Electronic Form I-9 Systems: Compliance, Audit Trails, and ICE Inspection Risks

SCHEDULE A CONSULTATION

Last Updated: July 2026

Electronic Form I-9 systems may simplify hiring, reverification, retention, and audit preparation. They may also create widespread compliance problems when the software does not satisfy federal requirements or when employers assume the vendor is responsible for every error.

An electronic system must do more than display Form I-9 on a screen. It must preserve the form’s integrity, support legally valid electronic signatures, prevent unauthorized changes, retain required documentation, create secure records of user activity, and produce readable records during a government inspection.

A system-level defect may affect hundreds or thousands of Forms I-9 simultaneously. Employers should evaluate both the software’s technical capabilities and the company’s actual use of the system.

For some employers, a properly managed paper process may currently present fewer risks than relying exclusively on an electronic platform.

Electronic Form I-9 Compliance at a Glance

An employer using an electronic system should be able to:

Produce a legible Form I-9 for every current employee;
Produce retained Forms I-9 for former employees;
Retrieve forms promptly during an ICE inspection;
Provide associated audit trails and system activity records;
Show who created, accessed, signed, corrected, or updated each form;
Establish when each action occurred;
Prevent or detect unauthorized changes and deletions;
Preserve original information when corrections are made;
Verify the identity of each person using an electronic signature;
Document the system’s business processes and security controls;
Produce retained supporting documents;
Demonstrate regular quality-assurance review;
Preserve records when changing vendors or HR systems; and
Continue accessing the records if the vendor relationship ends.

The employer, not merely the software company, remains responsible for Form I-9 compliance.

May Employers Use Electronic Forms I-9?

Yes. Federal regulations permit employers to complete, sign, store, and retain Forms I-9 electronically when the system satisfies the applicable requirements.

Employers may maintain Forms I-9 using:

Paper records;
Microfilm or microfiche;
Electronic systems; or
A combination of methods.

The electronic-system requirements appear principally in 8 C.F.R. § 274a.2.

Using electronic records does not change the employer’s underlying obligations. Section 1 and Section 2 must still be completed properly and on time. Employees must be allowed to choose acceptable documents, and the employer must follow the applicable document-examination procedures.

Different Types of Electronic Form I-9 Records

Employers frequently use the phrase “electronic I-9” to describe different processes. Identifying the actual process is important because different requirements may apply.

Paper Form I-9 scanned for electronic storage

The employee and employer complete and manually sign a paper Form I-9. The employer then scans and stores the signed form electronically.

If the employer relies on the electronic record for retention, the electronic repository should satisfy the applicable integrity, security, indexing, retrieval, and reproduction requirements.

The scanned image does not convert the original manual signatures into electronic signatures. It is an electronic copy of a manually signed record.

Form I-9 completed electronically but signed manually

An employer may enter information into a fillable Form I-9, print it, and obtain manual signatures.

USCIS states that employers and employees using its fillable Form I-9 must print and manually sign it unless they use a separate compliant electronic-signature system. Simply typing a name into the fillable USCIS form does not necessarily create a valid electronic signature. USCIS: Form I-9

Form I-9 completed and signed through an electronic platform

A compliant platform may permit employees and employer representatives to enter information and electronically sign Form I-9.

The system should satisfy requirements involving:

Electronic completion;
Electronic signatures;
Identity verification;
Secure records of system activity;
Integrity and authenticity;
Security;
Retention;
Indexing;
Retrieval; and
Reproduction.

Form I-9 integrated into an HRIS or onboarding platform

Some employers complete Form I-9 through an applicant-tracking, payroll, human-resources, or onboarding platform.

Integration may create additional concerns involving:

Data transferred from job applications;
Prefilled employee information;
Changes synchronized across systems;
User permissions;
Signature authentication;
E-Verify integration;
Data migration;
Vendor access;
Audit-trail retention; and
Ownership of records after contract termination.

The employer should not assume that an entire platform complies merely because the vendor advertises an “I-9 module.”

Is a Fillable PDF an Electronic Form I-9 System?

Not necessarily.

A fillable PDF allows information to be typed into the form. It does not, by itself, create:

A compliant electronic signature;
A secure audit trail;
Identity authentication;
Controls preventing unauthorized changes;
An indexing and retrieval system;
A quality-assurance program; or
Documentation establishing authenticity and integrity.

If the parties complete a fillable form and then manually sign it, the result may be treated as a manually signed Form I-9 that can subsequently be stored electronically.

Typing a name, inserting a signature image, or selecting a checkbox does not automatically satisfy all electronic-signature requirements.

