Audit readiness for Section 125/105 health benefits: Documentation, governance, and plan discipline (without a DIY checklist)

“Audit readiness” is one of those phrases that gets overused in benefits marketing.

For a CFO, general counsel, or broker who wants to protect their reputation, audit readiness can’t be a slogan. It has to be a repeatable operating posture.

That posture matters more than ever because the IRS has repeatedly signaled skepticism toward certain “wellness” and fixed-indemnity designs—especially where employee-facing payments can become taxable wages and trigger employment taxes.

This article explains what audit readiness looks like for employers considering benefit strategies that involve Section 125 cafeteria plan mechanics and/or Section 105 / Section 213(d) medical expense concepts.

It is intentionally not a step-by-step blueprint. It does not provide templates, plan language, formulas, or “how to fix your plan” instructions.

If you want the “why now” background, these companion explainers may help:

• Compliance and IRS audit safety for Section 125/105/213(d) preventive health plans
• IRS CCA 202323006 in plain English
• If wellness payments are wages: payroll, FICA, withholding, and audit risk

What audit readiness means (a CFO definition)

A CFO-friendly definition:

• Audit readiness is your ability to explain, document, and administer a plan consistently with its intended tax and benefits treatment—years after launch.

That includes being able to answer:

• What did we offer?
• Who was eligible?
• Why did we believe the program’s tax treatment was appropriate?
• How was it administered (consistently) across pay periods and locations?
• How did we handle exceptions, corrections, and employee disputes?

Audit readiness isn’t about “passing” an audit. It’s about not being surprised by one.

Why audit readiness is showing up in wellness/fixed-indemnity discussions

A major driver is the heightened attention to arrangements where employee-facing value behaves like compensation.

When programs drift toward cash-like payments described as tax-free, employers can face the operational reality summarized by the phrase:

• wellness benefit payments taxable wages

HUB International’s compliance bulletin on fixed-indemnity wellness arrangements highlights a practical issue: when payments are taxable and made from an employer-sponsored plan, withholding can be required (income tax, FICA, FUTA). HUB also notes the “troubling employer burden” when a third party pays participants and employers may not know employees’ unreimbursed medical expenses—making correct tax handling difficult. citeturn0search0

That kind of operational feasibility problem is an audit readiness problem.

The audit readiness pillars (principles, not templates)

If you want to be audit-ready, you need a posture that covers five areas.

1) Written plan discipline (what you said you would do)

If you’re using a Section 125 cafeteria plan, one of the non-negotiables is that the plan is a separate written plan and must be operated in accordance with the written terms.

The IRS has long emphasized the “written plan” requirement and that a cafeteria plan must be maintained and operated in compliance with Section 125 rules. See the IRS’s own discussions in the Internal Revenue Bulletin (proposed regulations) and IRS FAQs (note the FAQs themselves say they are general information only). citeturn0search1turn0search2

Executive takeaway: audit readiness starts with “we have the right documents and we run the plan the way the documents say we run it.”

2) Substance over labels (what you actually did)

A recurring theme in IRS scrutiny is substance over marketing labels.

If a program is called “preventative” or “wellness,” but functions like a compensation program (cash-like rewards for participation), the label won’t carry much weight.

A practical way to keep the substance clear is to maintain clean internal distinctions between:

• reimbursement models tied to medical care concepts (often discussed under Section 105 / 213(d) medical expenses)
• reward models (often treated like compensation)

If you want the plain-English “line drawing” framework, see: Is it a medical benefit or taxable cash?

3) Documentation and governance (who owns what)

Audit risk rises when responsibility is vague.

From a governance standpoint, you want clarity on:

• who is responsible for tax characterization decisions
• who owns payroll handling if anything is treated as wages
• what information is required to administer the plan
• how exceptions are handled
• what records are retained and for how long

CPA-facing guidance often underscores the importance of written plan documents and providing plan descriptions to participants in the cafeteria plan context. The Journal of Accountancy’s overview of cafeteria plan compliance stresses the need for written plan documents and a summary plan description, and that elections and plan administration have specific rules. citeturn0search3

Executive takeaway: “document, document, document” is not busywork. It’s your proof of a prudent process.

