FirstHR

Workers Compensation Audit: How to Prepare and Dispute One

What a workers comp premium audit is and how to prepare. The document checklist, the overtime and subcontractor traps, and how to dispute the bill.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Payroll
24 min

Workers Compensation Audit

What the auditor is checking, the traps that create surprise bills, and how to fight one you think is wrong

The first workers comp audit notice I saw arrived by email and looked like spam. A form, a deadline, a list of documents. The founder who forwarded it to me asked whether it was real and whether he had done something wrong.

It was real, and he had not. Every workers comp policy gets audited. What he had actually done wrong happened a year earlier and had nothing to do with the audit: he had paid three subcontractors without ever collecting a certificate of insurance from any of them. The auditor, finding no proof those subs carried their own coverage, added every dollar he had paid them to his payroll. The bill was not small.

A workers comp audit is a routine reconciliation, not an accusation. But it reads your records, and if your records are thin, it fills the gaps in the carrier's favor. This guide covers what the audit actually is, the step-by-step process, the exact documents to have ready, the three traps that create nearly all surprise bills, and the part almost nobody explains properly: how to dispute an audit result you believe is wrong.

TL;DR
A workers compensation audit is the carrier's end-of-policy review comparing your estimated payroll against what you actually paid. It happens on every policy. The result is an extra bill, a refund, or nothing. Surprise bills come almost entirely from three things: uninsured subcontractors, misclassified employees, and overtime not separated in your records. You can dispute the result, but you must pay the undisputed premium while you do.

What Is a Workers Compensation Audit?

A workers compensation audit, also called a premium audit, is the carrier's review at the end of your policy period comparing what you actually paid employees against the estimated payroll your premium was based on.

Definition
Workers Compensation Audit
A workers compensation premium audit is a review conducted by an insurance carrier at or after the end of a policy period to determine the actual premium owed. Because premium is calculated from estimated payroll and job classifications at the time the policy is written, the audit reconciles those estimates against actual payroll records, class code assignments, and subcontractor coverage. The outcome is an additional premium charge, a return premium, or confirmation that the original estimate was accurate. It is a contractual provision of the policy, not a discretionary investigation.

Understanding the arithmetic makes the audit far less mysterious. Workers comp premium is essentially payroll divided by 100, multiplied by a rate tied to each class code, multiplied by your experience modification factor. The audit is not re-examining that formula. It is replacing one input, the payroll, with the real number, and checking that the class codes on it were right.

What the Auditor Is Actually Recalculating
Premium = (Payroll ÷ 100) × Class Code Rate × Experience ModYou bought the policy on estimated payroll. The audit replaces the estimate with what actually happened
PAYROLLActualNot what you estimated at bind
CLASS CODEBy dutyJob duties, not job titles
RESULTBill or refundThe gap goes both ways

Note that the adjustment runs both ways. If you overestimated your payroll, or if headcount dropped mid-year, the audit produces a refund. Employers hear only about the bills because those are the ones people complain about, but a return premium is a completely normal audit outcome.

Why Audits Happen

They happen because the policy says they do. Your workers compensation policy contains a provision giving the carrier the right to examine and audit all records relating to the policy, during the policy period and for a defined window afterward. Cooperating is a contractual obligation, not a courtesy.

The commercial logic is straightforward. At the moment you bind the policy, the carrier has no idea what your payroll will be. It prices from your estimate. Twelve months later, you hired four people, one of them does something riskier than you described, and you paid two subcontractors. The audit exists to charge the premium that the actual exposure warranted rather than the one your January guess implied.

The Carrier Can Audit You Three Years Later
The standard policy language permits the carrier to conduct audits during the policy period and within three years after the policy period ends. A policy that expired two years ago can still be audited, and the records to defend it have to still exist and still be retrievable. This is one more reason payroll records, class code documentation, and subcontractor certificates need a retention policy rather than a drawer. The payroll records guide covers the retention clocks that apply.

The Audit Process, Step by Step

The mechanics are consistent across carriers, and knowing the sequence tells you where you have leverage and where you do not.

