Substantiation

If you’ve ever heard the term substantiation in the context of health benefits and thought, “That sounds like legal jargon I should probably understand,” you’re not alone. Substantiation is one of those behind-the-scenes compliance requirements that can make or break a tax-advantaged health benefit like an HRA. For small business owners, HR managers, brokers, and employees, understanding substantiation isn’t optional—it’s essential.

At its core, substantiation is the process of verifying that a medical expense is eligible before it’s reimbursed on a tax-free basis. It’s not just red tape. It’s what keeps your benefit plan compliant with IRS rules and protects both the employer and employee from unexpected tax consequences.

What Is Substantiation?

Substantiation is the documentation and review process required to confirm that a medical expense qualifies for tax-free reimbursement under IRS rules. According to IRS Publication 502 and IRS Notice 2002-45, employers must ensure that reimbursed expenses are for eligible medical care as defined under Internal Revenue Code Section 213(d).

In plain English? Before an employer reimburses an employee through an HRA, ICHRA, or QSEHRA, someone has to confirm:

• The expense was actually incurred
• It was for medical care (as defined by the IRS)
• It hasn’t already been reimbursed elsewhere
• It wasn’t previously deducted on a tax return

Without proper substantiation, reimbursements could be treated as taxable income. That’s a headache no one wants.

Why Substantiation Matters for Small Businesses

Tax Compliance Isn’t Optional

For small businesses offering ICHRAs or QSEHRAs, the tax-free nature of reimbursements is a major advantage. But here’s the catch: the IRS only allows tax-free treatment if substantiation requirements are met.

If an employer simply hands out a monthly allowance without reviewing documentation, that arrangement could be considered a taxable stipend. In that case:

• Employees may owe income and payroll taxes
• Employers may owe back payroll taxes
• Penalties and interest could apply

The IRS has been clear on this in multiple guidance documents, including IRS Notice 2013-54 and regulations related to HRAs under the Affordable Care Act (ACA).

Protecting Employees from Tax Surprises

Employees often assume that if their employer offers a benefit, it’s compliant. Fair assumption, right? But if substantiation isn’t handled properly, employees could face unexpected tax bills.

Proper substantiation ensures:

• Reimbursements remain tax-free
• Employees aren’t double-dipping (for example, claiming premium tax credits and full HRA reimbursements improperly)
• Everyone stays aligned with ACA and IRS rules

When done right, substantiation gives employees peace of mind.

What Needs to Be Substantiated?

Let’s break it down in practical terms. Not every receipt will qualify.

Health Insurance Premiums

For ICHRAs and QSEHRAs, employers must verify that employees are enrolled in qualifying individual health coverage. This is often referred to as Minimum Essential Coverage (MEC), as defined under the ACA and enforced by the U.S. Department of Health and Human Services (HHS).

Substantiation for premiums typically includes:

• An insurance invoice or bill
• Proof of payment
• Confirmation of active coverage

Employers must also verify that the coverage is individual health insurance, not a short-term limited duration plan unless allowed under specific plan terms.

Out-of-Pocket Medical Expenses

For other Section 213(d) medical expenses, documentation usually includes:

• A detailed receipt or explanation of benefits (EOB)
• Date of service
• Description of service
• Amount charged

A credit card receipt alone isn’t enough. The IRS requires evidence that the expense was for eligible medical care.

Timing Matters

Expenses must be incurred during the plan year (or applicable coverage period). Reimbursing old expenses from before the HRA was established? That’s a compliance issue.

Employers need to track:

• Date of service (not just payment date)
• Plan effective dates
• Employee eligibility dates

It sounds technical—and frankly, it is. But it’s manageable with the right systems in place.

Who Is Responsible for Substantiation?

This is where many small businesses get tripped up.

The Employer’s Legal Responsibility

Ultimately, the employer sponsoring the HRA is responsible for ensuring substantiation occurs. Even if a third-party administrator (TPA) or platform is involved, the legal obligation sits with the employer.

