What changed on 1 January 2026
The French URSSAF solidarité financière regime governs the donneur d’ordre’s joint liability for unpaid social contributions across the sub-contracting chain. The legal basis — Articles L8222-1 and L8222-2 du Code du travail — has been in force since the Macron Law of 2015 and has carried the same fundamental mechanic across multiple jurisprudential iterations.
Décret 2025-1338, published in Journal Officiel on 27 November 2025 and in force from 1 January 2026, did not change the legal mechanic. It tightened the documentary threshold under which the donneur d’ordre can claim to have discharged the vigilance obligation. The shift is technical, not foundational — and that technical shift is what makes the cascade operationally visible across a procurement portfolio that was previously defensible under the 2020-version regime.
The vigilance pack, pre- and post-Décret
Pre-1 January 2026: The vigilance obligation required the donneur d’ordre to obtain, every six months, from every sub-contractor above the €5,000 threshold:
- The URSSAF attestation de vigilance (proof of social-contribution compliance, dated within 6 months);
- The Carte BTP coverage extract (for construction-sector workers);
- The K-bis extract (corporate registration);
- The SIPSI déclaration de détachement where posted workers were deployed.
Post-1 January 2026: Décret 2025-1338 adds:
- The attestation URSSAF must demonstrate active vigilance (specific to the contract’s worker classification, not generic firm-level compliance);
- The Carte BTP coverage list must be per-worker per-site, not just firm-level summary;
- The K-bis must be verified by the donneur d’ordre against the SIRENE registry at the moment of award, not relied on as supplied;
- Posted-worker SIPSI déclarations must carry a distinct vigilance pack with EU A1 portable documents AND Convention Collective coverage AND DREETS jurisdictional pre-clearance for any duration exceeding 12 months.
The cumulative effect: where the pre-Décret pack was 4 documents per sub-contractor on a six-monthly rotation, the post-Décret pack is 8-12 documents per sub-contractor per worker per site on a quarterly rotation. The volume increased; the burden of proof shifted from contractual to documentary.
Why the cascade now reaches deeper
The URSSAF solidarité financière cascade has always reached every tier of the sub-contracting chain. What Décret 2025-1338 changed is what the URSSAF inspector is permitted to interpret as discharge.
Pre-Décret, an URSSAF inspection at a donneur d’ordre site could be discharged by producing the firm-level attestations URSSAF and Carte BTP summaries, contract documentation, and worker-classification commitments. If the sub-contractor had a back-tax exposure that emerged 18 months after award, the donneur d’ordre’s defence was: I exercised due vigilance on the documentation I had access to at the time of award.
Post-Décret, the inspector reads the documentary pack against a higher standard. If the donneur d’ordre cannot produce per-worker per-site Carte BTP coverage at the moment of award (not generic firm coverage), the vigilance is incomplete by definition. If the SIPSI déclaration is not paired with the EU A1 portable document and Convention Collective coverage commitment, the posted-worker leg of the chain is unprotected. The solidarité financière cascade then attaches — at the post-2026 calculation horizon — to the full back-contribution exposure of the sub-contractor’s unpaid social charges.
The retroactive cascade is the structural mechanic that matters. URSSAF can audit a contract awarded in 2024 against the 2026-vigilance standard if the contract was active after 1 January 2026. For a donneur d’ordre running a 3-5 year construction programme with multiple sub-contracted phases, every active contract on 1 January 2026 is now subject to the tightened standard, regardless of when it was originally awarded.
The Italian DURC precursor pattern
Italy’s DURC compliance regime — the Documento Unico di Regolarità Contributiva that blocks public-procurement payments when a contractor’s social-contribution rolling-current status fails — established the pattern that Décret 2025-1338 now replicates in France.
The Italian mechanic: a single per-worker certification gap cascades into multi-million-euro exposure when the audit hits a sub-traité chain. The donneur d’ordre’s contractual defence (back-to-back indemnity, sub-contractor undertaking, performance bond) does not discharge the public-procurement payment block. The Italian DURC cascades from administrative to financial; the French Décret 2025-1338 cascades from administrative to solidarité.
