You sign with a PEO. They take over payroll, benefits administration, workers’ comp. Life gets simpler. Then ACA reporting season rolls around and someone on your team asks: “Wait, who’s actually filing the 1094-C and 1095-C this year?”
That question gets uncomfortable fast. You assumed the PEO was handling it. The PEO assumes you understood what “handling it” means in their service agreement. And the IRS doesn’t care about the miscommunication — it cares about whether the forms were filed correctly and on time.
This isn’t a rare edge case. ACA reporting responsibility in the PEO model is genuinely confusing because co-employment creates a split between who has the data and who bears the legal obligation. Those two things don’t always land on the same entity, and the gap between them is where penalties live.
If you’re an Applicable Large Employer (ALE) — generally any business with 50 or more full-time equivalent employees — failure to file or furnish correct information returns can trigger penalties under IRC 6721 and 6722, running hundreds of dollars per form. The IRS also issues Letter 226-J to employers it believes have failed to meet the employer shared responsibility provisions under IRC 4980H. Receiving one of those letters is not how you want to discover your PEO and you had different assumptions about who was filing what.
This article walks through how ACA reporting responsibility actually works inside a PEO relationship, what changes depending on whether your PEO is certified, what your service agreement should actually say, and how to evaluate PEOs on this specific capability before you commit.
The Core Tension: Data Lives with the PEO, Liability Lives with You
Here’s the fundamental problem. The IRS generally treats the common-law employer — the client company — as the ALE responsible for ACA compliance. That means the obligation to offer minimum essential coverage, track eligibility, and file 1094-C and 1095-C forms typically attaches to you, not your PEO.
But here’s the operational reality: your PEO is running payroll. They’re administering benefits. They have the hours data, the enrollment records, the offer-of-coverage details. You don’t. You’ve handed all of that over as part of the co-employment arrangement.
So you have a situation where the entity with the legal obligation doesn’t control the data, and the entity that controls the data doesn’t necessarily bear the legal obligation. That mismatch is where ACA reporting gets messy. Understanding the full scope of PEO compliance reporting requirements is essential before you can sort out who owns what.
The distinction between CPEO (Certified PEO) and non-certified PEO models matters here, and it matters more than most businesses realize when they’re evaluating providers.
Under IRC Section 3511, established through the Small Business Efficiency Act of 2014, a Certified PEO is treated as the employer for employment tax purposes. This isn’t just a label — it has real legal implications for how certain tax filings work and who’s responsible for them. The IRS CPEO program launched in 2017, and only a limited number of PEOs have achieved certification. The IRS maintains a public list of active CPEOs, and it’s worth checking before you assume your provider qualifies.
With a non-certified PEO, the client company almost always retains full ALE status and the obligation to file 1094-C and 1095-C. The PEO may prepare the forms as a service — pulling the data, generating the filings, submitting them — but they’re typically doing it on your behalf, under your EIN, and the compliance obligation remains yours.
Even when a PEO operationally “handles” ACA reporting, the ultimate compliance liability often stays with the client company unless the service agreement explicitly states otherwise. “We’ll take care of ACA reporting” is not the same as “we assume liability for ACA compliance.” Those are very different sentences, and most service agreements use the first one.
CPEO Certification: What It Actually Changes About Filing
CPEO certification changes the filing picture in meaningful ways, but it doesn’t eliminate client-side ACA responsibility the way some businesses assume. If you’re weighing providers, understanding the CPEO vs PEO decision factors is a critical first step.
Under the CPEO model, the certified PEO is treated as the employer for federal employment tax purposes. This means the CPEO can file employment tax returns under its own EIN, absorb certain employment tax liabilities, and take on responsibilities that a non-certified PEO legally cannot. For W-2 reporting and certain payroll tax mechanics, this creates a cleaner division of responsibility.
For ACA reporting specifically, CPEO status can shift certain reporting mechanics. A CPEO may file 1094-C and 1095-C forms under its own EIN for employees covered by its benefit plans, which simplifies the operational process and can provide cleaner documentation of who filed what. This is a real advantage over the non-certified model.
