What a PEO Does Not Cover for a Nonprofit Board in 2026

The pitch is reasonable, well-timed, and aimed at a real pain. A Professional Employer Organization offers to take payroll, benefits, workers' compensation, and HR compliance off your plate through a co-employment arrangement, freeing your executive director to return attention to the mission. The scale is genuine — the National Association of Professional Employer Organizations reports that more than 200,000 businesses use PEOs, that roughly 14 percent of employers with 20 to 499 employees do, and that PEO clients are 50 percent less likely to go out of business than comparable firms. For a lean nonprofit trying to offer big-employer benefits to attract mission-driven staff, the sell is hard to argue with.

The reality is narrower than the sell, and the gap is where a nonprofit board should focus. Begin with what a PEO actually insures. It administers workers' compensation and group benefits. It does not build the liability program that protects your board and your mission. The Nonprofit Risk Management Center catalogs at least eight liability exposures a nonprofit carries — general liability, directors & officers, employment practices, professional or social-services liability, sexual abuse and molestation, auto, cyber, and umbrella — and notes there is no single policy that answers all of them. A PEO touches two of those categories and leaves the rest untended.

That distinction matters most because the exposures a PEO omits are the ones most likely to name a director personally. Insurance for Nonprofits describes D&O coverage as protection for the board against claims of breached fiduciary duty and employment-related wrongdoing, extending to directors, officers, volunteers, and committee members. Its separate guidance on EPLI notes that any nonprofit with employees carries employment-practices exposure across hiring, accommodation, termination, wages, and third-party harassment. IRMI defines that third-party layer precisely — liability for harassment or discrimination claims brought by clients and non-employees, a live risk for any organization serving the public. A director can believe the PEO has them covered while the claims most likely to reach their own name sit entirely unmanaged.

Now consider ownership of the two things a PEO does provide. Your workers' compensation sits on the PEO's master policy. As the risk advisory Apex Risk & Insurance Services puts it plainly, because the PEO owns the master policy and you do not, coverage ends the moment you leave — no grace period — and your claims history may or may not follow you depending on how it was reported under your own tax ID. You generally do not own your experience modifier or your loss runs. The same holds for benefits: a master plan means plan design and renewal pricing are set above you, and an exit disrupts the coverage your staff depends on. Everything that felt turnkey on entry becomes friction on exit, unwinding at once.

Then there is control and cost — a fiduciary question more than an operational one. Co-employment, by design, cedes a measure of employment control to an outside party, which sits uneasily for a values-driven organization that treats its people as an expression of its mission. Pricing compounds the concern. Insperity, itself a PEO, explains that administrative fees are typically charged either as a percentage of gross payroll or per employee, bundled across payroll, benefits, compliance, and workers' compensation. Bundled pricing illuminates little about what you actually pay for any single component — and for a board with a stewardship duty, opacity in a recurring cost is not a footnote. It is a governance gap.

The deepest limitation is structural. A PEO sells its own bundle. It cannot shop the D&O and EPLI market on your behalf, and it has no independent standing to advocate for you at a claim, because the interests it represents are its own. Even the law firm Cooley cautions that PEO employment-practices policies are generic, apply across many client companies, and leave no room to negotiate terms or limits — and that relying on them alone can open a gap when the relationship ends. Convenience and advocacy are not the same service.

An independent strategic broker is built for the part a PEO cannot reach. We construct and own the D&O, EPLI, liability, abuse, professional, cyber, and auto program in your organization's name, with your board holding the policies, the loss history, and full transparency into every cost. We carry independent access to the market, and we stand on your side of the table when a claim is filed. That is the work Peoples First Tennessee organizes through a 4-Step Strategic Process — Strategic Discovery, then Risk Assessment, then Solution Design, then Ongoing Optimization — a disciplined runway rather than a bundle you inherit.

A PEO can be a sound choice for administration, and for many organizations it is. But administration is not protection, and a bundle is not an advocate. The torch a nonprofit board is asked to carry is fiduciary — the duty to see clearly what the organization is exposed to and who answers for it. The most intentional thing a board can do is hold that light up to the coverage itself and make certain the risks most likely to name its own members are owned, understood, and advocated by someone whose only interest is the mission.