That means employers can’t:

• Accept employee self-attestation alone (except in very limited cases)
• Reimburse flat amounts without documentation
• Skip reviews to “keep things simple”

The IRS has consistently emphasized the need for independent review of documentation before reimbursement.

The Employee’s Role

Employees must:

• Submit required documentation
• Certify that expenses haven’t been reimbursed elsewhere
• Maintain qualifying coverage (for ICHRA participants)

It’s a partnership. Employers provide the structure; employees provide the proof.

Common Substantiation Mistakes

Even well-meaning employers make errors. Here are a few I’ve seen over the years:

• Reimbursing premiums without verifying active coverage
• Accepting screenshots without sufficient detail
• Failing to review documentation before issuing payment
• Allowing managers to approve their own reimbursements
• Not retaining records in case of audit

According to IRS recordkeeping requirements, employers should retain documentation for at least seven years. In the event of an audit, having organized, accessible records can make all the difference.

Substantiation and ICHRA: What’s Different?

With an Individual Coverage HRA (ICHRA), substantiation includes an added layer: confirming that employees are enrolled in individual health insurance coverage.

Employers must:

• Collect proof of coverage before the first reimbursement
• Obtain ongoing confirmation of coverage (often monthly or annually)
• Ensure affordability calculations are handled properly if applicable

If an ICHRA is considered “affordable” under ACA standards, employees may not qualify for premium tax credits on the Marketplace. That interplay makes substantiation and documentation even more important.

The Department of Labor, HHS, and the Treasury jointly regulate ICHRAs, so compliance isn’t just an IRS issue—it’s multi-agency oversight.

Making Substantiation Simple (Without Cutting Corners)

Now, let’s be honest. Most small businesses don’t have in-house benefits attorneys. Nor should they need one.

The key is having a structured, automated process that:

• Reviews documentation before reimbursement
• Flags ineligible expenses
• Tracks plan year limits
• Maintains audit-ready records
• Separates decision-makers from reimbursement approvals

Done manually, this can become overwhelming. HR teams end up chasing receipts. Owners end up reviewing medical documentation at 10 p.m. That’s not sustainable—and it raises privacy concerns under HIPAA if not handled properly.

Modern benefits platforms automate substantiation workflows while protecting employee privacy and ensuring compliance.

Substantiation Isn’t Red Tape—It’s Protection

It’s tempting to think of substantiation as bureaucratic overhead. But in reality, it protects:

• Employers from tax penalties
• Employees from unexpected income taxes
• The integrity of the health benefit plan
• The long-term viability of tax-advantaged arrangements

When structured correctly, substantiation becomes almost invisible to employees. They submit documentation, get approved quickly, and move on with their lives. That’s how it should work.

Why SimplyHRA Makes Substantiation Easy

At SimplyHRA, we built our platform specifically to handle substantiation the right way—automatically, compliantly, and without burdening your team. We verify eligible expenses, confirm qualifying coverage, maintain audit-ready records, and automate reimbursements so small businesses can offer ICHRAs with confidence. Whether you’re an owner trying to control costs, an HR manager juggling compliance, or an employee navigating reimbursements, we’re here to simplify the process while keeping you aligned with IRS and ACA requirements. If you’re ready to offer health benefits without compliance stress, email us at info@simplyhra.com or schedule a consultation at https://www.simplyhra.com/contact.

How Substantiation Interacts with Other Benefit Rules

Substantiation doesn’t exist in a vacuum. It connects directly to other compliance rules that small businesses often overlook.

Substantiation and Nondiscrimination Rules

For certain types of HRAs, especially those integrated with group plans or structured in specific ways, nondiscrimination rules may apply. These rules are designed to prevent employers from favoring highly compensated employees.

While ICHRAs allow employers to vary benefits by legitimate employee classes (such as full-time, part-time, seasonal, or geographic location), substantiation still must be applied consistently across all participants within a class.

In practical terms:

• You can’t require stricter documentation for one employee and looser standards for another.
• You can’t fast-track reimbursements for executives while delaying others.
• You must apply the same review standards across the board.