StageWhat HappensWhat You Should Do
NoticeThe carrier notifies you that a premium audit is due, usually by email, with a deadline and a document list.Read it and calendar the deadline immediately. This is the cheapest moment in the entire process to act.
Type assignmentThe audit is conducted by mail or online form, by phone, or in person, depending on your size, industry, and carrier.The type does not change what you need. Prepare the same records regardless.
Records reviewThe auditor examines payroll reports as the primary source and validates them against tax filings such as Form 941.Reconcile payroll against your 941s yourself, first. A discrepancy you find is a question you can answer. One the auditor finds is a problem.
Classification reviewThe auditor verifies each employee is assigned to the class code matching their actual job duties.Have a roster with real job descriptions. Titles do not determine class codes; duties do.
Findings and worksheetsThe auditor calculates final payroll by class and produces worksheets showing how they got there.Request the worksheets. They are typically not sent unless you ask, and you cannot dispute a number you cannot see.
BillingYou receive an additional premium bill, a return premium, or confirmation that no adjustment is needed.Review it against the worksheets line by line before paying. This is when you find the errors worth disputing.

The step almost everyone skips is requesting the worksheets. They are the document that explains the bill, and carriers generally provide them on request without any friction. Without them, you are looking at a total with no way to know which line created it. Note also that the auditor validates your payroll reports against your tax filings, so your payroll registers and your quarterly IRS Form 941 filings need to reconcile before the audit rather than during it.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

The Document Checklist

Here is what to have ready. Gather it before the auditor asks, because assembling it under a deadline is how errors get in.

1
Payroll registers for the full policy period
The entire policy year, not the calendar year, and including employees who were terminated partway through. The policy period is the unit that matters and it frequently does not align with January to December.
2
Quarterly Form 941 filings
The auditor uses payroll reports as the primary source and validates them against your tax filings. Form 941 reports the wages and taxes you withheld each quarter, so it is the natural cross-check. If your payroll and your 941s disagree, resolve that before the audit.
3
W-2s, W-3, and 1099s
Employee wage statements plus the summary transmittal, and 1099s for anyone you paid as a contractor. The 1099s matter because they are how the auditor identifies people who might belong in your payroll.
4
Employee roster with job descriptions
Names, and what each person actually does. Not their title, their duties. This is the document that defends your class code assignments, and almost nobody has it ready.
5
Overtime records, separated by employee
Overtime pay shown separately from regular wages, by employee and summarized by classification. Without this, the overtime exclusion does not apply and you pay premium on the full amount.
6
Certificates of insurance for every subcontractor
With coverage dates that cover the period each subcontractor actually worked for you. A certificate that covers only part of the engagement leaves the rest of what you paid them in your payroll.
7
Officer and owner payroll
Plus any officer exclusion forms you filed. States that permit officers to exclude themselves generally require paperwork, and without it the payroll gets included.
8
General ledger or profit and loss statement
The auditor may look beyond payroll reports at your checkbook, cash disbursements, or ledger to find payments to individuals that never went through payroll.

What Counts as Payroll

Auditable payroll is not the same as the gross figure on your W-3, and the difference is money. Under NCCI rules, certain compensation counts toward the premium base and certain compensation is excluded.

Compensation TypeCounts Toward Premium?The Detail That Matters
Wages, salary, commissionsYesThe core of the premium base. Draws against commissions count as well.
BonusesYesGenerally included, with narrow exceptions such as awards for individual invention or discovery.
Holiday, vacation, and sick payYesPay for time not worked still counts. The class rate already contemplates that employees take time off.
Overtime premium portionExcludable in most statesOnly if records show overtime separately. One-third of time-and-a-half pay, or one-half of double-time pay. Not permitted in a few states.
Severance payGenerally excludedOther than payment for time actually worked or accrued vacation.
Tips and gratuitiesGenerally excludedProvided your records separate tips from regular wages.
Employer contributions to group insurance or pensionsExcludedEmployer-paid benefit contributions are not part of the premium base under standard NCCI rules.
Expense reimbursementsExcluded if documentedMust be supported by records showing legitimate business expenses. Undocumented allowances can get counted.
Payments to uninsured subcontractorsYes, as your payrollThe largest source of surprise bills. Without a certificate of insurance, their pay becomes yours.

