A safe harbor 401(k) trades a guaranteed employer contribution for relief from the annual ADP test on employee deferrals and, if the match is designed correctly, the ACP test on matching contributions. That trade is written into the Internal Revenue Code in two places: section 401(k)(12) for the traditional safe harbor and section 401(k)(13) for the qualified automatic contribution arrangement, or QACA.
Within those two sections there are four common designs: the basic match, the enhanced match, the 3% nonelective contribution, and the QACA versions of the match and nonelective. They are not interchangeable. They cost different amounts depending on who participates, vest differently, carry different notice obligations, and put different demands on the payroll system. This guide compares them from the point of view of the people who have to run them, not just the people who choose them.
A traditional 401(k) must pass the actual deferral percentage (ADP) test every year. The average deferral rate of highly compensated employees (HCEs) is compared with that of everyone else, and if the HCEs defer too much relative to the rank and file, the plan has to refund money to HCEs or make a corrective contribution. The matching contributions face a parallel actual contribution percentage (ACP) test.
For employers with a few well-paid owners or managers and a workforce that defers little, failing these tests is an annual event. The safe harbor solution is statutory: if the employer guarantees a minimum contribution to non-highly compensated employees (NHCEs), gives them full or nearly full vesting in it, and meets the notice rules, the plan is treated as passing the ADP test. Our 401(k) Plan Administration handbook covers the testing basics. This article is about choosing and operating the formula.
|
Design |
Statutory formula |
Vesting of safe harbor money |
Who receives it |
|
Basic match |
100% of deferrals up to 3% of pay, plus 50% of deferrals from 3% to 5% |
100% immediate |
NHCEs who defer |
|
Enhanced match |
Any formula at least as generous as the basic match at every deferral rate, with a rate that does not increase as deferrals increase |
100% immediate |
NHCEs who defer |
|
Nonelective |
At least 3% of pay |
100% immediate |
All eligible NHCEs, whether or not they defer |
|
QACA match |
100% of deferrals up to 1% of pay, plus 50% of deferrals from 1% to 6% |
Up to a 2-year cliff |
NHCEs who defer, in a plan with automatic enrollment |
|
QACA nonelective |
At least 3% of pay |
Up to a 2-year cliff |
All eligible NHCEs, in a plan with automatic enrollment |
The formulas above come directly from Code sections 401(k)(12)(B) and (C) and 401(k)(13)(D). Plans can be more generous than the minimum, and most plans give the same contribution to HCEs, but the statute only requires it for NHCEs.
The basic match is 100% of the first 3% of compensation deferred, plus 50% of the next 2%. An employee who defers 5% or more receives a 4% match. An employee who defers 2% receives 2%. An employee who defers nothing receives nothing.
The cost profile follows participation. If most NHCEs defer at least 5%, the plan pays close to 4% of NHCE payroll. If participation is low, the cost is low. This is the design most employers think of when they hear "safe harbor match."
The match is calculated on safe harbor compensation, which is the plan's definition of compensation under the regulations, not necessarily gross pay. The plan document controls what is included. If the document says the match is based on total compensation and the payroll system calculates it only on base salary, every participant who earns overtime, commissions or bonuses is being shorted, and the plan's safe harbor status is at risk. This compensation mismatch is the single most common safe harbor operating failure.
An enhanced match is any formula that gives at least as much as the basic match at every deferral rate, and whose matching rate does not increase as the employee's deferral rate increases. The most common version is 100% of the first 4% deferred, which gives the same 4% maximum as the basic match but is simpler to explain and compute. A 100% of the first 6% formula is also common and more generous.
To give the matching contributions their own relief from the ACP test, Code section 401(m)(11) adds three conditions:
A formula that matches deferrals up to 8% may still satisfy the ADP safe harbor, but it loses ACP safe harbor protection, and the plan has to run the ACP test. Matching up to 6% is where most plans stop for this reason.
