A 401(k) recordkeeper is the company a retirement plan hires to track every dollar moving through participant accounts: contributions in, investment trades, loans, distributions, and the running balance for each employee. For a plan with hundreds or thousands of participants, this transaction volume is impossible to handle in-house, and errors carry real consequences. A single late Form 5500 filing, for example, can trigger IRS penalties of $250 per day.1Internal Revenue Service. Penalty Relief Program for Form 5500-EZ Late Filers
What the Recordkeeper Does
The core job is accounting for each participant’s money. Every pay period, the recordkeeper receives contribution data from the employer, splits it by source (employee deferrals, employer match, profit sharing), and allocates the dollars according to each participant’s investment elections. It also tracks contribution limits at the individual level. For 2026, that means enforcing the $24,500 annual deferral limit, the $8,000 catch-up limit for participants 50 and older, and the $11,250 enhanced catch-up limit for ages 60 through 63 created by SECURE 2.0.2Internal Revenue Service. 401(k) Limit Increases to $24,500 for 2026, IRA Limit Increases to $7,500
Once contributions post, the recordkeeper executes trades across the plan’s investment menu. When a participant moves money from a bond fund into an index fund, the recordkeeper processes the transaction and applies daily gains and losses to that account. It also maintains the vesting schedule, calculating how much of the employer-funded balance a participant actually owns based on years of service.
Money leaving the plan runs through the same system. The recordkeeper calculates maximum loan amounts, sets repayment schedules, and tracks each payment. Hardship withdrawals require it to verify the request meets IRS criteria, which demand both an immediate and heavy financial need and a withdrawal limited to the amount necessary to cover it. Qualifying events under the IRS safe harbor include medical expenses, costs tied to buying a primary home, post-secondary tuition, preventing eviction or foreclosure, and funeral expenses.3Internal Revenue Service. Retirement Topics – Hardship Distributions Full distributions at retirement, termination, or required minimum distribution age also flow through the recordkeeper.
Recent legislation has widened the job. SECURE 2.0 requires most 401(k) plans established after December 29, 2022, to automatically enroll new participants for plan years starting on or after January 1, 2025, with annual escalation of the deferral rate. It also allows employers to match on employees’ qualified student loan payments as if they were retirement contributions. Both features rely on the recordkeeper’s system to flag eligible employees, apply the right rates, and track parallel data streams the employer never had to reconcile before.4Internal Revenue Service. Guidance Under Section 110 of the SECURE 2.0 Act with Respect to Matching Contributions Made on Account of Qualified Student Loan Payments
The Data Behind Compliance
The recordkeeper produces the numbers regulators and participants see. Federal rules require quarterly disclosures showing each participant the dollar amount of fees deducted from their account and a description of what those fees paid for.5eCFR. 29 CFR 2550.404a-5 – Fiduciary Requirements for Disclosure in Participant-Directed Individual Account Plans Most recordkeepers roll these into broader quarterly statements that also show contribution history, current balance, and vested percentage.
The same data feeds the plan’s annual Form 5500. Every plan subject to ERISA files this return, which reports the plan’s financial condition and operations to the Department of Labor, the IRS, and the Pension Benefit Guaranty Corporation.6U.S. Department of Labor. Form 5500 Series The recordkeeper compiles the financial schedules; the plan sponsor signs and files. If the numbers are late or wrong, the sponsor is the one the IRS penalizes.
How a Recordkeeper Differs From a Custodian and a TPA
Three different service providers usually sit behind a 401(k), and mixing them up leads to real confusion when something goes wrong.
Recordkeeper vs. Custodian
The custodian holds the actual money. It safeguards plan assets, settles securities transactions, and holds cash and investments in trust. The recordkeeper maintains the ledger that says which participant owns which share. When a participant reallocates investments, the recordkeeper sends instructions, the custodian executes the trade, and the recordkeeper updates the account balance. The recordkeeper knows the numbers; the custodian holds the funds.
Recordkeeper vs. Third-Party Administrator
The Third-Party Administrator (TPA) handles plan design and compliance testing. The TPA runs the annual nondiscrimination tests that check whether highly compensated employees are benefiting disproportionately: the Actual Deferral Percentage (ADP) test on deferral rates and the Actual Contribution Percentage (ACP) test on matching and after-tax contributions.7Internal Revenue Service. 401(k) Plan Fix-It Guide – The Plan Failed the 401(k) ADP and ACP Nondiscrimination Tests The TPA also runs top-heavy testing for smaller plans and interprets the plan document so operations match its written terms.
Many large financial institutions bundle recordkeeping and TPA services into a single contract. That simplifies vendor management but can obscure which function you’re paying for. Even bundled, the responsibilities stay distinct: the recordkeeper processes transactions and maintains data; the TPA tests compliance and advises on plan design.
Is the Recordkeeper a Fiduciary?
Usually not, and this catches plan sponsors off guard. Under ERISA, fiduciary status turns on function. A person becomes a fiduciary by exercising discretionary authority over plan management, controlling plan assets, or providing investment advice for compensation that serves as a primary basis for investment decisions.8eCFR. 29 CFR 2510.3-21 – Definition of Fiduciary A recordkeeper that follows participant instructions and processes transactions per the plan document typically doesn’t cross that threshold.