Why Electronic-System Compliance Matters During an ICE Audit

During a Notice of Inspection, ICE Homeland Security Investigations, or HSI, may request more than the visible Forms I-9.

HSI may also request:

Audit trails and system activity records;
Electronic-signature records;
User-access records;
Security and quality-assurance documentation;
Supporting document images;
E-Verify records;
Reports identifying changes or corrections;
System descriptions;
Indexing information; and
Information concerning the vendor and system configuration.

The company generally must produce requested Forms I-9 within the applicable notice period. Reliance on a third-party vendor does not ordinarily excuse late or incomplete production.

An employer should know before an audit whether the system can export the required records in a readable and organized format.

ICE’s Treatment of Electronic-System Failures

ICE’s March 2026 Form I-9 inspection guidance identifies failure to satisfy standards for electronic completion, retention, documentation, security, reproduction, and electronic signatures as a substantive Form I-9 violation. ICE: Form I-9 Inspection Under INA § 274A

This is significant because a system-wide defect may affect every Form I-9 maintained through that system.

Potential examples include:

Forms that cannot be produced;
Forms lacking valid employee or employer signatures;
Missing audit trails;
Forms that can be overwritten without preserving prior information;
Missing dates or time stamps;
Inability to verify who signed a form;
Missing supporting documents;
Unreadable exports;
Prematurely deleted records; or
Missing system documentation and controls.

The employer may therefore face more than an isolated user error. ICE may contend that the system itself failed to preserve compliant Forms I-9.

Core Requirements for an Electronic Form I-9 System

Requirement	System function
Integrity	Preserve the accuracy and reliability of each Form I-9
Protection against alteration	Prevent or detect unauthorized or accidental creation, addition, alteration, deletion, or deterioration
Secure activity records	Record who created, accessed, viewed, updated, or corrected a form, when the action occurred, and what was done
Identity verification	Create and preserve a record verifying the identity of a person using an electronic signature
Signature attachment	Attach or logically associate the electronic signature with the applicable Form I-9
Attestation	Allow the signer to acknowledge the applicable Form I-9 attestation
Indexing	Permit identification and retrieval of relevant records
Reproduction	Produce legible and readable copies
Inspection capability	Produce forms, supporting records, and associated audit trails
Quality assurance	Regularly evaluate the system’s effectiveness
Security	Restrict access and protect records from alteration, loss, or disclosure
Process documentation	Explain the creation, modification, signature, storage, and retrieval processes
Retention	Preserve records for the legally required period
Correction history	Preserve prior information and identify subsequent changes
Portability	Preserve records and metadata when the employer changes vendors

Integrity, Accuracy, and Reliability

The electronic system should include controls designed to ensure the integrity, accuracy, and reliability of Forms I-9.

The employer should be able to establish that:

A completed form remains associated with the correct employee;
Information is not lost during updates or migrations;
Changes in one HR system do not silently overwrite Form I-9 records;
Records cannot be altered without authorization;
The system preserves a reliable history of changes;
Signed forms cannot be replaced by incomplete drafts;
Attachments remain associated with the correct form; and
Stored records can be reproduced throughout the retention period.

A visually correct PDF may not be sufficient if the employer cannot establish how it was created, signed, modified, and preserved.

Do the Regulations Require an Audit Trail?

The regulations address audit trails in several related provisions. The language is stronger than merely suggesting that an audit trail may be helpful.

Production with associated audit trails

Under 8 C.F.R. § 274a.2(e)(8)(i), an employer retaining Forms I-9 electronically must retrieve and reproduce requested Forms I-9 and supporting documentation “along with associated audit trails.”

The regulation therefore expressly contemplates that an electronically retained Form I-9 will have an associated audit trail available for government inspection.

Documentation establishing authenticity and integrity

Under 8 C.F.R. § 274a.2(f)(1)(iii), the employer must maintain documentation of the business processes used to establish the authenticity and integrity of electronic Forms I-9, “such as audit trails.”

This provision uses “such as,” which could be read as identifying audit trails as an example of documentation that establishes authenticity and integrity rather than declaring that only one particular type of audit-trail report will satisfy the requirement.

Secure and permanent record of system activity

Separately, 8 C.F.R. § 274a.2(g)(1)(iv) requires a secure and permanent record whenever an electronic Form I-9 is:

Created;
Accessed;
Viewed;
Updated; or
Corrected.

That record must establish:

The date of access;
The identity of the person who accessed the record; and
The particular action taken.

This required secure and permanent record is functionally an audit trail, regardless of the terminology used by the software vendor.