The nonelective safe harbor is a contribution of at least 3% of compensation to every eligible NHCE, whether or not that employee defers anything. The cost is predictable and does not depend on participation: 3% of eligible NHCE pay.
That predictability is the main attraction. It is also often more expensive than a match when participation is low, because every eligible employee receives it. On the other hand, it can be counted toward a profit-sharing allocation and is frequently paired with a new comparability or cross-tested profit-sharing formula, which is outside the scope of this article but is a common reason sponsors choose it.
Two changes made the nonelective design more flexible.
No annual safe harbor notice. Under Code section 401(k)(12)(A), a match-based safe harbor must meet the contribution requirements and the notice requirement in section 401(k)(12)(D). A nonelective safe harbor only has to meet the contribution requirement. The annual safe harbor notice is therefore no longer required to secure ADP relief for a nonelective design. There is one important catch: if the plan also provides matching contributions and wants ACP safe harbor treatment for them, section 401(m)(11) still requires the 401(k)(12)(D) notice.
Mid-year adoption. Under section 401(k)(12)(F), a plan can be amended after the plan year begins to adopt the nonelective safe harbor for that year:
This retroactive option is not available for a plan year in which the plan provided a safe harbor match at any time. For employers that suspect late in the year that they will fail the ADP test, it can be a cheaper fix than refunds to HCEs.
A qualified automatic contribution arrangement combines automatic enrollment with a slightly cheaper safe harbor contribution and a longer vesting schedule.
Under section 401(k)(13)(C), each eligible employee is treated as having elected to defer a qualified percentage of compensation unless they opt out or choose a different rate. The qualified percentage must be applied uniformly and must be at least:
The percentage cannot exceed 15%, or 10% during that initial period. The 15% ceiling reflects the SECURE Act change. The payroll system has to track each employee's automatic escalation date individually, because the schedule depends on when that employee's automatic deferrals started, not on the plan's start date.
This is the QACA's main financial advantage. The safe harbor contributions can be subject to vesting, provided any employee with at least 2 years of service is 100% vested. Employees who leave before two years forfeit the QACA contributions, which reduces the effective cost for employers with high early turnover. Traditional safe harbor contributions, by contrast, must be fully vested immediately.
The QACA notice has to explain the employee's right to opt out or choose a different rate, how contributions are invested if the employee makes no investment election, and give the employee a reasonable period after receiving the notice and before the first automatic deferral to make an election.
For designs that require the safe harbor notice, the regulations under section 1.401(k)-3(d) treat the timing requirement as satisfied if the notice is given at least 30 days and no more than 90 days before the beginning of each plan year. For a calendar-year plan, that window runs from early October to early December. An employee who becomes eligible mid-year must receive the notice no more than 90 days before becoming eligible and no later than the eligibility date.
The common failure is not the annual mailing. It is the new hire who becomes eligible in April and never receives the notice because the onboarding workflow does not include it.
Safe harbor contributions can be calculated annually or per payroll period. If the plan calculates the safe harbor match per payroll period (or per month or quarter), regulation section 1.401(k)-3(c)(5)(ii) requires the match on deferrals made during a plan year quarter to be contributed by the last day of the following plan year quarter.
Two consequences for payroll:
Yes, but only within the rules of regulation section 1.401(k)-3(g). A plan may be amended mid-year to reduce or suspend safe harbor matching or nonelective contributions only if:
Contributions already earned through the effective date of the amendment must still be made. Payroll has to stop the safe harbor calculation on exactly the right pay date, which is a configuration change worth testing in a parallel run.
