Employee benefit plan audits

    403(b) plan audit requirements

    Nonprofits, private schools and health organizations sponsor 403(b) plans. Once a plan reaches large plan status, ERISA requires an independent audit with the Form 5500. Here's how to count participants, when the audit is due and which plans are exempt.

    Free initial consultation · No obligation

    • Last reviewed October 10, 2026
    • Sources linked below

    Does our 403(b) plan need an audit?

    An ERISA-covered 403(b) plan generally needs an independent audit when it has 100 or more participants with account balances at the start of the plan year (the rule since 2023 plan year filings). Governmental plans and church plans without ERISA coverage do not file Form 5500. Your Virtual CPA, a licensed CPA firm that performs audits, reviews and compilations, audits 403(b) plans. Request a free consultation to review your count.

    When a 403(b) plan needs an audit

    An ERISA-covered 403(b) plan files Form 5500. A plan that files as a large plan must generally attach the report of an independent qualified public accountant. A plan that files as a small plan can be exempt from the audit if it meets the small plan audit waiver conditions.

    • The count. Beginning with 2023 plan year filings, a defined contribution plan counts participants with account balances at the beginning of the plan year. Before 2023, eligible employees without balances also counted.
    • The line. 100 or more participants with account balances generally means large plan filing and an audit.
    • New plans. A plan filing its first Form 5500 uses the number of participants with account balances at the end of the plan year.
    • The 80-120 rule. If the count is between 80 and 120 and the plan filed a Form 5500 last year, it may file in the same category as last year.

    Not sure where you land? Try our plan audit requirement checker. The participant rules are the same for 401(k) and 403(b) plans.

    ERISA and non-ERISA 403(b) plans

    Some 403(b) arrangements are outside ERISA and file no Form 5500:

    • Governmental plans, such as public school district plans.
    • Church plans that have not elected ERISA coverage under Code section 410(d).
    • Salary-reduction-only programs that meet DOL rule 29 CFR 2510.3-2(f): participation is voluntary, rights are enforceable only by the employee and the employer’s role is limited. Employer contributions generally take a plan outside this rule.

    Private nonprofits, private schools and hospitals that make employer contributions are usually ERISA plans.

    Deadlines and limited-scope audits

    Due date. Form 5500, with the audit report attached, is due by the last day of the 7th calendar month after the plan year ends. For a calendar-year plan that is July 31. IRS Form 5558, filed by the normal due date, extends it by up to 2½ months.

    Limited-scope audits. Under ERISA section 103(a)(3)(C) and DOL rule 29 CFR 2520.103-8, the auditor does not need to audit investment information prepared and certified by a regulated bank, similar institution or insurance carrier. Brokerage firms do not count as a similar institution. Auditing standards (SAS 136) set the form of opinion for this audit. Many 403(b) plans hold annuity contracts with insurance carriers, so ask your vendors whether they provide a certification.

    How it works with us

    Best for: nonprofits, private schools and health organizations whose 403(b) plan has reached, or is close to, 100 participants with account balances.

    1. Free initial consultation. Share your plan document, last Form 5500 and participant count.
    2. Fees quoted upfront, in writing. Transparent, fair fees in an engagement letter that states full or limited scope.
    3. Vendor and record request. We list what we need from you, your recordkeeper and each annuity or custodial vendor.
    4. Fieldwork, done remotely. We test contributions, distributions, loans, participant data and investments.
    5. Report. We issue the audit report for your Form 5500 and discuss any findings with you first.

    Does our 403(b) plan need an audit?

    ScenarioAudit required?
    ERISA 403(b), 100 or more participants with account balances at the start of the plan yearGenerally yes (large plan filer)
    ERISA 403(b), fewer than 100 participants with account balancesGenerally no, if the plan meets the small plan audit waiver conditions
    Many eligible employees, but fewer than 100 have account balancesGenerally no. Since 2023 filings, only participants with balances count.
    Count between 80 and 120, filed as a small plan last yearMay elect to file as a small plan again, usually without an audit
    Count between 80 and 120, filed as a large plan last yearMay keep filing as a large plan with an audit; if under 100, may file as a small plan
    New plan filing its first Form 5500Uses participants with account balances at the end of the first plan year
    Governmental plan, or church plan not electing ERISA coverageNo Form 5500, so no ERISA audit
    Salary-reduction-only program meeting 29 CFR 2510.3-2(f)Not an ERISA plan, so no Form 5500 or ERISA audit

    Expert CPAs. Personal attention.

    Not sure if your 403(b) plan crossed the audit line? Share your participant count in a free initial consultation and we'll tell you where you stand.

    Frequently asked questions

    Beginning with 2023 plan year filings, a defined contribution plan, including a 403(b), counts participants with account balances at the beginning of the plan year. Eligible employees with no balance are not counted. A new plan uses the number with account balances at the end of its first plan year.

    If your participant count is between 80 and 120 and you filed a Form 5500 last year, you may file in the same category as last year. So a plan that filed as a small plan can keep filing as a small plan while its count stays at 120 or less.

    By the last day of the 7th calendar month after the plan year ends. That is July 31 for a calendar-year plan. Filing IRS Form 5558 by the normal due date extends it by up to 2½ months.

    A governmental plan and a church plan that has not elected ERISA coverage do not file Form 5500, so no ERISA audit is required. Check whether a state law, grant or lender has its own requirement.

    Possibly not. Under DOL rule 29 CFR 2510.3-2(f), a salary-reduction-only 403(b) program is not an ERISA plan if participation is voluntary, rights are enforceable only by the employee and the employer’s role stays within narrow limits. Employer contributions or broader employer control usually make it an ERISA plan.

    It is an ERISA section 103(a)(3)(C) audit. The auditor does not need to audit investment information that a regulated bank, similar institution or insurance carrier prepares and certifies. Brokerage firms do not qualify. Auditing standards (SAS 136) set the form of opinion for this type of audit.

    An independent qualified public accountant, which in practice means an independent licensed CPA firm. Ask how many employee benefit plan audits the firm performs each year.