401(k)s for Small Businesses: What You Need to Know Before You Offer One

A 401(k) can be one of the most valuable benefits a small business offers—but it is not a “set it and forget it” payroll feature. The right plan can help you attract and retain talent, support employees’ retirement readiness, and create meaningful tax-planning opportunities for owners; the wrong setup can create avoidable administrative work, fiduciary exposure, and expensive corrections.

The good news? You do not need to become a retirement-plan expert. You do need to make intentional decisions, hire the right fiduciary partners, and review the plan regularly.

1. Don’t Manage Fiduciary Risk Alone

When your company sponsors a 401(k), someone must carry fiduciary responsibility. Under ERISA, fiduciaries must act solely in participants’ interests, operate the plan prudently, follow plan documents, diversify investments, and ensure plan expenses are reasonable. Fiduciaries that breach these duties can be personally liable for restoring plan losses or improper profits.[dol]

That is a big responsibility for a business owner, CFO, HR leader, or office manager who already has a full-time job. And the risk is not hypothetical.

Common plan errors include:

Late deposits of employees’ payroll deferrals.
Missed eligibility or incorrect enrollment dates.
Incorrect employer matches or profit-sharing contributions.
Incomplete or late participant notices and disclosures.
Failure to file Form 5500 when required.
Inadequate monitoring of investment choices, recordkeeper performance, or total plan costs.
Choosing investments or providers without documenting a prudent selection process.

For example, employee salary deferrals must generally be deposited as soon as administratively feasible. For plans with fewer than 100 participants, deposits made within seven business days after withholding receive a safe-harbor timing standard—but “we were busy” is not a compliance strategy.[2]

Consider a 3(16) fiduciary

A 3(16) administrative fiduciary can assume responsibility for specified administrative functions under the plan. Depending on the agreement, this may include tasks such as:

Monitoring employee eligibility and entry dates.
Overseeing participant notices and disclosures.
Coordinating Form 5500 preparation and filing.
Processing distributions and loans.
Helping ensure the plan operates according to its written document.
Supporting documentation and compliance workflows.

The key phrase is specified functions. Ask exactly which duties the 3(16) provider accepts in writing. A provider that “helps with administration” is not necessarily accepting fiduciary responsibility for administration.

Consider a 3(38) investment manager

A 3(38) investment manager has discretionary authority to select, monitor, and replace the plan’s investment lineup. That is materially different from a 3(21) investment adviser, who may provide recommendations while leaving the employer to make the final investment decision.

With a properly appointed 3(38) manager, the employer remains responsible for prudently selecting and periodically monitoring that manager—but is generally not responsible for each underlying investment selection the manager makes. The Department of Labor specifically notes that employers can appoint a qualified investment manager and retain the duty to select and periodically monitor that manager, rather than being liable for its individual investment decisions.[dol]

Think of it this way:

Responsibility	Without Delegation	With a 3(16) and 3(38) Structure
Day-to-day plan administration	Employer team may manage or oversee it	3(16) may assume agreed administrative fiduciary duties
Investment menu decisions	Employer or committee selects and monitors funds	3(38) selects, monitors, and replaces investments
Employee eligibility and notices	Employer team manages deadlines and accuracy	3(16) may manage agreed compliance functions
Provider oversight	Employer responsibility	Employer still selects and monitors fiduciary partners
Fiduciary risk	Employer retains more direct operational and investment risk	Risk is reduced for delegated duties, but never fully eliminated

Delegation is not abdication. You still need to choose qualified providers, understand what they are doing, and monitor the arrangement. But you do not have to personally become the plan administrator, investment committee, compliance officer, and recordkeeper. That sounds like a terrible company picnic conversation anyway.

What Mistakes Can Cost

The cost of an error is not limited to a bad participant experience. It can include corrective contributions, lost earnings, professional fees, excise taxes, penalties, legal defense costs, and personal fiduciary exposure.

