What Is a 401(k) Recordkeeper?

A 401(k) recordkeeper maintains the participant-level ledger.

That ledger answers questions such as:

• How much did each employee contribute?
• Which investments does each participant own?
• How many units or shares are allocated to each account?
• What gains or losses belong to each participant?
• What fees were charged?
• What loan balance remains?
• How much is vested?
• What distributions have been paid?

IRS treats arranging a trust for plan assets and developing a recordkeeping system as separate steps in establishing a 401(k).^[1]

That distinction is fundamental.

The recordkeeper tracks who is entitled to what.

The trustee or custodian generally holds or controls the underlying plan assets, depending on the plan structure.^[1]

One financial company may provide both services. The roles are still different.

Key Takeaways

• A 401(k) recordkeeper maintains participant-level records for contributions, earnings and losses, investments, expenses and benefit distributions.^[1][2]
• The recordkeeping role is distinct from the trust or custody function that holds plan assets.^[1]
• A provider can bundle recordkeeping with custody, TPA, brokerage, investment or other services. Bundling does not make the legal roles interchangeable.^[6]
• The recordkeeper's calculations depend on data received from:
• payroll
• HR
• the plan administrator
• investment providers
• trustees or custodians
• participant instructions
• A recordkeeper can process bad input correctly and still produce the wrong participant result.
• Purely ministerial recordkeeping under rules and procedures established by others generally does not create fiduciary status for those functions. Discretion or control can change the analysis.^[11]
• Recordkeeping fees can be direct, per-participant, asset-based, bundled or supported through indirect investment-related compensation.^[6][7]
• Plan fiduciaries must prudently select and monitor service providers rather than assuming the provider's size or reputation settles the question.^[3][6][9]
• DOL's current cybersecurity guidance specifically addresses recordkeepers and other service providers responsible for plan-related IT systems and participant data.^[8][9][10]
• A recordkeeper change can trigger a blackout period during which participants temporarily cannot direct investments, obtain loans or take distributions; affected participants generally receive advance notice under the applicable rules.^[12]
• A participant with an unresolved account discrepancy should preserve evidence and escalate benefit-right or formal-document issues to the legal plan administrator.

The Recordkeeper Is the Participant Ledger

A defined contribution plan has a pool of plan assets.

It also has individual participant interests in those assets.

The recordkeeping system connects the two.

IRS says an accurate system should track and properly attribute:^[1]

• contributions
• earnings
• losses
• investments
• expenses
• benefit distributions

to participant accounts.

That is not clerical bookkeeping in the ordinary sense.

A $50 million 401(k) with 800 participants needs to know not just:

"The trust owns $50 million."

It needs to know:

"Which portion belongs in each participant account, subject to the plan's terms?"

Ledger Is Not Custody

Suppose a participant portal shows:

Account balance: $184,250

The recordkeeper maintains the accounting record behind that number.

That does not necessarily mean the recordkeeper itself holds $184,250 in a vault, brokerage account or bank account for that participant.

IRS describes the architecture separately:^[1]

1. written plan
2. trust fund for plan assets
3. recordkeeping system
4. participant information

The trust generally holds the assets for participants and beneficiaries. Insurance-contract arrangements can operate differently.^[1]

The recordkeeper allocates the participant's economic interest in those assets through its records.

Why This Distinction Matters

If the website is down, the plan assets do not cease to exist.

If the recordkeeper changes, the 401(k) does not automatically terminate.

If the participant ledger is wrong, the custody account can still contain the correct total plan assets.

Conversely, participant records can look internally consistent while a trust-level reconciliation reveals a funding or allocation problem.

The ledger and the assets have to reconcile.

They are not the same thing.

Recordkeeper vs. Custodian or Trustee

One company can occupy several columns.

Never identify the role from the logo alone.

What Flows Into the Recordkeeping System?

The recordkeeper does not invent participant data.

It receives it.