If the auditor included severance, tips, group insurance contributions, or documented expense reimbursements in your premium base, that is a correctable error and worth flagging. These are not judgment calls; they are exclusions under the rating rules.

The Overtime Exclusion

This is the most reliably overlooked money in the entire audit, and it costs employers real amounts every year.

Overtime pay has two components: the straight-time portion, which is what the employee would have earned at their regular rate, and the premium portion, which is the extra. In most states, the premium portion is excluded from auditable payroll, because working more hours at a higher rate does not make the work more dangerous.

Per the NCCI Basic Manual rules on premium and payroll, extra pay for overtime is excluded from the payroll on which premium is calculated provided the insured's books and records are maintained to show overtime pay separately by employee and in summary by classification. That proviso is the whole game.

The Exclusion Only Exists If Your Records Prove It
Where overtime is recorded as one combined amount, the standard formula excludes one-third of the total for time-and-a-half and one-half of the total for double time. But if your payroll records do not separate overtime from regular wages at all, the auditor counts every dollar at the full rate and you pay premium on money you did not have to. A business with $50,000 of annual overtime can be leaving five figures of auditable payroll on the table purely through record formatting. Source: NCCI Basic Manual, Rule 2.

Two caveats. First, a handful of states, including Pennsylvania and Delaware, do not permit the overtime exclusion at all, so check yours before counting on it. Second, shift differentials and premium pay for working nights or weekends are not overtime under these rules, and are not excludable on that basis. The overtime guide covers how the underlying overtime obligation works.

The Subcontractor Trap

If you pay a subcontractor and cannot prove they carried their own workers comp coverage, the auditor treats every dollar you paid them as your payroll, rated at your class code. Uninsured subcontractors become your employees for premium purposes.

This single mechanism produces the largest surprise bills in workers comp, and it is entirely preventable. The fix is not clever, it is just disciplined: collect a certificate of insurance from every subcontractor before work begins, and verify the coverage dates actually cover the period they will be working for you.

That date-matching detail is where employers who think they are covered discover they are not. A certificate showing coverage for three months of a nine-month engagement leaves six months of payments sitting in your auditable payroll. The certificate needs to span the work, not merely exist.

What worked for me
I now treat a subcontractor certificate of insurance exactly like an I-9: it is collected before the person starts, not after, and the engagement does not begin without it. The cost of asking is a two-minute email. The cost of not asking is that everything you pay them for the next nine months becomes your payroll at audit, at your class rate, and you find out about it a year later when you have already spent the money. There is no version of this where chasing the certificate later is easier than getting it upfront.

Class Codes and Misclassification

Every employee is assigned a class code that carries a rate reflecting the risk of that work. Roofers cost more than bookkeepers, because roofing is more dangerous than bookkeeping. The audit checks whether your assignments match reality.

The rule that matters: class codes follow actual job duties, not job titles. A person called an operations manager who spends their day on a job site is not clerical. A person called a foreman who spends their day in an office quoting jobs may well be. What they do determines the code, and what they do is a question of evidence.

The most common and most expensive small-business error is putting everyone under the primary trade code. Your bookkeeper, your receptionist, and your office manager belong in a clerical classification with a far lower rate. Leaving them in your trade code means paying a roofing rate on someone who has never been on a roof. This is worth checking line by line on the audit worksheets, because it is the correction with the largest dollar impact per hour of effort.

The Traps That Create Surprise Bills

Six mistakes account for nearly every unexpected audit bill at a business with 5 to 50 employees. All of them are prevented by things you do during the policy year, not during the audit.

