Back to all blog posts
Blog
4
July 1, 2026

Best HRA Administration Software and Providers in 2026: A Buyer's Guide for HR Teams

Most mid-size and enterprise employers use an HRA to fill the gaps their health plan leaves behind. GLP-1 medications, fertility treatment, mental health care, and medical travel are hard to cover well inside a single group plan, and rebuilding that plan to cover them is slow and expensive. A targeted HRA adds employer-funded support around the coverage you already offer.

Running that HRA at scale is the harder part. Your administration software has to apply IRS and plan rules to every transaction. It has to stay in sync with your HRIS and payroll as people join, change roles, and leave. And it has to let employees pay for care without fronting the cost. When it falls short, employees wait weeks for reimbursements, your benefits team fields support tickets, and finance struggles to reconcile spending at audit time.

That’s why two questions sit underneath every HRA buying decision. Will this platform keep our plan compliant? And how quickly will employees get their money?

This guide compares 12 HRA vendors on plan types, features, pricing, and user feedback. Then it gives you a framework for evaluating the software itself, so you can pressure-test any shortlist against how your plan actually runs day to day.

Top 12 HRA vendors of 2026

The table below compares each vendor's standout features, pricing, G2 score, and best-fit use case.

| Vendor | Best for | G2 score | Standout features | Pricing | |---|---|---|---|---| | Benepass | Mid-size and enterprise employers adding targeted HRAs alongside their health plan | 4.8 | Card-first spending; 15 targeted HRA designs, including GLP-1 and fertility; all spending accounts on one platform | Custom pricing based on business size and requirements | | PeopleKeep | Small employers (under 50 employees) | 4.5 | QSEHRA, ICHRA, and group HRA administration | From $25 per employee/mo + base fee | | HealthEquity | Mid to large businesses pairing HRAs with health incentives | 3.5 | HRA and health incentive accounts | Custom quotes on request | | Take Command | Small to midsize employers setting up ICHRAs | 3.4 | 1:1 enrollment support | From $25 per employee/mo + platform fee | | Gravie | Small and midsize businesses weighing ICHRA, level-funded, or hybrid plans | N/A | ICHRA and hybrid plan options | Custom pricing on request | | Clarity | Companies needing customizable, compliant benefit plans | 4.3 | Customizable HRA plan designs | Custom pricing on request | | Lively | Tech-forward teams wanting simplicity and transparency | 4.7 | Central dashboard for HRA, HSA, and FSA | Transparent pricing for individuals, families, and businesses | | Alight Solutions | Large enterprises seeking combined HR and wellbeing tools | 3.8 | Broad HR and payroll integrations | Custom pricing on request | | Navia Benefit Solutions | Employers needing configurable plan structures | 4.0 | Configurable HRA plans and debit card | Custom pricing on request | | WEX Health | Businesses managing multiple HRA types and integrations | 3.6 | Multiple HRA types and integrations | Custom pricing on request | | Zizzl Health | Employers transitioning to ICHRAs with employee choice | N/A | ICHRA plan selection guidance | Custom pricing on request | | Paychex | Businesses wanting HRA admin inside their existing HR and payroll system | 4.1 | HRA administration within payroll and HR | Custom pricing on request |

G2 scores at time of publication.

1. Benepass

Benepass is a people-first platform built around flexibility. Instead of offering one-size-fits-none employee benefits, Benepass offers a wide range of pre- and post-tax plans that give people real choice. The Benepass HRA provides a pre-funded Visa card that employees can use to pay for high-cost medical expenses, including fertility treatments, gender-affirming care, or healthcare-related travel expenses.

HRA features

  • Card-first technology
  • Enterprise-grade security, with SOC2 certification and bank-level encryption
  • Access to a customer experience team with a 95% customer satisfaction rating
  • Built-in eligibility checking for transactions and reimbursements, freeing up your in-house teams to focus on other parts of your benefits strategy
  • Payroll integrations that automatically enroll eligible employees
  • Automatic invitations for your employees to join Benepass and start using their HRA from day one

What users think

"Benepass makes managing employee benefits simple. We really value how easy it is to offer flexible benefits that employees actually use and the reporting features. The platform is clear and easy to navigate. Their team is always quick to respond and I love the quality of their support team." - Tristan O., a benefits analyst

Pricing

Benepass offers custom pricing based on your business size and requirements.