Typical inputs include:

Payroll

• salary deferrals
• Roth deferrals
• catch-up contributions
• loan repayments
• compensation data

Employer or TPA

• match
• nonelective contributions
• profit-sharing allocations
• eligibility data
• service data
• vesting data

Participant

• investment elections
• beneficiary elections
• contribution-rate changes
• loan requests
• distribution requests

Investment and custody systems

• prices
• trades
• fund units
• cash transactions
• asset values

The account is the result of those data flows.

Bad Input Can Produce a Perfectly Calculated Wrong Answer

Assume the plan document says:

Bonuses are excluded from compensation for employer match purposes.

Employee earns:

• salary: $100,000
• bonus: $30,000

Payroll sends compensation of:

$130,000

without identifying the bonus exclusion.

The recordkeeper or TPA calculates a 4% match:

$5,200

The correct plan amount should have been:

$4,000

The calculation engine may have performed exactly as programmed.

The error occurred at the interface between:

• plan document
• payroll data
• recordkeeping instructions

IRS specifically tells plan sponsors to communicate plan amendments, compensation rules, employee data, loan provisions and contribution formulas to service providers.^[3][4]

"System-generated" does not mean "plan-correct."

The Ledger Needs a Source for Every Important Number

A useful control is to ask what evidence supports each recordkeeping field.

This is how an account discrepancy becomes investigable.

Contribution Reconciliation

Suppose a pay stub shows:

401(k) deduction: $750

The recordkeeping account shows no contribution.

Three questions matter:

1. Did payroll withhold the $750?
2. Did the employer transmit it to the plan?
3. Did the recordkeeper allocate it to the correct participant?

Those are different failure points.

Do not assume the recordkeeper caused the problem because its website is where the missing money becomes visible.

INV-072 explains statement reconciliation in more detail.

Example: Money Reaches the Trust but Not the Participant Account

Assume an employer sends a contribution file and cash for:

$80,000

The trust receives all $80,000.

One participant's $1,000 contribution is coded to the wrong employee ID.

Trust-level cash is correct.

Participant allocation is wrong.

The recordkeeper's reconciliation process should identify or help resolve the mismatch.

This is why plan-level and participant-level accounting both matter.

Employer Contributions Can Be More Complicated

Employee deferrals often arrive directly from payroll.

Employer contributions can require additional logic:

• match formula
• eligible compensation
• annual true-up
• hours or service
• allocation conditions
• contribution limits
• vesting

The recordkeeper may calculate some of these items.

A TPA may calculate them instead.

The employer may send a final allocation file.

There is no universal workflow.

Read the service agreement.

Recordkeeper vs. TPA

The difference is easiest to see through work product.

Recordkeeper

Often handles:

• participant accounts
• transactions
• website
• statements
• loans
• distributions
• investment elections

TPA

Often handles:

• nondiscrimination testing
• contribution calculations
• eligibility testing
• compliance work
• Form 5500 preparation
• plan document support

A bundled provider can do both.

A small TPA can perform no custody or daily participant recordkeeping at all.

The labels describe functions, not a fixed legal hierarchy.

Recordkeeper vs. Plan Administrator

The recordkeeper can handle almost every participant interaction and still not be the ERISA plan administrator.

INV-080 explains the statutory role.

The practical dividing line is important.

Recordkeeper question

"Why did my investment transfer not post?"

Plan administrator question

"Does the plan document legally permit this distribution?"

The recordkeeper may answer the second question under procedures supplied by the administrator.

That does not necessarily mean it owns the legal decision.

A Website Feature Does Not Amend the Plan

Suppose the portal displays:

Hardship Withdrawal — Apply Now

The plan document does not permit the requested hardship distribution.

The website cannot create the benefit.

Reverse the problem:

The plan document permits a loan.

The portal says:

Loans unavailable

The software cannot erase the written plan right merely by disabling a button.

INV-079 explains why plan terms and operational configuration must match.

Is a Recordkeeper an ERISA Fiduciary?

Not automatically.

DOL's functional fiduciary framework distinguishes ministerial work from discretionary authority.

