification
The classification question has GST/HST dimensions that are separate from the payroll question.
If a subcontractor is GST/HST-registered, their invoices to the consulting firm carry GST/HST, and the firm can claim that amount as an input tax credit if the usual ITC requirements are met. If the subcontractor is not registered, typically because they remain a small supplier under the $30,000 threshold rules, there is no GST/HST on the invoices and no ITC to claim.
If CRA subsequently determines that a direct individual subcontractor was actually an employee, GST/HST charged by that individual becomes problematic because services supplied by an employee to an employer in the course of employment are not treated as ordinary taxable commercial supplies. If the payer contracted with a worker’s corporation, the GST/HST issue is usually different: the corporation may still have made taxable supplies, while the income tax concern may be PSB status inside the corporation.
For firms that have claimed ITCs on subcontractor invoices, a reclassification audit can trigger a GST/HST review alongside the payroll assessment.
Tracking each subcontractor’s GST/HST registration number, confirming it against the CRA registry where there is any doubt, and retaining invoices with the required information are the basic steps to support the ITC claims.
Structuring and Documentation to Support Contractor Status
The classification test is facts-based, and documentation exists to record facts. Documentation that records a contractor relationship that does not actually exist does not protect the firm. Documentation that accurately records a genuine contractor relationship is important for demonstrating the firm’s position if the arrangement is questioned.
Written services agreements. A written agreement that describes the scope of services, the deliverables, the rate, and the terms of the engagement creates a contemporaneous record. The agreement should reflect how the relationship actually operates. Language that gives the firm the right to direct how the work is done is inconsistent with contractor status, regardless of what the heading says.
Invoicing and payment records. A contractor invoices for work completed. An employee receives a pay stub. Where the commercial arrangement permits, subcontractor invoices should reflect project milestones or completed work. Regular invoice cycles are common in consulting and are not decisive by themselves, but invoices that look like paystubs, arrive on payroll dates, and always show the same amount are a risk indicator.
Evidence of other clients. A subcontractor who can demonstrate an independent business with other clients is in a materially better position than one whose sole income is from the consulting firm. The firm cannot control what the subcontractor does outside the engagement, but in practice, many firms know whether their subcontractors work elsewhere. If a subcontractor’s other client activity is known, it is a relevant fact.
Absence of employee-like integration. Subcontractors should not have the firm’s email address, the client’s employee badge, or access to employee-only systems or platforms. These details are small individually but accumulate into a picture of integration. Where operational requirements make some integration unavoidable, the reasons should be documented and the access limited to what the project actually requires.
Substitution provisions. A genuine contractor can send a substitute to perform the work. A services agreement that allows the subcontractor to use qualified personnel rather than the named individual, and that does not require the firm’s approval to do so, supports the contractor characterization. In practice, most IT consulting subcontracting agreements require the firm to approve the specific personnel, which weakens this factor. Firms should be aware of the trade-off.
When the Arrangement Is Genuinely Uncertain
Some consulting engagements are genuinely in a grey zone. The factors do not all point one direction. The relationship started as a short-term project engagement and became something more integrated over time. The worker has some other clients but works primarily for the firm.
Where the classification is uncertain for a direct worker relationship, a CPP/EI ruling from CRA is available. Either the payer or the worker can request a ruling from CRA regarding whether the worker is an employee or self-employed and whether the employment is pensionable or insurable. A payer or worker generally has to request the ruling by June 29 of the year after the year the question relates to. Service Canada or CRA can request a ruling at any time for program administration.
A ruling applies to the specific period or periods of employment covered by the decision, and a ruling that changes employment from not pensionable or insurable to pensionable or insurable may require payroll corrections. Firms that are uncertain about the classification of a current or recent arrangement should review the specific facts with a professional advisor before requesting a ruling, since the ruling will reflect the actual arrangement, not an idealized description of it.
Related Articles
- When Does an IT Contractor Become a Consultancy? covers the first signals that a solo practice has crossed into consultancy territory, including the initial subcontractor question.
- One Corporation or Multiple for a Consulting Firm? covers the structural choices available once multiple consultants are working together, including the associated corporation risk for separate CCPC arrangements.
- Personal Services Business Risk for Incorporated IT Contractors covers the PSB question, which is a separate analysis from worker classification but arises in similar contexts: engagements where one incorporated worker provides services to one client.
- Paying Consulting Firm Owners: Salary, Dividends, and Draws covers owner compensation structures, which become relevant once worker classification is resolved and the firm has a stable operational model.
Scope of This Article
This article covers the worker classification test as applied to IT consulting firms that engage subcontractors to perform billable work, and the reporting and GST/HST implications that follow. It does not cover:
- The detailed PSB tax calculation inside an incorporated subcontractor’s corporation
- Quebec-specific payroll taxes (QPP, QPIP, HSF) that apply when a worker is determined to be an employee in Quebec
- The tax treatment of retiring allowances or other termination payments if an employment relationship is unwound
- Detailed CPP and EI rate calculations beyond the high-level current-year rates noted above
- Non-resident subcontractors and the withholding obligations that apply under Part XIII and other provisions
Worker classification in IT consulting firms is a persistent and underrecognized compliance risk. The arrangements that generate the most exposure are often the most commercially successful ones: a long-term subcontractor delivering high-quality work, billing consistently, and deeply integrated into the firm’s delivery model. Those facts are also the facts that, in aggregate, describe an employment relationship.
Get in touch if you are uncertain about the classification of a current subcontracting arrangement and want to review the facts before the question arises elsewhere.