How to Choose a Payroll Support Provider in the USA

"Payroll provider" covers very different jobs, and the difference decides who is on the hook. The IRS sorts third-party payers into four types: payroll service providers, reporting agents, section 3504 agents and certified professional employer organizations (CPEOs). Beyond those, a business can run payroll itself in software such as Gusto, ADP, Rippling or Deel, hire a payroll clerk, or bring in an outside team that checks each run and keeps the ledger in step with the platform. That last role is payroll support, and it's the one Finbryn fills.

Whichever you pick, the employer keeps the responsibility. Publication 15 (2026) puts it plainly: "Generally, as an employer, you're responsible to ensure that tax returns are filed and deposits and payments are made, even if you contract with a third party to perform these acts."

This guide ranks no one. It gives twelve checks, each with a way to verify it and the primary source behind it, all opened on 2026-10-08.

Checks 1 to 4 tell you where the liability sits. Checks 5 to 12 tell you whether the work will be done properly.

1. Which kind of third-party payer you are hiring. The IRS lists four types: a payroll service provider, a reporting agent, a section 3504 agent and a CPEO. A reporting agent works under Form 8655, which authorizes it to sign and file certain returns, make deposits and receive duplicate copies of notices. A section 3504 agent is appointed on Form 2678, and a CPEO works under a customer reporting agreement on Form 8973. *Verify:* ask the provider to name its type in writing and hand over the form that applies. A provider that only reviews and reconciles should say it needs none.

2. Your own EFTPS access and address of record. The IRS tells employers to register on EFTPS to get their own PIN and use it to check payments, and not to change the address of record to the provider's address, because that "may significantly limit the employer's ability to be informed of tax matters involving their business." The same page says "a red flag should go up the first time a service provider misses a payment or makes a late payment." *Verify:* log in to EFTPS yourself this week and compare the last four deposits with the provider's reports.

3. Who is liable if a deposit fails. The IRS says "the employer is ultimately responsible for the deposit and payment of federal tax liabilities." The Trust Fund Recovery Penalty is 100% of the unpaid trust fund tax, and the IRS's TFRP page (reviewed October 10, 2025) lists payroll service providers and PEOs, along with their responsible parties, among the people it can assess, next to your own officers. *Verify:* read the contract's indemnity clause with that in mind, because whatever it says, the IRS treats you as the responsible employer. Then ask what the provider does, and tells you, when it misses a deposit.

4. CPEO status, if the provider claims it. The IRS makes one exception to the rule that employers stay responsible: customers of a CPEO may be relieved of certain liabilities under specific circumstances. The IRS lists active CPEOs, updated by the 15th day of the first month of every calendar quarter, and keeps separate lists of those suspended or revoked (page reviewed November 26, 2025). *Verify:* search all three lists for the provider's legal name. A PEO that isn't on the active list isn't a certified one, whatever its marketing says.

5. The deposit schedule and the year-end calendar. Publication 15 (2026) makes you a monthly schedule depositor if you reported $50,000 or less of taxes for the lookback period and a semiweekly depositor if you reported more. Form 941 is due April 30, July 31, October 31 and January 31. For 2026 wages, Form W-2 is due to the SSA and your employees by February 1, 2027, and Form 1099-NEC is due February 1, 2027 (January 31 falls on a Sunday) with a $2,000 reporting threshold for payments made in 2026. *Verify:* ask for a compliance calendar for your EIN, with your deposit schedule and each of those dates filled in.

6. Who registers you in a new state. State unemployment tax is paid to state workforce agencies, and each state sets its own rates and wage bases, according to the Department of Labor's unemployment insurance tax topic page (updated September 11, 2026). Employers who pay state unemployment tax on time get a federal offset credit of up to 5.4%. *Verify:* ask how the provider learns about a hire in a new state and who registers you before the first paycheck, then ask about state income tax withholding separately. The payroll setup guide walks through the registrations.

7. Worker classification. The IRS groups the evidence into behavioral control, financial control and the type of relationship, and says there is "no 'magic' or set number of factors" that settles it (reviewed May 19, 2026). A payroll provider can run whatever classification you give it, but it can't make the call for you. *Verify:* ask how contractor payments are tracked so the 1099-NEC data is ready, and who flags a contractor who starts to look like an employee. The Form 1099 guide covers the filing side.

