When you’re acquiring a company that uses a PEO, or you’re the one being acquired, the co-employment relationship creates compliance blind spots that standard M&A due diligence often misses. The target company’s HR records might look clean, but the real compliance picture is split between what they manage internally and what their PEO handles.
Miss something in that gap, and you inherit liabilities that weren’t on anyone’s radar during negotiations.
This guide walks you through a practical, step-by-step process for auditing workforce compliance when a PEO is involved in an M&A transaction. You’ll learn where to look, what questions to ask, and how to surface risks before they become your problem post-close.
Whether you’re on the buy-side or preparing your company for acquisition, these steps will help you avoid the nasty surprises that derail deals or create expensive remediation projects after the ink dries.
Step 1: Map the Co-Employment Relationship and Documentation Split
The first thing you need to understand is who actually owns what in the compliance stack. This isn’t always obvious, and it’s rarely documented in a way that makes sense outside the PEO relationship.
Start by requesting the complete PEO service agreement. Don’t accept a summary or a sales deck. You need the actual contract that defines which compliance functions the PEO manages and which ones remain with the client company. These agreements vary wildly between providers, and the devil is always in the details.
Once you have the agreement, create a responsibility matrix. List out every major compliance function: I-9 verification and storage, workers’ compensation claims management, benefits administration and ACA compliance, payroll tax filings, unemployment insurance, employment law guidance, and OSHA recordkeeping. Then map each one to either the PEO or the client company based on what the contract actually says.
Pay special attention to carve-outs and exceptions. Many PEO agreements exclude certain employee groups, specific locations, or particular compliance areas. You might find that executive-level employees aren’t covered by the PEO, or that employees in certain states have different arrangements. These gaps create compliance exposure that neither party is clearly managing.
Verify whether the PEO is a Certified Professional Employer Organization under IRS Section 3511. This matters more than most people realize. CPEOs provide certain successor liability protections for federal employment taxes that non-certified PEOs don’t offer. If you’re acquiring a company using a non-certified PEO, you could inherit tax liabilities that the seller thought were the PEO’s responsibility.
You’ll also want to understand how long the PEO relationship has been in place. Companies that recently switched PEOs or brought HR in-house and then moved to a PEO often have messy transition periods where compliance documentation fell through the cracks.
Step 2: Audit Employment Records Across Both Entities
Now that you know who’s supposed to be handling what, it’s time to verify that the records actually exist and are properly maintained. This is where theory meets reality, and reality often comes up short.
Start with I-9 forms. Some PEOs store these centrally, others leave them with the client company, and some split responsibility based on when employees were hired. Request access to all I-9 records regardless of where they’re stored. Check for completeness, proper dating, and whether Section 2 was completed within the required three-day window after hire.
Employees hired before the PEO relationship began are a common problem area. Their I-9s might be in a filing cabinet somewhere, they might be incomplete, or they might not exist at all. Don’t assume the PEO went back and cleaned up historical records when they took over.
Pull employee classification documentation next. You need to verify that everyone classified as a W-2 employee through the PEO is actually an employee, and that anyone classified as a 1099 contractor meets the legal test for independent contractor status. Misclassification is one of the most expensive compliance failures in M&A, and PEO relationships don’t eliminate that risk.
Look for consistency between how the PEO has classified workers and how the company actually uses them. If someone is listed as a contractor in the PEO system but works full-time hours, has a company email address, and reports to a manager like any other employee, that’s a red flag.
Review offer letters, employment agreements, and any side arrangements that weren’t processed through the PEO. Companies sometimes make promises or create arrangements outside the PEO relationship, and those commitments don’t magically disappear just because they’re not in the PEO’s system. Understanding PEO audit trail requirements helps you know what documentation should exist.
Check for equity agreements, retention bonuses, severance commitments, and non-compete clauses that might not be reflected in standard PEO records. These create obligations you need to understand before closing.
Step 3: Examine State-by-State Compliance Exposure
Multi-state compliance is where PEO relationships get complicated fast. The target company might assume their PEO handles everything, but state-level requirements vary dramatically, and PEO coverage isn’t always complete.
Start by listing every state where the target company has employees. Include remote workers, satellite offices, and anyone who relocated during the pandemic and never came back. Then verify that the PEO is properly registered and compliant in each of those states.