But here’s the nuance that often gets glossed over: even with a CPEO, the determination of ALE status still rests with the client company. The substantive obligation to offer minimum essential coverage that meets minimum value and affordability standards is still the client’s responsibility. The CPEO’s role primarily shifts the employment tax filing mechanics and certain reporting logistics — it doesn’t transfer the underlying compliance obligation wholesale.
So if your CPEO files the 1095-C forms under their EIN but uses incorrect offer-of-coverage codes because they didn’t have accurate employee classification data from you, the exposure from an IRS inquiry doesn’t automatically fall on the CPEO just because they filed the forms.
For a non-certified PEO, the picture is simpler in one sense: the client company retains the obligation, period. The PEO may assist operationally, but they’re not the employer for employment tax purposes. Whatever ACA reporting they do is as your agent, not as the responsible party. This is one reason why payroll tax penalty responsibility under a PEO deserves careful scrutiny.
Practical implication: if ACA reporting is a meaningful concern for your business — and it should be if you’re at or near ALE threshold — CPEO status is a real differentiator when comparing providers. Not just a marketing credential. It changes what the PEO can legally take on and how cleanly responsibility is allocated between you.
What Your Service Agreement Should Actually Say About ACA
This is where most businesses get burned. They assume the PEO “handles ACA” because the sales conversation implied it, then discover during an IRS inquiry that the service agreement says something much more limited. Before you sign anything, make sure you understand what your PEO service agreement actually means.
The specific language to look for — and to push back on if it’s vague — covers four things: who files the forms, who bears penalty risk, who maintains records, and what happens if the PEO makes an error.
Who files the forms: The agreement should specify whether the PEO files 1094-C and 1095-C under its own EIN or yours. This isn’t a minor administrative detail. It determines which entity the IRS comes to first if there’s a problem, and it affects how you document compliance in the event of an audit.
Who bears penalty risk: Many service agreements include indemnification clauses, but read them carefully. A clause that says the PEO will indemnify you for errors “caused by the PEO’s negligence” sounds protective — until you realize that proving the PEO’s negligence versus your failure to provide accurate data is a genuine legal dispute. You want language that’s specific about what the PEO is responsible for and what they’re not.
Who maintains records: ACA compliance requires maintaining documentation of offers of coverage, employee eligibility determinations, and measurement period calculations. If your PEO maintains these records, what happens when you leave the PEO? Do you get the records? In what format? With how much notice?
Error correction process: IRS corrections for 1094-C and 1095-C filings have specific procedures. If the PEO files an incorrect form, who’s responsible for identifying the error, filing the correction, and paying any resulting penalties? This should be explicit, not implied.
The phrase to be wary of is “assist with” or “facilitate” ACA reporting. That language sounds helpful. It means the PEO will do some of the work. It does not mean they’re assuming compliance responsibility. If your agreement says the PEO will “assist with ACA reporting obligations,” you’re still the one holding the obligation.
Before signing, ask directly: Does the PEO file under its own EIN or mine? Who signs the 1094-C transmittal? What’s the process if we receive a Letter 226-J? Get the answers in writing, not just verbally from the sales rep. Having a solid PEO contract negotiation strategy makes all the difference here.
Penalty Exposure: What Goes Wrong When Nobody’s Sure Who’s Responsible
Let’s get concrete about what’s actually at stake.
Under IRC 6721, the IRS can assess penalties for failure to file correct information returns. Under IRC 6722, separate penalties apply for failure to furnish correct payee statements — in ACA terms, that’s the 1095-C copies that go to employees. These penalties apply per form and can escalate depending on how late the filing is and whether the failure was intentional.
The IRC 4980H penalties — the employer shared responsibility payments — attach to the ALE for failing to offer minimum essential coverage to eligible employees. These are separate from the information reporting penalties and can be substantially larger, particularly for businesses with significant headcount. Understanding these exposures is part of a broader awareness of PEO financial reporting risks.
The IRS assesses these against the entity it considers the employer. In most PEO arrangements, that’s the client company. If your PEO filed under their EIN and something went wrong, you may still receive the notice — and then you’re in the middle of a dispute with your PEO about whose error caused it while the IRS clock is running.
The operational failure modes are predictable once you’ve seen them. Late filings happen when both the PEO and the client assumed the other was tracking the deadline. Incorrect offer-of-coverage codes appear when the PEO didn’t have complete data on employee classifications or variable-hour measurement periods. Mismatched EINs trigger IRS notices that require manual resolution and documentation.
Each of these is avoidable. But they’re only avoidable if responsibility is clearly allocated before the filing deadline, not after you receive a letter from the IRS asking why your ACA filings don’t reconcile with payroll records. Businesses that have navigated PEO joint employment court cases know how costly ambiguity in the employer relationship can become.
The single most important thing you can do is nail down ACA responsibility in writing during the contracting phase. Not during onboarding. Not after your first filing season. Before you sign. Because once you’re in the relationship and a problem surfaces, you’re negotiating from a much weaker position.
Evaluating PEOs on ACA Capability: What to Actually Ask
ACA reporting quality varies significantly across PEOs. Some have dedicated compliance teams, sophisticated tracking technology, and documented processes for handling variable-hour employees and measurement periods. Others treat ACA reporting as a bolt-on to payroll processing — someone pulls a report, generates the forms, and hopes nothing comes back.
If you’re evaluating PEOs and ACA is a priority, here’s what to pressure-test specifically.
CPEO certification status: Verify it directly on the IRS public list, not just from the PEO’s marketing materials. Certification can lapse, and you want current status confirmed. Our comparison of the best PEO companies can help you identify which providers hold active certification.
ACA technology and tracking: Does the PEO use dedicated ACA compliance software, or does ACA reporting happen inside a general payroll system? Ask specifically how they track variable-hour employees, how they manage measurement periods and administrative periods, and how they handle mid-year status changes.
Track record with IRS corrections: Ask whether they’ve had clients receive Letter 226-J notices and how they handled them. A PEO that’s never had a client receive an IRS notice either hasn’t been doing this long enough or isn’t being honest. What you want to know is whether they have a clear process for responding and who bears the cost.
Staffing and dedicated resources: Is there an ACA compliance team, or is this handled by the same people doing general payroll? For businesses with complex workforce structures — seasonal workers, variable-hour employees, multiple locations, or employees across state lines — a generalist approach to ACA is a real risk. Understanding the opacity in PEO financial reporting can also help you ask sharper questions during due diligence.
If your workforce is straightforward — a stable headcount, mostly full-time salaried employees, single location — your ACA reporting needs are relatively simple and most capable PEOs can handle it. If you have seasonal employees, variable-hour workers, or a workforce that fluctuates around the ALE threshold, you need to be much more aggressive in evaluating a PEO’s specific ACA capabilities before you commit.
Making the Right Call Before You Sign Anything
The decision framework here isn’t complicated, but it requires you to actually do the work rather than assume.
First, confirm your ALE status. If you’re at or near 50 full-time equivalents, you need to know exactly where you stand and how that might change during the plan year. ALE status is determined by the prior calendar year’s headcount, and it affects everything downstream.
Second, know whether the PEO you’re evaluating holds CPEO certification. If they do, understand specifically what that means for how ACA reporting will be handled under your agreement. If they don’t, understand that you’re retaining the compliance obligation regardless of how much operational support they provide.
Third, read the ACA language in the service agreement before you sign — not after. Look for specific language about who files, who bears penalty risk, and what the error resolution process looks like. If the language is vague, push for specificity. If they won’t provide it, treat that as a signal.
Fourth, consider whether retaining a separate ACA reporting vendor alongside your PEO makes sense. For businesses whose PEO has thin ACA capabilities, or where the service agreement language is ambiguous, a dedicated ACA compliance vendor can provide a cleaner separation of responsibility and better documentation in the event of an IRS inquiry. It’s an additional cost, but it’s often less than the cost of a penalty dispute.
ACA reporting responsibility is a negotiable, contractual element of the PEO relationship. It’s not a fixed feature of the model. Treat it as a selection criterion — something you evaluate and negotiate — not an afterthought you resolve after the first filing season.
If you’re approaching a PEO renewal and haven’t looked closely at your ACA reporting terms, now is the time. Many businesses discover during renewals that they’ve been paying for services that don’t fully cover their compliance exposure, or that contract terms have shifted in ways that change the liability picture. Don’t auto-renew. Make an informed, confident decision.