Advisory Opinion 2001-02A explains that purely ministerial functions carried out within rules, practices and procedures established by others generally do not make the service provider a fiduciary for those functions.^[11]

That can include recordkeeping and administrative work.

The conclusion changes when the provider exercises discretion or control.

Ministerial Recordkeeping

Examples can include:

• posting contributions under supplied instructions
• calculating balances using established formulas
• preparing participant reports
• processing investment elections
• generating statements
• carrying out approved transactions

when the provider lacks discretionary authority to change the governing rule.

The provider is operating the machine.

Someone else set the rule.

When Fiduciary Analysis Changes

Suppose the recordkeeper can independently decide:

• whether a participant is entitled to a disputed benefit
• how plan assets will be invested without participant or fiduciary direction
• whether to substitute investments in circumstances where it holds discretionary authority
• how plan assets are controlled or disposed of

Those facts can create fiduciary functions under ERISA's functional test.^[11]

A company can therefore be:

nonfiduciary for one service and fiduciary for another.

Ask what function it performed.

Contract Language Matters, But Conduct Matters More

A service agreement can say:

"Recordkeeper is not a fiduciary."

That language helps define the intended relationship.

It does not override actual fiduciary conduct.

If the provider exercises the kind of discretion or control ERISA treats as fiduciary, a contractual label cannot make the function ministerial.

INV-075 covers the broader function-over-title rule.

Recordkeeping Fees

Recordkeeping costs are real even when the participant never sees:

Recordkeeping fee: $25

DOL describes plan recordkeeping as a plan administration service and explains that administrative costs can be paid through several structures.^[6]

Common arrangements include:

• flat plan fee
• per-participant fee
• asset-based fee
• direct participant charge
• employer-paid charge
• bundled provider fee
• indirect investment-related compensation

The economic question is the total cost for the service delivered.

Example: Per-Participant Fee

Plan has:

500 participants

Recordkeeping fee:

$72 per participant

Annual cost:

500 × $72 = $36,000

If the employer pays it directly, participants may see no account deduction.

If the plan allocates it per capita, a participant might see:

$18 per quarter

Different payment method.

Same underlying service cost.

Asset-Based Recordkeeping Can Scale Poorly

Assume recordkeeping is priced at:

0.20% of plan assets

At $10 million:

$20,000

At $50 million:

$100,000

The provider's work may increase as the plan grows.

It rarely increases fivefold simply because investment markets raised asset values fivefold.

That does not make asset-based pricing automatically unreasonable.

It does make fee benchmarking more important as assets grow.

No Visible Debit Does Not Mean Free

Some plan administration can be supported through investment-related compensation.^[6][7]

A participant may see:

Direct recordkeeping fee: $0

while the plan's investment structure generates revenue that helps pay the recordkeeper.

The right conclusion is not:

"Recordkeeping is free."

It is:

"I need to understand how the provider is compensated."

INV-073 goes deeper into participant fee disclosures.

408(b)(2) Service-Provider Disclosure

ERISA permits plans to pay necessary service providers under applicable prohibited-transaction exemptions when conditions are satisfied.

DOL's covered service-provider disclosure rules require applicable providers to disclose information about:

• services
• direct compensation
• indirect compensation
• specified conflicts and related arrangements.^[7]

The responsible fiduciary needs that information to evaluate whether the arrangement and compensation are reasonable.

A provider's total economics matter more than the invoice alone.

Selecting a Recordkeeper Is a Fiduciary Decision

DOL and IRS both tell plan fiduciaries to use a prudent process when selecting and retaining service providers.^[3][6][9]

Useful questions include:

• What does the provider actually do?
• What is excluded?
• How is it paid?
• What indirect compensation exists?
• What participant service levels apply?
• What reports will the sponsor receive?
• How are errors corrected?
• How are participant complaints tracked?
• What cybersecurity controls exist?
• What happens if the contract ends?

A famous brand is not a due-diligence process.

Service Quality Can Be Measured

Recordkeeping quality is not limited to call-center satisfaction.

