Designing Work from Home Rules for Hybrid Teams

A good work from home policy for a hybrid team answers five questions in writing: who can work remotely, how many days and which hours, what equipment and costs the company covers, how data and health are protected away from the office, and how performance is judged. Get those right and most day-to-day friction disappears. This guide walks through each section, gives sample clauses you can adapt, and adds notes for employers with staff in India.

What a hybrid work from home policy should cover

Hybrid work is its own model, not a mix of two old ones. Office rules assume everyone is visible; fully remote rules assume no one is. A hybrid policy has to handle both on the same team in the same week. Use this outline as the skeleton for your document:

1. Purpose and scope: which entities, locations and employee types the policy covers.
2. Eligibility: which roles qualify, and how an employee applies.
3. Schedules and attendance: office days, anchor days, notice for changes.
4. Core hours and availability: when people must be reachable, and how hours are recorded.
5. Equipment and expenses: what is issued, what is reimbursed, what is returned.
6. Data security: devices, networks, documents and incident reporting.
7. Health and safety at home: self-assessment, ergonomics, accidents, wellbeing.
8. Performance and conduct: outcome-based goals, meetings, conduct rules that still apply.
9. Changes and withdrawal: how the arrangement is reviewed, paused or ended.

Eligibility: decide by role, not by person

Eligibility rules work best when they describe the work, not the worker. If managers decide case by case, two people in the same role end up with different deals and resentment follows. Sort roles into three groups:

• Fully on-site: roles that need physical equipment, customer counters, a warehouse or a production floor.
• Hybrid eligible: roles where most tasks can be done on a laptop, with some in-person collaboration.
• Remote by exception: roles approved for mostly remote work for a stated reason and period.

Then add individual conditions that apply equally to everyone in an eligible role: completion of probation or an initial on-site period, a suitable and private place to work, reliable internet, and no open performance improvement plan. State who approves (usually the line manager plus HR) and how quickly a request gets an answer.

Sample clause: “Employees in roles listed as hybrid eligible in Annexure A may work from home for up to [number] days per week after completing [period] of service, subject to manager approval. Approval depends on the role’s needs and is not a permanent change to the terms of employment unless stated in writing.”

Schedules, anchor days and core hours

Most hybrid problems are scheduling problems. People come in to find their team at home, or meetings are booked when half the group is commuting. Fix this with three rules.

Anchor days

Set team anchor days when everyone attends the office, and use them for planning, reviews, onboarding and workshops. Leave the remaining days for focused work. Let teams pick their own anchor days within limits so that desks and meeting rooms are not overloaded.

Core hours

Define a window, for example a few hours around midday, when everyone is reachable for calls and messages. Outside that window, people can arrange their day around their output, within their contracted hours. If your teams span time zones, write the core hours in one reference time zone and say how overlap is handled.

Recording time

Remote days are still working days. Say how attendance and hours are recorded (log-in on the HR system, timesheet or check-in message) and how overtime is approved. If you already have a time and attendance policy for tracking work hours, cross-refer to it instead of writing new rules.

Sample clause: “Employees must be available between [start] and [end] [time zone] on all working days, whether working from home or the office. Changes to an agreed weekly schedule require [number] working days’ notice to the manager, except in emergencies.”

Equipment and expenses

Unclear rules on equipment and costs cause more complaints than almost any other part of a hybrid policy. Write down who provides what, and put it in a simple table.

Item	Typical approach (example, adapt to your budget)
Laptop, headset, security keys	Company issued, asset-tagged, returned on exit
Monitor, chair, desk	One-time allowance or loan from office stock, with a cap
Internet and phone	Fixed monthly reimbursement or allowance, or none if the role is mostly in office
Electricity and rent	Usually not reimbursed; say so clearly
Repairs	Company covers company assets; employee reports damage within a set time
Travel to office on anchor days	Treated as normal commuting unless the employee is asked to attend a different site

Tax treatment of allowances and reimbursements differs by country, so check with payroll before you fix the amounts. Also say who owns equipment bought with an allowance, and what happens to it when the employee leaves.

Data security away from the office

Home networks, shared family devices and printed papers are the main risks. Your policy should set minimum rules and link to your full IT policy. A short checklist:

• Work only on company-managed devices, or on personal devices enrolled in device management if you allow them.
• Use the company VPN or secure access tools, and never public Wi-Fi without them.
• Lock screens when away, and keep devices out of reach of family members.
• No printing of confidential documents at home unless approved; shred anything printed.
• Take calls about confidential matters where others cannot overhear.
• Report lost devices or suspected breaches to IT within a fixed number of hours.