4) Administrative feasibility (can you actually do this correctly?)

A plan can be theoretically defensible and still be practically dangerous.

If the intended tax treatment depends on facts you don’t reliably have (or receive late), the plan becomes difficult to operate consistently.

This is why third-party payment structures can matter: if a carrier or vendor is paying participants, and payroll does not have the information needed to tax correctly, you can inherit risk by default.

If you want the payroll-first explanation, read: If wellness payments are wages.

5) Conservative communications (don’t create audit exhibits)

Audit readiness includes what you say—especially what you put in writing.

Avoid language that resembles the claims under scrutiny in the market:

• “IRS-proof”
• “guaranteed savings”
• “no cost”
• “tax-free cash back”

A conservative posture uses phrases like:

• “aligned with IRS guidance”
• “designed for audit readiness”
• “subject to employer facts and administration”

Your goal is not to undersell. It’s to avoid creating communications that look like they were designed to sell a tax outcome.

The audit-ready executive questions (what you should be able to answer)

If you want a simple internal test, ask whether you can answer these questions clearly.

• “What is the program’s purpose in plain English?”
• “What is the employee-facing value: medical care reimbursement or a reward?”
• “If any payments are wages, who handles withholding and employment taxes?”
• “What documentation supports our intended treatment?”
• “How do we ensure consistency across pay periods and employee groups?”
• “What do we do when the data is incomplete or late?”

If those answers are fuzzy, you’re not audit-ready.

How this relates to IRS CCA 202323006 (high level)

CCA 202323006 is widely cited because it analyzed a scenario involving wellness payments under a fixed-indemnity policy and emphasized that, to the extent employees do not have unreimbursed medical expenses related to the payment, the payments can be taxable and treated as wages (as summarized by multiple benefits counsel and compliance bulletins).

The memo is nonprecedential, but it has influenced how sophisticated advisors evaluate wellness plan audit risk.

For the plain-English explainer, see: IRS CCA 202323006 in plain English.

Questions to ask your CPA, ERISA counsel, and broker (audit readiness edition)

These questions are intentionally principle-based. They are designed for governance, not engineering.

Questions for your CPA / payroll tax advisor

• “Under what circumstances could employee-facing payments be treated as taxable wages?”
• “If payments are wages, how will we handle withholding and employment taxes?”
• “What documentation would you expect to see to support our tax treatment?”

Questions for ERISA counsel

• “Is the arrangement being presented as a health plan, and does it operate like one?”
• “Do our plan documents and employee communications align?”
• “What are the governance and fiduciary responsibilities we should assign internally?”

Questions for your broker/vendor

• “How do you describe this arrangement conservatively (no hype)?”
• “What are the operational failure modes you see in the field?”
• “What does your documentation and governance posture look like at a high level?”

For a broader advisor framing of why scrutiny is rising, see HUB’s bulletin referenced above. citeturn0search0

FAQs

Does having plan documents mean we’re audit-ready?

It’s necessary, but not sufficient. Audit readiness also requires consistent operation, clear ownership, conservative communications, and retention of records that show a prudent process.

Are Section 125 cafeteria plan documents actually required?

Section 125 requires the cafeteria plan to be in writing and operated in accordance with the written terms. IRS materials discussing cafeteria plan rules emphasize the written plan requirement. citeturn0search1turn0search2

Why do payroll mechanics matter so much?

Because if anything is treated as wages, withholding and employment taxes can apply—and employers can inherit the operational burden even when a third party issues payments. HUB’s bulletin highlights this feasibility challenge directly. citeturn0search0

What’s one simple sign we’re not audit-ready?

If different stakeholders (CFO, HR, payroll, broker, vendor) give different answers to “what is this program and how is it taxed,” you have a governance gap.

In this space, “audit readiness” is not a marketing claim. It’s a discipline.

Employers who treat compliance as governance—documents, ownership, operational feasibility, and conservative communications—are far less likely to be surprised by IRS scrutiny or payroll tax issues.

If you’d like a compliance-first conversation about preventative health infrastructure (without internet-friendly DIY wiring), you can reach Oaceus here: Contact Oaceus or learn more about our mission on the About Oaceus page.

• Category: Uncategorized