When you compare PEOs, you will see two letters attached to some providers and not others: CPEO. It is easy to skim past as a compliance badge. That would be a mistake. CPEO status changes who is legally on the hook if your payroll taxes are collected but never remitted to the government. For a structure whose entire job is handling your payroll taxes, that is not a footnote. It is close to the whole point.
What CPEO certification actually is
CPEO stands for Certified Professional Employer Organisation. It is a voluntary certification run by the IRS, created under the Tax Increase Prevention Act of 2014 and established in the tax code under sections 3511 and 7705. To become and stay certified, a PEO has to meet specific requirements set by the IRS covering background checks, financial reporting, tax compliance, business experience and bonding.
The consequence is the part that matters. Under section 3511, a CPEO is treated as the employer of the worksite employee for federal employment tax purposes, with respect to the wages it pays. In plain terms, the certified PEO assumes liability for your federal payroll taxes. If you use a CPEO and it collects your payroll taxes and fails to remit them, the IRS pursues the CPEO, not you.
What happens with a non-certified PEO
With a non-certified PEO, that protection does not exist. The IRS is explicit that a client company generally is not relieved of its employment tax obligation by using a PEO that lacks certification. If a non-certified provider collects your tax money and does not forward it, you can still owe those taxes a second time. You paid once to the PEO and you may have to pay again to the IRS.
This is a real risk, not a theoretical one. The PEO model concentrates a large amount of payroll tax money in the provider's hands between collection and remittance. Certification is the mechanism that makes sure the party holding that money is the party the government will chase if it goes missing.
ESAC accreditation and NAPEO membership
CPEO is the most important badge, but it is not the only signal.
ESAC accreditation comes from the Employer Services Assurance Corporation, an independent body that verifies a PEO's financial reliability and use of best practices, backed by bonding. Fewer than 5 percent of PEOs hold it, so it is a meaningful mark of financial stability rather than a box every provider ticks.
NAPEO membership indicates the provider belongs to the National Association of Professional Employer Organizations, the industry body. It signals standing in the industry, though it is not a regulatory certification in the way CPEO is.
The strongest providers usually carry all three. A provider missing CPEO is not automatically disqualified, but you should understand exactly what you are giving up and price the risk accordingly.
Where the leading providers stand
| Provider | IRS CPEO | ESAC accredited | NAPEO member |
|---|---|---|---|
| Justworks | Yes | Yes | Yes |
| TriNet | Yes | Yes | Yes |
| Insperity | Yes | Yes | Yes |
| ADP TotalSource | Yes | Yes | Yes |
| Paychex PEO | Yes | Yes | Yes |
| Rippling PEO | No | No | No |
Rippling is the clear outlier. It runs an excellent software platform and offers a PEO layer, but it is not an IRS-Certified PEO and is not ESAC accredited. That does not make it a bad product. It does mean the federal payroll tax liability protection that comes with a CPEO is not part of the package, which is a genuine factor to weigh rather than a detail to ignore.
💡 PEOServices.org Insight: Only a small share of PEOs hold CPEO status, fewer than 7 percent of the market. That scarcity is the signal. Certification is demanding to obtain and maintain, which is exactly why it tells you something. When a provider has cleared the IRS bar, you are getting verified financial and tax compliance, not a marketing claim.
How to verify it yourself
You do not have to take a provider's word for it. The IRS publishes a public list of certified CPEOs, including organisations whose certification has been suspended or revoked. Before signing, look up the provider's exact legal entity name on that list and confirm it is currently certified. The legal entity that holds the certification is sometimes a subsidiary with a slightly different name from the brand, so check carefully.
Certification is one input, not the whole decision. Price, benefits quality, state coverage and support all matter too. To weigh them together, our PEO comparison tool flags CPEO and ESAC status on every provider, plainly and without favour. And if cost is your next question, our guide to how much a PEO costs breaks down the pricing models.
This article is general information, not tax or legal advice. Confirm your own position with a qualified adviser.