What Is a Safe Harbor 401(k) Match: Formulas, Vesting, and Limits

A safe harbor 401(k) match is an employer contribution formula, set by federal law, that a company commits to in exchange for an automatic pass on the IRS non-discrimination tests that other 401(k) plans have to take each year. The employer picks one of three approved formulas, funds it for every eligible worker who defers, and in return, highly compensated employees can max out their own contributions without the risk that low participation elsewhere in the company triggers refunds. For you as an employee, the practical payoff is a guaranteed match on a defined slice of your pay, and — under the standard formulas — immediate ownership of every employer dollar that lands in your account.

The Three Approved Match Formulas

Only certain contribution formulas qualify a plan for safe harbor status under 26 U.S.C. § 401(k)(12).¹ Two are matching formulas. The third replaces the match with a flat contribution.

Basic Safe Harbor Match

The employer matches 100% of your deferrals on the first 3% of compensation you contribute, plus 50% on the next 2%. If you defer at least 5% of your salary, the total employer match equals 4% of your pay.¹ Contribute less than 5% and the match scales down: someone deferring 3% receives a 3% match, and someone deferring 4% receives 3.5% (100% of the first 3%, plus 50% of the fourth percent).

Enhanced Safe Harbor Match

An enhanced match must be at least as generous as the basic match at every deferral level, but the employer is free to restructure the tiers. A common version is dollar-for-dollar on the first 4% of compensation — cleaner to explain, and it meets or beats the basic formula at every rung. Two guardrails apply: the match rate cannot rise as your deferral rate rises, and the formula cannot be based on more than 6% of compensation.

QACA Match (With Automatic Enrollment)

A Qualified Automatic Contribution Arrangement, or QACA, is a safe harbor variant that pairs a lighter match with automatic enrollment. Employees who don’t make an affirmative election are enrolled at a default deferral rate of at least 3% of pay, rising 1% a year until it reaches at least 6% and no more than 10%.² You can always opt out or pick a different rate.

The QACA matching formula is 100% on the first 1% of compensation deferred, plus 50% on the next 5%. Defer 6% or more and the total match comes to 3.5% of pay, half a point lower than the basic safe harbor. The trade-off runs the other way on vesting, covered below.

The Nonelective Alternative

An employer that doesn’t want to run a match at all can still get safe harbor status by contributing a flat 3% of compensation for every eligible employee, whether or not the employee defers anything.¹ This isn’t a match — it’s the safe harbor route for employers who’d rather fund everyone equally than reward those who contribute. A QACA plan can also use the 3% nonelective option instead of the QACA match.

What the Match Buys the Employer

Every standard 401(k) plan has to pass two yearly math tests, the Actual Deferral Percentage (ADP) test and the Actual Contribution Percentage (ACP) test, which compare what highly compensated employees put into the plan against what everyone else puts in. For 2026, a highly compensated employee is generally someone who earned more than $160,000 from the employer the year before.³ When rank-and-file participation is too low, the plan fails, and the excess contributions from top earners get refunded and taxed.⁴

A safe harbor plan skips both tests. Meet the required contribution formula and notice rules and the plan is automatically treated as passing. Safe harbor plans also get a pass on top-heavy testing when the only employer contributions are the safe harbor minimums and employee deferrals.⁵

When You Own the Match

Under a traditional safe harbor formula — basic match, enhanced match, or 3% nonelective — the employer’s contributions vest immediately. Leave the company after a month and you keep every safe harbor dollar. If your employer layers additional discretionary or profit-sharing contributions on top of the safe harbor minimum, those extras can still follow a normal vesting schedule.

QACA is the exception. A QACA match can be subject to a two-year cliff: you own nothing until you complete two years of service, and then the entire QACA match becomes 100% yours.⁶ That’s still faster than the three-year cliff or six-year graded schedules a traditional 401(k) can use for its match,⁷ but it isn’t the day-one ownership the standard safe harbor formulas require.

Compensation Cap and 2026 Limits

All three safe harbor formulas run only on compensation up to the annual Section 401(a)(17) cap. For 2026, that cap is $360,000.³ Earn $400,000 and your match or nonelective contribution is calculated on $360,000 of that salary.

Safe harbor plans also live inside the general 401(k) limits for 2026:

Employee deferral limit: $24,500, up from $23,500 in 2025.⁸
Catch-up contributions for age 50 and over: an additional $8,000, for a possible deferral of $32,500.⁸
Enhanced catch-up for ages 60 through 63 under SECURE 2.0: $11,250 instead of $8,000, for a total deferral of up to $35,750.⁸
Total annual additions from employee and employer combined: $72,000, up from $70,000 in 2025.³

Catch-up amounts sit on top of the $72,000 annual additions limit, so an employee aged 60 through 63 could theoretically see up to $83,250 in total contributions when their own deferrals and all employer contributions are combined.

The Annual Notice You Should Receive

If your employer uses a safe harbor matching formula, you should get a written notice before the start of each plan year. The window is at least 30 and no more than 90 days before the plan year begins.⁹ For a calendar-year plan, that’s roughly early October through early December. New hires who become eligible after that window must get the notice no later than their eligibility date.

The notice has to spell out the contribution formula, your right to make or change deferral elections, and the vesting terms for employer contributions. If the employer misses the deadline, the plan can lose safe harbor status for the year and get pushed back into standard ADP and ACP testing.⁹

One boundary worth knowing: the SECURE Act and SECURE 2.0 eliminated the annual notice for nonelective safe harbor plans. If your employer uses the 3% flat formula, no yearly notice is required, though you still get at least one chance per plan year to make or change your deferral election.⁹ The notice requirement still applies to the basic and enhanced match.

When an Employer Can Cut the Match Mid-Year

Safe harbor contributions are meant to run for the entire plan year, but the employer can reduce or suspend them during the year in limited circumstances. Two conditions justify a mid-year cut: the company is operating at an economic loss for the plan year, or the original annual notice included a warning that contributions could be reduced or suspended.¹⁰

If your employer moves to suspend, you should receive a supplemental notice with time to change your deferral election. The suspension cannot take effect until at least 30 days after that notice reaches employees. For the rest of the plan year, the plan loses its safe harbor status and has to satisfy the ADP and ACP tests using the current-year testing method.¹⁰ Anything the match paid you before the suspension is already yours — safe harbor contributions vest immediately, and a later suspension doesn’t claw them back.

1
Office of the Law Revision Counsel. 26 USC 401 – Qualified Pension, Profit-Sharing, and Stock Bonus Plans
2
Internal Revenue Service. Retirement Topics – Automatic Enrollment
3
Internal Revenue Service. 2026 Amounts Relating to Retirement Plans and IRAs
4
Internal Revenue Service. 401(k) Plan Fix-It Guide – The Plan Failed the 401(k) ADP and ACP Nondiscrimination Tests
5
Internal Revenue Service. Is My 401(k) Top-Heavy?
6
Internal Revenue Service. Issue Snapshot – Vesting Schedules for Matching Contributions
7
Internal Revenue Service. Retirement Topics – Vesting
8
Internal Revenue Service. 401(k) Limit Increases to $24,500 for 2026, IRA Limit Increases to $7,500
9
Internal Revenue Service. Notice Requirement for a Safe Harbor 401(k) or 401(m) Plan
10
Federal Register. Reduction or Suspension of Safe Harbor Contributions