A safe harbor 401(k) is a plan design that skips the annual ADP and ACP nondiscrimination tests in exchange for a fixed employer contribution, immediate (or near-immediate) vesting, and an advance written notice to employees. The safe harbor 401(k) rules live in Internal Revenue Code Section 401(k)(12), with a second version tied to automatic enrollment in Section 401(k)(13). Meet the contribution, vesting, notice, and distribution requirements, and the plan is automatically deemed to pass the two tests that most often trip up small-employer 401(k)s.1Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(12)(A)
The relief is narrow but valuable. Safe harbor status covers the Actual Deferral Percentage test on employee deferrals and the Actual Contribution Percentage test on employer matches. It does not exempt the plan from coverage rules, the annual compensation cap ($360,000 for 2026), or other general qualification requirements.2Internal Revenue Service. 2026 Amounts Relating to Retirement Plans and IRAs, as Adjusted for Changes in Cost-of-Living
The Employer Contribution Formulas
The employer picks one contribution formula for the plan year and commits to it in advance. Under the traditional safe harbor in Section 401(k)(12), there are three options.
3% Nonelective Contribution
The employer contributes at least 3% of each eligible employee’s compensation, whether or not the employee defers anything.3Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(12)(C) It’s the simplest design because there’s no need to track individual deferral rates. An employee earning $80,000 gets $2,400 deposited regardless of what they do.
Basic Match
The employer matches 100% of deferrals on the first 3% of pay, plus 50% on the next 2%.4Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(12)(B) An employee deferring at least 5% receives a match equal to 4% of pay. Someone deferring 2% gets a 2% match. The employer’s cost scales with participation, which usually makes the basic match cheaper than the 3% nonelective at low participation rates and more expensive when most employees defer 5% or more.
Enhanced Match
An enhanced match uses a different formula that is at least as generous as the basic match at every deferral level. The match rate cannot rise as the deferral rate rises, and the match cannot apply to deferrals above 6% of pay. A common enhanced design is dollar-for-dollar on the first 4% of compensation.5Internal Revenue Service. 401(k) Plan Fix-It Guide – 401(k) Plan Overview
Under any matching formula, the match rate for a highly compensated employee cannot exceed the match rate for a non-HCE at the same deferral level. Give executives a richer match than the rank and file and the plan loses safe harbor status.6Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(12)(B)(ii)
How Compensation Is Defined
Safe harbor contributions must use a definition of compensation that satisfies IRC Section 414(s). The most common qualifying definition is total compensation under Section 415(c)(3), which covers wages, salary, and other earned income. A narrower definition is permitted, but it cannot be structured to systematically shortchange non-highly compensated employees, and whatever definition the plan adopts must apply uniformly.7Internal Revenue Service. Compensation Definition in Safe Harbor 401(k) Plans
Vesting and Distribution Restrictions
Under the traditional safe harbor, employer contributions must be 100% vested the moment they hit the account. There is no forfeiture if the employee leaves the next week.8Internal Revenue Service. Issue Snapshot – Vesting Schedules for Matching Contributions Immediate vesting is a hard requirement for traditional safe harbor status. QACA contributions are the exception and can use a two-year cliff schedule.
Safe harbor contributions also cannot be distributed to a participant except on a defined event:
- Separation from employment
- Death or disability
- Reaching age 59½
- Plan termination
These restrictions mirror the rules for elective deferrals under Section 401(k)(2)(B).
The Annual Safe Harbor Notice
Every eligible employee must receive a written notice before each plan year. Skip it or send it late and the plan can lose safe harbor status for the whole year.
Timing
The notice must reach employees at least 30 days, but no more than 90 days, before the start of the plan year.9Internal Revenue Service. Notice Requirement for a Safe Harbor 401(k) or 401(m) Plan For a calendar-year plan, that window runs from roughly October 3 through December 2 of the prior year. New hires who become eligible after the year starts must get the notice within a reasonable period before their eligibility date.
Content
The notice has to explain, in language an average employee can understand, the specific safe harbor formula being used, how to make or change deferral elections, eligibility rules, and the vesting and distribution restrictions on safe harbor contributions.10Internal Revenue Service. Summary of Plan Requirements Under Notice 98-52 Any other employer contributions offered under the plan must also be described.
Missed or Late Notices
A missed notice is an operational failure, not a paperwork slip the employer can shrug off by running the ADP test instead. If the missing notice caused an employee to be excluded from deferring, the employer must contribute 50% of the missed deferral opportunity, calculated as the greater of 3% of pay or the maximum deferral that would have received a full match, plus any missed matching contribution adjusted for investment gains.11Internal Revenue Service. Fixing Common Plan Mistakes – Failure to Provide a Safe Harbor 401(k) Plan Notice If the employee otherwise knew about the plan and could have deferred, no corrective contribution is required, but the procedural failure still needs to be fixed.
