Most employers meet 401(k) management companies long before they understand what those companies actually do. A payroll rep recommends one, a broker brings one along, and suddenly your plan has a “provider” — but nobody has told you which of your legal duties as plan sponsor just moved off your desk, and which ones never left it.
This guide breaks down what 401(k) management companies handle, what they quietly leave with you, and the questions that separate a vendor from a genuine fiduciary partner.
What “401(k) management company” actually means
The phrase isn’t a legal term. It’s an umbrella employers use for any firm that touches the plan — recordkeepers, third-party administrators (TPAs), investment advisors, payroll integrators, and 3(16) administrative fiduciaries. Each of those does something different, and only some of them accept fiduciary responsibility in writing.
That ambiguity is the problem. When a sponsor says “our 401(k) is managed,” they usually mean the paperwork gets processed. Under ERISA, “managed” and “fiduciary responsibility discharged” are two very different states. For the distinction between the sales label and the service, see our breakdown of 401(k) providers vs. 401(k) administrators.
What 401(k) management companies typically do
1. Recordkeeping and participant accounting
Tracking balances by participant and money source, processing contributions and distributions, running the participant website and statements. This is the visible core of most relationships.
2. Investment lineup support
Building and monitoring the fund menu. Depending on the contract, this is either non-fiduciary “support” or a genuine 3(21) or 3(38) engagement — a meaningful difference explored on our 3(38) investment fiduciary page.
3. Compliance testing and government filings
Coverage and nondiscrimination testing, contribution limit monitoring, and preparation of the Form 5500. Preparation is the key word — most firms prepare it; the sponsor still signs it.
4. Plan document maintenance
Keeping the document, adoption agreement, and amendments current with legislative changes, and issuing required participant notices.
5. Payroll and data integration
Moving deferral and eligibility data between your payroll system and the plan. Useful, but note that integration doesn’t validate your data — bad eligibility inputs still become operational failures.
What they usually do not do
1. Accept named fiduciary status
Unless the contract says otherwise, the employer remains the ERISA 402(a) named fiduciary with ultimate authority over the plan. Our guide to the 402(a) named fiduciary role covers what that means day to day.
2. Sign and own the Form 5500
The plan administrator signs, and by signing attests to the return’s accuracy. Preparation by a vendor doesn’t shift that attestation.
3. Approve distributions, loans, and QDROs
Discretionary decisions typically bounce back to the employer for sign-off — which is exactly where fiduciary exposure lives.
4. Monitor themselves
Selecting and monitoring service providers is itself a fiduciary act. Nobody can delegate away the duty to monitor the delegate. Practically, that means documented fee and service reviews — the discipline behind 401(k) plan benchmarking.
5. Fix their own errors at their own risk
Read the limitation-of-liability and indemnification clauses. Many contracts cap exposure at fees paid, leaving correction costs — including any required participant make-whole contributions — with the plan sponsor.
Where the gap bites employers
The most common failures we see aren’t exotic. They’re gap failures — work that everyone assumed the other party owned:
- Late deferral deposits. Employee contributions must be remitted as soon as they can reasonably be segregated from company assets. Recordkeepers report the funding date; they don’t police it.
- Eligibility tracking. Missed entry dates for part-time, rehired, or seasonal employees are classic operational errors requiring correction.
- Untimely notices. Safe harbor, QDIA, and automatic enrollment notices have deadlines. “The portal has it” is not delivery.
- Unsigned or stale plan documents. Amendments prepared but never executed are a favorite audit finding.
- Undocumented decisions. Prudence under ERISA is judged by process. No file, no process.
If any of those sound familiar, our list of 7 signs you need a 3(16) fiduciary is a fast self-check.
The 3(16) difference
A 3(16) plan administrator doesn’t just perform administrative work — it is appointed to the role and takes on the associated fiduciary responsibility in writing. Instead of preparing documents for you to own, a full-scope 3(16) can hold signing authority, approve distributions and loans, deliver notices, and stand behind those actions as a fiduciary.
The practical test is simple: ask a prospective firm to point to the contract language naming it a fiduciary and listing the specific functions it accepts. If that language doesn’t exist, the duty is still yours no matter how the service is marketed. Our 3(16) plan administration page details the scope, and 402(a) fiduciary services covers the named-fiduciary layer above it.
Seven questions to ask any 401(k) management company
1. Which specific fiduciary roles do you accept in writing?
Ask for the section and page. “Fiduciary-friendly” is marketing; a named appointment is a contract term.
2. Who signs the Form 5500?
If the answer is “you do,” you retain the attestation risk.
3. Who approves distributions, loans, and hardships?
Every item that returns to your desk is a discretionary decision you own.
4. What is your total cost, including revenue sharing?
Direct fees, asset-based fees, and indirect compensation. You can’t evaluate reasonableness on a partial number.
5. How and when will you tell me about an error?
Ask for the notification standard and correction process, in writing.
6. What documentation will I have if the plan is audited?
You want notice logs, deposit timing records, testing results, and executed amendments — retrievable on request.
7. What happens at termination?
Data format, transition support, and cost. Exit terms tell you how a firm behaves under pressure.
For a deeper vendor evaluation, work through our how to choose a 401(k) administrator checklist.
A reasonable division of labor
Good plan governance isn’t about outsourcing everything. It’s about knowing exactly where each duty sits:
- Vendor work — recordkeeping, testing, filing preparation, participant service.
- Appointed fiduciary work — signing authority, notice delivery, discretionary approvals, documented process (a 3(16)/402(a) engagement).
- Always the employer’s — appointing and monitoring providers, funding decisions, plan design intent, and paying reasonable fees from plan assets.
Write that split down. A one-page responsibility matrix, reviewed annually, resolves most of the confusion that turns into a correction filing two years later. Our ERISA fiduciary duties checklist is a useful starting frame.
Next step
If you can’t say today who signs your Form 5500, who approved your last hardship distribution, and when your deferrals were deposited last quarter, those are gaps — not vendor failures. They’re the sponsor duties nobody explicitly took.
Book a 30-minute plan review with Admin316 and we’ll map your current arrangement against the duties that remain with you, then show you exactly which ones a 3(16) engagement can take off your plate.
