Safe Harbor 401(k) Plans and Nondiscrimination Testing

A Safe Harbor 401(k) plan is a retirement plan that skips the IRS’s annual nondiscrimination tests in exchange for a fixed employer contribution and immediate vesting on that money. You commit to funding the plan on a set formula for your workforce, and in return you stop worrying about whether your owners and highly paid staff are deferring too much compared to everyone else. For 2026, the framework carries new compensation thresholds, expanded eligibility for long-term part-time workers, and a QACA option that has grown more attractive as automatic enrollment becomes standard.

The Three Contribution Formulas

Qualifying as a Safe Harbor plan means picking one of three contribution structures and sticking to it for the plan year.

Basic match. The employer matches 100% of employee deferrals up to 3% of compensation, plus 50% of deferrals on the next 2%. An employee who defers 5% or more receives a match worth 4% of pay.¹
Enhanced match. Any matching formula that is at least as generous as the basic match at every deferral level. The tiers can differ, but the total match at each participation rate must equal or exceed the basic result.
Non-elective contribution. The employer contributes at least 3% of compensation for every eligible employee, whether or not the employee defers anything.¹

Match formulas cost less when participation is low, since only employees who defer trigger a contribution. The non-elective route costs more upfront but gives you two things a match cannot: the notice requirement disappears, and you can adopt the formula partway through the year or even after year-end.

What Testing You Skip

A traditional 401(k) runs two annual tests. The Actual Deferral Percentage test compares how much highly compensated employees defer against everyone else. The Actual Contribution Percentage test does the same for employer matching and after-tax contributions.² Fail either one and the fix is either refunding money to your high earners (creating taxable income for them) or making corrective contributions for lower-paid staff. A Safe Harbor plan is exempt from both tests.³

For 2026, a highly compensated employee is anyone who owned more than 5% of the business in the current or prior year, or who earned more than $160,000 in the prior year.⁴ In many small businesses, that definition sweeps in a big share of the professional staff, which is what makes testing so hard to pass without Safe Harbor status.

There’s a second test Safe Harbor plans typically avoid: the top-heavy test. A plan is top-heavy when the accounts of “key employees” hold more than 60% of plan assets, measured on the last day of the prior plan year.⁵ Key employees for 2026 include officers earning more than $235,000, anyone owning more than 5% of the business, and 1% owners earning above $150,000.⁴ A top-heavy failure forces a minimum contribution of up to 3% of compensation for every non-key employee. Safe Harbor plans that receive only employee deferrals and the required Safe Harbor contributions are exempt from top-heavy testing.⁶ Add discretionary profit-sharing on top, however, and top-heavy testing returns.

The QACA Alternative

A Qualified Automatic Contribution Arrangement layers automatic enrollment on top of the Safe Harbor rules. Every eligible employee is auto-enrolled at a default deferral rate between 3% and 10% that escalates 1 percentage point each year until it hits at least 10%, capped at 15%.² Employees can opt out or change their rate at any time.

The QACA match is cheaper than the standard Safe Harbor match: 100% of deferrals up to 1% of compensation, plus 50% of deferrals between 1% and 6%, for a maximum match of 3.5% of pay when an employee defers at least 6%.⁷ The 3% non-elective option is also available.

The QACA’s other advantage is vesting. Standard Safe Harbor contributions vest immediately. QACA Safe Harbor contributions can use a two-year cliff, meaning employees who leave before completing two years of service forfeit the employer money entirely.⁸ For a business with heavy turnover in the first two years, that alone can meaningfully reduce plan cost. One restriction: QACA employer contributions cannot be paid out as hardship withdrawals.

QACAs have gained ground partly because SECURE 2.0 already requires automatic enrollment in most 401(k) plans established after December 29, 2022, with the same 3%-to-10% default and 1-point annual escalation.⁹ Businesses with 10 or fewer employees, companies less than three years old, church plans, and governmental plans are exempt from that mandate. Everyone else building a new Safe Harbor plan is already halfway to a QACA structure by law.

2026 Contribution Limits

Safe Harbor plans follow the same contribution limits as any 401(k). The 2026 numbers:

Elective deferral limit: $24,500.
Age 50+ catch-up: $8,000, for a total of $32,500.
Ages 60–63 catch-up (SECURE 2.0): $11,250, for a total of $35,750.¹⁰
Total annual additions (deferrals plus employer contributions plus forfeitures), before catch-ups: $72,000.
Compensation cap used for employer contribution math: $360,000.⁴

The compensation cap sets a ceiling on the non-elective contribution: 3% of $360,000 is $10,800, the most a Safe Harbor non-elective contribution can reach for any single employee.

