How to Start a PEO: Registration, Bonds, and CPEO Certification

To start a PEO, you need to register in every state where your clients will have employees, meet each state’s financial and bonding thresholds, carry workers’ compensation and several liability lines, decide whether to pursue voluntary IRS certification as a CPEO, and have your client contracts, segregated tax accounts, and payroll technology in place before you sign anyone. The regulatory bar is high because a Professional Employer Organization handles other companies’ payroll, taxes, and employee benefits, and a failure at any point puts workers and the government at risk.

Everything that follows flows from one legal premise: co-employment. Your PEO and each client share employer responsibilities for the same workers. Your organization becomes the employer of record for payroll, tax withholding, and benefits administration under your federal employer identification number. The client keeps hiring, firing, daily supervision, and business operations. Every license application, insurance policy, and contract you touch assumes that split, and regulators judge you on how cleanly you maintain it.

State Registration

Most states require PEOs to register or hold a license before operating within their borders. The oversight agency varies by state: the Department of Labor in some, the Department of Insurance or the Secretary of State in others. You need to work through the rules in every state where your clients will have employees, not just your headquarters state.

A typical state application asks for:

Audited financial statements prepared by an independent CPA under GAAP.
A surety bond or letter of credit, usually in the $50,000 to $100,000 range depending on the state and your size.
Names, addresses, and business experience of directors, officers, and shareholders above a specified ownership threshold.
Authorization for fingerprint-based criminal background checks on controlling persons through state and federal databases.
Proof of workers’ compensation coverage, and often professional liability and employment practices liability insurance.

Initial registration fees generally run from a few hundred dollars to around $1,000, with renewals often lower. Processing times vary. Some states clear applications in weeks, others take months, particularly if background checks lag or the agency sends a deficiency notice. These licenses are not permanent. Most require annual or biennial renewal with updated financials, a renewal fee, and confirmation that bonding and insurance remain current. Operating without a valid license can produce fines, orders to refund client payments, and a bar from doing business in the state.

Financial Thresholds You Must Meet

Regulators impose financial requirements because your organization will hold and disburse other people’s money. They want proof you can cover obligations even if a major client defaults.

Net Worth

States that license PEOs generally set a minimum net worth. The threshold varies, with figures around $50,000 to $100,000 or more common, often scaling with payroll volume. If you can’t meet the floor, most states let you post an additional surety bond or an irrevocable letter of credit to bridge the gap.

Audited Financial Statements

Both state regulators and the IRS expect GAAP-compliant audited financial statements from an independent CPA. These are not negotiable. The audit has to cover your balance sheet, income, and cash flow in enough detail for regulators to assess whether you can meet payroll obligations and tax deposits. For IRS certification you also need a CPA examination-level attestation on your federal employment tax compliance.

Surety Bonds

State-level surety bonds for PEOs typically run $50,000 to $100,000 depending on jurisdiction and projected payroll. The federal CPEO bond is a separate requirement with its own formula. Sureties will review the owners’ personal credit, business financials, and industry experience before setting a premium, which usually falls between 1% and 5% of the bond face value.

Insurance You Have to Carry

Insurance is where PEO startup costs escalate quickly, because your organization absorbs the aggregate risk of every client company’s workforce.

Workers’ Compensation

Workers’ compensation is mandatory. Your PEO carries a master policy covering employees across all client companies under your FEIN. The policy lists your PEO as the primary insured, with each client added as an additional named insured along with their own FEIN for reporting.¹ Your experience modification rating affects premiums across the entire book, so disciplined underwriting of new clients is a survival skill.

Professional Liability and EPLI

Professional liability (errors and omissions) covers claims from mistakes in payroll processing, tax filing, or benefits administration. Employment practices liability covers wrongful termination, discrimination, and harassment claims brought by worksite employees. Carriers will review your internal controls, client onboarding procedures, and the language in your client service agreement before quoting.

Cyber Liability

PEOs store Social Security numbers, bank account details, health information, and tax records for thousands of employees. A breach triggers notification obligations in every state where affected employees live, plus regulatory investigations and class-action exposure. Cyber liability covers forensic investigation, notification, credit monitoring, regulatory fines, and business interruption. If you’re processing payroll for hundreds of companies, it is not an optional line item.

