Companies can require that employees get vaccinated, but they have to provide exemptions on medical and religious grounds.