Who Has to Be Covered

A 401(k) generally cannot require more than one year of service (with at least 1,000 hours) and attainment of age 21 before allowing participation.¹¹ Once an employee qualifies, entry into the plan must come no later than the earlier of six months after eligibility or the start of the next plan year.

For plan years starting after December 31, 2024, SECURE 2.0 also requires that long-term part-time workers be allowed in. Employees who work at least 500 hours in each of two consecutive 12-month periods must be permitted to participate, even without ever hitting 1,000 hours in a year.¹² Only 12-month periods beginning on or after January 1, 2023 count toward the two-year test. In a Safe Harbor plan, more eligible part-timers means more mandatory employer contributions.

Adoption Deadlines and Notice

Timing is where matching and non-elective formulas diverge sharply.

A Safe Harbor match must generally be in place before the plan year starts, because the employer must provide a written notice to every eligible employee between 30 and 90 days before the year begins.¹ For a calendar-year plan, that window runs October 2 through December 1. Employees who become eligible mid-year must receive the notice by their eligibility date. The notice must describe the matching formula, any other employer contributions, how to make or change deferral elections, and the vesting schedule. Hand delivery or first-class mail always works; electronic delivery works only when the employee has regular computer access at work or has affirmatively consented.

The non-elective route has no notice requirement at all, and the deadline for adopting it is far more forgiving. Under the SECURE Act, an existing plan can be amended to add a 3% non-elective Safe Harbor contribution up to 30 days before the end of the plan year. If the employer commits to 4% instead of 3%, the amendment can be made as late as the last day of the following plan year.¹³ That flexibility is what makes the non-elective option a real rescue tool: a plan that fails ADP or ACP testing can retroactively adopt Safe Harbor status rather than process refunds to its high earners.

Missing a required notice is one of the most common Safe Harbor failures. The plan can lose Safe Harbor status for the year and be pushed back into standard testing it was never designed to pass. The IRS Self-Correction Program generally applies. If a missed notice actually prevented an employee from making deferrals, a corrective contribution may be required; if the employee knew about the plan and could defer, fixing procedures for future years is usually enough.¹⁴

Vesting

Standard Safe Harbor contributions, whether matching or non-elective, are 100% vested the moment they hit the account.¹ No graded or cliff schedule is permitted. QACA Safe Harbor contributions are the sole exception, allowing a two-year cliff.⁸ Any employer contributions above the Safe Harbor minimum, such as a discretionary profit-sharing contribution, can still follow the plan’s regular vesting schedule under either structure.

1
eCFR. 26 CFR 1.401(k)-3 – Safe Harbor Requirements
2
Office of the Law Revision Counsel. 26 USC 401 – Qualified Pension, Profit-Sharing, and Stock Bonus Plans
3
Internal Revenue Service. The Plan Failed the 401(k) ADP and ACP Nondiscrimination Tests
4
Internal Revenue Service. Notice 2025-67 – 2026 Amounts Relating to Retirement Plans and IRAs
5
Office of the Law Revision Counsel. 26 USC 416 – Special Rules for Top-Heavy Plans
6
Internal Revenue Service. Is My 401(k) Top-Heavy
7
Internal Revenue Service. FAQs – Auto Enrollment – Are There Different Types of Automatic Contribution Arrangements for Retirement Plans
8
Internal Revenue Service. Issue Snapshot – Vesting Schedules for Matching Contributions
9
United States Congress. H.R.2954 – Securing a Strong Retirement Act of 2022
10
Internal Revenue Service. 401(k) Limit Increases to $24,500 for 2026, IRA Limit Increases to $7,500
11
Internal Revenue Service. Treatment of Otherwise Excludable Employees for Coverage and ADP Testing
12
Internal Revenue Service. Additional Guidance with Respect to Long-Term, Part-Time Employees
13
Internal Revenue Service. Mid-Year Changes to Safe Harbor 401(k) Plans and Notices
14
Internal Revenue Service. Fixing Common Plan Mistakes – Failure to Provide a Safe Harbor 401(k) Plan Notice