Operational metrics can include:

• contribution posting time
• transaction failure rate
• payroll file rejects
• distribution turnaround
• loan processing
• beneficiary processing
• participant complaint volume
• correction volume
• website uptime
• cybersecurity incidents
• conversion errors
• accuracy of required statements

A provider that is cheap but creates recurring corrections can be expensive.

Participant Complaints Are Data

IRS and DOL emphasize monitoring service providers and following up on problems.^[3][6]

Repeated complaints about the same issue deserve pattern analysis.

Examples:

• missing contributions
• vesting errors
• beneficiary changes not sticking
• distributions repeatedly rejected
• loan repayments misapplied
• stale employment status

One complaint can be user error.

Fifty similar complaints can be a control failure.

Cybersecurity Is a Recordkeeping Issue

A modern recordkeeper stores or processes:

• names
• addresses
• Social Security numbers
• account balances
• beneficiary data
• transaction history
• banking instructions
• authentication credentials

It may also control systems through which participants request money transfers.

DOL specifically directs cybersecurity best practices to recordkeepers and other service providers responsible for plan-related systems and data.^[8][10]

This is not an IT side issue.

It is part of protecting retirement assets and participant information.

What DOL Expects From Providers

DOL's current best-practices guidance calls for controls including:^[8]

• formal documented cybersecurity program
• prudent annual risk assessments
• reliable annual third-party security audits
• clearly assigned security responsibilities
• strong access controls
• secure system development and lifecycle practices
• business-resiliency planning
• encryption of sensitive data
• incident-response procedures
• appropriate oversight of third-party providers

The exact technical architecture will differ by provider.

The governance expectations are not vague.

What Sponsors Should Ask

DOL tells plan fiduciaries hiring service providers to examine:^[9]

• information security standards and policies
• independent audit results
• security track record
• prior breaches and responses
• insurance coverage
• contractual responsibility after a breach
• cybersecurity guarantees
• data-retention and deletion practices

A procurement process that compares only recordkeeping price and participant website design is incomplete.

What Participants Should Do

DOL's participant security guidance recommends registering and routinely monitoring online accounts, using strong unique credentials and following good account-security practices.

For a 401(k), practical steps include:

• create the online account rather than leaving it unregistered
• use multifactor authentication when offered
• use a unique password or passphrase
• review contact information
• check beneficiary records
• review transaction alerts
• investigate unexpected changes quickly

The recordkeeper's controls and the participant's controls work together.

When a Plan Changes Recordkeepers

A recordkeeper conversion is not just:

old website → new website

The plan must move participant-level financial data.

That can include:

• opening balances
• source balances
• investments
• contribution elections
• vesting
• loan balances
• beneficiaries
• transaction history
• distribution restrictions
• employment status

The conversion has to reconcile before participants can safely rely on the new system.

The Blackout Period

Plans often restrict transactions during a recordkeeper conversion.

IRS says blackout periods commonly occur when plans change recordkeepers or investment options.^[12]

During a blackout, participants can temporarily lose the ability to:

• direct investments
• take loans
• request distributions

When a covered blackout lasts at least three consecutive business days, affected participants generally receive advance notice; the ordinary notice window is at least 30 days and not more than 60 days before the blackout, subject to exceptions.^[12]

Example: 14-Day Recordkeeper Conversion

Plan moves from Provider A to Provider B.

Blackout:

September 8–21

During the conversion:

• participant trading disabled
• loans unavailable
• distributions suspended

That does not mean:

• investments stop changing value
• payroll deductions stop
• plan ceases to exist

It means participant transaction rights are temporarily restricted while the data and assets are transitioned.

The blackout notice should explain the timing, restrictions and contact information under the applicable rules.^[12]

What to Save Before a Conversion

A participant does not need to distrust the new provider to preserve evidence.

Download:

• latest statement
• current balance by investment
• source balances if available
• vested balance
• outstanding loan information
• beneficiary confirmation
• recent transaction history
• contribution rate
• pending transaction confirmations

After conversion, compare the new system.