Why we chose them

Benepass is an employee-centric HRA vendor that lets you customize your plan around your people's needs. For example, you can set your HRA's eligible spending categories to target mental health, fertility treatments, medical travel, and more. That breadth is one reason employees like the platform, and its ease of use is another. A verified mid-market user explains, "Love that you can just submit past expenses for reimbursement through the app as well. This has been incredibly useful for me."

Benepass also scores well with the G2 software community, holding a rating of 4.8 out of 5 at the time of publication.

Benepass account dashboard with benefit options
Benepass account dashboard with benefit options

2. PeopleKeep

PeopleKeep is a health benefits provider aimed at small employers. Its HRA administration software is powered by Remodel Health and offers ICHRAs, QSEHRAs, and group coverage HRAs.

HRA features

  • Cost control so you can choose an HRA allowance that fits your budget
  • Benefit personalization, so employers choose what employees can be reimbursed for
  • Flexible reimbursements, so your funds stay with you until you reimburse employees directly

What users think

"I like the ease of getting my questions in a very timely/knowledgeable timeframe. The customer service (Angela Light) and her team are very efficient and friendly." - A small business user

"The pages are sometimes slow to load and there have been instances where features were temporarily unavailable." - A financial services user

Pricing

Pricing depends on the type of HRA you're offering:

  • QSEHRAs: $25 per employee/mo with a $50 base fee added to the subscription
  • ICHRAs: From $25 per employee/mo with a $50 base fee added to the subscription
  • Group coverage HRAs: $12 per employee/mo with a $30 base fee added to the subscription

Why we chose them

PeopleKeep specializes in HRAs for small businesses, so if you have fewer than 50 employees, it's worth a look. It also offers in-house teams to help organizations make the right plan decisions for their people and generate the plan documentation they need to stay compliant.

PeopleKeep QSEHRA dashboard
PeopleKeep QSEHRA dashboard

3. HealthEquity

HealthEquity is an established name in the market that also rewards employees for staying healthy.

HRA features

  • Fast onboarding with employer accounts set up in minutes
  • 24/7 support by phone or chat
  • Custom integrations at no extra cost
  • Automatically verified transactions
  • A debit card for all employee transactions

What users think

"HealthEquity's phone customer service is superb. Anytime that I have had to call and ask questions, they always picked up and were able to walk me through the process. HealthEquity's web page is not the most user friendly. You have to learn and call to ask questions." - Jennifer H., a human resources consultant

Pricing

Accurate quotes are available on request.

Why we chose them

HealthEquity's Health Incentive Account works alongside the HRA, so employers can reward workers for positive habits like meeting fitness goals, quitting smoking, or eating well.

HealthEquity HRA dashboard

4. Take Command

Take Command's founder launched the company when he and his wife were surprised by a twin pregnancy and needed affordable healthcare coverage. A decade later, Take Command's software helps companies design compliant, custom ICHRA and QSEHRA plans.

HRA features

  • 1:1 personalized enrollment support
  • HRIS integrations
  • Transparent payroll and compliance reporting
  • Custom plan designs

What users think

"Our enrollment specialist was a rockstar. Got us onboarding and rolling fairly quickly. The dashboard is easy to navigate and makes administering health benefits easy. The reimbursement process was a little confusing at first, but support helped us figure it out." - Troy C., a small business CEO

Pricing

Take Command splits pricing into two categories:

  • Small employers (1-49 employees): From $25 per employee/mo plus a monthly platform fee starting at $40
  • Large employers (50+ employees): Custom pricing plus a monthly platform fee starting at $100, including a customer success manager, autopay employee premiums, and custom affordability reports

Why we chose them

Take Command is a great fit for small businesses, and it also offers ICHRAs designed to help applicable large employers (ALEs) meet the employer mandate.

Take Command HRA dashboard
Take Command HRA dashboard

5. Gravie

Gravie serves small and midsize businesses with three main options: Gravie CHOICE, its ICHRA (formerly Gravie ICHRA); level-funded group plans; and Gravie Edge, a hybrid model that combines approaches across employee segments. It also offers Gravie Pay, interest-free financing for out-of-pocket expenses.

