Connecting payroll to a 401(k)
A 401(k) is a payroll process before it is an investment product. Every pay period, a specific set of data has to move from payroll into the plan, and money has to follow it inside a deadline that is a fiduciary obligation rather than an administrative target.
Every pay period, payroll must send the plan each employee's compensation, hours, deferral election and status changes, and deposit withheld deferrals as soon as they can reasonably be segregated from company assets.
Employers tend to think of a 401(k) as something that happens at the plan, and payroll as something that happens at the company. In practice the plan is downstream of payroll every single pay period, and almost every recurring plan error starts as a data problem in that hand-off.
What actually has to move
Each pay period the plan needs a current picture of the workforce and what each person elected. That is more than a contribution amount.
- Compensation — as the plan document defines it, which is not always the same as gross pay. Bonuses, commissions and reimbursements each need a rule, and the rule lives in the plan document rather than in payroll.
- Hours of service — needed for eligibility tracking, and now needed more than it used to be. The long-term part-time rule turns on 500-hour periods, so hours have to be counted for people who are not yet participants.
- Deferral elections — including changes, and including the automatic escalation step where a plan uses one.
- Employer contributions — match or non-elective, computed on the plan's definition of compensation.
- Hire, termination and rehire dates — these drive eligibility, entry dates, vesting service and distribution processing.
- The money itself — withheld deferrals and any employer contribution.
The deposit deadline is a fiduciary duty
Withheld deferrals are plan assets from the moment they are withheld. They must be deposited as soon as they can reasonably be segregated from the employer's general assets. There is an outer limit — no later than the 15th business day of the month following — but the IRS is explicit that the 15th business day is not a safe harbor. It is a maximum, not a target. An employer who can segregate deferrals in three days and takes twelve has not complied by finishing inside the limit.
The Department of Labor provides a separate 7-business-day safe harbor for plans with fewer than 100 participants. Deposit inside seven business days and the timing is deemed to satisfy the rule. That is the only genuine safe harbor in this area, and it is available to most small employers.
This matters because late deposits are not a paperwork slip. Employee money held longer than necessary is a fiduciary problem with a correction procedure attached, and it is one of the most common findings in small plans — precisely because it depends on a recurring manual step that someone has to remember on a schedule.
Manual, file-based, and connected
| Approach | How it works | Where it fails |
|---|---|---|
| Manual entry | Someone reads payroll output and types figures into a plan portal each pay period. | Transcription errors, and timing that depends on one person's calendar. The deposit clock runs whether or not anyone remembers. |
| File upload | Payroll produces a file each period; someone uploads it to the plan. | Better, but still a recurring human step, and the file format has to keep matching on both sides. A format change silently breaks it. |
| Direct connection | The plan reads payroll data itself each period, without anyone assembling or moving a file. | Requires the connection to be set up and monitored. Once it is, the recurring step is not a person's job any more. |
The difference between these is not convenience. It is whether the fiduciary deposit deadline depends on somebody remembering.
Where the definition of compensation bites
The single most common source of correction in small plans is not late deposits. It is using the wrong compensation figure — deferring on gross pay when the plan document excludes bonuses, or excluding something the document includes. Payroll systems have their own compensation categories, and they were not designed around anyone's plan document.
This is worth resolving once, at setup, in writing: which payroll earning codes map to plan compensation and which do not. Where setup moves quickly, this mapping is often assumed rather than agreed, and the error compounds quietly for years because nothing about it looks wrong on a payslip.
What changes in a pooled plan
The data that has to move is the same in any 401(k). What changes in a pooled employer plan is who is responsible for the administrative work around it — the pooled plan provider holds the plan administrator role, so eligibility tracking, notices and the annual return sit with the provider rather than with each participating employer. The employer still supplies accurate payroll data and still deposits deferrals on time. Those two duties do not move, in any structure.
That is the honest boundary, and it is the same boundary described in the fiduciary offload guide below.
Common questions
When do 401(k) deferrals have to be deposited?
As soon as they can reasonably be segregated from the employer's general assets. There is an outer limit of the 15th business day of the month following, but the IRS is explicit that this is a maximum rather than a safe harbor. Plans with fewer than 100 participants have a genuine 7-business-day safe harbor from the Department of Labor.
Is the 15th business day a safe deposit deadline?
No. The IRS states directly that the 15th business day is not a safe harbor for depositing deferrals — the rules set a maximum deadline. If deferrals could reasonably have been segregated earlier, depositing on the 15th business day does not make the timing compliant.
What data does a 401(k) need from payroll?
Compensation as the plan document defines it, hours of service, deferral elections and changes, employer contribution amounts, and hire, termination and rehire dates — plus the withheld money itself. Hours matter even for non-participants, because the long-term part-time rule turns on 500-hour periods.
What is the most common payroll-related 401(k) error?
Using the wrong definition of compensation. Payroll systems have their own earning categories and were not designed around any particular plan document, so bonuses, commissions and reimbursements need an explicit mapping agreed at setup. The error is easy to make and hard to notice, because nothing about it looks wrong on a payslip.
Does joining a pooled employer plan remove payroll responsibilities?
No. In a pooled employer plan the provider holds the plan administrator role, so eligibility tracking, participant notices and the annual return move to the provider. Supplying accurate payroll data and depositing withheld deferrals on time remain the employer's duties in any structure.
Sources
- Internal Revenue Service, 401(k) Plan Fix-It Guide — You haven't timely deposited employee elective deferrals — that deferrals must be deposited as soon as the employer can, that the outer limit is the 15th business day of the following month, that this is a maximum rather than a safe harbor, and the 7-business-day safe harbor for plans with fewer than 100 participants
- Internal Revenue Service, 401(k) Resource Guide — Starting Up Your Plan — the recordkeeping system requirement and the employer's role in supplying plan data
- Internal Revenue Service, Notice 2024-73 — Additional Guidance on Long-Term, Part-Time Employees — the 500-hour service periods that make hours tracking necessary for employees who are not yet participants
- U.S. Department of Labor, Form 5500 Series — the annual reporting obligation that plan data ultimately feeds
aipep401k.com is a pooled employer plan for small business 401(k) plans, operated by ThinkNirvana Foundation — plan administration handled by automation rather than assembled by hand.
Related: the documents a plan runs on, which duties actually transfer to a provider. To see what a plan design would look like for your own headcount, the plan design tool is free and needs no sign-up.