Most business owners don’t think about PEO audit documentation until something goes wrong. A workers’ comp audit comes back with a surprise surcharge. A tax filing discrepancy triggers an IRS letter. A contract renewal reveals you’ve been overpaying for months because your headcount data was stale.
The co-employment model splits documentation responsibilities between you and your provider. When either side drops the ball, you’re the one who pays. And in practice, the gaps tend to cluster around the same failure points — the same ones that show up when companies go through audits, switch PEO providers, or try to reconcile their books at year-end.
This article walks through seven of the most common PEO audit documentation failures, explains why each one matters in real dollars and operational risk, and gives you concrete steps to fix them. If you’re currently with a PEO or evaluating one, understanding these failure points will save you from expensive surprises down the road.
1. Misclassified Workers Sitting in the Wrong Job Codes
The Challenge It Solves
Workers’ comp premiums are calculated directly from NCCI class codes — the occupational classifications assigned to each employee. This is a well-established insurance industry standard, not a technicality. If a clerical worker is coded as a construction laborer, you’re paying a dramatically higher premium rate for that person. When the audit comes, the insurer reconciles actual payroll against those codes, and mismatches create surcharges or retroactive adjustments that can be significant.
The Strategy Explained
The problem is that many PEOs assign class codes at onboarding and rarely revisit them. If an employee’s role changes, if you hire someone into a new function, or if the initial coding was simply wrong, that error compounds quietly over months or years. You won’t know until the audit.
Class code errors cut both ways. You might be overpaying because workers are coded into a higher-risk category than their actual job warrants. Or you might be underpaying and face a retroactive surcharge when the auditor corrects it. Neither outcome is good, but the surcharge scenario is the one that creates cash flow problems.
Implementation Steps
1. Pull your current workers’ comp class code roster from your PEO and match every employee’s code against their actual job description. This should be a quarterly task, not an annual one.
2. Flag any employees whose roles have changed since initial onboarding. Role changes are the most common source of coding drift.
3. Cross-reference your codes against NCCI’s published definitions (or your state’s equivalent for monopolistic states like Ohio, Washington, or Wyoming) to verify accuracy before your next audit period.
Pro Tips
Don’t assume your PEO is auditing this on your behalf. Most won’t unless you ask. Request a formal class code review as part of your annual renewal process, and document the outcome in writing so there’s a record if a dispute arises later. For a deeper look at how to handle audit discrepancies, see our guide on how to dispute a PEO workers’ comp audit.
2. Missing or Incomplete Employee Onboarding Records
The Challenge It Solves
The DOL and state labor agencies can audit I-9 compliance independently of your PEO relationship. That’s the part most business owners miss. Even though your PEO may handle onboarding logistics, the client company retains liability for I-9 accuracy and retention. If an auditor shows up and your records are incomplete, your PEO’s service agreement won’t protect you from the penalties.
The Strategy Explained
In a co-employment arrangement, there’s often ambiguity about who physically stores onboarding documents. Some PEOs maintain I-9s in their system. Others expect you to retain originals. W-4s and state withholding forms add another layer, particularly for employees in states with their own withholding requirements. When no one clearly owns the retention responsibility, records go missing.
The risk surfaces most visibly during audits, but it also creates problems during litigation. If a terminated employee files a wage claim and you can’t produce complete onboarding records, that gap can complicate your defense significantly. Understanding PEO audit trail requirements helps you identify exactly what your provider should be tracking.
Implementation Steps
1. Clarify in writing with your PEO exactly who retains original I-9 documents, who is responsible for re-verification when work authorization expires, and how records are stored and accessible.
2. Maintain your own parallel copies of all onboarding documents — W-4s, state withholding forms, and I-9s — regardless of what your PEO retains. This is your insurance policy.
3. Conduct a spot audit of your records annually: pull ten to fifteen employee files at random and verify completeness. This is the fastest way to discover systemic gaps before an auditor does.
Pro Tips
If your PEO uses an electronic I-9 system, make sure you have export rights to those records. Some platforms restrict data access after contract termination, which means you could lose compliance documentation the moment you switch providers.
3. Payroll Data That Doesn’t Match Your Internal Records
The Challenge It Solves
Payroll discrepancies between your PEO’s reports and your general ledger are more common than most finance teams expect. Overtime coding, bonus categorization, expense reimbursements, and fringe benefit values can all be recorded differently across systems. When those discrepancies accumulate, they create real problems: inaccurate workers’ comp audit figures, incorrect tax filings, and financial statements that don’t reflect reality.