HRA features

  • Cost control through a fixed employer allowance
  • Year-round support through the Gravie Care team
  • Employee choice of individual health plans

What users think

"Our employees like the fact that they can choose from more than 2-3 health plans, and have the option of contributing more towards their plan if they wish. My advice to any employer looking at an ICHRA? Gravie is the best option." - Mari Garcia, Human Resources at Bille Bus

"Impossible to get ahold of them. They consistently underpaid my premium after my son was born and I had to add him to our insurance." - Riley G., a Gravie member

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

Gravie has helped employers move workers to the individual market since 2013, well before ICHRA rules took effect in 2020. It positions CHOICE as a full-service program rather than software alone, which suits employers that want hands-on help with the transition. Its hybrid Edge option also gives employers a middle path between group coverage and ICHRA.

Gravie ICHRA enrollment
Gravie ICHRA enrollment

6. Clarity

Clarity Benefit Solutions is a trusted name in employee benefits, offering HRA solutions for organizations of all sizes. Its platform gives employers solid tools to manage HRAs while keeping the experience simple for employees.

HRA features

  • Support for a range of plan designs, including first-dollar coverage, percentage-based coverage, or an HRA with an employee deductible
  • Multilingual staff for employers and employees
  • Online enrollment that reduces manual processes
  • Clarity Mobile app, including text alerts
  • Claims substantiation via the online portal

What users think

"Clarity Benefit Solutions is highly adept at distributing and monitoring our company's employee benefits. Technologically advanced, personable staff, and a dedication to providing a cutting-edge service and product are hallmarks of this company." - Yotam, a Clarity user

"I find navigating the Clarity platform generally confusing and not user-friendly... When I log into my account otherwise, it always takes me a little while to get situated and find what I'm looking for." - Eden K., a state legislative affairs associate

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

Clarity's platform connects with existing HR and payroll systems, and its emphasis on security and compliance, paired with user-friendly tools, makes it a reliable choice for businesses looking to tighten up benefits management.

Clarity wallet on smartphone screen
Clarity wallet on smartphone screen

7. Lively

Lively offers modern health benefit accounts designed for flexibility and ease of use. Known for its clean interface and transparent pricing, Lively supports FSAs, HRAs, and HSAs, making it a solid choice for employers that want one benefits experience.

HRA features

  • A range of HRA plans, including standard, post-deductible, and dental and vision options
  • Custom plan designs with year-round administration support
  • Legally vetted claim verification processes
  • Reporting via a central admin dashboard

What users think

"Lively is easy to use... I've had to submit receipts for reimbursement when I wasn't able to use my card and... I received the money back quickly." - Samantha M., a mid-market user

"I wish there were a more robust integration with our HRIS/ben admin system that includes automatic recognition of payroll contributions, terminations, and enrollments. Outside of OE the process is manual for adding, terminating, and uploading contribution files." - Kimber H., Director of People Operations

Pricing

Transparent pricing is available for individuals, families, and businesses.

Why we chose them

Lively pairs easy-to-use technology with a strong compliance foundation. Its dashboard and automation tools make administration easier for employers, and employees get a low-friction experience submitting claims and managing benefits.

Lively’s benefits dashboard
Lively’s benefits dashboard

8. Alight Solutions

Alight Solutions is a global benefits technology provider offering tailored HR and health solutions. Its HRA capabilities are built into the Alight Worklife platform, which brings benefits management and employee wellbeing together in one place.

HRA features

  • Support for a broad range of health plan designs
  • Integrations with a broad network of HR, payroll, and benefits systems
  • 24/7 access to benefits specialists
  • Advanced data analytics to track usage and ROI

What users think

"Alight Solutions has a highly skilled and experienced team coupled with an incredible training program that helps to keep employees highly motivated. It helps our staff to plan and manage their finances and wellbeing better." - Oliver R., a small business user

"My least favorite feature is the bugs; it is slow at times and there are a few bugs that can be frustrating, but nothing that makes it impossible to use." - Samir, a sales representative

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

Alight stands out for its enterprise-scale integrations and deep analytics. It's ideal for large organizations that want one benefits platform connecting HR, payroll, and wellbeing initiatives.