Consistency is key. Uneven administration can raise red flags in an audit.

Privacy and HIPAA Considerations

Here’s something many employers don’t realize: when you review medical documentation, you may be handling protected health information (PHI) under HIPAA.

If you’re personally reviewing employee receipts that show diagnoses or treatment details, you’re potentially exposing sensitive data. Without proper safeguards:

• Employee privacy may be compromised.
• Your company may face HIPAA compliance concerns.
• Internal trust can erode quickly.

This is one reason many employers choose to use a third-party administrator or structured platform. It creates a separation between medical documentation and company management, reducing legal risk and protecting employee confidentiality.

Audit Scenarios: What Would the IRS Look For?

Let’s talk worst-case scenario. What happens if the IRS audits your HRA?

While audits of small HRAs aren’t common, they do happen—particularly if payroll filings raise inconsistencies.

In an audit, the IRS may request:

• Plan documents outlining eligibility and reimbursement rules
• Proof of employee coverage for reimbursed months
• Copies of substantiated expense documentation
• Payroll records showing how reimbursements were handled
• Evidence that reimbursements were not treated as taxable wages

If documentation is missing or incomplete, the IRS could reclassify reimbursements as taxable income. That means amended payroll tax filings, W-2 corrections, and potentially penalties.

The good news? Clean documentation and organized records typically resolve inquiries quickly. Sloppy administration makes things harder than they need to be.

Substantiation in the Real World: Common Employee Questions

Employees often have practical, everyday concerns about substantiation. Let’s address a few scenarios that come up frequently.

“Why Do I Have to Submit Proof Every Month?”

For insurance premiums, many employers require recurring verification to ensure coverage remains active. If coverage lapses—even for one month—reimbursements must stop for that period.

From a compliance standpoint, ongoing substantiation protects the tax-free status of the benefit. From an employee perspective, it ensures you’re reimbursed only while properly insured.

“Can I Just Sign a Statement Instead of Uploading Documents?”

Generally, no. The IRS requires third-party documentation. A simple attestation without supporting proof is not sufficient for most expenses.

There are limited cases where periodic certification of coverage may be allowed under ICHRA regulations, but it must follow specific federal guidance. Employers shouldn’t assume self-certification alone is enough.

“What If My Claim Is Denied?”

A compliant HRA should include an appeals process. If an expense is denied:

• The employee should receive a written explanation.
• The employee should have the opportunity to submit additional documentation.
• The employer should apply plan rules consistently.

This isn’t just good customer service—it’s part of maintaining ERISA compliance for applicable plans.

Technology’s Role in Modern Substantiation

Ten years ago, substantiation often meant paper forms, email chains, and spreadsheets. That approach is not only inefficient—it increases the risk of errors.

Today, smart benefits administration tools can:

• Automatically categorize eligible expenses based on IRS Section 213(d)
• Flag incomplete documentation
• Track annual reimbursement limits
• Maintain encrypted, secure document storage
• Generate audit-ready compliance reports

Automation doesn’t eliminate employer responsibility—but it dramatically reduces human error.

And let’s be candid: when substantiation is handled manually, reimbursement delays are common. Employees get frustrated. HR teams get overwhelmed. Mistakes slip through. A structured system solves those friction points.

State Law Considerations and Payroll Integration

While substantiation is largely governed by federal tax law, payroll handling introduces another layer of complexity.

Reimbursements must be:

• Properly excluded from taxable wages
• Reflected correctly in payroll systems
• Coordinated with any pre-tax deductions

Some states have additional wage reporting rules that require attention. Employers should ensure payroll integrations are correctly configured so that non-reimbursed portions of premiums (if applicable) are handled appropriately.

Improper payroll coding is one of the most common operational mistakes I see. The reimbursement might be valid—but if payroll reports it incorrectly, tax consequences can still arise.

Substantiation and Former Employees

Another overlooked area? Terminated employees.

