How to Set Up a Small Business HSA: HDHP, Payroll, and Penalties

Setting up an HSA for a small business comes down to five moving parts: an IRS-qualified High Deductible Health Plan, a custodian to hold the accounts, pre-tax payroll deductions, a contribution structure that doesn’t trip the comparability rule, and clean year-end reporting. There’s no minimum headcount. Do it right and contributions, growth, and qualified withdrawals all escape tax at the federal level.

Start With a Qualifying HDHP

Nothing else works if the health plan doesn’t meet the IRS definition of an HDHP. For 2026, self-only coverage needs a deductible of at least $1,700 and an out-of-pocket cap no higher than $8,500. Family coverage needs a deductible of at least $3,400 and an out-of-pocket cap no higher than $17,000. Premiums don’t count toward the out-of-pocket ceiling. These thresholds are set by Rev. Proc. 2025-19 and are indexed each year.1Internal Revenue Service. Rev. Proc. 2025-19

When you talk to a broker, say up front that you need an HSA-compatible HDHP. Most major insurers carry at least one. Get the confirmation in writing on the plan documents. A plan that looks high-deductible can still disqualify itself by covering services before the deductible outside the narrow preventive-care exceptions the IRS allows.

Confirm Who’s Actually Eligible

Enrollment in your HDHP isn’t the whole test. Eligibility is checked month by month. On the first day of any month an employee wants to contribute, they must be covered by your HDHP, carry no disqualifying other coverage (a spouse’s low-deductible plan, a general-purpose FSA), not be enrolled in any part of Medicare, and not be claimed as a dependent on someone else’s return.2Internal Revenue Service. Individuals Who Qualify for an HSA

You aren’t expected to audit a spouse’s coverage, but you should have employees certify their eligibility at enrollment. If an employee picks up disqualifying coverage or drops off the HDHP mid-year, stop the deductions the same pay period.

One coordination point catches employers who already run an FSA. A general-purpose FSA blocks HSA eligibility, but a Limited-Purpose FSA (dental and vision only) does not. For 2026, the limited-purpose FSA limit is $3,400. If you already offer an FSA, converting it to limited-purpose is one of the first items on the rollout checklist.

Choose an HSA Custodian

HSA funds have to sit with a qualified custodian: a bank, credit union, insurance company, or specialized HSA administrator. The custodian opens and holds each employee’s individual account. When you compare options, look at three things:

  • Fees. Monthly maintenance, investment fees, debit card charges, paper statement fees. Small per-account amounts scale quickly across a workforce.
  • Investment options. Some custodians offer a plain savings account and nothing more. Others open up mutual funds once a balance threshold is met. Employees using the HSA as long-term savings care about this.
  • Payroll integration. The custodian should accept contribution files in a format your payroll system can actually produce. Manual uploads create errors.

Once you pick one, you’ll sign a service agreement that spells out your submission role and the custodian’s account and tax-reporting responsibilities. You provide the EIN and company contact information; the custodian handles the individual account openings, which keeps the paperwork off your HR desk.

Set the Contribution Structure

For 2026, the combined annual limit from employer and employee together is $4,400 for self-only HDHP coverage and $8,750 for family coverage.1Internal Revenue Service. Rev. Proc. 2025-19 Employees 55 and older can add $1,000 as a catch-up.3Internal Revenue Service. HSA Contribution Limits

Employee contributions made through payroll deduction come out before federal income tax, Social Security, and Medicare. That FICA piece is the part employers often miss. A traditional IRA deduction only shelters income tax; HSA payroll deductions shelter FICA on both sides. An employee earning $60,000 who contributes $4,400 saves roughly $337 in FICA, and the employer saves the same amount.4Voya. The Undervalued Benefit of HSA Programs Employers and Employees May Be Missing: FICA Savings

Employer contributions are deductible as a business expense and excluded from the employee’s gross income. You have flexibility on the design: a flat dollar amount per employee, a match up to a cap, or nothing at all. Many small businesses start with a modest employer contribution to blunt the sticker shock of a higher deductible, which is the most common employee objection when switching to an HDHP.