Hand holding smartphone showing Alight dashboard

9. Navia Benefit Solutions

Navia Benefit Solutions is a benefits administrator focused on configurable plan designs, participant education, and a broad service footprint. Its HRA offering serves employers that need flexible plan designs backed by strong service and technology.

HRA features

  • 24/7 participant access via the Navia Participant Portal and the MyNavia app, with claim submission, balance views, and alerts
  • Configurable support for many HRA plan types, such as Section 105, ICHRA, and dental and vision
  • The Navia Benefits Debit Card for HRAs that cover medically necessary expenses
  • Dedicated HRA service reps, implementation support, and participant education around enrollment and usage

What users think

"Helps keep track of benefit elections for employees with an easy to use portal." - A computer industry user

"The app is oversimplified and does not provide great direction into your statement." - An IT industry user

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

We selected Navia for its operational track record and its ability to handle complex plan designs without sacrificing simplicity for users. For employers managing multiple reimbursement accounts or heavy compliance demands, Navia's structure and service depth make it a dependable partner as plans grow more complex.

Phone dashboard for Navia Benefits Solutions
Phone dashboard for Navia Benefits Solutions

10. WEX Health

WEX Health is a well-established player in benefits administration, with experience in HRAs and other reimbursement programs. The platform supports multiple HRA types, a large integration network, and analytics tools, making it a solid option for organizations that need scale, flexibility, and visibility.

HRA features

  • Support for a range of HRA structures, including 213(d), deductible, one threshold, individual coverage, excepted benefit, and qualified small employer
  • Integrations with 350+ payroll, HRIS, and benefits administration partners
  • Advanced analytics

What users think

"It's incredibly easy and user-friendly to navigate... While the dashboards are great for seeing your balance, I wish it was easier to find documents and forms such as end of the year tax records." - A computer software industry user

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

WEX Health's support for multiple HRA plan designs gives it flexibility for complex needs. Its integrations and analytics also make it a go-to choice for employers that want insights from benefits data, and positive user feedback on usability gives confidence in the everyday experience.

WEX benefit card
WEX benefit card

11. Zizzl Health

Zizzl Health specializes in ICHRA administration, giving employers a way to offload rising insurance cost risk while giving employees choice and control. Its platform is built to make that transition smoother, with tools that guide employees through plan selection, simplify reimbursements, and support ACA compliance.

HRA features

  • Wide carrier and plan access, so employees can choose from competing health plans
  • Support for ACA availability and affordability requirements
  • Decision support and guidance tools

What users think

"We didn't really have the knowledge or ability to give all of our employees the information they needed to select the right plans. There was a lot of hand holding on our end, too. Zizzl really walked us through it and put it all in layman's terms for those of us who didn't know the benefits side." - Justin Dahm, VP of Finance at Milwaukee Cylinder

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

Zizzl Health is one of the more modern, tech-forward ICHRA tools, with a focus on both employer cost control and employee choice. Its decision support and carrier breadth improve the odds that employees find plans that suit their individual needs.

Zizzl Health dashboard illustrations
Zizzl Health dashboard illustrations

12. Paychex

Paychex is a well-known HR and payroll provider that also offers HRA administration as part of its broader suite of benefits services. Its solutions are designed to scale, serving both small businesses and large enterprises.

HRA features

  • Built into Paychex payroll and HR solutions
  • Customizable HRA plan designs
  • Dedicated account management and compliance support
  • Real-time claims tracking and automated reimbursements
  • Secure online employee portals and mobile access

What users think

"I love the new benefits Paychex has added which allow employees to choose additional support and services like pet insurance." - Deb K., an executive director

"Some features take a bit of time to learn or feel a little clunky at first." - April C., a project manager

Pricing

Accurate pricing is available from the vendor on request.

Why we chose them

Paychex brings HRA administration into its established HR suite, simplifying processes for businesses already using its payroll and HRIS tools. That all-in-one approach makes it a convenient choice for organizations that want a single vendor for multiple HR functions.

PayChex dashboard
PayChex dashboard

How we chose these HRA vendors

The 12 vendors above made the cut based on several key factors, including HRA plan type, business size fit, technology, customer service, and compliance expertise. Some excel in specific areas. One might offer standout tech features, for example, while another provides exceptional hands-on support.