Generally:

• Only expenses incurred during active eligibility are reimbursable.
• Employers must clearly define run-out periods for claim submissions.
• COBRA rules may apply to certain HRAs, depending on structure and employer size.

If a former employee submits claims for services rendered after termination, those expenses typically cannot be reimbursed under the HRA. Having clear documentation policies helps avoid awkward disputes.

Building a Culture of Compliance Without Friction

At the end of the day, substantiation isn’t about micromanaging employees. It’s about protecting the integrity of the benefit plan.

The most successful small businesses approach substantiation with:

• Clear written plan documents
• Transparent employee communication
• Automated workflows
• Consistent documentation standards
• Secure data handling practices

When employees understand why documentation is required—and when the process is simple—they rarely push back.

It’s confusion, not compliance, that creates frustration.

Substantiation Done Right with SimplyHRA

At SimplyHRA, we go beyond basic reimbursement tracking. Our platform automates substantiation workflows, verifies qualifying coverage, protects employee medical privacy, integrates with payroll systems, and maintains audit-ready documentation so employers don’t have to worry about IRS or ACA missteps. For small business owners and HR managers, that means fewer compliance headaches and more confidence. For employees, it means faster approvals and peace of mind that their reimbursements remain tax-free. If you’d like help structuring or improving your substantiation process, reach out to us at info@simplyhra.com or schedule a call at https://www.simplyhra.com/contact.

Frequently Asked Questions (FAQs) about Substantiation:

Q: Does substantiation apply to debit card purchases linked to an HRA?

A: Yes. Even if employees use a benefits debit card, substantiation is still required unless the expense is auto-substantiated through approved systems (for example, IIAS-certified pharmacy purchases). If the transaction can’t be automatically verified, additional documentation must be collected and reviewed before the expense is finalized as eligible. Without proper substantiation, the charge may need to be repaid or treated as taxable income.

Q: Can substantiation be outsourced to a third-party administrator?

A: Absolutely. Many employers use third-party administrators or benefits platforms to handle substantiation. While the employer retains legal responsibility for compliance, delegating the administrative function reduces risk, improves consistency, and protects employee privacy. The key is ensuring the administrator follows IRS Section 213(d) standards and maintains proper records.

Q: How long should substantiation records be retained?

A: Best practice is to retain substantiation documentation for at least seven years. While the IRS typically has a three-year statute of limitations for audits, longer retention provides a safety cushion in case of extended review periods or amended filings. Secure digital storage with organized indexing is strongly recommended.

Q: Does substantiation differ for self-insured medical expenses versus insurance premiums?

A: The documentation differs slightly. For premiums, employers must verify active coverage and payment amounts. For medical services, the review focuses on date of service, type of care, and confirmation that it qualifies under IRS medical expense definitions. The underlying compliance principle is the same: verify eligibility before reimbursing.

Q: Are over-the-counter medications subject to substantiation?

A: Yes. Since the CARES Act of 2020, many over-the-counter medications are eligible medical expenses without a prescription. However, substantiation still requires an itemized receipt that clearly identifies the product and purchase date. General retail receipts that don’t specify the item may not be sufficient.

Q: What happens if an employee submits fraudulent documentation?

A: Employers should have written policies outlining consequences for fraudulent claims. If fraud is discovered, reimbursements may need to be reversed, and disciplinary action could follow based on company policy. Strong substantiation processes and consistent review significantly reduce the risk of improper claims slipping through.

Q: Is substantiation required for unused monthly allowances in an ICHRA?

A: No substantiation is needed for unused funds because reimbursements only occur after eligible expenses are submitted and approved. Employers do not pre-fund employees directly; they reimburse based on documented claims. This structure protects employers from paying for benefits that aren’t actually used.

Q: Can substantiation rules change over time?

A: Yes. Substantiation requirements are shaped by IRS regulations, Treasury guidance, and healthcare legislation. For example, eligibility rules for certain expenses have changed under laws like the CARES Act. Employers should periodically review plan documents and administrative processes to ensure ongoing compliance with current federal guidance.

