Checking a PEO's Solvency Yourself
Three independent mechanisms bear on whether a PEO can meet its obligations, and they cover different things. IRS CPEO certification is a federal tax status that shifts liability for certain federal employment taxes to the provider and requires it to post a bond and submit audited financials, but it is not a solvency guarantee and it says nothing about benefits or workers' compensation. ESAC accreditation is a private programme with its own financial standards and surety bonding for the benefit of clients and employees. State bonding or security requirements under PEO registration statutes protect specific state-level obligations, usually wage and tax related, and the amounts are set by state law. All three are verifiable from public records without asking a salesperson, and you should verify them before signature rather than taking a logo on a website as evidence.
Why this is your job
A PEO holds your payroll funds between the moment you fund a payroll and the moment taxes are remitted and employees are paid. It holds benefit plan contributions. In many states you remain jointly and severally liable for unemployment contributions it fails to pay. The failure mode is not poor service. The failure mode is money that was supposed to reach a taxing authority not reaching it, with your employees' wages and your own liability sitting on the other side.
Nobody will do this check for you. It takes an afternoon from public records.
The three mechanisms, side by side
| IRS CPEO certification | ESAC accreditation | State bonding under PEO registration | |
|---|---|---|---|
| Who runs it | Internal Revenue Service | Employer Services Assurance Corporation, a private body | Individual state agencies |
| What it is | A federal tax status | A private accreditation programme | A statutory condition of registration |
| Core effect | Shifts liability for certain federal employment taxes to the provider for wages it pays | Financial standards plus surety bonding for the benefit of clients, employees, insurers and taxing authorities | Security for specific state obligations, usually wages and state payroll taxes |
| Financial conditions | Bond and annual audited financial statements from a CPA | Quarterly financial reporting and compliance verification against the programme's standards | Bond, letter of credit or securities, amount set by statute |
| Covers benefits or workers' comp? | No | Within the scope of the programme's bonding | Generally no |
| Where to verify | The IRS published list | The accrediting body's own register | The state regulator's register |
| Can be withdrawn? | Yes, suspension or revocation | Yes | Yes |
CPEO certification: read the scope, not the badge
The certified professional employer organization regime was created by statute and sits in the Internal Revenue Code at sections 7705 and 3511. Section 7705 defines certification and gives the Treasury authority over it; section 3511 governs the employment tax consequences. The statutory text is at law.cornell.edu/uscode/text/26/7705 and law.cornell.edu/uscode/text/26/3511. The implementing regulations are at 26 CFR 301.7705-1 and 301.7705-2, available at law.cornell.edu/cfr/text/26/301.7705-1. The procedural guidance on applying for and maintaining certification is in Revenue Procedure 2023-18, which modified and superseded the earlier procedures.
Three features of the regime matter to a buyer.
It is a liability allocation. For wages a certified provider pays under a qualifying contract, the provider is treated as the employer for the federal employment taxes within the statute's scope. That is the point of the regime, and it is genuinely valuable — it is the reason a mid-year move to a certified provider behaves differently on wage bases than a move to a non-certified one, as the fees that are not in the quote explains.
It is conditional and revocable. Certification carries ongoing requirements, including a bond and annual audited financial statements prepared by an independent CPA, and the IRS can suspend or revoke it. Revocation is the signal you want to be able to see, which is why you check the register rather than the brochure.
It is narrow. It is a federal employment tax status. It is not a statement about the provider's benefit plans, its workers' compensation programme, its state tax compliance or its general financial condition. A certified provider can still fail. Read our longer treatment at certified PEOs: what CPEO status means.
How to verify it: the IRS publishes the list of certified organizations and updates it quarterly, with suspensions and revocations noted. The published listings are at irs.gov/node/24376. Search for the exact legal entity name on your contract, not the brand name on the website — large providers operate multiple entities and the certified one may not be the one you are signing with. The customer relationship itself is reported to the IRS on Form 8973, documented at irs.gov/forms-pubs/about-form-8973; ask to see yours once you are a customer.
ESAC accreditation: what it adds
ESAC is a private accrediting body for the PEO industry, at esac.org. Its programme combines compliance verification against a published set of financial, ethical and operational standards with surety bonding held in trust for the benefit of clients, worksite employees, insurers and taxing authorities, intended to respond where an accredited provider defaults on wages, payroll taxes, retirement contributions, workers' compensation premium or group health contributions.
Two cautions, stated plainly.
First, the coverage structure and the bond amounts have changed over time, and numbers quoted in press releases and trade articles are frequently out of date. We do not reproduce a figure here for that reason. Read the current structure on the accrediting body's own pages, note the date you read it, and ask what the per-provider limit is relative to the size of your payroll. A bond that is large in absolute terms may be small relative to a provider's whole client base.
