When you hire a PEO, you're not handing off your whole business. You're sharing it. And that raises a fair question the day something goes wrong: if there's a payroll tax mistake, a workplace injury, or a lawsuit from a former employee, who actually pays for it, you or the PEO?

The honest answer is "it depends on the problem." A PEO takes on some of your employer risk, but not all of it. Knowing which is which protects you before you sign anything. This guide breaks down how PEO liability splits between you and the PEO, where you stay fully on the hook, and the one certification that changes the answer for payroll taxes.

How co‑employment splits the risk

A PEO works through co-employment. You stay the "worksite employer" who hires, manages, and directs your team day to day. The PEO becomes the "employer of record" for payroll, taxes, and benefits. If you're new to the model, our plain-English guide to what a PEO is and how a PEO works both cover the basics.

Because two parties now share employer duties, liability follows the duty. As a rough rule: whoever controls a task usually owns the risk for that task. You control the worksite, so worksite risks stay largely yours. The PEO controls payroll processing and benefits administration, so those risks shift toward the PEO. Employment decisions, like firing someone, often sit in the middle because both parties touch them. Our breakdown of PEO responsibilities vs. the employer maps out that split in detail.

Who's liable when something goes wrong

Here's the quick logic for figuring out where a problem lands.

Decision flowchart for PEO liability. When a problem happens, ask whose duty it was. If you direct the work, it is usually you, covering safety and daily management. If the PEO runs payroll and tax, it is usually the PEO, covering federal payroll taxes. If it is an employment decision, liability is often shared, covering firing, pay, and discrimination.
Quick logic for where a PEO-related problem lands: liability tends to follow the duty.

The middle branch is where most disputes actually happen, so it's worth reading your contract closely on those items.

Four situations, and who pays

Abstract splits get clearer with concrete cases. Here is how liability tends to fall in four common ones.

  • Payroll taxes go unremitted. Your PEO collects payroll taxes but fails to send them to the IRS. If the provider is a certified PEO, it is solely liable for the federal employment tax on the wages it paid, so the IRS pursues the PEO. If it is not certified, the IRS can still assess your business for the shortfall. Same mistake, opposite outcome, decided by one certification.
  • An employee is hurt on the job. Workers' compensation coverage usually runs through the PEO's master policy, so the claim is paid there. But you control the worksite, the equipment, and the safety practices, so an OSHA citation or a negligence claim over conditions stays largely with you. See how a PEO handles workers' compensation for what the policy does and does not cover.
  • A manager fires someone who then files a charge. You made the decision, so a wrongful-termination or discrimination claim is largely yours, even though the PEO ran the paperwork. Because both parties are employers, though, the agency can name the PEO too, which is why the reason for the decision and your documentation matter so much.
  • Overtime is calculated wrong. You set the schedules and pay rates; the PEO runs payroll. If overtime or minimum wage comes out wrong, a wage-and-hour claim can reach both of you, and how your contract assigns the fix, bad data from you versus a processing error by the PEO, usually decides who absorbs it.

The big exception: certified PEOs and payroll taxes

Payroll tax is the one area with a bright-line rule, and it hinges on a single question: is your PEO a Certified PEO (CPEO)?

The IRS runs a voluntary certification program for PEOs. When a PEO is certified, federal law (Internal Revenue Code Section 3511) makes the CPEO solely liable for federal employment taxes on the wages it pays your employees. In plain terms: if a CPEO collects your payroll taxes and fails to send them to the IRS, the IRS pursues the CPEO, not you.

With a non-certified PEO, that protection does not automatically apply. If the PEO mishandles the money, the IRS can still come after your business for the unpaid tax. That's a real difference, and it's why the certification is worth asking about. You can confirm a provider's status on the IRS list of certified PEOs, and you can browse providers in our PEO directory.

Where you usually stay liable

A PEO does not erase your responsibilities as the business owner. You typically remain on the hook for:

  • Worksite safety. You control the physical workplace and how work gets done, so most safety and injury risk stays with you. (Workers' compensation coverage often runs through the PEO's program, but preventing injuries is your job.)
  • Day-to-day management decisions. How you schedule, assign, and supervise your team is yours.
  • The reason behind an employment decision. If you fire someone for an unlawful reason, that decision is yours, even if the PEO processes the paperwork.

Put simply, the PEO handles the administration. The judgment calls about your people are still yours.

Where liability is shared

Some risks land on both parties at once, because both are considered employers under the law. The most common:

  • Discrimination and harassment claims. The EEOC treats staffing firms and their clients as potentially joint employers, so a discrimination claim can name both you and the PEO. The EEOC's guidance on contingent workers spells out how both can share responsibility.
  • Wage and hour claims. You set schedules and pay rates. The PEO runs payroll. If overtime or minimum wage is calculated wrong, a claim can reach both of you.

Shared liability isn't a loophole to fear. It's a reason to keep good records and to read how your contract handles indemnification, which is the clause that says who reimburses whom when a claim hits.

Quick reference: who's usually on the hook

Who's usually liable when things go wrong
Type of problemUsually liableWhy
Federal payroll tax errorThe CPEO (or you, if not certified)A Certified PEO holds sole federal employment-tax liability under IRC 3511; a non-certified PEO does not, so you can stay exposed
Workplace injury or safety violationUsually youYou control the worksite and daily conditions; workers' comp coverage often runs through the PEO
Benefits or plan administration errorUsually the PEOThe PEO administers the health and retirement plans as employer of record
Wrongful terminationUsually youYou make and own the decision, even if the PEO handles paperwork
Discrimination or harassment claimOften sharedYou and the PEO can both be named as joint employers
Wage and hour (overtime, minimum wage)Often sharedYou set pay and schedules; the PEO processes payroll

Illustrative and educational, not legal advice. Exact liability depends on your contract, your state, and the facts. Ask a qualified attorney about your situation.

How to protect your business

You can't eliminate employer risk, but you can manage it. Three practical steps:

  • Ask whether the PEO is certified. For payroll-tax protection, CPEO status is the clearest safeguard.
  • Read the indemnification clause. Know who covers what when a claim lands, and get it in writing.
  • Keep clean records. Good documentation on hiring, discipline, hours, and pay is your best defense in a shared-liability claim.

A PEO can genuinely lower your risk in the areas it controls, especially payroll taxes and benefits compliance. It just doesn't make you risk-free, and any provider that promises it does is overselling.

What to check in the service agreement

Most of these outcomes are not left to chance; they are written into the PEO service agreement. The clause that matters most is indemnification, which says who reimburses whom when a claim lands. Strong agreements are mutual: the PEO indemnifies you for its own failures, such as misremitted taxes or a botched benefits filing, and you indemnify the PEO for things only you control, such as an unlawful firing or wage data you supplied. Read three things closely. First, whether indemnification runs both ways or only protects the PEO. Second, the client covenants, the promises you make about worksite safety, accurate data, and lawful decisions, because breaking one can shift a loss back to you. Third, the insurance the PEO carries and whose name the workers' compensation policy is written in. If you want the broader picture of how a PEO reduces risk in the first place, our guide to PEO risk management covers the programs that sit behind these clauses.

The right PEO is the one whose contract matches how much risk you actually want to hand off. To compare providers on exactly these terms, you can request a free PEO comparison and consultation. A broker walks you through the details at no cost to you. If you sign through him, he shares part of his fee with us. The process takes several business days, not minutes, so you have time to ask the liability questions that matter.

Sources