We also looked at the software itself, not only the company behind it: how well each platform automates compliance tasks, how quickly employees get reimbursed, and how cleanly it connects to your HRIS and payroll. Each vendor brings its own strengths, and the best choice depends on your organization's size, goals, and preferred plan type.

What to look for in HRA administration software

A vendor list shows you who's in the market, but the harder question is how each platform performs once your plan is live. Use these four criteria to score any shortlist, including the vendors above.

Plan design and eligibility customization

Start with the plan you want to run, then find software that can run it. That sounds obvious, but many platforms support only one or two HRA types well. If you plan to offer an ICHRA to hourly staff and a group coverage HRA to salaried staff, confirm the software handles both classes cleanly.

Ask each vendor to show you how it handles:

  • Employee classes: Different allowances for full-time, part-time, or location-based groups
  • Spending categories: Targeted budgets for needs like fertility, mental health, or medical travel
  • Proration and waiting periods: Allowances for mid-year hires and new-hire waiting periods
  • Rollover rules: Whether unused funds carry over, and by how much

Budget flexibility matters because HRA spending varies widely. According to the 2026 Benepass Benchmarking Report, employers that offer an HRA contribute an average of $5,000 per year, with a median of $3,400. That gap shows how differently employers size their plans, and your software should let you set the number that fits your workforce. If you want to support health spending with fewer rules attached, healthcare stipends are a taxable, simpler alternative.

Compliance and plan documentation

Compliance is where HRA mistakes get expensive, so treat it as a pass-or-fail test. Each HRA type carries its own rules, and good software enforces them automatically instead of leaving them to a spreadsheet.

A few examples of what your platform should track:

  • Contribution limits: For 2026, QSEHRA reimbursements can't exceed $6,450 for self-only coverage or $13,100 for family coverage (Rev. Proc. 2025-32). For plan years beginning in 2027, the excepted benefit HRA limit rises from $2,200 to $2,250 (Rev. Proc. 2026-24).
  • Required notices: QSEHRA employers must give eligible employees written notice at least 90 days before the plan year begins, with a penalty of $50 per employee (up to $2,500 per year) for missing it (IRS Notice 2017-67).
  • Substantiation: Every reimbursed expense needs proof that it's eligible, and QSEHRAs also require proof of minimum essential coverage.

Also ask whether the vendor drafts and maintains your plan document and summary plan description, and whether it updates them when IRS limits change each year. The best platforms handle this without you having to ask.

Employee experience and reimbursement speed

An HRA only works if employees use it. The same Benepass benchmarking report finds that HRA engagement averages 56%, which means more than four in 10 eligible employees still aren't using their funds. The reasons are usually practical: employees don't know what's covered, or they don't want to front the cost and wait to be paid back.

Reimbursement speed is the biggest lever here. With a traditional HRA, an employee pays out of pocket, uploads a receipt, waits for review, and then waits for payment. A card-first HRA removes most of those steps because the employee pays at the point of care with pre-funded money. That matters because most HRA dollars are spent right at the point of care. Benepass's benchmarking data shows doctor's office visits account for 50% of HRA spending and hospital expenses account for another 25%. Those are exactly the visits where an employee would otherwise have to pay up front and wait.

When you evaluate the employee side, check:

  • How employees pay (card, reimbursement, or both)
  • How long a typical reimbursement takes from submission to payment
  • Whether employees can see their balance and eligible expenses in a mobile app
  • Who reviews claims, and how the vendor protects sensitive medical details

Reporting and payroll/HRIS integrations

HRA software rarely stands alone. It needs to share data with your HRIS, payroll, and benefits administration software so eligibility, enrollments, and terminations stay in sync. When those feeds break, employees get declined cards, and your team gets support tickets.

Ask vendors which connection types they support, such as API, SFTP, or Workday RaaS, and how they catch bad data before it reaches employees. Reporting matters for tax purposes too. For example, employers must report QSEHRA benefits on employees' Forms W-2 in Box 12 using code FF (IRS W-2 instructions), so your platform should hand payroll clean, accurate figures.

Choose Benepass as your HRA vendor

The strongest HRA software removes a tradeoff many HR teams assume they have to accept: tight compliance usually means more friction for employees, and an easy experience usually means more risk for the employer. The right platform delivers both.

