409A valuation safe harbor: what it means and how to qualify

Safe harbor basically means the onus now falls on the IRS to prove that the value of the stock is wrong, whereas if you do it yourself, the onus falls on you to prove that it's right."409A valuation is performed by a qualified independent third party. It means the IRS, not you, bears the burden of proof if your valuation is ever challenged.

As Steve Allan, who has built the largest 409A valuation practice in the US with over 10,000 completed valuations, explains it:

"Safe harbor basically means the onus now falls on the IRS to prove that the value of the stock is wrong, whereas if you do it yourself, the onus falls on you to prove that it's right." —Steve Allan, Founder of Allanytics

That distinction is the whole reason most founders pay for a third-party valuation rather than attempting one in-house. This guide explains what safe harbor is, why the IRS created it, the three ways to qualify, and what a defensible audit trail looks like in practice.

What 409A safe harbor means

IRC Section 409A requires that any stock options you grant to employees must be priced at or above the fair market value (FMV) of your common stock on the grant date. Grant options below FMV and those become "discounted options," triggering immediate tax liability and a 20% excise tax penalty for your employees, not your company.

Safe harbor is how you demonstrate your FMV was set correctly without having to justify every assumption in your methodology from scratch.

When you qualify for safe harbor, the IRS carries the burden of proving your valuation was wrong. When you don't (because you valued the company yourself or used a non-qualified provider), that burden flips entirely to you. That's not a theoretical risk. It's the practical reality that every founder who skips the qualified appraisal is accepting.

Why safe harbor exists

Section 409A was enacted in 2004, largely in response to the Enron and WorldCom scandals, where executives manipulated deferred compensation arrangements to avoid taxes or accelerate payouts.

One specific abuse that 409A was designed to close: companies granting "discounted" stock options (options with a strike price set below the actual FMV), effectively giving recipients an immediate taxable benefit without reporting it. The strike price on an option is the tax anchor. If founders set it themselves using no methodology, or using methodology that conveniently minimises the number, there was no external check on whether it was accurate.

Safe harbor was the IRS's solution. It doesn't prohibit self-assessment; it makes self-assessment economically irrational.

The cost of a qualified independent appraisal is trivial compared to what it would cost to defend a self-assessed valuation against an IRS challenge. When the burden of proof is yours and the stakes are your employees' tax liability, the math is straightforward.

The three methods of qualifying for safe harbor

The IRS provides three specific valuation methods that qualify for safe harbor under Section 409A. They are not equal in practice.

Method 1: Board valuation (reasonable application of a reasonable method)

The IRS allows companies to perform their own valuations using "a reasonable application of a reasonable valuation method." In theory, this means a board of directors can assess the FMV of common stock using available financial data.

In practice, this method does not qualify for safe harbor under most interpretations because it is an internal assessment rather than an independent one. The IRS will scrutinise self-assessments closely, and the burden of proof falls entirely on the company to demonstrate both the methodology and its reasonable application. For most founders, this is not a viable path.

Method 2: Illiquid startup formula

For companies that are less than ten years old, have no publicly traded securities, and have not undergone a change of control or IPO in the preceding twelve months, the IRS provides a formula-based method that can qualify for safe harbor.

However, this method has strict eligibility criteria and is rarely the right fit for companies that are actually issuing options at scale. If your company has taken on outside investment, has complex capital structure with SAFEs, convertible notes, or preferred shares, or is growing toward Series A, the illiquid startup formula is unlikely to produce a defensible FMV and may not meet the IRS's criteria as your company matures.

Method 3: Independent appraisal (the standard)

A valuation performed by an independent qualified appraiser (one who meets IRS standards through professional credentials or a sufficient volume of completed valuations) delivers full safe harbor status.

This is the method that Steve Allan is describing when he explains the burden-of-proof reversal. When a qualified independent firm produces your 409A report, that report is the evidence. The IRS must affirmatively prove it's wrong. You don't have to defend your assumptions; they have to defeat them.

For any company that has raised outside funding, has more than a handful of employees receiving options, or is approaching a material funding event, an independent appraisal is the practical standard.

Why independent appraisal is the standard for most founders

Founders sometimes ask whether they can save cost by using the board valuation method or the illiquid startup formula. The answer depends on what they're actually trying to protect.

The penalty for a non-compliant 409A doesn't fall on the company: it falls on the employees who received the options. They face accelerated income recognition (paying tax before any liquidity) and a 20% excise tax on top. See our full guide to what happens if you skip your 409A valuation.

A qualified independent appraisal is the only method that provides safe harbor with confidence across the range of situations founders typically face: post-SAFE fundraising, first priced round, annual renewal, material events. Board valuations and the illiquid startup formula are narrow in their applicability and expose employees to risk if they don't hold up under scrutiny.

The other factor is audit frequency. As companies scale and approach exits, their cap tables and historical option grants come under close review from acquirers, investors, and the IRS. The question is not whether anyone will look at your valuations eventually. It's whether the audit trail you've built will hold when they do.

What a clean audit trail looks like

Safe harbor isn't just about which method you use: it's about what you can demonstrate. A clean audit trail means that at any point in time, you can show:

• When each 409A valuation was completed
• What methodology was used and by whom
• What your cap table looked like at the time of valuation
• When each option grant was made, and at what strike price
• That the strike price matched or exceeded the FMV at the time of the grant

When your cap table, 409A workflow, and option grant records are siloed across different tools, reconstructing this trail is slow and error-prone. Cap table data exported manually to a third-party appraiser creates version control risk: the data your appraiser used and the data in your live cap table may have diverged. Strike prices set in a standalone 409A report have to be entered manually into your option grants, introducing re-entry risk.

Cake's 409A valuation is built into the same platform as your cap table. There's no manual data export, no re-entry, and no version control gap between what the appraiser saw and what's recorded in your equity structure. The audit log connects your valuation report directly to every option grant made under it.

That integration is what "clean audit trail" means in practice: not just a document on file, but a traceable chain from valuation to grant, managed in one place.

What to look for in a provider to ensure safe harbor

Not every firm that offers 409A valuations qualifies for safe harbor. The IRS requires that the appraiser be "qualified": either through relevant professional credentials (ASA, ABV, or CFA with valuation experience) or through a sufficient volume of completed valuations demonstrating expertise.

1. Confirm they qualify for safe harbor. Ask directly. A qualified provider will be able to confirm their credentials and methodology without hesitation. If there's ambiguity, that's a signal.

2. Expect a consultation. A reputable appraiser will walk you through the report and explain their methodology. That conversation isn't optional: it's part of understanding what you're signing.

3. Check the pricing range. 409A valuations typically cost $2,500–$10,000, depending on stage of growth. Anything significantly higher for a straightforward early-stage company warrants scrutiny.

Unusually cheap options (some AI-only providers have entered the market at under $500) may be cutting corners on methodology, which puts safe harbor qualification at risk.

For a full breakdown of how to evaluate your options, see our guide to choosing a 409A valuation provider.

That distinction is the whole reason most founders pay for a third-party valuation rather than attempting one in-house. This guide explains what safe harbor is, why the IRS created it, the three ways to qualify, and what a defensible audit trail looks like in practice.