Code section 416(g)(4)(H) provides that a plan consisting solely of a safe harbor cash or deferred arrangement and safe harbor matching contributions is not treated as top-heavy. The word "solely" does a lot of work. A profit-sharing contribution, a match that exceeds the ACP safe harbor limits, or other employer money added to the plan can bring the top-heavy rules back into play. A plan that becomes top-heavy may owe a minimum contribution to non-key employees.
|
Factor |
Basic or enhanced match |
3% nonelective |
QACA |
|
Cost when participation is low |
Lower |
Higher |
Lower |
|
Cost certainty |
Varies with deferrals |
Fixed percentage of NHCE pay |
Varies with deferrals (match version) |
|
Vesting |
Immediate |
Immediate |
Up to 2-year cliff |
|
Annual safe harbor notice |
Required |
Not required for ADP relief |
QACA notice required |
|
Mid-year adoption |
No |
Yes, with limits |
Nonelective version yes, with limits |
|
Payroll complexity |
Moderate |
Low |
Highest (auto-enroll and escalation) |
Some practical rules of thumb:
New 401(k) plans also need to account for SECURE 2.0's mandatory automatic enrollment rules under Code section 414A, which apply to arrangements established after the law's enactment unless an exception applies, such as for businesses in existence less than three years, governmental and church plans, and small employers. A plan subject to 414A will have automatic enrollment regardless of whether it chooses a QACA, so confirm with the plan's document provider how the two sets of rules interact for your plan.
Whatever design is chosen, payroll needs to confirm:
Small configuration errors here are not small in effect. Pre-tax deductions that are miscoded show up across the whole workforce, as explained in our guide to pre-tax vs. post-tax deductions. For the full operational picture, see payroll and retirement plans.
A safe harbor match is an employer matching contribution that meets the formula in Code section 401(k)(12)(B), together with the required annual notice, so the 401(k) plan is treated as passing the ADP nondiscrimination test. The basic formula is 100% of deferrals up to 3% of pay plus 50% of deferrals from 3% to 5%, for a maximum of 4%. Enhanced formulas that are at least as generous at every deferral rate also qualify. Safe harbor matching contributions must be fully vested immediately.
A match goes only to employees who defer, and the cost depends on how much they defer. A nonelective contribution of at least 3% of pay goes to every eligible non-highly compensated employee whether or not they defer, so the cost is predictable but often higher when participation is low. The nonelective design no longer requires the annual safe harbor notice for ADP relief and can be adopted mid-year within statutory limits. A match-based plan cannot be adopted mid-year.
A qualified automatic contribution arrangement is a safe harbor 401(k) with automatic enrollment. Employees are enrolled at a qualified percentage that starts at least at 3% and escalates to at least 6% by the fourth plan year, capped at 15% (10% initially). The employer contributes either a QACA match of 100% of the first 1% plus 50% of the next 5% (maximum 3.5%) or a 3% nonelective contribution. QACA contributions can be subject to a vesting schedule of up to two years.
Not under a traditional safe harbor design. Basic, enhanced and nonelective safe harbor contributions under section 401(k)(12) must be 100% vested immediately. Under a QACA, the safe harbor contributions can be subject to vesting as long as an employee with at least two years of service is fully vested. Any additional employer contributions beyond the safe harbor amount, such as a discretionary profit-sharing contribution, can follow the plan's normal vesting schedule.
For designs that require it, the regulations treat the timing as satisfied if the notice is given at least 30 and no more than 90 days before the start of the plan year. For a calendar-year plan, that is between early October and early December. Employees who become eligible during the year must receive it no more than 90 days before, and no later than, their eligibility date. The nonelective safe harbor does not require the notice for ADP relief.
Yes, under regulation section 1.401(k)-3(g), but only if the employer is operating at an economic loss or the safe harbor notice warned that contributions could be reduced or suspended. Employees must receive a supplemental notice, the change can take effect no earlier than 30 days after that notice, employees must be allowed to change their deferrals, and the plan must pass the ADP test for the whole year. Contributions earned before the effective date must still be made.
Choosing a safe harbor design is a one-time decision. Running it correctly is a payroll job every pay period, from the compensation definition to the deposit date. The 401(k) Training and Certification Program is built for the people who carry that operational load, and the 401(k) Procedures Manual and e-Alerts adds a standing procedures reference.