The QACA Alternative
The Qualified Automatic Contribution Arrangement, added by Section 401(k)(13), is a second safe harbor that trades a lower employer match for mandatory automatic enrollment. Employees are enrolled at a default deferral rate of at least 3% that escalates by at least one percentage point each year until it reaches at least 6%, capped at 10% during the first full plan year and 15% afterward. Employees can opt out or pick a different rate at any time.12Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(13)(C)
The QACA basic match is 100% on the first 1% of pay plus 50% on the next 5%, for a maximum of 3.5% when the employee defers at least 6%. The employer can instead use the same 3% nonelective contribution available under the traditional safe harbor, or an enhanced match that is at least as generous as the QACA basic match at every deferral level.13Office of the Law Revision Counsel. 26 USC 401 – Section 401(k)(13)(D) QACA employer contributions can use a two-year cliff vesting schedule rather than immediate vesting.5Internal Revenue Service. 401(k) Plan Fix-It Guide – 401(k) Plan Overview
The SECURE 2.0 Act of 2022 requires most 401(k) plans established on or after December 29, 2022 to include automatic enrollment. Businesses in operation less than three years, employers with ten or fewer normal employees, and sponsors of governmental, church, or SIMPLE plans are exempt. Plans in existence before that date are grandfathered. For employers already subject to the auto-enrollment mandate, a QACA satisfies both the mandate and the safe harbor testing relief in one design.
Mid-Year Changes and Late Adoption
Safe harbor is generally a full-year commitment made before the plan year starts, but there are two openings.
Adopting the Nonelective Safe Harbor Late
An employer that didn’t set the plan up as safe harbor at the start of the year can adopt the 3% nonelective contribution retroactively, as long as the plan is amended before the 30th day prior to the end of the plan year. For a calendar-year plan, that deadline lands in early December. Bump the nonelective to 4% and the amendment can be adopted any time before the last day of the following plan year.14Internal Revenue Service. Mid-Year Changes to Safe Harbor Plans or Safe Harbor Notices This is the usual rescue when it becomes clear late in the year that the plan will fail ADP or ACP testing.
Suspending Safe Harbor Contributions Mid-Year
An employer already running as safe harbor can suspend contributions mid-year only under limited conditions. Either the annual notice must have reserved the right to reduce or suspend contributions, or the employer must be operating at an economic loss for the plan year. A supplemental notice has to go out at least 30 days before the suspension, explaining the change and giving participants a window to adjust their own elections. The plan document must be amended no later than the effective date, and contributions promised before that date still have to be made.
Suspending forfeits safe harbor status for the year. The plan reverts to full ADP/ACP testing, and corrective distributions may follow.
Top-Heavy Exemption
A 401(k) is top-heavy when key employees hold more than 60% of plan assets, and key employees generally means certain owners and officers earning above a threshold ($235,000 for 2026).15Internal Revenue Service. Is My 401(k) Top-Heavy? A top-heavy plan owes a minimum contribution of 3% of pay to all non-key employees.
A safe harbor plan that receives only elective deferrals and safe harbor minimum contributions is exempt from top-heavy testing altogether. The 3% nonelective, the basic match of up to 4%, and the QACA match of up to 3.5% all qualify for this exemption.15Internal Revenue Service. Is My 401(k) Top-Heavy? Add a discretionary profit-sharing contribution or any other employer money on top, and the exemption is lost unless those extra contributions also meet the immediate vesting and distribution restrictions.
Long-Term Part-Time Employees
Under SECURE 2.0, employees who work between 500 and 999 hours for two consecutive eligibility periods must be allowed to make elective deferrals. The employer is not required to make safe harbor or top-heavy contributions for these long-term part-time employees. If the employer voluntarily extends safe harbor contributions to them, they can still be excluded from nondiscrimination testing, provided the exclusion is applied consistently across all tests. Vesting service is counted at 500 hours per year for hours worked on or after January 1, 2023.
Choosing Between Traditional Safe Harbor and QACA
The choice usually turns on cost and infrastructure. The traditional basic match caps at 4% of pay; the QACA basic match caps at 3.5%, and forfeitures from two-year cliff vesting reduce the effective cost further when short-tenure employees leave. The offsetting cost is the automatic enrollment machinery, which needs payroll integration and ongoing administrative attention. For an employer already required to auto-enroll under SECURE 2.0, that infrastructure has to exist anyway, which usually tips the decision toward a QACA. An employer grandfathered out of the auto-enrollment mandate, or one exempt because of size or age, more often finds the traditional design simpler.
Either way, the safe harbor commitment converts an unpredictable testing risk into a fixed, budgetable line item. The employer knows what the plan will cost before the year begins, and the annual testing exercise is off the calendar.