Second, it is a private programme, and its published track record is its own claim rather than an independent audit finding. That does not make it worthless — a provider willing to submit to quarterly financial verification is telling you something real — but it is evidence of process, not a guarantee of outcome.
How to verify it: search the accrediting body's own register of accredited organizations for the legal entity name, and check the status and the date. Accreditation can lapse.
State bonding: small, specific, and worth reading anyway
Most states require PEOs to register or hold a licence, and most of those impose some form of security — a surety bond, a letter of credit, deposited securities, or minimum net worth maintained and demonstrated through financial statements. The administering agency differs: in some states it is the department of labor, in others the department of insurance or the secretary of state.
What the security covers is defined by the state statute and is usually narrower than buyers expect. Typically it stands behind unpaid wages and unpaid state payroll taxes. It is not a general creditor protection and it will rarely be sized to your exposure.
How to verify it: go to the state register. Our free, sourced record of registration, licensing and bonding requirements by state is at PEO laws by state, with each field linked to the statute or agency page it came from and each record carrying a verification date. Use it to find the right agency, then confirm the provider's current registration status on that agency's own register. A provider that is not registered where your people work may not be able to serve you there lawfully, which makes this a hard filter rather than a preference.
The afternoon checklist
- Get the exact legal entity name from the draft service agreement. Not the
brand. The entity.
- Check the IRS published list for that entity, and note the date of the
list you checked.
- Check the accrediting body's register for that entity, and note the
status date.
- Check the state register in every state where you employ someone.
- Ask for the audited financial statements and the auditor's name. A
certified provider has them prepared annually. A provider that will not share anything about its financial condition with a prospective customer has told you something.
- Ask where payroll funds sit between funding and remittance, and whether
they are segregated. Get the answer in writing.
- Ask what happens to your money if the provider fails — specifically which
of the three mechanisms above would respond, in what order, and up to what limit. Almost nobody asks this. The quality of the answer is diagnostic.
- Put the answers beside the rest of the written record you are building.
Our provider contract terms record shows what we have been able to source publicly, and our methodology explains the gate a fact has to pass before we publish it.
What to do next
Do the eight steps before you sign, not after. They cost nothing and they are the only part of PEO due diligence that produces hard, dated, primary-source answers rather than impressions.
Then decide what the result means. None of these three mechanisms makes a provider safe, and a provider holding all three can still be the wrong purchase for you on price, service or fit. Conversely, the absence of federal certification is not automatically disqualifying — plenty of registered, long-established providers are not certified — but it changes the tax mechanics and it should change what you ask for in the contract.
If the honest result of this exercise is that you cannot get satisfactory written answers about where your payroll money sits and what stands behind it, do not sign. There is no version of this arrangement that works if you are uneasy about the custody of the funds, and continuing to run payroll yourself is a perfectly respectable outcome — see PEO vs payroll service and PEO vs ASO for the arrangements that lift administration without putting your payroll funds and tax liability inside somebody else's balance sheet. Peolet is not a PEO and holds none of these certifications itself; we publish the record so you can check it. Scope questions about what certification covers in your facts are for your CPA or counsel.
Frequently asked
Does CPEO certification mean the IRS has vouched for the provider's finances?
No. Certification imposes requirements, including bonding and audited financial statements submitted by a CPA, and the IRS can suspend or revoke certification. It is a tax status with financial conditions attached, not an opinion that the provider is solvent, and it does not extend to benefits or insurance obligations.
If my PEO is certified, am I safe on payroll taxes?
Certification is the mechanism that shifts liability for the federal employment taxes within its scope to the certified provider for wages it pays. That is meaningful and it is narrower than it sounds. It does not cover state unemployment taxes, benefit plan contributions, or workers' compensation premium, and the scope question belongs with your CPA.
Is ESAC accreditation the same as being certified?
No. They are separate, run by different bodies, with different standards and different remedies. A provider can hold one, both or neither. Verify each on the issuing body's own register rather than on the provider's marketing pages.
What does a state PEO bond actually pay for?
It depends entirely on the state statute, and the typical scope is unpaid wages and unpaid state payroll taxes rather than the full range of what a failed provider would owe. Read your own states' requirements; amounts and covered obligations differ substantially.
Get matched with up to three PEOs
Answer six questions about your headcount, states and timeline. We shortlist providers that can actually serve you, and you choose which ones may contact you.
No obligation. You pick which providers get your details. We never sell your information to a data broker.