12 things your employer can check when you work abroad โ ranked by risk level, with what to do about each one.
Every time you open a corporate app, your IP is logged. Foreign IPs trigger alerts in Okta, Azure AD, Google Workspace, and most SSO providers instantly.
Microsoft Authenticator, Duo, and Okta Verify all show the city derived from your IP when you approve a login. If IT reviews MFA logs, foreign cities stand out immediately.
Azure AD and Okta flag "impossible travel" โ two logins from locations that are physically impossible to travel between in the time gap. These generate automatic alerts to security teams.
If your company uses Jamf, Intune, Kandji, or any MDM, they can read GPS coordinates from the device itself. This is hardware-level โ no VPN or tunnel can mask it.
Google Calendar, Outlook, Slack, and Jira embed your device's timezone in events, messages, and ticket timestamps. A coworker in IT can spot "Created at 3:42 AM EST" when you're supposedly in New York.
Some MDM and endpoint agents report the WiFi network name your device is connected to. A network named after a foreign hotel or cafรฉ is an obvious giveaway.
Employee monitoring software captures screenshots, keystroke patterns, and active/idle time. It doesn't directly reveal location, but irregular hours or background details in screenshots can raise questions.
A sunny balcony with palm trees in February when you're supposed to be in Minneapolis. Zoom, Teams, and Meet all support virtual backgrounds, but people forget to turn them on.
Tunneling traffic through your home network adds latency (typically 50-150ms depending on distance). Noticeable in video calls if you're far from home, but IT departments don't typically monitor individual latency.
If you use a corporate card for meals or expenses abroad, the merchant location is logged. Not typically monitored by IT, but finance teams might notice.
The most common way remote workers get caught isn't technical at all โ it's posting a beach photo on Instagram that a coworker sees. Low-tech, high-risk if you're not careful.
Your browser reports language preferences, date formats, and keyboard layout. Theoretically detectable, but virtually no employer actively monitors this.
HomeLink is a paired router kit that tunnels all your devices through your home IP at the network level. No apps, no toggles, no forgetting. Plug in and go.
See how it works โ