What Is a Safe Harbor 401(k)? How It Avoids ADP/ACP Testing

9/20/2026

A safe harbor 401(k) is a 401(k) plan that commits the employer to a specific, fully vested contribution for rank-and-file employees. In exchange, the plan is treated as passing the annual nondiscrimination tests on employee deferrals (the ADP test) and, if the match is designed correctly, on matching contributions (the ACP test). In many cases it is also exempt from the top-heavy rules.

That trade is the whole point. A traditional 401(k) plan has to prove every year that highly compensated employees did not defer disproportionately more than everyone else. When a plan fails, the fix usually lands on the owners and managers: refunds of their own deferrals, reported as taxable income. A safe harbor plan buys certainty. Highly compensated employees can defer up to the annual limit without waiting for test results.

The cost is real, and so is the administration. This guide covers what safe harbor buys, what it costs, the contribution formulas, the notice requirement, and the mid-year rules as changed by the SECURE Act. A separate guide compares the contribution formulas in more depth; this one explains how the design works.

The Problem Safe Harbor Solves

The ADP test

Every traditional 401(k) plan must pass the actual deferral percentage (ADP) test each year. The plan calculates each eligible employee's deferrals as a percentage of compensation, averages the percentages for highly compensated employees (HCEs) and for non-highly compensated employees (NHCEs), and compares the two averages. The HCE average can exceed the NHCE average only by a limited margin.

The ACP test does the same for employer matching contributions and after-tax employee contributions.

For 2026, the compensation threshold used to identify HCEs is $160,000 (IRS Notice 2025-67). Anyone who owned more than 5% of the employer in the current or prior year is also an HCE regardless of pay. The compensation test looks back to the prior year's pay, so the census payroll sends for testing needs both years.

What a failure costs

When the test fails, the plan typically corrects by refunding excess contributions to HCEs, or by making additional employer contributions for NHCEs. Refunds made within 2½ months after the end of the plan year avoid a 10% excise tax on the employer; the outside deadline for correction is the end of the following plan year. The refunds are taxable to the HCEs and are reported on Form 1099-R.

The underlying cause is usually participation, not plan design. If lower-paid employees defer little, the plan fails no matter how the document is written. Small and mid-sized employers with a few well-paid owners are the classic case, and safe harbor is the classic answer.

What a Safe Harbor 401(k) Buys

When the plan meets the safe harbor requirements for the full plan year:

ADP testing does not apply. The plan is deemed to satisfy the ADP test for employee deferrals.
ACP testing does not apply to the safe harbor match, and to additional matching contributions designed within the ACP safe harbor limits (matches only on deferrals up to 6% of compensation, a rate of match that does not increase as deferrals increase, and, for a discretionary match, a cap of 4% of compensation).
Top-heavy relief. A plan consisting solely of deferrals and safe harbor contributions is exempt from the top-heavy rules. Add a discretionary profit-sharing contribution, or allow forfeitures to be allocated, and the plan can lose that exemption for the year. The top-heavy minimum contribution then becomes a live question again.

What safe harbor does not buy:

Coverage testing under Code section 410(b) still applies.
Annual limits on deferrals ($24,500 in 2026, plus catch-up) and annual additions still apply, as does the compensation limit ($360,000 for 2026).
Profit-sharing allocations still need their own nondiscrimination testing, particularly new comparability designs.
Operational compliance is unchanged. Late deposits, the wrong compensation definition, or missed deferral elections are failures in a safe harbor plan just as in any other.

The Safe Harbor Contribution Options

There are two families of safe harbor plan: the traditional safe harbor under Code section 401(k)(12) and the automatic-enrollment version, the qualified automatic contribution arrangement (QACA), under section 401(k)(13).

Design	Required employer contribution	Vesting
Traditional basic match	100% of deferrals up to 3% of pay, plus 50% of deferrals from 3% to 5% of pay	100% immediate
Traditional enhanced match	At least as generous as the basic match at every deferral level, no match on deferrals above 6% of pay	100% immediate
Traditional nonelective	3% of pay for every eligible NHCE, whether or not they defer	100% immediate
QACA match	100% of deferrals up to 1% of pay, plus 50% of deferrals from 1% to 6% of pay	May require up to 2 years of service
QACA nonelective	3% of pay for every eligible NHCE	May require up to 2 years of service

A common enhanced match is 100% of deferrals up to 4% of pay. It is simpler to communicate and to program than the basic two-tier formula, and costs the same for an employee who defers 5% or more.

The QACA trade-off. A QACA must automatically enroll eligible employees at a default deferral rate that starts at no less than 3% and escalates each year to at least 6%. The SECURE Act raised the maximum default rate after the first year to 15%. In return, the QACA match is cheaper at the top end (3.5% of pay for an employee deferring 6%, against 4% under the basic match) and the employer may require up to two years of service for vesting. Payroll has to run automatic enrollment and annual escalation without error, and missed automatic enrollments are among the most common operational failures in any plan.