The convergence point: both regimes make documentary vigilance the operational test for chain discharge. The contractor either has the per-worker per-site documentary pack at the moment of audit, or they do not. The Italian DURC pattern is the precursor to what the French regime is now operationalising.
Operational implications for the donneur d’ordre
The Décret 2025-1338 reform is not a contractual problem. It is a documentary architecture problem. Three structural responses follow:
1. Pre-mobilisation vigilance pack architecture. The pack must exist before the worker enters the site. Post-mobilisation document collection is no longer defensible under the post-Décret standard — by the time the inspector arrives, the documentary trail that should have been captured at award is unrecoverable. Practitioners architect this at the pre-bid phase: vigilance pack template + per-jurisdiction Convention Collective verification + per-worker A1 / SIPSI / Carte BTP pre-clearance.
2. Quarterly vigilance rotation discipline. Décret 2025-1338’s six-monthly-to-quarterly rotation is operationally significant. A donneur d’ordre running 12 active sub-contracts must rotate ~36 vigilance packs per year (vs ~24 under the pre-Décret regime). The administrative load is real; the audit-trail discipline must scale to match.
3. Per-worker per-jurisdiction documentary continuity. The pre-Décret regime tolerated firm-level documentation. The post-Décret regime requires per-worker per-site documentation. The Tier-1 GU’s commercial-procurement process must capture the per-worker vigilance pack at sub-contractor onboarding, not retroactively at audit.
The architectural fix sits upstream of the procurement process. A workforce-mobilisation programme that captures the per-worker per-jurisdiction documentary trail as a natural by-product of deployment — not as a separate compliance project six months later — services the Décret 2025-1338 vigilance discipline without additional administrative load on the donneur d’ordre. The compliance cost moves from the donneur d’ordre to the workforce-mobilisation architecture.
The 2026 procurement-cycle implications
The Décret 2025-1338 reform compounds with several adjacent 2026 regulatory shifts:
- SchwarzArbMoDiG (Germany, 1 January 2026): Direct §266a-StGB Beschuldigtenladung powers for FKS Hauptzollamt operations. For donneurs d’ordre with German cross-border subcontracts, the German criminal-procedure exposure now stacks with the French solidarité financière exposure.
- Wtta detachering (Netherlands, 1 January 2026): Toelatingsstelsel mandatory for posted-worker deployments. For donneurs d’ordre with NL-DE cross-corridor work, the Wtta pre-deployment certification stacks with the French vigilance pack requirement.
- CSDDD national transposition deadline (26 July 2026): EU Corporate Sustainability Due Diligence Directive transposition deadline. Where the donneur d’ordre’s parent group is in CSDDD scope, the per-worker vigilance documentation becomes input to the parent’s annual sustainability-disclosure cycle.
- Kedjeansvar (Sweden, 1 June 2026): Lag 2018:1472 entreprenörsansvar live, with 14+7 helgfria vardagar notification windows.
The donneur d’ordre with a multi-jurisdictional sub-contracted workforce is operating across four converging audit horizons in 2026. The documentary architecture that satisfies one does not automatically satisfy the others, but the underlying mechanic — per-worker per-jurisdiction per-site documentary capture at mobilisation — services them all when architected for the highest-burden jurisdiction.
Closing observation
Décret 2025-1338 did not introduce a new legal mechanic. It tightened the documentary discipline against an unchanged legal mechanic. For the donneur d’ordre with an active 2026 procurement portfolio, the question is not what changed but what documentation do you actually have for the contracts you’ve already awarded. If the pre-Décret vigilance pack was assembled to the pre-Décret standard, the post-Décret inspector reads it as incomplete by definition. The retroactive cascade is the structural risk.
The architectural response is upstream: pre-mobilisation vigilance pack capture, per-worker per-jurisdiction documentation, quarterly rotation discipline — built into the workforce-mobilisation programme, not bolted on as a separate compliance project. The compliance cost moves from the donneur d’ordre to the workforce architecture, where it operates as a by-product of deployment rather than a separate audit-defence project.