Structuring a Safe Harbor 401(k) Plan for a Small Business
A safe harbor 401(k) plan is a 401(k) plan in which the employer commits to a required contribution that vests on an IRS-set schedule. A plan that meets the safe harbor requirements is exempt from the annual Actual Deferral Percentage (ADP) and Actual Contribution Percentage (ACP) nondiscrimination tests that apply to traditional 401(k) plans, according to the IRS 401(k) plan overview.
Four decisions shape the plan (which contribution to promise, how it vests, when employees receive notice, and when the design can change). This guide is general information, not tax or legal advice. The IRS rules below are stated as of October 6, 2026.
What Is a Safe Harbor 401(k), and Why Do Small Employers Choose One?
The IRS says a safe harbor plan requires the employer to make either matching contributions or nonelective contributions each year, in exchange for the exemption above. The design is for employers of any size, per the IRS.
For owners in professional services, healthcare, construction, manufacturing, hospitality, and restaurants, the question is whether a predictable annual employer contribution is worth that exemption.
What Are the Safe Harbor Contribution Options, and How Does Each Work?
Four designs qualify.
Design
Required employer contribution
Who receives it
Vesting
Basic match
100% of the first 3% of pay deferred, plus 50% of the next 2%
Employees who defer
Immediate
Enhanced match
A formula at least as generous as the basic match at every deferral rate
Employees who defer
Immediate
Nonelective contribution
3% of pay
Each eligible employee, whether or not the employee defers
Immediate
QACA (qualified automatic contribution arrangement)
Automatic enrollment, plus either a match of 100% of the first 1% of pay deferred and 50% of the next 5%, or a 3% nonelective contribution
Employees who defer (match) or all participants (nonelective)
Full vesting by two years of service
Basic match. The same IRS page describes the formula as dollar for dollar up to 3 percent of compensation, plus 50 cents on the dollar above 3 percent and up to 5 percent, so an employee who defers 5 percent receives a match worth 4 percent of pay.
Enhanced match. Under 26 CFR 1.401(k)-3(c), an enhanced match can be any formula that provides at least as much as the basic match at every deferral rate, provided the match rate does not rise as the deferral rate rises. A dollar-for-dollar match up to 4 percent of pay is one of the regulation’s examples.
Nonelective contribution. The employer contributes 3 percent of compensation to each eligible employee’s account, with no deferral required, per the same IRS page. An employee earning $60,000 receives $1,800 whether or not the employee defers, while the basic match pays up to $2,400, and only to employees who defer.
QACA. A QACA adds automatic enrollment, so employees defer a default percentage unless they opt out or choose another amount. Per the IRS, the minimum default starts at 3 percent and rises each year an employee participates. The employer then makes either the QACA match shown above or a 3 percent nonelective contribution to all participants, including those who choose not to contribute.
How Does Vesting Work for Safe Harbor Contributions?
A safe harbor 401(k) plan must provide for employer contributions that are fully vested when made, per the IRS 401(k) plan overview. A QACA is the one variation, where employees must be 100 percent vested in the employer’s matching or nonelective contributions by two years of service, so the plan can use immediate vesting or a cliff of up to two years (IRS Publication 560 (2025)).
Is a Safe Harbor Notice Required, and When?
For a match design, yes. The employer must give each eligible employee written notice of the employee’s rights and obligations under the plan, and the IRS treats the notice as timely if it is provided at least 30 days and no more than 90 days before the start of each plan year, per the IRS notice snapshot.
The SECURE Act changed the rule for nonelective plans. For plan years beginning after December 31, 2019, the same IRS page says the safe harbor notice requirement for nonelective contributions is eliminated, though employees must still be able to make or change a deferral election at least once a year. A nonelective plan that also provides certain additional matching contributions can still need the notice, depending on how the match is structured (IRS Notice 2020-86, Q&A-4).
Can You Add or Change a Safe Harbor Mid-Year?
Generally, no. Safe harbor provisions must be adopted before the first day of the plan year and stay in effect for the full 12-month plan year (26 CFR 1.401(k)-3(e)). A newly established plan can have a short first plan year of at least three months.
The SECURE Act (Section 103) added a later option for nonelective designs. For plan years beginning after December 31, 2019, a plan sponsor can switch to a safe harbor plan with nonelective contributions before the 30th day before the end of the plan year. If the amendment provides a 4 percent nonelective contribution instead of 3 percent, it can be made any time before the last day of the following plan year, per the IRS mid-year changes page. Under Notice 2020-86, the option is unavailable if the plan provided safe harbor matching contributions at any time during that plan year.
For an existing plan, the same IRS page says mid-year changes are generally permitted if notice and election conditions are met and the change is not prohibited. Raising a nonelective contribution from 3 percent to 4 percent is one permitted example. Changing the type of safe harbor, narrowing the eligible employees, or increasing a match generally is not. Reducing or suspending safe harbor contributions is permitted only as the regulations describe.
How Does a Safe Harbor Plan Interact With Profit Sharing?
A profit-sharing contribution is discretionary, and the IRS notes that adding a salary deferral feature to a profit-sharing plan makes it a 401(k) plan. A safe harbor plan can also provide contributions that are not safe harbor contributions, according to Notice 2020-86, so an employer can pair the required contribution with a discretionary profit-sharing contribution, subject to other plan rules.
Only the required contributions carry the safe harbor vesting rule. For other employer contributions, the IRS vesting snapshot sets 100 percent vesting after three years of service, or gradual vesting that reaches 100 percent after six years, as the slowest schedules a plan can use. The IRS 401(k) plan overview says safe harbor plans with no additional contributions in a year are exempt from the top-heavy rules of section 416, so an employer adding a profit-sharing contribution should confirm with its plan administrator how those rules apply.
Adding a Payroll-Integrated 401(k) Plan
Asure 401(k) Plans are payroll-integrated retirement plans with automatic contributions through payroll, plan monitoring, required filings, and compliance support, designed to help smaller employers offer competitive benefits. They are sold as an add-on to AsureCentral, a unified payroll and HR platform with one login and personalized dashboards, with role-based access plus implementation and support. The offering fits small and mid-sized employers (typically owners and CFOs) looking to add or modernize a retirement plan with payroll integration.
Safe harbor provisions generally must be in the plan before the plan year begins, so confirm that any plan you consider supports the design you want. When you are ready to compare options, ask Asure about adding 401(k) Plans to AsureCentral. To go further, read How to Offer a 401(k) Plan to Employees.