Match vs. nonelective, in cost terms. The nonelective contribution goes to every eligible NHCE, including those who never defer. The match goes only to those who defer. In a workforce with low participation the match is cheaper. In a workforce with high participation the costs converge, and the nonelective design wins on flexibility, for the reasons covered under mid-year rules below.

What Safe Harbor Costs Beyond the Contribution

Immediate vesting (outside a QACA) means no forfeitures on safe harbor money. Employers used to recycling forfeitures from short-tenure employees lose that offset.

No mid-year exit without conditions. Safe harbor status is generally a commitment for the full plan year. The rules for reducing or suspending it are narrow (see below).

Compensation discipline. Safe harbor contributions must be calculated on a compensation definition that satisfies the nondiscrimination rules of Code section 414(s). A plan that excludes bonuses or overtime from compensation for safe harbor purposes may fail that requirement, and the plan's definition must match the payroll system's actual calculation. Our 401(k) plan administration handbook explains why compensation-definition mismatches are the defect that runs longest unnoticed.

Match timing. If the plan calculates the safe harbor match per payroll period rather than annually, the regulations require those contributions to be deposited no later than the end of the following plan year quarter. A plan that matches per payroll period but has not set payroll up to apply a year-end true-up may underpay employees whose deferrals are uneven across the year. Whether a true-up is required is a plan document question.

The Safe Harbor Notice

Who still needs a notice

The notice requirement is where most safe harbor plans run into operational trouble, and where the SECURE Act changed the rules for plan years beginning after December 31, 2019.

Safe harbor match plans (traditional and QACA) must give each eligible employee a written notice describing the safe harbor contribution, other contributions, the plan's withdrawal and vesting rules, and how to make or change deferral elections. Under Treasury Regulation section 1.401(k)-3(d), the timing is deemed satisfied if the notice is given at least 30 and no more than 90 days before the start of each plan year. Newly eligible employees must receive it within a reasonable period before they become eligible.

Safe harbor nonelective plans no longer have a safe harbor notice requirement under section 401(k)(12)(D) or 401(k)(13)(E). IRS Notice 2020-86 explains the limits of that change:

A traditional nonelective plan that also provides a matching contribution designed to be exempt from ACP testing still has to satisfy the notice requirement for the ACP safe harbor.
QACAs still have the automatic-enrollment notice obligations that come with automatic enrollment, and a plan permitting 90-day withdrawals of automatic contributions still needs the section 414(w) notice.
Every 401(k) plan must still give employees an effective opportunity to make or change a deferral election at least once a year, which in practice requires some form of notice of the right to defer.
An employer that wants to keep the option of reducing or suspending nonelective contributions mid-year must have said so in advance, in a notice that otherwise meets the safe harbor notice content rules.

In practice, many nonelective plans continue to send a notice every year for those reasons.

Why notices fail

The usual failures are not the annual mailing. They are new hires and rehires who become eligible mid-year and never receive the notice, and notices that describe a formula different from the one payroll actually runs. Tie notice delivery to the eligibility event in the HR system, not to a once-a-year calendar entry.

Mid-Year Rules After the SECURE Act

Adding safe harbor mid-year

Under the rules added by SECURE Act section 103 (Code sections 401(k)(12)(F) and 401(k)(13)(F)), a plan can be amended after the plan year begins to adopt the safe harbor nonelective design for that year:

If the amendment is adopted before the 30th day before the end of the plan year, the nonelective contribution is the usual 3%.
After that point, the plan can still be amended, up to the last day for distributing excess contributions for the year (generally the end of the following plan year), if the nonelective contribution is at least 4% of compensation for all eligible employees.
Either way, the plan must not have provided a safe harbor match at any time during that plan year.

This makes the nonelective design a powerful late-year option. A sponsor that sees an ADP failure coming in the fall can convert the plan to safe harbor for the whole year instead of issuing refunds to HCEs. The cost is a contribution for every eligible NHCE for the whole year, so the comparison should be made with real census numbers.

There is no equivalent retroactive option for the safe harbor match. A match design must be in place, with notice, before the year starts.

Reducing or suspending safe harbor contributions mid-year

The regulations allow a mid-year reduction or suspension of safe harbor contributions only if:

The employer is operating at an economic loss for the year, or the safe harbor notice for the year said in advance that the plan may be amended mid-year to reduce or suspend contributions and that the change would not take effect until at least 30 days after notice;
All eligible employees receive a supplemental notice;
The reduction takes effect no earlier than the later of the amendment date or 30 days after the supplemental notice;
Employees get a reasonable opportunity to change their deferral elections before it takes effect; and
The plan is amended to require the ADP test (and ACP test, if relevant) for the entire plan year, using the current-year testing method.

