It is three exemptions, not one. The most common thing written about these plans — that a safe harbor 401(k) "skips nondiscrimination testing" — is wrong, and expensively so. There are three distinct reliefs with three distinct condition sets:
Meeting §401(k)(12) or §401(k)(13) exempts the plan from the actual deferral percentage test, and that is all it does on its own. Relief from the actual contribution percentage test, which tests matching contributions, is a separate matter under §401(m)(11) or §401(m)(12) and is not automatic — the plan must also satisfy that section's conditions, which broadly require that no match be provided on deferrals above 6% of compensation, that any discretionary match not exceed 4% of compensation, that the rate of match not increase as the deferral rate increases, and that no highly compensated employee receive a match rate higher than a comparable non-highly compensated employee. Exemption from the top-heavy plan minimum contribution is a third relief again, under §416(g)(4)(H), and it applies year by year.
The formulas. The basic safe harbor match is 100% of the first 3% of compensation deferred plus 50% of the next 2% — a maximum of 4% of pay for a participant deferring 5% or more. An enhanced match must be at least as generous as the basic formula at every level of deferral, not merely at the top, and cannot extend the match past 6% of compensation. The nonelective alternative is a contribution of at least 3% of compensation to every eligible participant regardless of whether they defer anything at all. A QACA is cheaper on its face: 100% of the first 1% plus 50% of the next 5%, a maximum of 3.5% of pay, or a 3% nonelective — in exchange for mandatory automatic enrollment with escalating default rates. SIMPLE 401(k) plans under §401(k)(11) are a third, separate design that is often wrongly lumped in with these.
Vesting differs by design. Traditional safe harbor contributions under §401(k)(12) must be 100% vested immediately. A QACA may impose a vesting schedule of up to a two-year cliff on its safe harbor contributions. The blanket claim that safe harbor money is always immediately vested is therefore false for the automatic-enrollment version — and since federal law otherwise caps employer schedules at a three-year cliff or six-year graded arrangement, the QACA's two-year cliff is still an accelerated schedule rather than an unrestricted one.
The notice, and a widely mis-stated attribution. Safe harbor plans historically had to give participants an annual notice 30 to 90 days before the plan year. The SECURE Act of 2019, §103 eliminated that annual notice requirement for nonelective safe harbors only, for plan years beginning after 2019-12-31, implemented by IRS Notice 2020-86. It is frequently and incorrectly attributed to SECURE 2.0, including on professional firm sites — a 2020 IRS notice cannot implement a 2022 statute. The notice remains required for match-based safe harbors and for QACAs.
The top-heavy exemption is fragile, and lost a year at a time. It holds only where the plan consists of deferrals and safe harbor contributions. It is broken by employer nonelective money that is not safe harbor money — discretionary profit sharing, or forfeitures reallocated as profit sharing — per Revenue Ruling 2004-13, and by after-tax employee contributions that are not designated Roth. A business that wants a large owner allocation through a profit-sharing plan is therefore often accepting top-heavy minimums back into the design, which is a trade-off worth costing rather than discovering.
What safe harbor status does not buy. It does not satisfy the §410(b) minimum coverage rules, the §415(c) limit on total annual additions, the §402(g) individual deferral limit, or §401(a)(4) general testing of employer money that is not safe harbor money. And the required contribution only has to reach eligible participants who are not highly compensated — a plan may exclude highly compensated employees from the safe harbor contribution entirely and the relief still holds.