Benepass does that on one card. Employers define eligibility rules for targeted HRAs, and the Benepass team processes transactions and reimbursements to validate eligibility, which keeps employees' medical information more private and takes review work off your People and Finance teams. Employees pay with a pre-funded Visa card instead of waiting to be paid back, and payroll integrations enroll the right people automatically. The same card and app also support HSAs, FSAs, and lifestyle spending accounts, so your HRA can sit alongside your other pre-tax spending accounts instead of adding another vendor.

Ready to see it in action?

Book a demo to see how one card and one dashboard handle eligibility rules, reimbursements, and compliance for your HRA, without juggling multiple vendors.

FAQs about HRA vendors and administration software

What is an HRA?

A health reimbursement arrangement (HRA) is an employer-funded plan that reimburses employees, tax-free, for eligible medical expenses and, depending on the plan type, health insurance premiums. Common types include:

  • Group coverage HRA: Offered alongside a traditional group health plan. Group coverage HRAs reimburse eligible HRA expenses, such as out-of-pocket medical costs the group plan doesn't fully cover.
  • Qualified small employer HRA (QSEHRA): Designed for small employers with fewer than 50 full-time equivalent employees that don't offer a group health plan.
  • Individual coverage HRA (ICHRA): An alternative to traditional group health insurance that reimburses employees for individual health insurance coverage and other qualified medical expenses.
  • Excepted benefit HRA (EBHRA): Offered alongside a group health plan to reimburse "excepted benefits" like vision or dental care.

How do HRAs work?

Typically, the process works like this:

  1. Employers set the HRA allowance. Some HRA types have IRS limits. For 2026, the QSEHRA limit is $6,450 for individuals and $13,100 for families, and the EBHRA limit is $2,200. The EBHRA limit rises to $2,250 for plan years beginning in 2027 (Rev. Proc. 2026-24). The IRS hasn't yet published 2027 QSEHRA limits.
  2. Employees make eligible health-related purchases. Purchases must match the HRA's eligibility criteria.
  3. Employees submit proof of purchase. This includes invoices or receipts for eligible expenses.
  4. The employer or administrator reviews the claim. They confirm it meets the eligibility rules and doesn't exceed available funds.
  5. The employee is reimbursed.

With a card-based HRA, employees pay directly with HRA funds at the point of purchase, which shortens or skips steps three through five.

Why use HRA software to administer your benefits?

The process above eats into your team's time if you run it manually. HRA software helps you:

  • Save time and money: HRA administration software automates eligibility verification and reimbursement processing, reduces calculation errors, and helps you stay aligned with IRS rules.
  • Improve employee experience: Self-service portals and mobile apps let employees check balances, see what's covered, and submit claims on their own.
  • Reimburse employees faster: Electronic claims replace paper, and card-based platforms let employees pay at checkout instead of waiting to be paid back.

What is an HRA vendor?

An HRA vendor is a company that provides software, services, or both to help employers administer their HRA plans. Some vendors specialize in specific HRA types, like ICHRAs or QSEHRAs, while others support every type of health reimbursement arrangement.

Who are the best QSEHRA administrators and providers?

Among the vendors on this list, three stand out for QSEHRA administration:

  • PeopleKeep: Built for small employers, with dedicated QSEHRA pricing and help generating plan documents
  • Take Command: Designs custom QSEHRA and ICHRA plans for small businesses, with 1:1 enrollment support
  • WEX Health: Supports QSEHRAs alongside many other HRA structures, which suits employers that expect to add plan types later

QSEHRA buyers are often first-time benefits buyers. The HRA Council found that 93% of employers newly offering a QSEHRA in 2026 previously offered no health coverage at all. If that's you, prioritize a provider that handles the written notice, annual limit updates, and proof-of-coverage checks for you.

How do you choose the best HRA vendor?

Start with the four software criteria above, then round out your evaluation with these factors:

  • Vendor reputation: Read reviews on G2 or Capterra, along with case studies from companies in your industry.
  • Pricing: Get a full view of platform fees, setup charges, and costs for support or integrations. Our benefits budget guide walks through how to size and defend your budget.
  • Customer support: Look for multiple support channels and a track record of quick problem resolution, especially during open enrollment.
  • Security: Ask for current security certifications and how the vendor protects employee health and financial data under rules like HIPAA.