PEO Risk Management blog banner in dark blue with a coral shield.

PEO Risk Management: What a PEO Takes On and What Stays With You (2026)

October 22, 2026

By Cesar Figueroa, Owner, ReUp Benefits · Licensed health insurance and PEO broker

In this guide

How does a PEO help with risk management? A PEO helps with risk management by filing payroll taxes, placing workers' comp coverage and supplying HR compliance support, while sharing legal responsibility with you as a co-employer. It does not remove your risk. You still direct the work, so safety, hiring decisions and how you classify employees stay with you.

I spent more than ten years inside three PEOs, including time as an account executive and sales manager at Justworks, before I started ReUp Benefits. The most common mistake I see in PEO risk management is an owner hearing "co-employer" and assuming the PEO now carries their liability. It shares it, and the sharing has edges.

This guide covers PEO risk management risk by risk: payroll tax, workers' comp, employment claims, wage and hour, and benefits. It ends with what stays with you and how to check a PEO's own risk before you sign. For the mechanics of co-employment, start with our guide to how PEO coverage really works.

How does a PEO help with risk management?

In PEO risk management, the PEO helps by taking over the high-penalty administrative work and sharing employer responsibility with you. Under a written client service agreement, it runs payroll, files employment taxes, places you under workers' comp, offers benefits and gives you HR support. You keep control of hiring, firing, schedules and the work itself.

That split is the whole idea. The PEO is strongest where the risk comes from paperwork and process, and weakest where it comes from what happens on your floor or in your manager's office. How much help you get also varies by PEO, and the marketing pages rarely show the difference. The sections below take each risk in turn.

Who is liable if a PEO fails to pay your payroll taxes?

It depends on whether the PEO is certified by the IRS. Payroll tax is the largest dollar risk in the arrangement, and most owners never ask about it. Your PEO collects payroll tax money from you and is supposed to send it to the IRS.

Without certification, you are exposed. In Chief Counsel Advice 201724025, issued in 2017, the IRS considered a business that had paid a PEO to handle employment taxes. The PEO never remitted them, and the IRS held the business responsible. In effect, the business paid twice. The business supervised its workers day to day, which mattered to the result.

A certified professional employer organization (CPEO) changes that for federal employment taxes. Under Internal Revenue Code section 3511, a CPEO is treated as the employer for federal employment tax purposes on wages it pays to your worksite employees. To stay certified, it files audited financial statements and posts a surety bond equal to at least the greater of 5 percent of its prior-year section 3511 liability (capped at $1 million) or $50,000, per 26 CFR 301.7705-2. Certification covers federal employment taxes only. State payroll taxes are a separate question to ask.

PEO risk management on payroll tax: a certified PEO is treated as the employer for federal employment tax, a non-certified PEO is not — PEO risk management on payroll tax comes down to certification, which moves federal payroll tax liability to the PEO.

The failure case is real. Robert Kohnle ran Aliat, an Oregon PEO. From the fourth quarter of 2016 through the fourth quarter of 2022, he kept payroll tax withholdings his clients sent him and spent the money on other expenses. The Justice Department put the loss to the IRS at more than $22.6 million. He was sentenced on January 8, 2024 to 27 months in prison and ordered to pay $14,092,693.42 in restitution. Separately, the IRS failure-to-deposit penalty starts at 2 percent of the underpayment and rises with the delay, up to 10 percent, and reaches 15 percent if the deposit stays unpaid after an IRS notice.

Does a PEO reduce workers' comp and safety risk?

Partly, and the insurance side is the stronger half. Most PEOs place clients on a master workers' comp policy, so a small employer is rated with a larger pool instead of only its own thin claims history. What you pay and how to leave are covered in our guide to PEO workers' comp. If your work is physical, high risk PEO options are narrower than most sites admit.

Safety is different, because the PEO is not on your job site. The Bureau of Labor Statistics counted 2.5 million injury and illness cases in private industry in 2024, a rate of 2.3 per 100 full-time workers, down from 2.4 in 2023. The National Safety Council put the total cost of work injuries at $176.5 billion for 2023.

A PEO can supply safety consultants, training libraries and claims management help. In my experience, PEOs with in-house claims staff close claims faster than a small business calling a carrier alone. They cannot make your crew follow the rules. OSHA's 2003 interpretation on leased workers says that when the client supervises day to day, recordkeeping responsibility belongs to the client. The injury log is yours.

PEO risk management in numbers: 2.5 million private industry injury cases in 2024, 88,201 EEOC charges and 259 million dollars in back wages in 2025 — These are the exposures a PEO helps you manage, not ones it removes.

How does a PEO handle employment, wage and hour, and benefits risk?

It gives you process and advice, and it shares exposure on paper. These claims come from how you treat people, and they are common. The EEOC processed 88,201 new discrimination charges in fiscal year 2025. The Labor Department's Wage and Hour Division recovered more than $259 million in back wages for nearly 177,000 workers in the same year, the most since 2019.