Safe harbor contributions are still owed for compensation up to the effective date of the change. And the plan loses safe harbor protection for the year, which means it is back to testing, including top-heavy.

Other mid-year changes

The IRS treats most mid-year changes to a safe harbor plan as impermissible. Its published examples include narrowing the group of employees eligible for safe harbor contributions, switching between traditional and QACA designs, and increasing the QACA vesting service requirement. A change that adds or increases a matching formula has additional notice and timing conditions. Anything mid-year belongs in a conversation with the TPA and plan counsel before it is announced to employees.

Is Safe Harbor Right for Your Plan?

Safe harbor tends to fit when:

The plan has failed, or nearly failed, the ADP test in recent years, and corrective refunds to owners or managers are a recurring irritant.
The plan is top-heavy or close to it, which is common in small employers where owners hold a large share of plan assets.
The employer already contributes something close to a safe harbor match, so the incremental cost is small.
HCEs want certainty that they can defer the maximum.

It is a harder sell when the workforce is large and lower-paid with low participation (a nonelective contribution would be expensive), when the employer depends on forfeitures or longer vesting to retain staff, or when the plan already passes testing comfortably.

Frequently Asked Questions

What is a safe harbor 401(k) plan?

A safe harbor 401(k) is a 401(k) plan in which the employer commits to a required contribution, either a matching contribution or a nonelective contribution of at least 3% of pay, that is fully vested (or vested within two years in a QACA). In exchange, the plan is treated as satisfying the ADP nondiscrimination test on employee deferrals, and the ACP test on matching contributions that meet the design limits. A plan consisting only of deferrals and safe harbor contributions is also exempt from the top-heavy rules.

How much does an employer have to contribute to a safe harbor 401(k)?

There are three main options. The basic match is 100% of deferrals up to 3% of pay plus 50% of deferrals between 3% and 5%, a maximum of 4% of pay. An enhanced match must be at least that generous at every level and cannot match deferrals above 6% of pay. The nonelective option is 3% of pay for every eligible non-highly compensated employee, whether or not they defer. Under a QACA, the match is 100% of the first 1% plus 50% of deferrals from 1% to 6%.

Does a safe harbor 401(k) still need a safe harbor notice?

Safe harbor match plans do. The notice is deemed timely if given 30 to 90 days before the plan year, and new eligibles must get it before they become eligible. The SECURE Act eliminated the safe harbor notice requirement for plans using the nonelective contribution. Many still send one anyway: to keep the option of suspending contributions mid-year, to support an ACP-exempt match, to meet automatic-enrollment notice rules, and because every plan must give employees an effective opportunity to make deferral elections.

Can you add safe harbor to a 401(k) plan mid-year?

Only with the nonelective design. Since the SECURE Act, a plan can be amended to adopt the 3% nonelective safe harbor for the current year if the amendment is adopted before the 30th day before the plan year ends. After that, it can still be adopted, up to the end of the following plan year, if the contribution is at least 4% of pay. Neither option is available if the plan provided a safe harbor match at any point during the year.

Is a safe harbor 401(k) exempt from top-heavy testing?

Only if the plan consists solely of employee deferrals and safe harbor contributions for the year. Adding a discretionary profit-sharing contribution, or allocating forfeitures as an additional employer contribution, can take the plan back into the top-heavy rules. If the plan is then top-heavy, non-key employees may be owed a minimum contribution. The safe harbor contribution can usually be counted toward that minimum. Confirm the treatment with your TPA before approving any extra employer contribution.

Can an employer stop safe harbor contributions during the year?

Yes, but only under strict conditions. The employer must be operating at an economic loss or have reserved the right in the year's notice. Employees must receive a supplemental notice at least 30 days before the change, with a chance to change their deferral elections. The plan must be amended to run the ADP test (and ACP test where relevant) for the full year. Contributions are still owed for pay through the effective date, and the plan loses safe harbor protection for that year.

Running a Safe Harbor Plan Correctly

Safe harbor removes a test. It does not remove the work: eligibility tracking, notices tied to hire and rehire dates, a compensation definition that matches the payroll setup, and matching contributions calculated and deposited on the plan's schedule. The 401(k) Training and Certification Program covers 401(k) plan administration for payroll and HR professionals, and the 401(k) Procedures Manual and e-Alerts adds an ongoing desk reference. For this year's deferral and catch-up figures, see retirement plan contribution limits for 2026, and for the broader payroll picture, Payroll and Retirement Plans.

Plan documents control. Confirm any design or mid-year change with your plan's TPA or counsel before you announce it to employees.