Everyone under one class codeYour bookkeeper and your office manager should be coded as clerical, not under your primary trade code. Class codes follow actual job duties, not job titles, and lumping everyone into the highest-rate code is expensive.
Overtime not broken outIf your records separate overtime from regular wages, part of the overtime premium is excludable. If they do not, the auditor counts every dollar at the full rate. This is the most common overpayment at audit.
Missing subcontractor certificatesNo proof a subcontractor carried their own coverage means the auditor treats everything you paid them as your payroll. This single item creates the largest surprise bills.
No officer exclusion on fileIf your state permits officers to exclude themselves and you never filed the paperwork, officer payroll gets included, sometimes at a minimum threshold even when the officer takes no salary.
Disorganized recordsWhen you cannot produce clean documentation, the auditor estimates. Estimates are not neutral. They are conservative in the carrier's favor, and the burden of disproving them lands on you.
Ignoring the audit entirelyRefusing to cooperate triggers an audit noncompliance charge, which in many states is a multiple of your estimated annual premium. This is the single most expensive way to handle an audit notice.

The last one deserves emphasis because it is the only truly catastrophic option. Refusing to cooperate with an audit, or simply ignoring the notice, triggers an audit noncompliance charge, which in many states is calculated as a multiple of your estimated annual premium. Cooperating fully and disputing the result afterward costs less than refusing to participate, in every scenario.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

How to Dispute a Workers Comp Audit

This is the section most guides skip, and it is where the actual money is. If the audit result is wrong, you can contest it, and employers do so successfully. But there is a procedure, and getting it wrong forfeits your position.

Stage 1: Get the worksheets and find the error
What you do: Ask the carrier for the auditor's worksheets. These are not usually sent unless you request them, and they show exactly how payroll was derived and which class codes were assigned.
Why it matters: You cannot dispute a number you cannot see. The worksheets are the roadmap, and they are where misclassifications and included subcontractor payments become visible.
Stage 2: Pay the undisputed premium
What you do: Calculate what you agree you owe and pay it on the normal schedule. If the bill is $50,000 and you contest $15,000, you still owe $35,000 now.
Why it matters: This catches employers off guard more than anything else. Filing a dispute does not pause your obligation to pay, and nonpayment can trigger cancellation regardless of the dispute.
Stage 3: Dispute in writing, with numbers
What you do: Submit a written dispute to the carrier with an estimate of the premium in dispute and a written explanation of how you calculated it. Attach the supporting documents for each contested line.
Why it matters: A dispute that says the bill feels too high goes nowhere. A dispute that says this employee was coded 5403 but performs clerical duties, here is the job description, and the impact is $6,200 gets reviewed.
Stage 4: Escalate to NCCI or the state
What you do: If the carrier will not resolve it, NCCI operates a formal dispute resolution process in most states. It assigns a consultant, and unresolved disputes can go to a state Workers Compensation Appeals Board or Committee.
Why it matters: You must have attempted direct resolution and paid the undisputed premium first. In non-NCCI states, the state insurance department or rating bureau runs its own process.

Look hard at stage two, because it is the one that surprises people. Filing a dispute does not pause your obligation to pay. Per NCCI's dispute resolution process, any undisputed portion of premium due to the carrier must be paid before you are even eligible for dispute resolution services, and the policyholder must provide the carrier an estimate of the premium in dispute along with a written explanation of the calculation. Some states allow the disputed portion to be held in abeyance; the undisputed portion is due regardless.

What makes a dispute succeed is specificity. Carriers do not respond to arguments that a bill feels high. They respond to line items: this employee was assigned code X but performs clerical duties, here is the job description, the dollar impact is $6,200. Or: these three subcontractor payments were included, here are the certificates of insurance covering the exact dates, the impact is $18,000.

Grounds for DisputeWhat to ProduceTypical Impact
Employee misclassified into a higher-rate codeA written job description showing actual duties, plus the correct class code and its rate.Often the largest single correction. Office staff coded into a trade class can move thousands of dollars.
Subcontractor payments included in your payrollThe certificate of insurance for each subcontractor, with dates covering the period they worked.The biggest dollar item in construction and trades. This is usually a documentation-matching problem rather than a real disagreement.
Overtime exclusion not appliedPayroll records showing overtime separately by employee, summarized by classification.The auditor should have applied the exclusion. If your records supported it and they did not, this is a straightforward correction.
Excluded compensation counted as payrollDocumentation that the amounts were severance, tips, group insurance contributions, or reimbursed expenses.Smaller individually, but these are exclusions under the rules rather than judgment calls, so they are winnable.
Payroll figures do not match what you providedYour payroll registers and 941 filings alongside the auditor's worksheets, with the discrepancy identified.A transcription or estimation error. Common when the auditor had to estimate because records were incomplete.
Experience mod applied incorrectlyYour rating worksheet from the bureau, compared against what the carrier used.Less common but worth checking, since the mod multiplies everything else.

