For accounting firms
Employee benefit plan audit and Form 5500 support
Finbryn provides Form 5500 and employee benefit plan audit preparation support for third-party administrators and accounting firms: draft data packs, audit request lists, participant data tie-outs and contribution timeliness workpapers. The plan administrator signs and files on EFAST2, and the plan's independent auditor issues the report.
Engagement tracker
Illustrative client ยท September 2026
USD
- Client file access set up under your firm's nameDone
- Monthly books prepared to your review standardDone
- Review notes cleared and loggedIn progress
- Reports sent to your partner for sign-offNext
- Year-end workpapers staged for your preparerNext
Illustrative. An example of the document, not a client's figures.
Most 401(k) plans need two things each year that eat the same few weeks of a TPA's or accounting firm's capacity: a Form 5500 filed on EFAST2, and for plans with 100 or more participants with account balances at the start of the plan year, an independent audit attached to it. The filing is due by the last day of the seventh month after the plan year ends, July 31 for a calendar-year plan, and a timely Form 5558 extends it by two and a half months, to October 15.
Most of the hours in this work are not judgment. They are chasing a census file, tying payroll registers to recordkeeper deposits, building the list of what the auditor needs, and testing whether each employee deferral reached the trust on time. That is the layer we take. A firm sends the plan's data and the recordkeeper and payroll reports; we return a tied-out participant file, a contribution testing workpaper, an audit request list already marked up against what has been received, and a draft data pack for the Form 5500 and its schedules.
The edges are firm. The plan administrator reviews, signs and files the 5500 using EFAST2 credentials, and the independent auditor issues the opinion on the plan's financial statements. Defined benefit actuarial schedules, including Schedule SB, are excluded because the plan's enrolled actuary prepares and signs them. Our work is the preparation support underneath, in your firm's templates, so your reviewers open a workpaper and not a mystery. Capacity is the point: the same four workpapers, repeated across every plan on your list, in the weeks when your own staff are busiest.
For the sponsor's own books behind a plan audit, see audit support services.
Plans with a defined benefit side also need actuarial services.
What is included
A standard engagement for one defined contribution plan covers four workpapers. The first is a participant data tie-out: the census from the plan sponsor, payroll registers by pay date and the recordkeeper's contribution and balance reports are matched, and every difference is listed with a probable cause. The second is contribution timeliness testing, with each pay date, the date deferrals were withheld, the date they were deposited and the number of business days between them. The third is the audit request list, built from the plan's structure and the auditor's standard template, with received and outstanding items tracked. The fourth is a draft data pack for the Form 5500, with the numbers the filing needs from the plan's financial statements, ready for the administrator's review.
Where the plan has a trust statement, we also reconcile it to the draft financial statements so the audit starts from numbers that agree. Everything is delivered in Excel or in your practice-management workflow, with the formulas left visible.
How the process works
We start by confirming scope with the firm: plan type, plan year end, recordkeeper, payroll system and which of the four workpapers are wanted. The firm or plan sponsor then sends source files through its own secure channel. We load the census and payroll data, run the tie-out and send back a list of exceptions within the date agreed at kickoff, so the sponsor can fix data problems before the auditor arrives.
Contribution timeliness comes next. DOL regulation 29 CFR 2510.3-102 treats participant contributions as plan assets as soon as they can reasonably be segregated from the employer's general assets, and no later than the 15th business day of the month after they were withheld. Plans with fewer than 100 participants have a safe harbor of seven business days. We test each pay date against both and flag late deposits with the number of days late, so the firm can decide how the late deposit is corrected and reported. We never decide that for the plan.
Who this is for
The buyer is a firm, not a plan sponsor. TPAs with a filing season that outgrows their staff use us for data prep and workpapers. Accounting firms with an employee benefit plan audit practice use us when fieldwork and request-list building fall in the same weeks as their other deadlines. Firms that audit a handful of plans a year and cannot justify a full-time hire use us for the testing and tie-out layer only.
It is not a fit for a plan sponsor looking for someone to be named as the plan administrator, or for a firm that needs the audit report itself written. We prepare, you review and sign.