What a PEO adds is HR advisors you can call before a termination, handbook templates, compliant onboarding and required postings. Some include employment practices liability insurance (EPLI) or let you add it. On liability, the EEOC's guidance on staffing arrangements says a staffing firm and its client can both be liable for discrimination when they are joint employers. In my experience, PEO client service agreements deal with that by making the client indemnify the PEO for claims that come from the client's own decisions, and by excluding some claims from any EPLI the PEO provides. Read those two clauses before you sign.

Wage and hour is where owners expect the most protection and get the least. A PEO runs payroll from the pay rates, hours and exempt status you give it. If you misclassify a manager as exempt, payroll runs perfectly and the violation is still yours. In my experience, agreements put classification decisions on the client in so many words. For the filing side of this split, from multi-state payroll to ACA reporting, see our guide to PEO compliance.

Benefits carry their own penalties. For 2026, the ACA employer mandate penalty is $3,340 per year for each full-time employee beyond the first 30 if you do not offer coverage to enough people, and $5,010 for each full-time employee who gets a subsidized marketplace plan. A PEO's plans can make the offer rules easier to meet (see what a PEO handles in benefits administration), but who is treated as the employer for the mandate depends on the arrangement. Get that answer in writing.

Which risks does a PEO leave with you?

Most of the ones that start with your own decisions. PEO risk management is a split, and this table shows where the line usually falls, though every agreement is different.

Risk	What the PEO typically does	What stays with you
Federal payroll tax	Files and deposits; a CPEO is liable to the IRS for wages it pays	With a non-certified PEO, you can be pursued if it never remits
Workers' comp	Provides coverage under its policy and helps manage claims	Site safety, OSHA recordkeeping, accurate job duties and payroll reporting
Discrimination and harassment	HR guidance, training, sometimes EPLI	Your decisions, your supervisors' conduct, indemnity for your own acts
Wage and hour	Runs the pay calculations you set up	Exempt classification, time records, scheduling practices
Benefits and ACA	Offers plans, handles enrollment and notices	Eligibility choices and penalty exposure, depending on the contract

How do you check a PEO's own risk before you sign?

Good PEO risk management includes checking the PEO itself, because it holds your payroll money and your employees' coverage. Check these five things, in this order:

Certification. Look the PEO up on the IRS public list of CPEOs. If it is not listed, ask why and ask for proof of its tax deposits.
Financial statements. Ask for the latest audited statements. Certified PEOs file them with the IRS, so a certified PEO should have them ready.
State licensing. Some states require PEOs to register or hold a license, and the rules differ. Confirm what applies where your employees work. Our guide to PEO underwriting shows how PEOs screen clients in the other direction.
The agreement. Read the indemnification clause, the EPLI exclusions and what happens to coverage if you pay late or leave.
Insurance paperwork. Ask who is the named employer on the workers' comp policy, get the certificate in the right name and find out who handles claims. In my experience, larger PEOs can also share an independent SOC report on their payroll systems, so ask for it.

No PEO removes risk. It moves some, shares some and gives you better tools for the rest. The owners who do best with PEO risk management treat it as a division of labor with a written scope, not as insurance.

Comparing PEOs, or working with a PEO broker, and want the agreement reviewed with someone who has seen the inside? Book a 20-minute call with me. Bring the client service agreement, your workers' comp class codes and the last twelve months of payroll, and I will tell you where the exposure sits.

Frequently asked questions about PEO risk management

Does a PEO take over my legal liability?

No. A PEO shares employer responsibility with you under co-employment, but yours does not go away. You still answer for the decisions you make about hiring, pay, safety and discipline. In my experience, client service agreements also make the client indemnify the PEO for claims that come from the client's own decisions. Only a certified PEO takes on federal employment tax liability for the wages it pays.

What is a CPEO and why does it matter for risk?

A CPEO is a PEO certified by the IRS. Under Internal Revenue Code section 3511, it is treated as the employer for federal employment tax on wages it pays to your worksite employees. It must file audited financial statements and post a surety bond. Certification covers federal employment taxes only, not state taxes or other claims.

Does a PEO include employment practices liability insurance?

Some do and some let you add it. Limits, exclusions and who counts as the insured vary by PEO, so ask for the policy terms in writing. Do not assume the coverage exists because the PEO offers HR support.

Can a PEO lower my workers' comp claims?

A PEO can help with coverage, claims handling and safety resources, and a well-run claims process can keep claims smaller. Fewer injuries still depend on what happens at your workplace, and OSHA recordkeeping stays with the business that supervises the work.

How do I check whether a PEO is financially sound?

Look it up on the IRS public list of certified PEOs, ask for its latest audited financial statements, and confirm any state license or registration it needs where you operate. A PEO that handles your payroll taxes should be able to show all three.

Sources

This article is general information, not legal, tax or insurance advice. Laws, penalty amounts and PEO agreements change and vary by state. Figures are as of October 2026 unless a different date is shown.