IRS Certification as a CPEO

Federal certification is voluntary, but most serious operators pursue it. A Certified Professional Employer Organization under IRC Section 7705 is legally treated as the sole employer for federal employment tax purposes on wages it remits to covered employees.² Without certification, if your PEO fails to deposit payroll taxes, the IRS can come after the client for the balance. CPEO status eliminates that risk for clients and makes your organization far more marketable. It also provides a regulatory safe harbor for the “substantial employment functions” test if you want to sponsor a Multiple Employer retirement plan.³

What the Application Requires

To apply for CPEO certification, your organization must:

Maintain a U.S. business location where PEO functions are actually performed.
Submit audited annual financial statements prepared by an independent CPA.
Provide a CPA examination-level attestation on federal employment tax compliance.
Supply a surety letter at application time confirming a bonding company is prepared to issue the required bond.
Pay a $1,000 user fee with the application.
Use the accrual method of accounting unless the IRS approves an alternative.

These come from the statute and IRS application guidance.⁴⁵

The Federal CPEO Bond

You don’t post the bond with the application itself. You provide a surety letter upfront, and if the IRS approves certification you have 30 days to post the actual bond using Form 14751.⁵ The bond covers April 1 through March 31 of the following year and equals the greater of $50,000 or 5% of your federal employment tax liability from the previous calendar year, capped at $1,000,000.⁴ A brand-new PEO with no prior liability starts at $50,000.

Employment Tax Filings

Whether or not you certify, running a PEO means filing employment taxes for every client’s workforce. The mechanics differ by status.

A CPEO files Form 941 quarterly and Form 940 annually as the employer, attaches Schedule R to Form 940 allocating wages and taxes to each client, and is generally required to file electronically.⁶ The CPEO is solely liable for employment taxes on wages it remits, which is the core protection that makes certification attractive to clients.⁷

A non-certified PEO also files aggregate 941s and 940s covering multiple clients, completing Schedule R for Form 941 when any client claims certain tax credits and consolidating the rest on a summary line.⁸ The critical difference is liability. Without certification, if your PEO collects payroll taxes and fails to deposit them, the IRS can pursue both your organization and the client. That shared exposure is the single biggest reason prospects prefer certified PEOs, and the biggest competitive drag you’ll carry until certification comes through.

Benefit Plan Compliance

Offering health insurance and retirement plans is one of the main reasons small employers hire PEOs. Sponsoring those plans makes your organization a fiduciary under ERISA, with duties that carry personal liability for the people running the plans.

As fiduciary, your PEO must act solely in the interest of participants, make decisions prudently, follow plan documents, and pay only reasonable plan expenses. Employee contributions withheld from payroll must be deposited into the plan trust as soon as reasonably possible. For plans with fewer than 100 participants, the safe harbor is the seventh business day after withholding.⁹ Missing those deadlines is one of the most common ERISA violations, and it happens easily at a PEO juggling deposits across dozens of clients.

If your group health plan covers 20 or more employees, you’re on the hook for COBRA. When a covered employee is terminated or has hours reduced, the employer must notify the plan within 30 days, and the plan then has 14 days to send an election notice.¹⁰ Because your PEO administers the plan but the client controls who gets terminated, the client service agreement needs to spell out who triggers COBRA notices and within what window.

State Unemployment Insurance

State unemployment tax is one of the trickier operational areas because the rules vary dramatically. In some states, worksite employees are reported under the PEO’s unemployment tax account, so the PEO’s experience rating drives the rate. In others, the client keeps its own account and rating and the PEO just runs the calculations and filings. A third group gives the parties a choice.

Two consequences shape your pricing model. If your PEO inherits a client’s poor claims history, it can drag up your rate across every client in that state. If your rating is favorable, clients with bad histories may see immediate savings by joining while you absorb the long-term risk if claims rise. Some PEOs pass unemployment taxes through at each client’s own rate; others pool the risk and charge a blended rate. You need to understand the rules in every state where you’ll operate before you quote anyone.

Background Checks on Owners and Officers

Regulators want to know who is running your PEO. The people subject to scrutiny, usually called controlling persons, generally include anyone owning 10% or more of the organization, plus all officers and directors.