Common problems we fix
Census files that do not match the payroll register are the most common problem, usually because of terminated employees, rehires or a mid-year payroll change. Second is the audit request list built from scratch every year, because last year's list lives in one person's inbox. Third is deposit dates taken from a recordkeeper summary that shows the date the money was invested, not the date it left the employer's account. That distorts the timeliness test. Fourth is a Form 5500 data pack that is assembled the week of the deadline with no tie-out behind it. Fifth is loan and distribution testing left to the auditor's sample when the firm could have caught the exceptions in advance.
Software and integrations
We work in the files and portals your firm already uses. Census and payroll data arrives as exports from ADP, Paychex, Gusto or the sponsor's own system, and balances arrive from the recordkeeper's reporting portal. Workpapers are built in Excel, with a clean copy placed in Karbon, Canopy or your practice-management tool. The Form 5500 itself is entered and filed by the plan administrator, or by the firm acting for the administrator, on the Department of Labor's EFAST2 system. We do not hold EFAST2 credentials and do not file on anyone's behalf.
Privacy and consent
Plan data includes Social Security numbers and account balances, so we ask for the minimum fields the test needs and for data to arrive over your firm's secure channel. Where tax return information is involved, the signing preparer obtains the client's written consent before it is shared with a service provider, consistent with IRC section 7216, and we treat Form 5500 engagements the same way. Files are returned to you, and retention follows your engagement letter. Details of the controls we apply are on our security page.
What it costs
Pricing is per plan and depends on the number of participants, the number of payroll sources and which workpapers you want. We do not publish a per-filing price, because a plan with one payroll and a clean recordkeeper file takes far less time than one with three payrolls and a mid-year recordkeeper change. We quote after seeing a sample of the census and one payroll register, in writing, before work starts. Capacity for firms with many plans is scoped as a recurring engagement and covered on our pricing page.
Timeline and onboarding
Setup takes about a week: we agree scope, match your workpaper templates and run a test on one prior-year plan so you see the output before the busy season. After that, each plan runs on a calendar tied to the plan year end. EBP fieldwork clusters in the late spring and the weeks before the October extended due date, so we ask firms to book capacity early. For similar capacity beyond benefit plans, see review support and PBC lists.
How we work
The process
- 1
Scope and templates
We confirm plan type, year end, recordkeeper, payroll sources and the workpapers wanted, and adopt your firm's templates.
- 2
Data intake
Census, payroll registers and recordkeeper reports arrive over your secure channel with only the fields the tests need.
- 3
Participant tie-out
We match census, payroll and recordkeeper balances and list every exception with a probable cause.
- 4
Timeliness testing
Each pay date is tested against the deposit date and the DOL timing rule, with late items flagged for your decision.
- 5
Request list and tracker
The audit request list is built from the plan's structure and tracked as items arrive.
- 6
Draft data pack
A draft of the figures the Form 5500 needs goes to the plan administrator or your firm for review before EFAST2 filing.
Employee benefit plan audit and Form 5500 support
Common problems we fix
The problem
How we fix it
- Census does not match the payroll registerWe tie both to the recordkeeper by participant and return an exception list the sponsor can fix before fieldwork.
- Audit request list rebuilt from scratch each yearWe keep a plan-specific list and carry it forward with status columns.
- Deposit dates taken from investment datesWe test against the date funds left the employer's account, using payroll and bank evidence.
- Form 5500 data assembled the week of the deadlineWe tie the figures to the trust statement earlier in the year and hand the administrator a reviewed pack.
- Loan and distribution exceptions found only in the auditor's sampleWe test the full population and flag exceptions in advance.
Pricing
Pricing is per plan, based on participant count, payroll sources and workpapers requested, and quoted in writing after we see sample data. Recurring capacity for firms with many plans is scoped as an ongoing engagement; see /us/pricing.
Employee benefit plan audit and Form 5500 support
Glossary
- Form 5500
- The annual return and report that most employee benefit plans file with the Department of Labor through the EFAST2 system.
- EFAST2
- The Department of Labor's electronic filing system for the Form 5500 series.
- Plan administrator
- The person or entity named in the plan document who is responsible for the plan and signs the Form 5500.
- PBC list
- Prepared by client list: the documents and data an auditor asks the plan sponsor to provide.
- Form 5558
- The IRS form used to request an extension of time to file the Form 5500, normally by the original due date.
