Safe Harbor 401(k): How It Works and What It Costs

Most explanations of safe harbor 401(k) plans describe them as the better version of a 401(k). They are not better, they are a trade, and whether the trade is worth taking depends on a number most small business owners have never calculated.

The trade is this: you commit to an employer contribution that is mandatory and immediately vested, and in exchange the plan stops failing the annual tests that limit how much you and your highly paid people can defer. If those tests were never binding on you, you have bought an expensive solution to a problem you did not have.

This covers what the design actually does, the three formulas and what each costs at your participation rate, the deadlines that arrive earlier than people expect, and the situations where a plain 401(k) is the better answer. I build the people and records tooling for businesses without an HR department at FirstHR, and FirstHR is an onboarding and HR platform rather than a retirement plan provider. This is general information, not tax or investment advice.

What a Safe Harbor Plan Is

A safe harbor 401(k) is an ordinary 401(k) with a specific set of provisions that take it outside the annual deferral and matching nondiscrimination tests.

According to the IRS, a safe harbor 401(k) is not subject to the complex annual nondiscrimination tests that apply to traditional 401(k) plans, and it must provide for employer contributions that are fully vested when made (Internal Revenue Service). The underlying framework sits in the retirement plan qualification rules (26 U.S.C. 401).

The Problem It Solves

An ordinary 401(k) is tested annually to check that highly compensated employees are not deferring disproportionately more than everybody else. When they are, the plan fails, and the correction is unpleasant: contributions get refunded to the highly compensated employees, taxable, usually in the spring.

At a small business this failure is almost structural. If the owner and two senior people defer heavily and eight hourly employees defer nothing, the averages will not work, however generous the plan design looks on paper. The safe harbor exists precisely for that shape of business, and the conditions it has to meet are set out in the regulations (26 CFR 1.401(k)-3).

The first question is therefore not how to set one up. It is whether your plan is actually failing, or close to failing, because a plan that passes comfortably gains nothing from the trade and pays for it anyway.

The Three Formulas

Three designs satisfy the safe harbor, and they behave very differently against a real payroll.

The enhanced match exists mostly because the basic formula is difficult to explain. One hundred percent of the first four percent is a sentence anybody understands; one hundred percent of the first three plus fifty percent of the next two is a sentence people nod at without following. Both cap at four percent of pay, and the enhanced version costs slightly more at low deferral rates.

What the Safe Harbor Match Pays in Practice

Run the safe harbor match against one salary and the formulas stop being abstract. Take an employee earning $60,000 who defers 4 percent of pay, or $2,400. The basic formula matches $1,800 on the first 3 percent, then $300 on the next 1 percent, for $2,100 in total.

The enhanced formula matches the whole first 4 percent, so the same person receives $2,400, a $300 gap on one salary. Push the deferral to 5 percent and both formulas land on $2,400, since each caps at 4 percent of pay. Anybody deferring nothing receives nothing under either.

Match or Nonelective?

This is the decision with real money in it, and the answer runs opposite to most people's instinct.

The fifth row is the one that decides most small business cases and it cuts both ways. A match rewards people who participate and gives nothing to those who do not, which is either fair or a missed opportunity depending on your view. A nonelective gives everybody three percent whether they engage or not, which costs more and is genuinely valued by lower-paid employees who cannot afford to defer.

The fourth row matters more than it looks for a business with variable revenue. A nonelective is a known percentage of payroll you can budget once. A match is a number that moves when your people change how much they defer, which makes it harder to forecast in exactly the years you most need to.

None of that answers the question for your payroll, and the only thing that does is running both formulas against your own eligible compensation and your own deferral rates. One row per eligible employee and three cost columns is the whole exercise.

What You Give Up

Four commitments come with the design, and the first is the one employers object to most.

Immediate vesting is a genuine loss for businesses that were using a graded vesting schedule as a retention mechanism. Traditional safe harbor contributions cannot be subject to one, so somebody who leaves after nine months takes the whole employer contribution with them.

Automatic enrollment designs are the one exception. A qualified automatic contribution arrangement may require up to two years of service before its safe harbor contributions become nonforfeitable, which is the only vesting schedule available anywhere inside the design. It comes attached to automatic enrollment, so it is not a route to a schedule on its own.

Whether that matters is worth being honest about. Vesting schedules retain people who were already ambivalent, and their effect is usually smaller than employers believe. But if you were relying on one, this design removes it.

The Deadlines

A new plan using a safe harbor match has to run for a first plan year of at least three months, which for a calendar year plan puts the practical deadline at October 1 (26 CFR 1.401(k)-3). The single most common way a small business misses a safe harbor year is by starting the conversation in November.

An existing plan runs on a different clock, and a later one. The safe harbor provisions have to be adopted before the first day of the plan year, and the notice has to reach eligible employees between thirty and ninety days before that day, so December 1 is the date that actually binds a calendar year plan.

The annual notice, where required, runs on its own clock: at least thirty and not more than ninety days before the plan year begins, and no later than the eligibility date for somebody who becomes eligible mid-year (Internal Revenue Service). Missing it is a plan failure rather than an administrative slip, which is another reason match designs carry slightly more operational risk than nonelective ones.

Nonelective designs no longer carry that notice at all. The SECURE Act removed the safe harbor notice requirement for them for plan years beginning after December 31, 2019, which leaves it on match designs and on automatic enrollment arrangements.

What It Actually Costs

The contribution is the visible cost and it is not the only one.

That last row is what the whole decision turns on. If your plan currently fails testing, the alternative to a safe harbor contribution is refunding money to exactly the people who most wanted to save it, every year, taxable to them. Compared with that, a fixed contribution to everybody is frequently the better arrangement even before considering what employees think of it.

The payroll tax line in that table is worth stating plainly, because employers routinely assume otherwise. Employer contributions paid into a qualified plan trust sit outside the definition of wages for Social Security and Medicare (26 U.S.C. 3121), and the federal unemployment tax definition of wages excludes them on the same terms (26 U.S.C. 3306). A dollar of safe harbor contribution costs a dollar, which is not true of a dollar of bonus.

What it is not is a small addition to your benefits spend. Three percent of eligible payroll is a real number, and it sits alongside the rest of what you pay for benefits per employee rather than instead of any of it.

When Not to Do It

Three situations where the honest answer is that a plain 401(k) is better.

The last item on the right is the most common reason small businesses adopt one, and it is the worst reason. Ask your provider for the actual test results before deciding, because the answer is either a number that justifies the cost or a number that says you are fine.

Setting One Up

Most of the work is decisions rather than paperwork, and the paperwork is your provider's job.

Where Small Employers Get This Wrong

Five patterns, and the first is the expensive one.

Adopting it without checking whether testing was actually a problem is first. It is a real annual cost bought to solve a constraint that may not exist for you.

Assuming a match is always cheaper is second. At high participation the nonelective design is frequently cheaper and always more predictable.

Starting the conversation in November is third. Match designs need to be in place well before the plan year, and the nonelective escape route is not always available.

Treating the contribution as discretionary is fourth. Once adopted for a year it is a commitment, and exiting mid-year is possible only narrowly and usually returns you to full testing for that year.

And forgetting the annual notice is last, which is a plan failure rather than an oversight, and is the specific administrative reason some employers prefer the nonelective design.

Frequently Asked Questions