For the detailed controls, see our guides on cybersecurity policies for remote and office teams and confidentiality rules for employees handling company data.

If you monitor company devices, tell employees what is monitored, why, and who sees the data. Keep monitoring proportionate to a clear business purpose, and check the privacy law in each country where your people work.

Health and safety at home

An employer’s duty of care does not stop at the office door. In Great Britain, for example, the Health and Safety Executive says employers have the same health and safety responsibilities for home workers as for any other worker, and should include them in risk assessments covering stress, safe use of computers and the working environment (HSE guidance on home working). Even where local law is less specific, the same steps are sensible:

• A self-assessment checklist on joining the hybrid scheme: desk height, chair, screen position, lighting, trip hazards, electrical safety.
• Guidance on breaks and screen time, and access to ergonomic equipment where the assessment shows a need.
• A rule for reporting accidents or injuries that happen while working at home.
• Wellbeing support: regular check-ins, a clear right to switch off outside working hours, and a route to raise isolation or stress.

Our article on how health and safety policies protect both employees and employers covers the wider framework.

Performance, communication and conduct

Judge output, not presence. Managers who reward the people they see in the office create a two-tier team. Build these into the policy:

• Clear goals: written objectives and deliverables reviewed at a fixed rhythm, the same for remote and office days.
• Meeting rules: if one person joins remotely, everyone joins on their own screen, so remote staff are not left listening to a room.
• Written decisions: decisions and action points go into a shared channel or document, not just hallway conversations.
• Response times: expected reply times for chat and email during core hours.
• Same conduct rules: the code of conduct, anti-harassment and confidentiality rules apply equally on video calls and chat.

Also explain how the arrangement can change. Work from home is often a policy benefit rather than a contractual right, so say how it is reviewed, the notice the company gives before withdrawing it, and the grounds (role change, performance, business need).

Sample clause: “The company may review, suspend or end a hybrid arrangement for business or performance reasons by giving [number] days’ written notice, except where immediate action is needed for security or conduct reasons. Withdrawal will be applied consistently and is not a disciplinary action in itself.”

India note: what to check before you publish

Labour law in India is a concurrent subject, so both central and state rules matter. Points to check for employees based in India:

• Appointment letters: under the Occupational Safety, Health and Working Conditions Code, 2020 (in force since 21 November 2025), every worker must receive a written appointment letter. Record the place of work, hybrid status and any remote-work conditions in the letter or a signed addendum.
• Employer safety duties: the employer duties in the OSH Code are framed around the workplace and the establishment. The Code has no dedicated home-working chapter, so set out home safety expectations in your own policy and take advice on how your duties apply.
• Standing orders: when the Ministry of Labour and Employment published draft Model Standing Orders under the Industrial Relations Code in January 2021, it said the concept of work from home had been formalised in the services sector model (PIB release). If your establishment must have standing orders, check the work from home wording in the final notified version before relying on it.
• State shops and establishments laws: these usually govern office working hours, weekly holidays, overtime and leave, and registration is tied to the establishment. Check the law of the state where each employee is attached, especially if someone works from home in a different state.
• Personal data: the Digital Personal Data Protection Act, 2023 lists employment purposes among the legitimate uses of personal data, and requires data fiduciaries to take reasonable security safeguards to prevent a personal data breach (Act text). Keep device monitoring and home-address records within that purpose, and check which provisions and rules are in force when you publish.

Common mistakes to avoid

• Leaving eligibility to individual managers, which leads to unequal treatment in the same role.
• Setting office days without anchor days, so people commute to an empty floor.
• Promising equipment or allowances without a cap, a tax check or a return rule.
• Writing security rules that do not match what IT can actually enforce.
• Forgetting home health and safety and accident reporting entirely.
• Never reviewing the policy. Revisit it at least once a year and after any change in law or office capacity.

To get a structured first draft, you can use the HRTailor.AI HR Policy Generator, which covers remote and hybrid work, then add the clauses and tables above that fit your teams. Review any draft with a qualified adviser before adoption.

Last reviewed: 26 October 2026. General information, not legal or tax advice.

Official sources

• PIB: Draft Model Standing Orders for the manufacturing, mining and service sectors (2 January 2021)
• The Digital Personal Data Protection Act, 2023 (official text)
• Health and Safety Executive (Great Britain): protecting home workers

Related reading

• Why Rules Alone Don’t Work Without Ethical Thinking
• Attendance Rules for Shift-Based and Office Teams
• How Dress Code Rules Differ by Industry & Work Culture