Deadlines here are short and they vary. Some carriers impose a window measured from the audit billing date, and some states set their own statutory deadlines, which can be tighter. Oregon's Small Business Ombudsman for Workers' Compensation, for instance, warns employers not to wait and notes that missing the state's 60-day deadline can limit your options entirely. Do not spend three weeks deciding whether to dispute. Request the worksheets the day the bill arrives, and find out what your state's deadline actually is.

Preventing the Surprise Bill

Everything that goes wrong at an audit was decided months earlier. The audit does not create the problem, it discovers it. Which means the entire game is played during the policy year, in four unglamorous habits.

HabitWhenWhat It Prevents
Collect subcontractor COIs before work startsEvery engagement, no exceptions, with dates that cover the work period.The single largest source of surprise premium. Chasing certificates a year later, from a subcontractor you no longer work with, rarely succeeds.
Keep overtime separated in payrollEvery pay run, as a standing configuration rather than a thing you remember to do.The overtime exclusion, which only exists if your records prove it. Lumped records mean you pay premium on money you did not owe.
Document what each employee actually doesAt hire, and again when a role changes materially.Class code disputes. A written job description is what turns your classification from an assertion into evidence.
Tell your carrier when payroll changes materiallyMid-year, when you hire several people or take on a different kind of work.The size of the true-up. An audit that finds a small gap produces a small bill. An audit that finds a year of unreported growth produces a shock.

Notice what those four have in common. None of them is an insurance task. They are all HR and payroll recordkeeping tasks: collecting a document at onboarding, configuring payroll correctly, writing down what someone does, and keeping the numbers current. The audit is an insurance event with an HR root cause.

This is where FirstHR fits. Employee profiles hold the class code and the job description that justifies it, so the classification is a record rather than an assertion. Document management stores subcontractor certificates of insurance with their coverage dates where they can actually be retrieved a year later. Task workflows make collecting a certificate a step in engaging a contractor rather than a thing someone meant to do. And the payroll and audit records stay somewhere the business controls, which matters when the carrier can audit you three years after the policy ends.

FirstHR is not an insurance carrier and does not sell or administer workers comp coverage. Buy the policy from a licensed agent. What we hold is the record layer the audit reads: classifications, job descriptions, certificates, and the documentation trail behind them. The workers compensation insurance guide covers the coverage itself, and the contractor classification guide covers the question that determines whether someone belongs in your payroll at all.

Key Takeaways
A workers comp audit is a routine end-of-policy reconciliation comparing estimated payroll against actual. Every policy gets one. The result can be a bill, a refund, or nothing.
The carrier can audit during the policy period and for three years after it ends, so the records to defend an audit have to survive well past the policy year.
Uninsured subcontractors are the largest source of surprise bills. Without a certificate of insurance covering the dates they worked, everything you paid them becomes your payroll at your class code rate.
The overtime premium portion is excludable in most states, but only if your records show overtime separately by employee. Lumped records mean you pay premium on the full amount.
Class codes follow actual job duties, not job titles. Office staff coded into your primary trade code is the most common and most correctable overpayment.
Never ignore an audit notice. Refusing to cooperate triggers an audit noncompliance charge, often a multiple of your annual premium.
You can dispute a result, but you must pay the undisputed premium while you do. Filing a dispute does not pause the bill, and nonpayment can trigger cancellation.
Request the auditor's worksheets. They are not sent unless you ask, and they are the only way to see which line created your bill.

Frequently Asked Questions

What is a workers compensation audit?