The Comparability Rule

If you make employer contributions outside a cafeteria plan, the IRS comparability rule kicks in. Every eligible employee in the same coverage category has to get the same dollar amount, or the same percentage of the HDHP deductible. You test self-only and family separately, so different amounts across those two groups are fine, but within a group everyone gets the same deal.5eCFR. 26 CFR 54.4980G-4 – Calculating Comparable Contributions

Break the rule and you owe a 35% excise tax on every dollar the company contributed to any employee’s HSA that calendar year, not just the unequal portion.6Office of the Law Revision Counsel. 26 U.S. Code 4980G – Failure of Employer to Make Comparable Health Savings Account Contributions Two safe paths: contribute an identical flat dollar amount for each coverage tier, or route contributions through a Section 125 cafeteria plan.

The Cafeteria Plan Route

Employer HSA contributions running through a Section 125 cafeteria plan are not subject to the comparability rule.7eCFR. 26 CFR 54.4980G-5 – HSA Comparability Rules and Cafeteria Plans and Waiver of Excise Tax That opens up matching, tiered contributions by salary band, and different amounts for different employee classes without the 35% risk. The trade is Section 125 nondiscrimination testing, which checks that highly compensated and key employees aren’t getting a disproportionate share. In most small businesses that testing is easier to pass than the rigid comparability standard. A cafeteria plan needs a formal written plan document; a benefits attorney or a third-party administrator can draft it.

Enroll Employees and Configure Payroll

Enrollment usually rides on your annual open enrollment window, plus new-hire events. The custodian supplies account-opening forms; employees fill in personal information and beneficiary designations; HR sends the forms through the custodian’s portal.

Each employee also elects a payroll deduction. This is where setup goes wrong most often. The payroll system has to code HSA deductions as pre-tax. Code them post-tax and the employee loses the FICA savings and has to reclaim the deduction on their personal return. Whoever configures the payroll software needs to know the difference. After each pay run, you send the withheld amounts to the custodian with a file that allocates each dollar to the right employee account.

Tell employees plainly that the HSA is theirs. If they leave, the account and everything in it goes with them. That’s the opposite of an FSA, where forfeited funds can revert to the employer. Portability is often what turns skeptical employees toward the HDHP.

Handle Year-End Reporting

Three reporting streams run once a year. Two of them aren’t your job, but employees will ask.

On the W-2, you report each employee’s total HSA contributions in Box 12 with Code W. That figure combines employer contributions and employee pre-tax payroll deductions. Any employer contributions that aren’t excludable from income also flow through Boxes 1, 3, and 5.8Internal Revenue Service. 2026 General Instructions for Forms W-2 and W-3 Contributions the employee makes directly to the custodian outside of payroll don’t belong in Box 12.

The custodian issues Form 5498-SA showing total contributions for the year9Internal Revenue Service. Form 5498-SA – HSA, Archer MSA, or Medicare Advantage MSA Information and Form 1099-SA for distributions.10Internal Revenue Service. Instructions for Forms 1099-SA and 5498-SA Both copies go to the employee and the IRS.

Each employee then files Form 8889 with their personal return. That form calculates any deduction for direct contributions, reports distributions, and flags whether withdrawals were qualified medical expenses.11Internal Revenue Service. Form 8889 – Health Savings Accounts (HSAs)

Penalties Worth Watching

Three penalties cover most of what goes wrong.

Non-qualified distributions are added to the employee’s taxable income and hit with an additional 20% tax. The 20% goes away at age 65, or on disability or death, though the income tax remains. Qualified medical expenses cover medical care for the account holder, spouse, and dependents that insurance doesn’t reimburse. Employees can pay out of pocket now and reimburse themselves from the HSA later, so long as the expense occurred after the account was opened.12Internal Revenue Service. Publication 969 – Health Savings Accounts and Other Tax-Favored Health Plans

Excess contributions carry a 6% excise tax for every year the excess sits in the account. The fix is to pull the excess plus any earnings on it before the tax filing deadline. This usually goes wrong when employer and employee contributions aren’t tracked against a single combined cap, or when an employee changes jobs mid-year and contributes through two employers.

The comparability penalty is the big one for employers: 35% of every dollar of employer HSA contributions for the year if you contribute outside a cafeteria plan and get the math wrong.6Office of the Law Revision Counsel. 26 U.S. Code 4980G – Failure of Employer to Make Comparable Health Savings Account Contributions Keep it a single flat amount per coverage tier and this stays out of your way.

State Tax Boundary

The triple federal tax advantage doesn’t fully carry over in California or New Jersey. Those two states don’t recognize HSA tax benefits: employee contributions aren’t deductible on the state return, and interest or investment gains inside the account are taxable state income. The federal benefit is unchanged. If you operate in either state, say so plainly in your open enrollment communications so employees aren’t surprised in April.