The decision that used to be optional now often is not

For years, whether a small business offered a retirement plan was purely a recruiting-and-retention judgment call. That has changed on two fronts at once. First, a growing number of states now legally require employers above a small headcount to either sponsor a plan or enroll their workers in a state-run program. Second, the federal SECURE 2.0 Act made starting a plan dramatically cheaper, with tax credits that can cover most of the setup and even part of the contributions. The result is that "we're too small for a 401(k)" is no longer a safe default answer — for many employers it is now either a compliance gap or a tax credit left on the table.

This is also one of the highest-leverage retention tools you have. A meaningful employer match is real money in an employee's pocket every year, which is why it belongs in how you explain total compensation to candidates and in the retention strategies that outperform one-time comp hikes. But start with whether you are required to act.

The state mandates: auto-IRA programs you cannot ignore

More than a dozen states have enacted state-facilitated retirement programs — often called auto-IRA programs — with names like CalSavers, Illinois Secure Choice, OregonSaves, and Colorado SecureSavings. The common structure:

  • If you have employees in the state and have been in business past a minimum period, and you do not already offer a qualifying retirement plan, you are required to register and facilitate payroll-deduction Roth IRA contributions into the state program.
  • Employees are auto-enrolled at a default rate (they can opt out), you remit their deductions through payroll, and there is no employer contribution and generally no employer fiduciary liability for the investments.
  • Non-registration carries per-employee penalties that escalate. The mandate is not aspirational — states are assessing fines.

Two things trip employers up. First, the covered-size threshold keeps dropping — several states now reach employers with as few as one to five employees. Second, if you employ people across multiple states, you may face several different state mandates at once, each with its own registration portal and deadline. The clean way out of all of them is the same: sponsoring your own qualifying plan exempts you from the state program. So the real question is usually not "state program or nothing" — it is "state program or my own plan," and SECURE 2.0 has tilted that math.

What SECURE 2.0 pays you to start a plan

The SECURE 2.0 Act turned plan startup from a cost into a subsidized one for small employers:

  • Startup cost credit. Small employers can claim a tax credit for up to 100% of qualified startup costs (administration and setup), capped at $5,000 per year for the first three years. The 100% rate applies to the smallest employers (generally 50 or fewer employees), with a reduced rate above that.
  • Employer-contribution credit. A separate credit can offset a portion of the employer contributions you make on behalf of employees — up to a per-employee amount that phases down over the first several plan years.
  • Auto-enrollment credit. An additional $500 per year for three years for including an eligible automatic-enrollment feature.

Stacked together, these credits can cover most of the real cost of standing up a plan in the early years — which is precisely the window when a small employer would otherwise balk at the expense. If you were going to satisfy a state mandate anyway, running the numbers on your own plan (with the credits) versus the state auto-IRA is worth doing deliberately.

Choosing the plan: a ladder from simplest to most powerful

There is no single right answer — it scales with your size, your cash flow, and how much you want to contribute. Roughly from least to most complex:

  1. Payroll-deduction IRA / the state program. Simplest possible: employees contribute via payroll to their own IRA, no employer money, minimal admin. This is what the state mandates default you into. Fine as a floor; weak as a recruiting tool because there is no match.
  2. SEP-IRA. Funded entirely by employer contributions (employees don't defer their own salary), with a high contribution ceiling tied to a percentage of compensation. Excellent for owner-heavy or highly profitable small shops that want to sock away a lot in good years, with almost no administrative burden. The catch: whatever percentage you contribute for yourself, you generally must contribute for every eligible employee.
  3. SIMPLE IRA. Designed for employers with 100 or fewer employees. Employees can defer their own salary, and you must either match up to 3% of pay or make a 2% nonelective contribution to everyone. More generous and more "real plan" than a SEP for a growing team, still far lighter than a 401(k) — no annual Form 5500 in most cases, no nondiscrimination testing.
  4. 401(k). The most flexible and highest-limit option: the largest employee deferrals, optional Roth contributions, loans, and a safe-harbor design that sidesteps the nondiscrimination testing that otherwise trips up plans where the owners save more than the rank and file. It carries the most administration (a third-party administrator, annual Form 5500, fiduciary oversight) — but SECURE 2.0's credits are aimed squarely at making a new 401(k) affordable, and note that new 401(k) and 403(b) plans are now generally required to include automatic enrollment.

A practical progression for many small GovCon and services firms: start with a SIMPLE IRA when you are small and cash-conscious, then graduate to a safe-harbor 401(k) as headcount and margins grow and the match becomes a competitive necessity against larger primes.

The fiduciary and administrative fine print

Once you sponsor an actual plan (SIMPLE or 401(k)), you take on ERISA fiduciary duties — you must act in participants' interest, choose and monitor investments and providers prudently, and remit employee deferrals to the plan promptly (late deposits of withheld deferrals are a classic, penalized violation, and they run through the same payroll discipline as your tax deposits). Most small employers offload the heavy lifting to a recordkeeper and a third-party administrator, but you cannot fully outsource the fiduciary responsibility — selecting and overseeing those providers is the fiduciary act.

Design your match and vesting with retention in mind. A match with a graded vesting schedule rewards tenure; treat it, alongside your compensation bands, as part of the deliberate total-rewards package rather than a bolt-on.

The bottom line

Retirement plans have crossed from optional perk to, in many states, a legal requirement — and at the same time the federal government is subsidizing new plans more heavily than ever. Start by checking whether any state you employ people in mandates a program, because non-registration is now a fineable gap. Then run the real comparison: the no-cost, no-match state auto-IRA versus your own SEP, SIMPLE, or 401(k) with SECURE 2.0 credits covering much of the startup. Match the plan to your size and cash flow, wire the deferrals into payroll correctly, and you turn a compliance obligation into one of the most durable retention tools a small employer has.

This is general guidance on small-employer retirement plans, not tax, legal, or investment advice. State-mandate thresholds and deadlines, SECURE 2.0 credit amounts and phase-outs, and contribution limits change and vary by state — confirm the current specifics with a CPA, a benefits advisor, or an ERISA professional before selecting or starting a plan.