Q: Does substantiation apply differently to remote or out-of-state employees?

A: The federal substantiation requirements themselves don’t change based on where an employee lives. However, employers may need to account for different Marketplace plans, state insurance rules, and payroll reporting requirements. The core principle remains the same: verify that the employee has qualifying coverage and that the expense meets IRS eligibility standards before reimbursement.

Q: Are telehealth services subject to substantiation?

A: Yes. Telehealth visits are generally eligible medical expenses under IRS Section 213(d), but they must still be substantiated. Documentation should show the provider name, date of service, and amount charged. If the telehealth platform bundles services under a subscription model, employers should verify that the subscription qualifies as medical care rather than a general wellness service.

Q: Can employers create their own substantiation standards?

A: Employers can design administrative procedures, but they cannot lower the federal requirements. Any substantiation standard must align with IRS guidance. Employers may require additional internal documentation for administrative clarity, but they cannot waive the need for third-party verification when the law requires it.

Q: Is substantiation required before or after reimbursement?

A: Substantiation must occur before reimbursement is finalized as tax-free. Issuing payment first and reviewing documentation later creates compliance risk. The IRS expects employers to review and approve eligible expenses prior to treating them as non-taxable reimbursements.

Q: Do small employers have lighter substantiation requirements than large employers?

A: No. The IRS does not provide reduced substantiation standards based on company size. A five-person startup and a 500-employee company are both expected to follow the same documentation rules for HRAs. Smaller businesses may feel the administrative burden more acutely, which is why structured processes are especially important.

Q: How does substantiation work for recurring medical expenses like ongoing therapy?

A: Recurring expenses still require documentation, but many administrators allow a recurring claim structure once eligibility is confirmed. For example, if therapy sessions occur weekly at a consistent rate, documentation may be collected initially and then periodically verified. The key is ensuring that each reimbursed expense corresponds to actual services received during the coverage period.

Q: What if documentation is incomplete but the expense appears eligible?

A: If required details are missing—such as the date of service or description of care—the claim should not be approved until sufficient documentation is provided. Even if the expense seems legitimate, incomplete substantiation can jeopardize the tax-advantaged status of the reimbursement. It’s better to request clarification than to risk noncompliance.

Q: Does substantiation apply to dependent expenses under an HRA?

A: Yes. If a plan allows reimbursement for dependents, substantiation must confirm that the dependent qualifies under the plan terms and that the medical expense meets IRS definitions. Employers should clearly define who counts as an eligible dependent in their plan documents to avoid confusion during review.

Q: Can digital receipts be used for substantiation?

A: Yes, digital receipts are acceptable as long as they contain all required information, including provider name, service description, date, and amount. Electronic documentation is widely accepted and often preferred for secure storage and audit readiness.

Bringing Confidence and Clarity to Substantiation

Substantiation isn’t just a technical requirement buried in IRS guidance—it’s the foundation that keeps your health benefits tax-free, compliant, and sustainable. When handled properly, it protects employers from penalties, shields employees from surprise tax bills, and ensures your HRA or ICHRA operates exactly as intended. When handled poorly, it creates risk, confusion, and unnecessary stress. The difference comes down to structure, consistency, and having the right systems in place.

At SimplyHRA, we’ve worked with small business owners and HR managers who were overwhelmed by documentation reviews, unsure about IRS rules, and concerned about privacy and payroll coordination. We’ve also supported employees who just wanted reimbursements processed quickly without jumping through hoops. Because we’ve been in those shoes ourselves, we built a platform that automates substantiation, safeguards sensitive information, integrates with payroll, and keeps audit-ready records—without adding complexity to your day.

If you’re offering an HRA or considering one and want to make sure your substantiation process is compliant and stress-free, let’s talk. Email us at info@simplyhra.com or schedule a consultation at https://www.simplyhra.com/contact to see how SimplyHRA can help you manage employer and employee health benefits with clarity and confidence.