Here are a few real-world examples of why process and documentation matter:

Excessive-fee litigation: In 2025, Jack Henry & Associates proposed a $1.6 million settlement in a lawsuit alleging excessive 401(k) recordkeeping and administrative fees. The settlement also included a commitment to conduct a recordkeeping request for proposal within three years. The point is not that every small plan is headed for litigation; it is that fees, service value, and provider-monitoring documentation matter.[dol]
Late Form 5500 filings: The Department of Labor can assess penalties of up to $2,739 per day for failure to file a complete and accurate Form 5500. For sponsors that correct voluntarily before enforcement action, the DOL’s Delinquent Filer Voluntary Compliance Program can substantially reduce the cost; for a small plan, the program’s cap is generally $750 per filing and $1,500 per plan.[psca][dol]
Operational mistakes: If a plan fails to follow its own eligibility, deferral, matching, or vesting provisions, the employer may need to make corrective contributions—often including missed contributions plus earnings—to place affected employees where they should have been.

The lesson: retirement-plan risk is usually not about predicting the stock market. It is about process, deadlines, documentation, and accountability.

2. Understand the Real Cost of a Small Plan

For a small-business 401(k) with 15 or fewer employees, a reasonable planning estimate for annual base administration, recordkeeping, compliance, and fiduciary-support costs is often $3,500 to $5,000 per year. Actual pricing varies significantly based on plan design, payroll integration, participant count, investment platform, fiduciary services, filing requirements, and whether fees are paid by the employer, participants, or both.

That number should not be treated as a quote. It is a budgeting starting point.

A lower advertised fee can be appealing, but it may exclude services that a small employer actually needs, such as:

Payroll integration and contribution reconciliation.
Compliance testing and correction support.
Form 5500 preparation and filing.
Participant education and enrollment support.
Loan and distribution processing.
A 3(16) administrative fiduciary.
A 3(38) discretionary investment manager.
Dedicated service support when an employee asks, “Why is my contribution not showing up?”

The Department of Labor is clear: fees do not have to be the lowest available, but they must be reasonable for the services provided. When comparing providers, employers should understand all direct and indirect compensation, determine what is included versus extra, and compare total services and total costs—not simply one headline number.[dol]

In other words, cheap is not automatically prudent. If a lower-cost platform shifts more compliance work, participant support, investment monitoring, and risk back to your business, it may be more expensive than it first appears.

A simple cost illustration

Suppose one provider costs $2,000 per year but requires your office manager to handle manual payroll uploads, chase eligibility data, coordinate notices, troubleshoot participant issues, and help manage compliance corrections.

Another provider costs $4,500 per year but includes payroll integration, dedicated administration, 3(16) support, a 3(38) investment manager, participant service, and clear compliance reporting.

The second option costs more in dollars. But if it saves 40 hours of internal time, reduces error risk, improves employee support, and removes major tasks from a key employee’s plate, it may provide much better overall value.

The right question is not, “Which plan is cheapest?” It is: “What do we receive, what work remains with our team, and what risk are we accepting?”

3. Safe Harbor vs. Non-Safe Harbor

A safe harbor 401(k) can be especially valuable for a small business where owners or highly compensated employees want to maximize their own contributions but employee participation is inconsistent.

A traditional 401(k) generally must complete annual ADP and ACP nondiscrimination testing. Those tests compare deferrals and matching contributions for highly compensated employees with those of non-highly compensated employees. If the plan fails testing, the company may need to make corrective contributions for other employees or return some contributions to highly compensated employees.[dol]

A properly designed safe harbor plan generally avoids the annual ADP and ACP tests in exchange for a required employer contribution and specific plan rules.[dol]

Common safe harbor contribution designs

Design	Typical Employer Commitment	Key Tradeoff
Nonelective safe harbor	3% of compensation for eligible employees, whether or not they contribute	Predictable cost, but contributions go to eligible employees even if they do not defer
Basic safe harbor match	100% of the first 3% deferred, plus 50% of the next 2% deferred	Employer cost is tied more closely to employee participation
Enhanced match	Must be at least as generous as the basic safe harbor match	Can support stronger employee engagement and retirement savings
QACA safe harbor	Automatic enrollment plus required employer contribution	Can improve participation, but requires an automatic-enrollment design and related notices

In a traditional safe harbor plan, the basic match formula is 100% of the first 3% of pay deferred plus 50% of the next 2% deferred. Alternatively, the employer may generally contribute 3% of compensation for each eligible non-highly compensated employee. Required safe harbor contributions are generally fully vested in a traditional safe harbor design.[2][dol]

Why the decision deserves modeling

A safe harbor plan is not automatically better. It is a design decision that should be evaluated against your company’s cash flow, workforce demographics, turnover, owner compensation, hiring plans, and goals for employee benefits.