A clean conversion should reconcile.

Recordkeeper Conversion Reconciliation

Suppose the old system shows:

• total balance: $210,000
• pretax: $150,000
• Roth: $45,000
• employer source: $15,000
• vested balance: $205,000
• loan balance: $8,000

The new system should not merely show:

Total: $210,000

and call the conversion complete.

Source balances and participant attributes can affect:

• taxes
• vesting
• withdrawal rights
• rollover treatment
• loans

A total-dollar match can hide a structural error.

When the Recordkeeper Says the Balance Is Correct

Ask what reconciles.

A useful response should identify:

• beginning balance
• contributions
• investment change
• fees
• distributions
• transfers
• ending balance

For a contribution issue, ask for:

• payroll date
• deposit date
• allocation date
• amount
• transaction reference

"System shows correct" is not a reconciliation.

Recordkeeper Error vs. Plan Error

The distinction matters for fixing the cause.

Recordkeeper error

Example:

A correctly supplied $800 contribution is posted to the wrong participant.

Payroll error

Example:

Payroll withholds $600 when the participant elected $800.

Plan administration error

Example:

Wrong eligibility date is sent to payroll and recordkeeper.

Document configuration error

Example:

System uses all compensation while plan excludes bonuses.

Participants care about getting the account fixed.

Sponsors also need to identify the source so the error does not repeat.

When to Escalate Beyond the Recordkeeper

Start with the recordkeeper for:

• transaction status
• website issue
• investment election
• displayed balance question
• loan payment posting
• beneficiary processing

Escalate to the plan administrator when:

• recordkeeper cannot reconcile the issue
• disputed plan terms are involved
• benefit eligibility is disputed
• formal plan documents are requested
• formal claim or appeal rights are implicated
• repeated operational errors are unresolved

The recordkeeper is often the best first contact.

It is not necessarily the final authority.

A Call-Center Answer Is Evidence, Not the Plan

Suppose a representative says:

"You cannot take an in-service distribution until age 65."

The SPD says:

age 59½

Possible explanations:

• rep read the wrong rule
• plan recently amended
• participant source has different restriction
• website data is stale
• SPD is stale

Do not resolve that conflict by choosing whichever answer sounds more confident.

Ask the plan administrator to identify the governing provision and effective date.

Plan Sponsors Must Keep Their Own Records

Using a recordkeeper does not eliminate the sponsor's record-retention obligation.

IRS says plan sponsors must maintain records needed to support plan administration and make them available for IRS review.^[2]

Examples include:^[2]

• plan documents
• trust records
• investment statements
• participant census data
• account balances
• contributions and earnings
• loan records
• compensation data
• participant statements and notices

The vendor database is useful.

It should not be the employer's only institutional memory.

Why This Matters When Vendors Change

A plan can use the same provider for 15 years and then switch.

The employer still needs enough retained evidence to answer:

• historical vesting question
• old beneficiary dispute
• contribution correction
• loan issue
• audit request
• IRS examination

Long-lived retirement obligations outlast many service contracts.

Record retention should reflect that.

A Recordkeeper Review in Ten Questions

1. What functions are in scope?

List them.

2. What remains with the employer, administrator or TPA?

Do not infer.

3. How does payroll data arrive?

File format, timing, error handling.

4. How are files reconciled to cash?

Contribution data and trust deposits must meet.

5. Who decides disputed benefits?

Identify the authority.

6. How is the provider paid?

Direct and indirect.

7. What service metrics are reported?

Accuracy matters more than portal aesthetics.

8. What cybersecurity evidence is available?

Policies, audits, incidents, insurance.

9. How are errors corrected?

Know escalation and financial responsibility.

10. What happens at termination?

Data format, historical records, conversion support and fees should be known before the relationship ends.

That last question is easiest to negotiate before signing.

Frequently Asked Questions

What does a 401(k) recordkeeper do?