The Strategy Explained
The mechanics are straightforward. Your PEO processes payroll based on the data you submit, but how they categorize and report that data in their system may not map cleanly to your chart of accounts. Reimbursements that should be non-taxable get lumped into gross wages. Bonuses coded as regular compensation inflate your workers’ comp base. Overtime gets miscategorized in ways that affect both cost allocation and audit exposure.
These aren’t always the PEO’s fault. Often the disconnect comes from how payroll instructions are communicated or from system integration gaps. But regardless of origin, you’re the one holding the financial statements that need to be accurate. Our guide on workers’ comp payroll audit reconciliation walks through this process in detail.
Implementation Steps
1. Reconcile your PEO’s payroll register against your GL every single month. Not quarterly. Monthly. Discrepancies compound quickly and become harder to unwind the longer they sit.
2. Create a mapping document that explicitly defines how each payroll category in your PEO’s system corresponds to your internal account codes. Review this mapping whenever you add new compensation types.
3. Before your annual workers’ comp audit, pull a full-year payroll summary from your PEO and reconcile it against your own records. Auditors will use the PEO’s figures — you need to know in advance if those figures are correct.
Pro Tips
Pay particular attention to expense reimbursements. These are frequently miscoded as taxable wages, which inflates your workers’ comp premium base unnecessarily. A clean reimbursement policy and consistent coding will save you money at audit time.
4. No Paper Trail on Benefits Plan Changes
The Challenge It Solves
Benefits audits — whether from a carrier, a plan administrator, or a government agency — require documentation of enrollment changes, qualifying life events, mid-year elections, and COBRA notices. When those records don’t exist or can’t be produced, the exposure ranges from carrier disputes to DOL penalties. This is one of the quieter documentation risks in a PEO relationship because it rarely surfaces until something goes wrong.
The Strategy Explained
Mid-year benefits changes are where the paper trail most commonly breaks down. An employee has a qualifying life event and updates their coverage. The change gets processed in the PEO’s system. But if no one documents the supporting event, the election change, and the effective date in a way that’s accessible and exportable, you’re relying entirely on the PEO’s records to defend any future dispute.
COBRA is a particularly high-stakes area. Required notices have strict timing requirements, and failure to send them on time creates direct liability for the employer. Understanding how your PEO handles insurance expense reporting can also help you spot discrepancies in benefits-related documentation before they become audit issues.
Implementation Steps
1. Request a benefits change log from your PEO at least annually — a full record of every enrollment change, termination from coverage, and COBRA notice issued during the year.
2. Maintain your own records of qualifying life events submitted by employees. These are the supporting documents that justify mid-year changes; without them, you can’t defend an election change to an auditor.
3. For COBRA specifically, confirm in writing with your PEO who is responsible for generating and sending notices, and establish a process to verify that notices are actually being sent within required timeframes.
Pro Tips
If you ever switch PEOs or move off a PEO’s benefits plan, request a full benefits history export before the transition. Carrier audits can look back several years, and you need those records to be in your possession, not locked behind a login that no longer works.
5. Stale Headcount and Termination Records
The Challenge It Solves
Per-employee-per-month pricing means every ghost employee on your roster costs you real money. This is a simple billing mechanic: if your PEO is charging you a PEPM fee and your headcount is inflated by employees who have already left, you’re paying for people who no longer work for you. The same stale data distorts your workers’ comp audit figures and can affect your benefits billing as well.
The Strategy Explained
Ghost employees accumulate in a few predictable ways. Terminations that get processed late. Seasonal workers who aren’t properly offboarded. Employees who leave during a transition period when HR attention is stretched. Each one sits on your roster, accruing PEPM charges and inflating every cost calculation that uses headcount as a variable.
The workers’ comp angle is worth emphasizing. Your annual audit compares actual payroll against estimated payroll. If terminated employees were included in your estimated headcount but didn’t actually generate payroll, that creates a reconciliation gap. Understanding how PEO pricing works helps you see exactly where stale headcount data inflates your costs.
Implementation Steps
1. Establish a termination processing protocol that requires your PEO to be notified within 24 to 48 hours of any employee separation. Document the notification and the confirmation you receive back.
2. Reconcile your active employee roster against your PEO’s roster monthly. This takes less time than you’d expect and catches discrepancies before they accumulate.
3. Before your annual workers’ comp audit, pull a full headcount reconciliation for the audit period. Verify that every employee in the audit data was actually employed during the period attributed to them.
Pro Tips
If you’re on PEPM pricing, a monthly headcount reconciliation pays for itself quickly. Even a few ghost employees at $100 to $150 per month adds up over a year. Treat this as a financial control, not just a compliance task.