The practical result: if the recordkeeper makes an error that costs a participant money, the plan sponsor, as fiduciary, may still bear responsibility for having selected and monitored that recordkeeper. You can’t delegate fiduciary liability by outsourcing administration. Some recordkeepers voluntarily accept limited fiduciary status for specific services, such as selecting the plan’s default investment option. When evaluating a recordkeeper, ask which services (if any) it performs in a fiduciary capacity and get the answer in writing. Federal rules already require covered service providers to disclose their fiduciary status in their initial fee disclosure to the plan.9eCFR. 29 CFR 2550.408b-2 – General Statutory Exemption for Services or Office Space
How Recordkeepers Get Paid
Compensation comes in two forms. One is easy to see. The other isn’t.
Direct Fees
Direct fees are charges the plan or its participants pay to the recordkeeper. They’re usually structured as an asset-based fee (a percentage of total plan assets, often between 0.10% and 0.50% a year), a per-participant fee (a flat dollar amount per eligible employee), or a combination. These show up on invoices and are straightforward to compare across providers.
Indirect Fees and Revenue Sharing
Indirect fees are harder to spot. The most common form is revenue sharing, where mutual funds on the plan’s investment menu pay a portion of their expense ratios back to the recordkeeper. These payments go by names like sub-transfer agent fees, shareholder servicing fees, and 12b-1 fees. The money comes out of the fund’s operating expenses, which means participants pay for it through slightly lower investment returns rather than a visible line item on their statement.
Revenue sharing isn’t inherently improper, but it creates a conflict of interest. A recordkeeper that earns more from certain funds has an incentive to keep those funds on the menu. It also complicates fee comparisons: a recordkeeper quoting a low direct fee may be making up the difference through revenue sharing from expensive fund options. What matters is the total cost to participants, not the invoice price.
Required Fee Disclosures
Federal regulations require recordkeepers and other covered service providers to disclose all direct and indirect compensation they expect to receive, including who pays the indirect compensation and the arrangement under which it’s paid.9eCFR. 29 CFR 2550.408b-2 – General Statutory Exemption for Services or Office Space That disclosure goes to the plan’s responsible fiduciary, not to participants directly. On the participant side, quarterly fee statements must show the actual dollar amount deducted from each account and describe what services those deductions covered.5eCFR. 29 CFR 2550.404a-5 – Fiduciary Requirements for Disclosure in Participant-Directed Individual Account Plans If some plan expenses were paid through revenue sharing rather than direct charges, the statement must say so.
When Recordkeepers Make Mistakes
Errors are more common than most sponsors realize. Typical ones include failing to enroll eligible employees on time, applying the wrong deferral percentage, miscalculating employer match, and processing loans that violate plan terms.10Internal Revenue Service. Retirement Plan Errors Eligible for Self-Correction Left uncorrected, these can disqualify the plan and strip its tax-deferred status.
The IRS offers three correction paths under the Employee Plans Compliance Resolution System (EPCRS):11Internal Revenue Service. Correcting Plan Errors
- Self-Correction Program (SCP), for operational errors the sponsor identifies and fixes on its own without filing anything with the IRS.
- Voluntary Correction Program (VCP), for errors too significant or too old for self-correction, requiring a formal application.
- Audit Closing Agreement Program (Audit CAP), for errors found during an IRS audit, where correction terms are negotiated with the examining agent.
Because catching errors is ultimately the sponsor’s job, regular audits of recordkeeper data matter. A good recordkeeper flags discrepancies on its own, but the duty to monitor rests with the sponsor.
Choosing and Changing a Recordkeeper
Selecting a recordkeeper is a fiduciary decision, which means the sponsor must document the process and show it was prudent. A useful evaluation covers:
- Total cost: direct fees, revenue sharing, and transaction-level charges like loan or distribution fees, added up across providers rather than compared at the headline number.
- Technology: the participant website and mobile app, tested from the employee’s side. Changing a contribution rate, taking a loan, and checking a balance should all be easy. If the interface frustrates people, participation suffers.
- Service model: whether the plan gets a dedicated account manager or shares one across dozens of plans, and how quickly the provider resolves payroll discrepancies.
- Security controls: the most recent SOC 1 Type 2 report, encryption standards, multi-factor authentication, and incident response history. The Department of Labor treats recordkeeper cybersecurity vetting as part of a sponsor’s duty of prudence.12U.S. Department of Labor. Cybersecurity Program Best Practices
- SECURE 2.0 readiness: whether the system can handle auto-enrollment escalation, student loan match tracking, and the age-based catch-up tiers.
- Error history: internal correction procedures and reported processing error rates.
Sponsors should benchmark their recordkeeper every three to five years by soliciting competitive bids, even if the current relationship is working. Industry fees have dropped significantly over the past decade, and a plan that hasn’t shopped in years may be paying for services newer providers offer for less.
When a switch happens, participants temporarily lose the ability to manage their accounts. ERISA requires written notice of this blackout period at least 30 days, but no more than 60 days, before the last date participants can exercise their usual account rights.13eCFR. 29 CFR 2520.101-3 – Notice of Blackout Periods Under Individual Account Plans The notice must explain why the blackout is happening, describe which rights are suspended, provide expected start and end dates, and give contact information for someone who can answer questions. If unforeseeable circumstances prevent 30 days’ notice, the notice must explain why.
A typical conversion runs three to six months from contract signing to going live, with the actual blackout lasting one to three weeks. Data integrity during the handoff is the biggest risk. Reconciling every participant balance, loan status, and vesting percentage across two systems is painstaking work, and a sponsor should designate an internal point person to verify the transferred data matches the outgoing recordkeeper’s final reports before the new system goes live.