8. Whether the ledger matches the platform. Payroll posts entries to your books every pay period: gross wages, withholding, employer taxes and benefit deductions. The liability accounts should agree with what the platform withheld and paid, and with each quarterly Form 941. *Verify:* ask for a sample reconciliation that ties the wage, withholding and liability accounts to the payroll register and to the last filed 941. Finbryn's payroll journals and reconciliations page shows what that work covers.

9. Pay-run controls. The person who adds employees or changes bank details shouldn't be the one who approves the run. The FBI's Internet Crime Complaint Center warned in an alert dated September 10, 2019 about spoofed emails asking payroll teams to change employees' direct deposit accounts, and advised using "secondary channels or two-factor authentication to verify requests for changes in account information." *Verify:* ask who can change bank details, how a change request is confirmed and who gets alerted.

10. Data security. Payroll files hold Social Security numbers and bank accounts. The FTC Safeguards Rule, 16 CFR 314.4, is a useful yardstick even where it doesn't bind the provider. It asks for multi-factor authentication for anyone accessing an information system and for encryption of customer information in transit and at rest, and paragraph (f) covers oversight of service providers. A SOC 2 report is an examination performed by a CPA practice: Type 1 covers controls as of one date, Type 2 covers a period. *Verify:* ask for the written security program and the latest SOC 2 Type 2 report if one exists, plus a list of subcontractors. Ask the payroll platform the same questions.

11. How the price is built. Payroll is usually priced per employee per month plus a base fee, and the extras surface later: off-cycle runs, new-state setup, year-end forms. Finbryn's published payroll support rate starts from $8 per employee per month on its pricing page. For scale on the in-house side, the BLS national median wage for payroll and timekeeping clerks was $58,260 in May 2025. Dividing that by the 70.0 percent wage share BLS reports for private-industry employer costs (June 2026) gives about $83,229, an illustration that excludes software and supervision. *Verify:* get a written list of every fee beyond the base price, and ask whether the platform subscription is billed to you or to the provider.

12. The exit pack. The IRS says to keep employment tax records for at least 4 years after the tax becomes due or is paid, whichever is later, and Publication 15 repeats the 4-year minimum. *Verify:* ask for payroll registers by pay date, year-to-date totals by employee, copies of filed Forms 941 and W-2 and the deposit history, in a format you can open without the provider. A switch at a quarter boundary keeps each Form 941 in one provider's records.

Cost figures appear only where an agency or the provider publishes them. Nothing here is a quote.

The types stack. Plenty of businesses use a platform to run pay and a separate reviewer to keep the books straight, and a PEO or a full-service provider can sit under either.

Finbryn is one option, and for some employers it's the wrong one. Skip it if:

• You want someone to run pay, deposit taxes and file the quarterly returns. Finbryn doesn't. Your platform or a full-service provider does that, under your authorization.
• You want a co-employer that takes on HR and benefits administration. That is a PEO or CPEO arrangement, and Finbryn is neither.
• You don't have a payroll platform yet. Choose one first, using the payroll setup guide, because Finbryn works alongside a platform.
• You need a provider that signs Form 8655 as your reporting agent. Finbryn isn't one.
• You want Finbryn to decide whether a worker is an employee or a contractor. That call is yours. Finbryn tracks the payments once you've made it.

Ask for these before the call: the provider's type in writing, a sample compliance calendar, a redacted reconciliation, the fee schedule and a security summary. Then run the call like this.

1. Minutes 0 to 5. Say how many people you pay, which states they work in and which platform you use. Ask which of the four IRS payer types the provider is.
2. Minutes 5 to 12. Ask to see your deposit schedule and how the provider confirms each deposit landed. Ask what happens on the first missed payment.
3. Minutes 12 to 18. New states and contractors. Who registers you, and who tracks the 1099-NEC data?
4. Minutes 18 to 24. Controls. Who can change bank details, and who approves a run?
5. Minutes 24 to 30. Price and exit. Every fee beyond the base, and what leaves with you if you switch.

Put the same questions to Finbryn. Its scope is on the payroll support page, the rate on the pricing page and the controls on the security page.