It maintains participant-level records that attribute contributions, investments, gains and losses, expenses and benefit distributions to individual accounts.^[1]

Does the recordkeeper hold my 401(k) money?

Not necessarily. IRS treats the trust holding plan assets and the recordkeeping system as separate plan components.^[1] A single provider or affiliated companies may perform both roles.

Is the recordkeeper the plan administrator?

Not automatically. The legal plan administrator is determined under ERISA and the governing plan documents. INV-080 explains the distinction.

Is the recordkeeper the TPA?

Sometimes one provider performs both functions. Recordkeeping and TPA work remain distinct service functions.

Is a recordkeeper an ERISA fiduciary?

Ministerial recordkeeping alone generally does not make the provider a fiduciary for those functions. Fiduciary status can arise when the provider exercises discretionary authority, control over plan assets or another fiduciary function.^[11]

Who decides my employer match?

The plan document establishes the formula. Depending on the service model, payroll, the TPA or recordkeeper may calculate or allocate it. The sponsor remains responsible for operating the plan according to its terms.^[3][4]

Why is my contribution missing?

Possible causes include payroll withholding, delayed transmission, rejected data files, incorrect participant identifiers or allocation errors. Match the pay stub, trust/deposit record and participant transaction history before assigning blame.

How does a recordkeeper get paid?

Common structures include direct plan fees, per-participant charges, asset-based fees, bundled fees and indirect investment-related compensation.^[6][7]

Why don't I see a recordkeeping fee on my statement?

The employer may pay it, the plan may allocate it differently, or investment-related compensation can support administrative services. No visible debit does not prove no cost.^[6]

What happens when my employer changes recordkeepers?

Participant data and plan assets must be transitioned and reconciled. A blackout period may temporarily restrict trades, loans or distributions, with advance notice required under applicable rules.^[12]

Should I save my old 401(k) statement before a recordkeeper change?

Yes. Preserve balances, sources, vesting, loan information, beneficiaries and recent transactions so you can compare the converted account.

Who do I contact if the recordkeeper cannot fix an error?

For an unresolved benefit-right, plan-term or formal disclosure issue, contact the legal plan administrator identified in the SPD and governing plan documents.

The Recordkeeper Test

When a number looks wrong, do not ask only:

"What does the portal show?"

Ask:

"What source data created this number, what rule was applied, and what asset or transaction record reconciles to it?"

That question separates:

• accounting error
• payroll error
• plan-rule error
• data-transfer error
• actual investment result

The recordkeeper is the place where those inputs become an account.

Understanding that makes the system easier to audit—and much harder to blame blindly.

Sources & References

1. IRS: IRC 401(k) Plans — Establishing a 401(k) Plan
2. IRS: Maintaining Your Retirement Plan Records
3. IRS: A Plan Sponsor's Responsibilities
4. IRS: 401(k) Plan Fix-It Guide — Failure to Follow the Plan Document
5. IRS: Policies, Procedures and Internal Controls Self-Audit
6. U.S. Department of Labor: Understanding Retirement Plan Fees and Expenses
7. U.S. Department of Labor: Fee Disclosure Failure Notice
8. U.S. Department of Labor: Cybersecurity Program Best Practices
9. U.S. Department of Labor: Tips for Hiring a Service Provider with Strong Cybersecurity Practices
10. U.S. Department of Labor: Compliance Assistance Release 2024-01 — Cybersecurity Guidance Update
11. U.S. Department of Labor: Advisory Opinion 2001-02A
12. IRS: Retirement Topics — Notices

Educational Disclaimer

ROIStreet publishes educational content about retirement-plan administration and recordkeeping. This article is not legal, fiduciary, tax, cybersecurity or compliance advice. A provider's responsibilities depend on the plan document, service agreement, delegated authority, transaction structure, actual conduct and current law.

The ROIStreet Reader Promise

We strive to explain before we evaluate, present evidence before opinions, discuss risks alongside potential benefits, distinguish facts from analysis, and correct material errors transparently.

Our purpose is to help readers better understand investing—not to tell them what to do.