Consider two businesses:

Business A: The owners want to maximize retirement contributions, but only a small portion of employees contribute. A safe harbor design may provide predictable compliance and prevent annual testing from limiting owner contributions.
Business B: The business has uneven cash flow, modest owner deferral goals, and a workforce with strong participation. A traditional plan may be more flexible—provided testing results remain acceptable.

Safe harbor contributions can increase the company’s direct cost. But a non-safe-harbor plan can also create costs: annual testing, corrective distributions, corrective employer contributions, lost owner contribution opportunities, more administration, and less predictability.

This is precisely where a financial advisor and retirement-plan professional can help. The goal is not to force every company into a safe harbor plan. The goal is to compare the cost of the employer contribution with the value of predictable administration, improved owner savings capacity, fewer testing headaches, and a more competitive employee benefit.

4. Review the Plan Every Year

A 401(k) should receive a formal annual review. That review should look beyond investment performance and beyond whether the Form 5500 was filed.

The Department of Labor recommends that plan sponsors establish and follow a formal review process at reasonable intervals to evaluate whether service providers should be retained or replaced. This includes reviewing performance, actual fees, provider notices, reports, practices, and participant complaints.[dol]

Your annual 401(k) review checklist

Confirm that payroll deposits and employer contributions were made timely.
Review employee eligibility, enrollment, and participation rates.
Review whether the match or safe harbor formula is working as intended.
Verify required notices, disclosures, and participant communications.
Review compliance testing results or safe harbor compliance.
Confirm Form 5500 and other reporting responsibilities are on track.
Review total fees, including recordkeeping, administrative, investment, advisory, and transaction charges.
Review participant experience: enrollment, website usability, call-center support, education, loan processing, and distribution support.
Review investment lineup oversight, including the work completed by the 3(38) manager, if applicable.
Document decisions, action items, and the rationale for keeping or changing providers.

Documentation matters because ERISA fiduciary prudence is largely judged by the process used to make decisions, not simply by whether every investment or vendor choice turned out perfectly.[dol][2]

5. Shop the Plan Every Two to Three Years—But Don’t Move Solely for Price

Having your advisor benchmark or shop the plan every two to three years is a smart governance practice. It can help you assess whether fees remain reasonable, whether your provider still fits your business, and whether the service model has kept pace with your needs.

But benchmarking is not the same as changing providers every time someone offers a lower fee.

Moving a 401(k) plan can involve:

Payroll and contribution-process changes.
Employee communications and education.
Blackout periods that temporarily limit participant transactions.
Data conversion and record reconciliation.
Mapping investment options.
Participant confusion or frustration.
Internal time from HR, payroll, leadership, and the provider team.

The DOL recognizes that plan sponsors should compare service providers carefully and consider services, compensation, conflicts, experience, litigation history, and the quality of professionals supporting the plan—not merely price.[dol][2]

This is a “get what you pay for” world. The least expensive option can be perfectly appropriate if it meets the plan’s needs and comes with capable service. But it can also shift administrative burden and fiduciary risk back to the business—where it costs time, creates distractions, and increases the chance of expensive mistakes.

A better framework is:

Benchmark cost and services every two to three years.
Evaluate participant outcomes such as enrollment, contribution rates, and usability.
Review fiduciary support including what your 3(16) and 3(38) providers actually accept.
Measure internal workload required of payroll, HR, and leadership.
Document the decision to retain, renegotiate, or replace the provider.

A provider change should be based on a full value assessment—not a race to the lowest line item.

The Bottom Line

A small-business 401(k) should help your employees build financial security without turning your company into a retirement-plan administration department.

The strongest plans typically have four things in common:

Clear fiduciary delegation, including thoughtful use of 3(16) and 3(38) services.
Transparent, reasonable fees that match the services and risk support provided.
A plan design—safe harbor or non-safe harbor—that fits the company’s cash flow and objectives.
A recurring process to review service, participation, compliance, costs, and employee experience.

Do not let a 401(k) become another item on the business owner’s “I’ll deal with that later” list. A proactive review now can help protect your company, reduce administrative headaches, and make the plan more valuable for the people who depend on it.

Ready to evaluate whether your 401(k) is providing the right value, support, and risk protection? Schedule a plan review with a qualified financial advisor and retirement-plan professional before your next plan year.

References