Not all PEOs operate in all states. Some have limited geographic coverage, and others charge premium fees for employees in certain states. If the target company has workers in states where the PEO isn’t fully set up, someone has been handling compliance manually—or not handling it at all.
Check state-specific requirements that PEOs may not cover automatically. Paid sick leave laws, wage theft prevention notice requirements, final paycheck timing rules, and mandatory state disability insurance programs all vary by state. Companies with employees across multiple jurisdictions benefit from understanding PEO multi-state payroll compliance requirements.
Remote workers create particularly messy compliance situations. A company might have hired someone in a new state without realizing it triggered registration requirements for unemployment insurance, workers’ compensation, and state tax withholding. If the PEO wasn’t notified or doesn’t cover that state, the company could be operating illegally without knowing it.
Review unemployment insurance rates and experience ratings. These transfer with the acquisition in most states, which means the target company’s claims history becomes your problem. High unemployment claims can significantly increase your UI tax rates post-acquisition.
Look at any states where the company recently started operating. The first year or two in a new state often has compliance gaps because nobody was quite sure who was responsible for what during setup.
Step 4: Assess Benefits Compliance and ERISA Obligations
Benefits compliance in PEO relationships is a legal minefield because plan sponsorship determines who carries the liability. This isn’t always clear, and it’s rarely documented in a way that makes sense during M&A due diligence.
Start by determining who the actual plan sponsor is for health insurance and retirement plans. Some PEOs sponsor the plans themselves and add client company employees as participants. Others act as administrators while the client company remains the sponsor. This distinction matters enormously for ERISA liability and what transfers at closing.
If the PEO is the plan sponsor, the client company generally has less direct liability for plan administration failures. If the client company is the sponsor and the PEO is just providing administrative services, you’re inheriting whatever compliance problems exist.
Request ACA compliance documentation for the past three years. You need to see the 1094-C and 1095-C forms that were filed with the IRS, along with the records used to determine which employees were offered coverage and whether that coverage met minimum value and affordability standards.
Companies using PEOs sometimes assume the PEO is handling ACA compliance automatically. That’s not always true, especially for variable-hour employees or workers who move between part-time and full-time status. Review the PEO compliance reporting requirements to understand what should be tracked.
Check for pending benefits claims, COBRA violations, or discrimination complaints. These might be managed by the PEO, but the liability often stays with the employer. Ask the PEO directly about any open issues they’re handling on behalf of the target company.
Understand what happens to employee benefits at closing. Will employees transition to your benefit plans immediately, stay with the PEO temporarily, or continue under the PEO indefinitely if you keep the relationship? Each scenario has different compliance implications and potential COBRA triggering events.
Review the Summary Plan Descriptions and plan documents to verify they match what’s actually being provided. Discrepancies between promised benefits and delivered benefits create liability.
Step 5: Review Workers’ Compensation and Safety Records
Workers’ compensation is one area where PEO relationships can hide significant post-acquisition costs. The experience modification rate and claims history follow the business, not the PEO relationship.
Obtain the current experience modification rate and at least three years of claims history. The EMR directly affects your workers’ compensation insurance costs after you acquire the company. A poor safety record and high claims frequency will cost you money immediately, regardless of whether you keep the PEO or bring insurance in-house.
Use a PEO workers’ comp compliance audit checklist to ensure nothing gets missed.
Safety violations don’t always appear in PEO records because the client company often manages day-to-day workplace safety even when the PEO handles workers’ comp claims. Ask specifically about any OSHA inspections, citations, or ongoing compliance issues.
Identify all open workers’ compensation claims and understand how liability transfers at closing. Some states allow you to negotiate who remains responsible for pre-closing claims, while others automatically transfer them to the acquiring company. The PEO’s involvement doesn’t change this—it just adds another layer of coordination.
Check whether the PEO’s master workers’ compensation policy will continue coverage through the transition period or terminate at closing. If it terminates, you need to have replacement coverage in place immediately to avoid gaps that could leave you uninsured during the most critical period.
Look at the target company’s industry classification codes and verify they’re accurate. Misclassified operations can result in premium adjustments and audits that surface after acquisition.
Step 6: Investigate Pending and Historical Employment Claims
Employment claims are where M&A deals find the hidden liabilities that weren’t disclosed during initial discussions. PEO relationships don’t eliminate these risks—they just make them harder to find during due diligence.