Questions
Frequently asked questions: Employee benefit plan audit and Form 5500 support
Who signs and files the Form 5500?
The plan administrator signs it and files it electronically on EFAST2, directly or through a firm acting for them. For a calendar-year plan the due date is July 31, or October 15 with a timely Form 5558. We prepare a draft data pack and never file.
Which plans need an audit?
Generally plans with 100 or more participants at the start of the plan year (for 401(k) and other defined contribution plans, participants with account balances, the count used since 2023 plan years), under the counting rules in the Form 5500 instructions. A plan that filed as a small plan the year before can stay small until it passes 120. Your auditor confirms the count.
Do you write the audit report or review the plan's financial statements?
No. The independent auditor who signs the report owns the audit and every conclusion in it. We prepare request lists, tie-outs and testing workpapers for that auditor to review.
What is the deadline for depositing employee deferrals?
Under 29 CFR 2510.3-102, as soon as they can reasonably be segregated, and no later than the 15th business day of the following month. Plans under 100 participants have a seven business day safe harbor. We test your pay dates against both, checked 2026-10-09.
Do you handle Schedule SB for defined benefit plans?
No. Actuarial schedules need a credentialed actuary, so defined benefit work is excluded. We cover defined contribution plans and the participant and financial data around the filing.
Is our client's data protected?
We ask only for the fields each test needs, receive them over your secure channel, and follow the consent rule in IRC section 7216 before return information is shared. See review support for how we work inside your reviewer workflow.
Do you issue the plan audit report?
No. The independent auditor who signs the report owns every conclusion. We prepare request lists, tie-outs and testing workpapers that the audit team reviews and re-performs as it sees fit.
What about Schedule SB and other actuarial schedules?
Defined benefit schedules are excluded because they need a credentialed actuary. This service covers defined contribution plans and the financial and participant data around the filing.
Is return information shared with you?
Only after consent. The signing preparer obtains the client's written consent before return information is shared with a service provider, consistent with IRC section 7216, and we treat Form 5500 data the same way.
Related services
- For accounting firmsReview supportA second set of eyes on files your firm has already prepared, checking ties, disclosures and workpaper completeness before they reach your partner for sign-off.
- For accounting firmsBusy season tax prep supportPreparation-support capacity for firms during filing season: source documents put in order, workpapers built and draft returns assembled for your credentialed preparers to review and sign.
- For accounting firmsWhite-label technical accounting support for accounting and audit firmsASC research memos, supporting calculations and position papers drafted in your firm's template and under your firm's name, for your professionals to review, adopt and sign.
- For accounting firmsWhite-label bookkeepingMonthly bookkeeping produced under your firm's own name and templates, so your clients see your brand while our team handles sorting transactions into categories, reconciling and reporting behind it.
- For accounting firmsDedicated staff podsA named, fixed group of accountants assigned to your firm alone, working your files on your schedule, rather than a rotating pool shared across other engagements.
Industries
Related guides
- Compliance401(k) Audit Requirements: 100 Participants and the 80-120 Rule401(k) audit requirements: who counts toward 100 participants, how the 80-120 rule works, limited-scope audits and Form 5500 penalties. Checked 2026-10-19.
- ComplianceIAS 19 vs ASC 715: Employee Benefit AccountingIAS 19 vs ASC 715 compared: scope, discount rate, asset ceiling, OCI, net interest, plan amendments and disclosures, with worked examples checked 2026-10-16.
Sources
- [1]U.S. Department of Labor, EFAST2 electronic filing system for the Form 5500 series, October 2026
- [2]U.S. Department of Labor, Form 5500 Series (instructions and filing requirements), October 2026
- [3]29 CFR 2510.3-102, Definition of plan assets: participant contributions, October 2026
- [4]AICPA Employee Benefit Plan Audit Quality Center, October 2026
- [5]IRS, About Form 5558, Application for Extension of Time to File Certain Employee Plan Returns, October 2026
Next step
Talk to the team that would run your books
A short call covers your setup, your software and what a first month would look like. You get a written scope and price after it.
Need this in writing? Download a one to two page scope sheet for Employee benefit plan audit and Form 5500 support: what is included, the process, and where pricing lives.
Download the scope sheet