Disclosure typically means detailed biographies for each controlling person: employment history, professional references, and evidence of experience in payroll, benefits, or insurance. Many states require fingerprint-based criminal checks through state and FBI databases. There is generally no automatic disqualification tied to a specific conviction type. The agency reviews the nature and recency of any criminal history and decides whether the applicant is fit to hold a position of trust. Prior bankruptcies, regulatory actions, and civil judgments against the owners or affiliated companies also need to be listed. Omitting material information is a faster path to denial than the underlying issue would have been.

Form I-9 Responsibility

Because your PEO becomes employer of record for payroll purposes, you need clear protocols for Form I-9 compliance. Every U.S. employer must complete and retain Form I-9 for each hire, examine identity and work authorization documents, and keep the forms for three years after hire or one year after employment ends, whichever is later.¹¹ Forms must be available for inspection by the Department of Homeland Security, the Department of Labor, or the Department of Justice.

Who actually completes and stores the forms depends on your client service agreement. Some PEOs take the full burden; others leave initial verification with the client and handle only reverification. Pick one and document it clearly, because errors carry penalties of up to several thousand dollars per form, and both parties can be held liable.

Payroll Technology

A PEO that can’t process payroll accurately and on time won’t survive its first quarter. You need a Human Resources Information System built for co-employment, able to track multiple client companies with separate tax identification numbers while aggregating data for your own filings. The platform must handle withholding across multiple state and local jurisdictions, produce the quarterly and annual reports that the IRS and state agencies require, and integrate with benefits administration for health enrollments and retirement contributions.

Off-the-shelf payroll software built for single employers won’t do the job. PEO-specific platforms exist from vendors who understand aggregate filing, multi-client reporting, and the split-responsibility model. Budget for implementation, training, and ongoing licensing.

The Client Service Agreement

The client service agreement is the contract that defines the co-employment relationship. At a minimum it should address:

Which party has the right to hire, terminate, discipline, and assign work, and which controls workplace safety.
Your PEO’s commitment to pay wages and deposit employment taxes regardless of whether the client has paid you. Regulators look for this.
Workers’ compensation: who is liable for claims, who handles filings, and what happens if the client’s claims experience deteriorates.
Benefits: which plans are available, how premiums are shared, and who handles COBRA if the relationship ends.
Service fees: percentage of payroll, flat per-employee, or hybrid; how often fees can increase and with how much notice.
Termination: notice period, procedures for transferring payroll and benefits data back, and any early-termination penalties.
Audit and regulatory investigation cooperation.

Have an employment attorney review the agreement before you sign your first client. Courts look at this document to determine liability when disputes arise.

Segregated Tax Accounts and Banking

Before onboarding anyone, open tax impound accounts that hold funds collected from clients for federal and state tax deposits. These accounts must be separate from your PEO’s general operating funds. Commingling client tax money with operating cash is a regulatory violation and, in a shortfall, a fast track to personal liability for your officers under the IRS trust fund recovery penalty.

Banks that handle high-volume ACH payroll processing will review your licensing, bonding, and financial statements before approving your accounts. That due diligence adds a few weeks to your launch timeline. Once banking is set up, payroll has to go out on the scheduled dates without exception. Late payroll destroys client relationships and, depending on the state, can create statutory penalties for your PEO as the employer of record.

1
NCCI. Master PEO Policy
2
Office of the Law Revision Counsel. 26 U.S. Code 3511 – Certified Professional Employer Organizations
3
Federal Register. Definition of Employer Under Section 3(5) of ERISA – Association Retirement Plans and Other Multiple-Employer Plans
4
Office of the Law Revision Counsel. 26 USC 7705 – Certified Professional Employer Organizations
5
Internal Revenue Service. Certified Professional Employer Organization Application
6
Internal Revenue Service. Instructions for Form 940
7
eCFR. 26 CFR 31.3511-1 – Certified Professional Employer Organization
8
Internal Revenue Service. Instructions for Schedule R (Form 941)
9
U.S. Department of Labor. Understanding Your Fiduciary Responsibilities Under a Group Health Plan
10
U.S. Department of Labor. An Employer’s Guide to Group Health Continuation Coverage Under COBRA
11
U.S. Citizenship and Immigration Services. Employment Eligibility Verification