6. Poorly Documented Service Agreement Scope
The Challenge It Solves
When compliance gaps surface during an audit, the first question is always: whose responsibility was this? In a PEO relationship, the answer isn’t always obvious. If your service agreement doesn’t clearly define which party owns which compliance obligations, you can end up in a situation where both sides assumed the other was handling something, and neither was. That gap is expensive.
The Strategy Explained
PEO service agreements vary significantly in how they define responsibility splits. Some are explicit: the PEO handles federal payroll tax filings, the client handles state unemployment registration in new states. Others use vague language that leaves interpretation open. Our breakdown of what a PEO service agreement actually covers can help you identify the most common ambiguity traps before they become audit liabilities.
This matters most in a few specific areas: multistate compliance when you expand into new states, new federal or state regulations that require action, benefits compliance under ERISA, and workplace safety obligations. These are the areas where “we assumed the PEO was handling it” most frequently turns into a penalty.
Implementation Steps
1. Read your service agreement with a specific focus on responsibility assignments. Create a simple two-column document: what the PEO is contractually responsible for, and what remains your responsibility. If anything is ambiguous, get written clarification.
2. When you expand into a new state, proactively ask your PEO what their coverage includes for that state and what you need to handle independently. Don’t assume existing coverage extends automatically.
3. When new compliance requirements emerge — a new state leave law, an updated federal rule — send a written inquiry to your PEO asking how they’re handling it and what, if anything, you need to do. Keep those responses on file.
Pro Tips
The service agreement review is also the right time to identify any compliance areas your PEO explicitly excludes. Some agreements contain carve-outs that are easy to miss. If you find one, that’s a gap you need to close independently — either with a specialist or by negotiating it into the contract.
7. No Retained Copies of PEO-Filed Tax Documents
The Challenge It Solves
This is the documentation failure that hits hardest during provider transitions. If your PEO is not a Certified PEO (CPEO) under the IRS program, they file payroll taxes under their own Employer Identification Number. That means the IRS records of those filings are associated with the PEO’s EIN, not yours. When you leave that PEO, your access to those records depends entirely on what the provider is willing to give you — and some aren’t generous.
The Strategy Explained
The IRS CPEO program, established under the Tax Increase Prevention Act of 2014 and effective from 2016, changes this dynamic. CPEOs allow for wage credit portability and file under a structure that gives clients cleaner access to their own tax history. Understanding the differences between a CPEO and a standard PEO is critical when evaluating how tax document retention will work for your business.
The documents that matter most are 941s (quarterly federal payroll tax returns), W-2s, and state tax filings. If you’re ever audited by the IRS or a state agency for a period when you were with a previous PEO, you need those documents. Telling an auditor “my old PEO has them” is not a workable answer.
Implementation Steps
1. Request copies of all 941s, W-2s, and state payroll tax filings from your PEO on an ongoing basis — at minimum annually, and immediately at the end of each quarter for 941s. Store these in your own system, not just in the PEO’s portal.
2. If you’re planning a PEO transition, initiate the document request before you give notice. After you announce a transition, some providers become less cooperative about document access. Our PEO exit and cancellation guide covers the full timeline for securing your records before you leave.
3. Ask your current or prospective PEO directly: “If we leave, what happens to our historical tax records? What format can you export them in, and how long do you retain them?” The answer tells you a lot about how they operate.
Pro Tips
If you’re evaluating PEOs and CPEO status matters to your situation — particularly if you have employees who change employers mid-year and need wage credit portability — verify CPEO certification directly through the IRS published list rather than taking the provider’s word for it. The list is publicly available and updated regularly.
Putting It All Together
Fixing these documentation failures isn’t about becoming a paperwork fanatic. It’s about not handing your PEO blind trust on things that directly affect your bottom line.
Start with the highest-risk items. Reconcile your payroll data monthly. Audit your worker classification codes quarterly. Make sure you’re retaining copies of every tax document your PEO files on your behalf — not just access to them through a portal you’ll lose when the contract ends.
The businesses that avoid audit surprises aren’t the ones with the best PEOs. They’re the ones who treat documentation as their own responsibility, regardless of what the service agreement says. That posture costs you a few hours a month. The alternative can cost you significantly more when an audit surfaces a gap that’s been accumulating for years.
If you’re evaluating a new PEO or considering a switch, documentation practices should be part of your comparison criteria. A provider that makes it easy to access, export, and verify your data is fundamentally different from one that keeps everything locked behind a login.
Before you sign that PEO renewal, make sure you’re not leaving money on the table. Many businesses unknowingly overpay because of bundled fees, hidden administrative markups, and contracts designed to limit flexibility. Don’t auto-renew. Make an informed, confident decision.