Request full disclosure of all pending EEOC charges, Department of Labor investigations, and employment-related lawsuits. Don’t accept a simple “none” answer. Ask for a written representation that covers the past five years and includes claims that were settled, withdrawn, or dismissed.
Contact the PEO directly and ask about any claims they’re managing on behalf of the target company. PEOs often handle employment disputes as part of their service, and the client company might not even be tracking these actively. The PEO’s records may be more complete than what the seller discloses.
Review the PEO’s Employment Practices Liability Insurance coverage. Understand what it covers, what the deductibles are, and whether coverage extends beyond the closing date. Some EPLI policies terminate when the PEO relationship ends, which means you could inherit claims without insurance coverage. Understanding how PEOs provide audit protection helps you evaluate this coverage.
Wage and hour class action exposure is particularly dangerous in M&A. Look for patterns that suggest potential violations: employees regularly working through lunch breaks, off-the-clock work, automatic meal break deductions, misclassified exempt employees, and improper overtime calculations.
Check whether the company has conducted any internal pay equity audits or wage and hour compliance reviews. If they haven’t, that’s a red flag. If they have, review the findings and verify that identified issues were actually corrected.
Ask about any settlements or separation agreements from the past three years. Large settlements or patterns of similar complaints often indicate systemic problems that will continue post-acquisition.
Step 7: Plan the Post-Close PEO Transition or Continuation
The final step is deciding what happens to the PEO relationship after closing and planning a transition that doesn’t create compliance gaps or employee disruption.
You have three basic options: keep the existing PEO relationship, transition employees to your own PEO if you use one, or bring HR in-house. Each option has different cost implications, compliance considerations, and operational complexity.
If you’re keeping the PEO, review the contract carefully. Understand whether the acquisition triggers any change-of-control provisions, whether pricing will change, and what the ongoing termination rights are. Some PEO contracts lock you into unfavorable terms after an acquisition. Review the PEO impact on transaction warranties before finalizing deal terms.
If you’re transitioning to a different PEO or bringing HR in-house, review the termination provisions in the existing PEO agreement. Most require 30 to 90 days’ notice, and some charge termination fees. You’ll also need to understand data transfer requirements and how employee records will be handed over. A comprehensive PEO exit and cancellation guide can help you navigate this process.
Create a detailed compliance continuity plan for the transition period. This should cover payroll processing, benefits administration, workers’ compensation coverage, unemployment insurance, tax filings, and ongoing compliance obligations. Gaps during transition create expensive problems.
Plan for benefits continuation carefully. Changing benefit plans mid-year can trigger COBRA obligations, create ACA compliance issues, and upset employees. You may need to maintain the PEO’s benefits temporarily even if you’re planning to transition later.
Factor transition costs into your deal model. Rushing a PEO transition to save money usually backfires. Payroll errors, benefits disruptions, and compliance gaps during a rushed transition cost more than taking the time to do it right.
Communicate with employees early about what’s changing and what’s staying the same. Uncertainty about benefits and payroll creates anxiety that affects productivity and retention during the critical post-acquisition integration period.
Making It Stick
A PEO workforce compliance audit in M&A isn’t just about checking boxes. It’s about understanding where liability actually sits when employment responsibilities are split between two organizations.
The companies that get burned are usually the ones who assumed the PEO had everything covered, or who didn’t dig deep enough into the handoff points between PEO and client responsibilities.
Use this checklist to stay on track: Map the co-employment split, audit records from both entities, verify state-by-state coverage, review benefits compliance, check workers’ comp exposure, investigate pending claims, and plan your post-close transition.
Start this process early in due diligence—not in the final weeks before closing. The compliance issues you find will affect deal structure, purchase price adjustments, and escrow holdbacks. Discovering them after you’ve already negotiated terms puts you in a weak position.
If you’re the seller, cleaning up your PEO compliance before going to market will make due diligence smoother and reduce the risk of last-minute price renegotiations. Buyers who find messy compliance situations automatically assume there are more problems they haven’t found yet.
Before you sign that PEO renewal, make sure you’re not leaving money on the table. Many businesses unknowingly overpay because of bundled fees, hidden administrative markups, and contracts designed to limit flexibility. We give you a clear, side-by-side breakdown of pricing, services, and contract terms so you can see exactly what you’re paying for and choose the option that truly fits your business. Don’t auto-renew. Make an informed, confident decision.