A workers compensation audit, also called a premium audit, is the carrier's review at the end of your policy period to compare what you actually paid employees against the estimated payroll your premium was based on. When you bought the policy, the premium was calculated from projections. The audit replaces those projections with reality, checking actual payroll, job classifications, and subcontractor coverage. The result is an additional premium bill, a refund, or confirmation that your estimate was close. It is a routine contractual step, not an accusation.

Why did I get a workers comp audit?

Because every policy gets one. It is not triggered by suspicion or by anything you did wrong. Your workers compensation policy contains a provision giving the carrier the right to examine and audit the records relating to it, and premium audits are standard on essentially all policies regardless of carrier. Payroll estimates made at the start of a policy year rarely match what actually happened by the end of it, so the audit reconciles the difference in whichever direction it runs.

What documents do I need for a workers comp audit?

Payroll registers or summaries covering the full policy period, quarterly Form 941 filings, W-2 and W-3 forms, 1099s for contractors, an employee roster with job descriptions and duties, overtime records separated from regular wages by employee, certificates of insurance for every subcontractor, officer and owner payroll information, and your general ledger or profit and loss statement. Auditors treat payroll reports as the primary source and validate them against tax filings, so the two need to reconcile.

How do I prepare for a workers compensation audit?

Gather your payroll records for the full policy period and reconcile them against your quarterly 941 filings before the auditor sees either. Confirm your employees are assigned to class codes that match their actual job duties rather than their titles. Make sure overtime is separated from regular wages in your records, because the exclusion only applies if it is. Collect certificates of insurance from every subcontractor, verifying the coverage dates cover the period they worked for you. Then request the auditor's worksheets when the audit is done.

Can I dispute a workers comp audit?

Yes, and employers do so successfully all the time. Start by requesting the auditor's worksheets, which show how payroll was derived and which class codes were assigned. Identify specific errors with dollar amounts attached. Submit a written dispute to the carrier including an estimate of the premium in dispute and a written explanation of how you calculated it. Critically, you must pay all undisputed premium while the contested portion is reviewed. If the carrier will not resolve it, NCCI operates a formal dispute resolution process in most states.

Do I have to pay the premium while disputing an audit?

You have to pay the undisputed portion, yes. This catches more employers off guard than any other part of the process. If your audit bill is $50,000 and you believe $15,000 of it is wrong, you still owe $35,000 on the normal payment schedule. Filing a dispute does not pause your obligation, and failing to pay the undisputed amount can trigger cancellation proceedings for nonpayment regardless of the dispute. Under NCCI's process, paying the undisputed premium is a prerequisite for dispute resolution services.

Is overtime included in workers comp premium?

The straight-time portion is. The premium portion, meaning the extra amount above the regular rate, is excludable in most states, but only if your records show overtime separately by employee. For time-and-a-half, one-third of the total overtime pay can be excluded; for double time, one-half. If your payroll records lump overtime in with regular wages, the auditor counts the full amount and you overpay. A few states, including Pennsylvania and Delaware, do not permit the exclusion at all.

What happens if I do not have subcontractor certificates of insurance?

The auditor treats everything you paid that subcontractor as your payroll, charged at your class code rate. Uninsured subcontractors effectively become your employees for premium purposes. This is the single largest source of surprise audit bills. The certificate needs to show coverage dates that align with the period the subcontractor actually worked for you, so a certificate covering only part of the engagement leaves the uncovered portion in your payroll. Collect certificates before work starts, not at audit time.

What is an audit noncompliance charge?

It is the penalty a carrier can impose when an employer refuses to cooperate with the audit, fails to provide records, or does not respond to the audit notice. In many states the charge is calculated as a multiple of your estimated annual premium, which makes ignoring an audit notice one of the most expensive decisions a small business can make. Cooperating fully and then disputing errors afterward is always cheaper than refusing to participate and being assessed a penalty on top of the recalculated premium.

How long does a carrier have to audit my policy?

Longer than most employers expect. The standard workers compensation policy language gives the carrier the right to examine and audit records during the policy period and within three years after the policy period ends. That means a policy that expired two years ago can still be audited, and the records to defend it need to still exist. Keep payroll records, class code documentation, and subcontractor certificates well past the end of the policy year they relate to.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial