Most workers’ comp audits feel like paperwork theater—you hand over documents, answer questions, and hope nothing comes back to bite you. But when you’re in a co-employment relationship with a PEO, the audit dynamics shift in ways that catch many business owners off guard.
Your PEO handles the policy, but you’re still responsible for accurate job classifications, payroll reporting, and workplace safety documentation. Miss something, and you could face premium adjustments, back-charges, or worse—gaps in coverage when you actually need it.
This checklist focuses on the specific compliance checkpoints that matter when your workers’ comp runs through a PEO arrangement, not generic audit prep advice you’d find anywhere else.
1. Verify Employee Classification Codes
The Problem With Job Titles
Auditors don’t care what someone’s business card says. They care about what that person actually does for 40+ hours a week.
A “warehouse manager” who spends most of their time operating a forklift gets classified—and charged—as a forklift operator, not management. The premium difference between those two classifications can be substantial, and your PEO won’t catch the discrepancy unless you flag it.
How Classification Errors Happen
The National Council on Compensation Insurance maintains thousands of classification codes, each with specific definitions about job duties, not titles. When you onboard through a PEO, someone assigns each employee a code based on limited information.
That initial assignment often sticks for years, even as job responsibilities evolve. An office employee who occasionally helps in the warehouse might still be coded as clerical, exposing you to coverage gaps and potential premium adjustments when the auditor reviews actual duties performed.
What to Actually Check
Pull your current classification list from your PEO. For each code, review the NCCI description and compare it against what employees in that category actually do day-to-day.
Look for hybrid roles where someone splits time between different risk levels. Document the percentage breakdown if duties span multiple classifications. Most states allow split classifications when properly documented, but you need the records to support it.
Pay particular attention to employees whose roles have changed since hire. The salesperson who became a delivery driver needs a classification update, not just a title change in your HRIS.
The Audit Defense
Keep job descriptions current and specific about physical duties, equipment operation, and work environment. Generic descriptions won’t hold up when an auditor questions why your “technician” is classified differently than your “specialist” who does identical work.
If you disagree with a classification, document your reasoning and get it in writing from your PEO before the audit. Understanding the workers’ comp underwriting process helps you anticipate what documentation auditors expect.
2. Reconcile Payroll Records
Why Your Numbers Won’t Match
Your internal payroll reports and what the PEO submits for workers’ comp premium calculation are measuring different things. That’s normal. What’s not normal is finding out during an audit that the discrepancies can’t be explained.
Workers’ comp premiums are calculated on “remuneration”—which includes wages but treats overtime, bonuses, and certain benefits differently than your standard payroll processing does.
The Overtime Trap
In most states, overtime hours get reported at straight-time rates for workers’ comp premium purposes. If someone earns $20/hour regular and $30/hour overtime, you report those overtime hours at $20, not $30.
Many businesses don’t realize their PEO should be making this adjustment. If your PEO is reporting overtime at time-and-a-half rates, you’re overpaying premium on every overtime hour worked. For high-overtime operations, this adds up quickly.
Pull a sample payroll period and walk through the calculation yourself. Compare your gross payroll to what should be reported for premium purposes after overtime adjustment.
Bonuses and Commissions
Performance bonuses typically count as remuneration. Discretionary bonuses might not, depending on state rules and how they’re structured.
Commission treatment varies by state and by how commissions are paid. Some states exclude commissions above certain thresholds. Others include all commission income.
If you pay significant bonuses or commissions, get clarity from your PEO on how these are being reported and why. The auditor will ask, and “I’m not sure, my PEO handles that” isn’t a satisfying answer when premium adjustments are on the table.
The Reconciliation Process
Quarterly, pull your internal payroll summary and the remuneration report your PEO submitted for that period. The numbers should be close but not identical. Our guide on payroll audit reconciliation walks through this process in detail.
Document the known differences: overtime adjustments, excluded compensation types, officer payroll elections. If there are gaps you can’t explain, that’s the time to ask questions—not during the audit.
3. Document Subcontractor Relationships
The Reclassification Risk
Auditors look at contractors with deep suspicion, especially in industries where misclassification is common. If you can’t prove someone was a legitimate independent contractor with their own insurance, the auditor will reclassify them as your employee and charge you premium on their earnings.
The financial impact is immediate and retroactive. Suddenly you’re paying workers’ comp premium on contractor payments that weren’t budgeted for coverage, often going back three years.
What Actually Proves Contractor Status
A 1099 isn’t enough. Neither is a contract that says “independent contractor” at the top.
You need current certificates of insurance showing the contractor carries their own workers’ comp coverage. “Current” means valid for the entire period they performed work for you. A certificate that expired mid-project doesn’t cover the work performed after expiration.
The certificate should name their insurance carrier, policy number, and coverage dates. Generic “we’re insured” statements don’t count.
The Paper Trail That Matters
Maintain a contractor file for each independent contractor relationship. Before work begins, collect their certificate of insurance and verify it with their carrier if the project is substantial.
Set calendar reminders to request updated certificates before existing ones expire. If a contractor can’t or won’t provide proof of coverage, you have two choices: require they get coverage or reclassify the relationship. There’s no third option that survives an audit.
Document the nature of the work relationship. Do they control their own schedule? Use their own tools? Work for multiple clients? These factors support independent contractor status, but only if documented contemporaneously, not reconstructed during an audit. Understanding the risk transfer framework clarifies what liability actually shifts in these relationships.
When Contractor Coverage Lapses
If you discover a contractor worked without valid coverage during part of a project, notify your PEO immediately. You’ll likely owe premium on those earnings, but proactive disclosure is better than audit discovery.
Some PEOs offer contractor coverage verification services. If yours does, use it. The administrative fee is trivial compared to the cost of reclassification.
4. Maintain State-Specific Records
Why Multi-State Gets Complicated
Workers’ comp isn’t federal. It’s regulated state by state, and each state has different rules about what gets reported, how it gets calculated, and what documentation you need to maintain.
When your employees work across state lines, your PEO needs to allocate payroll correctly to each jurisdiction. That allocation determines which state’s rates apply and which state’s regulations govern the coverage.
The Allocation Question
For employees who work in multiple states, there are specific rules about which state’s classification and rates apply. It’s usually based on where the employee spends the majority of their time, but “majority” gets complicated when someone works remotely, travels for business, or splits time between offices.
Your PEO should be asking you about multi-state exposure during onboarding and whenever employee locations change. If they’re not asking, they’re probably using default assumptions that may not match reality.
Document where each employee physically performs work. For remote employees, that’s their home state. For traveling employees, track time spent in each jurisdiction if it’s significant.
State-Specific Reporting Requirements
Some states require specific injury reporting timelines. Others mandate particular safety training documentation. A few states have unique payroll reporting rules that differ from NCCI standards. Staying on top of compliance reporting requirements prevents surprises during audits.
California, New York, and Texas each have their own workers’ comp systems that don’t follow NCCI classifications. If you operate in these states, your classification codes and rate calculations work differently than in NCCI states.
Organize your compliance files by state. When an auditor asks about your California operations, you should be able to pull that state’s records separately without sorting through a mixed pile of multi-state documentation.
The Remote Work Complication
The shift to remote work created workers’ comp allocation headaches that many businesses haven’t addressed. An employee who moved from your office state to a different state for remote work changed your workers’ comp exposure, even if their job didn’t change.
Track where remote employees actually work, not where they were hired. Update your PEO when employees relocate. The coverage and premium implications vary by state, and assumptions made in 2020 may not reflect your current workforce geography.
5. Keep Safety Documentation Current
What Auditors Actually Review
Safety documentation serves two purposes in a workers’ comp audit: proving you’re managing risk appropriately and supporting your experience modification rate if claims occur.
Auditors look for evidence of systematic safety practices, not perfection. They want to see that you’re training employees, documenting hazards, investigating incidents, and taking corrective action when problems surface.
Training Records That Matter
Generic “safety orientation” checkboxes don’t impress auditors. Specific training documentation tied to actual job hazards does.
If your employees operate forklifts, you need forklift certification records with dates, trainer names, and equipment types. If they work with hazardous materials, you need HAZMAT training documentation. If they work at heights, you need fall protection training records.
Keep training records for the duration of employment plus at least three years after separation. Some states require longer retention, and claims can surface years after an incident. A solid safety governance framework ensures these records stay organized and accessible.
Incident Documentation
Every workplace injury, no matter how minor, should generate documentation. Even if no claim is filed, the incident report creates a record of what happened, what corrective action was taken, and how you responded.
OSHA recordkeeping requirements apply to many businesses, but even if you’re exempt from OSHA logs, maintaining incident records protects you during workers’ comp audits and claim investigations.
Document near-misses too. They demonstrate proactive risk management and support your case that claims which do occur aren’t due to negligence or inadequate safety practices.
Inspection and Maintenance Records
Equipment inspection logs, facility safety audits, and maintenance records show systematic attention to workplace safety. They’re particularly important if you operate in high-risk classifications where premium rates reflect expected injury frequency.
The documentation doesn’t need to be elaborate. A simple log showing monthly forklift inspections or quarterly facility walkthroughs is sufficient. What matters is consistency and currency.
If an auditor sees safety documentation that stops six months ago, they’ll question whether your safety practices are actually ongoing or were just created for show. Implementing a proper incident reporting system keeps this documentation current automatically.
6. Track Experience Mod Rate Inputs
Why Your Mod Rate Matters
Your experience modification rate—or EMR—is a multiplier applied to your base workers’ comp premium. A mod of 1.0 is average. Below 1.0 means you get a discount. Above 1.0 means you pay a penalty.
For most businesses, the mod rate has more financial impact than classification or payroll adjustments. A few tenths of a point can mean thousands of dollars in annual premium.
Your PEO provides your mod rate, but they’re pulling it from data reported to the rating bureau. If that underlying data is wrong, your mod rate is wrong, and you’ll overpay until someone catches it.
What Drives Your Mod
The calculation compares your actual claims experience to what would be expected for a business of your size in your industry. More claims or higher claim costs push your mod up. Fewer claims or lower costs push it down.
The calculation typically looks at three years of claims data, excluding the most recent policy year. There’s a lag, which means claims filed this year won’t affect your mod until two years from now.
Small claims affect the calculation differently than large claims. The formula weights frequency more heavily than severity for smaller businesses, meaning lots of small claims can hurt your mod more than one large claim. Understanding claims frequency analysis helps you see how your claim patterns affect costs.
How Errors Happen
Claims get misreported. Closed claims show as open. Claims from a previous employer get attributed to your record if an employee moved between companies. Payroll figures used in the calculation don’t match actual payroll.
These errors compound over time because each year’s mod calculation uses prior years’ data. An error introduced three years ago affects your current mod and will continue affecting future mods until corrected.
Verifying Your Mod
Request your experience mod worksheet from your PEO annually. This document shows every claim included in the calculation, the payroll figures used, and how the final mod was derived.
Compare the claims list against your own records. Look for claims you don’t recognize, claims marked open that you know are closed, and claim amounts that seem incorrect.
Verify the payroll figures match what was actually reported during those policy periods. Discrepancies here can inflate or deflate your mod inappropriately.
If you find errors, you can request a mod revision. The process involves submitting documentation to the rating bureau through your PEO. It takes time, but correcting a mod error can generate immediate premium savings that continue for years. If the auditor’s findings don’t match your records, knowing how to dispute a workers’ comp audit becomes essential.
7. Establish PEO Communication Protocols
The Responsibility Gray Area
When an auditor requests documentation, who provides it? When they have questions about job duties or payroll treatment, who answers? When they identify a discrepancy, who’s responsible for resolving it?
In a PEO relationship, these questions don’t have automatic answers. Your PEO holds the policy and manages the carrier relationship, but you hold the underlying business records and operational knowledge.
Without clear protocols established before the audit, you end up with delayed responses, finger-pointing, and frustrated auditors who resolve ambiguities in ways that cost you money.
What to Define in Advance
Document who owns each piece of the audit response. Typically, the PEO handles carrier communication and policy-level questions while you provide business-specific documentation and operational details.
Establish response timeframes. If an auditor requests records, how quickly will your PEO forward that request? How quickly do you need to respond? Who follows up if deadlines are missed?
Clarify who has authority to make decisions during the audit. If the auditor proposes a classification change, can your PEO accept it on your behalf, or do they need your approval? If there’s a payroll discrepancy, who decides how to resolve it?
The Information Flow
Your PEO should notify you when an audit is scheduled, what documentation will be requested, and what you need to prepare. Our audit preparation guide details exactly what to gather before the auditor arrives.
During the audit, your PEO should keep you informed about what’s being discussed, what concerns the auditor raises, and what preliminary findings emerge. You shouldn’t learn about classification changes or premium adjustments for the first time when the final audit report arrives.
After the audit, review the findings together before accepting them. If something doesn’t make sense, question it while there’s still opportunity to provide additional documentation or clarification.
When Your PEO Isn’t Responsive
If your PEO treats audit prep as their responsibility alone and stonewalls your requests for information, that’s a significant operational red flag.
You can’t effectively manage what you can’t see. If you’re not getting visibility into classification decisions, payroll reporting, or mod rate calculations, you’re flying blind on one of your largest insurance expenses.
This is a conversation worth having before renewal, not after an audit uncovers expensive surprises that could have been prevented with better communication.
Your 60-Day Audit Prep Timeline
Start your audit prep at least 60 days before your policy anniversary—that’s when most premium audits get scheduled. Begin with classification verification since it drives the biggest potential adjustments, then work through payroll reconciliation and contractor documentation.
The goal isn’t perfection; it’s having defensible documentation for every decision that affects your premium calculation. If your PEO isn’t proactive about sharing the records you need for audit prep, that’s a conversation worth having now rather than during the audit itself.
Most businesses don’t realize how much control they actually have over workers’ comp costs in a PEO arrangement. You’re not a passive participant. The classifications, payroll reporting, and safety practices you maintain directly impact what you pay—and whether you’re getting appropriate value for that spend.
Before you sign that PEO renewal, make sure you’re not leaving money on the table. Many businesses unknowingly overpay because of bundled fees, hidden administrative markups, and contracts designed to limit flexibility. We give you a clear, side-by-side breakdown of pricing, services, and contract terms—so you can see exactly what you’re paying for and choose the option that truly fits your business.