The federal electronic-storage rule is available through the Federal Register.

OCAHO: An Audit Trail Is an Essential Component

In United States v. KLJ Leasing, LLC, 16 OCAHO no. 1446c (2025), an OCAHO Administrative Law Judge considered an employer that timely produced electronic Forms I-9 but failed to produce all associated audit trails within the required inspection period.

The employer asserted that a technical problem prevented it from producing the missing audit trails. It eventually produced 142 missing audit trails approximately six weeks after its initial production.

OCAHO concluded that an audit trail is an “essential component” of an electronic Form I-9 because it permits the government to evaluate the authenticity and integrity of the form, including the employee and employer signatures.

The decision reasoned that the metadata was effectively inseparable from the electronic Form I-9. OCAHO held that failing to timely present the audit trail constituted a substantive failure-to-present violation, comparable to failing to timely present a paper Form I-9.

The employer could not avoid liability by producing the audit trails after the production deadline. OCAHO also rejected application of the good-faith defense to those violations, although it left open the possibility that the employer’s reliance on its vendor and the inadvertent nature of the failure could be considered when determining the penalty.

The official decision is available here: United States v. KLJ Leasing, LLC, 16 OCAHO no. 1446c.

Could the OCAHO Audit-Trail Interpretation Be Challenged?

Potentially.

The July 11, 2025 decision in KLJ Leasing was an OCAHO order addressing liability for certain counts. The decision stated that penalty issues and other unresolved claims would be addressed later.

Final OCAHO agency decisions may be reviewed by the appropriate federal circuit court of appeals. A respondent could potentially challenge OCAHO’s interpretation after issuance of a reviewable final agency order and satisfaction of applicable administrative requirements.

A potential challenge might argue that:

Section 274a.2(f)(1)(iii) uses the phrase “such as audit trails,” which could make an audit trail illustrative rather than the only permissible method of establishing authenticity and integrity;
The regulations primarily establish performance standards rather than require a vendor report bearing a particular name or format;
A technical delay in producing metadata should not necessarily be treated the same as the complete absence of Form I-9; or
A late audit-trail production should be evaluated differently when the visible Forms I-9 were timely produced and their authenticity can be established through other reliable evidence.

The government would likely respond that:

Section 274a.2(e)(8) expressly requires production of electronic Forms I-9 with associated audit trails;
Section 274a.2(g)(1)(iv) requires a secure and permanent record identifying access and activity;
Section 274a.2(f) requires documentation establishing authenticity and integrity;
The employer must produce the complete electronic record within the applicable inspection period; and
Metadata is necessary to evaluate whether electronic attestations and signatures were timely and authentic.

As of this article’s July 2026 update, the KLJ Leasing audit-trail ruling should be treated as significant OCAHO authority. Employers should not assume that they can withhold an audit trail or produce it after the deadline merely because the visible Form I-9 was produced on time.

A future federal appellate decision could clarify or limit OCAHO’s interpretation. Until then, employers using electronic Forms I-9 should plan to preserve and timely produce complete audit trails.

What Should the Audit Trail Show?

The audit trail should identify:

The employee;
The affected form and section;
The action taken;
The date and time;
The user who performed the action;
Whether the record was created, accessed, viewed, updated, or corrected;
The original information;
The revised information, when applicable; and
Any explanation entered for the correction.

USCIS explains that the audit trail should reflect corrections and additions to Sections 1 and 2 and Supplements A and B. USCIS Handbook for Employers: Form I-9 and Storage Systems

A report showing only the most recent modification date may not establish what changed or whether the original information was preserved.

Why Audit Trails May Be Damaging

Audit trails can demonstrate compliance, but they may also reveal:

Late completion;
Backdating;
Forms created after a Notice of Inspection;
Changes made immediately before production to HSI;
One person signing for multiple employees;
Employer representatives signing before document examination;
Records altered by unauthorized users;
Use of shared accounts;
Repeated overrides;
Changes without explanations; or
Corrections that concealed original information.

Employers should consider reviewing audit trails during internal audits instead of waiting for HSI to analyze them.

Controls Against Unauthorized Changes or Deletion

The system should include controls designed to prevent and detect unauthorized or accidental:

Creation;
Addition;
Alteration;
Deletion;
Deterioration; and
Loss.

Potential controls may include:

Role-based access;
Unique user accounts;
Multifactor authentication;
Restrictions on administrative privileges;
Change logs;
Backup and recovery processes;
Alerts concerning bulk deletion;
Separation of testing and production environments; and
Prompt termination of former users’ access.

A system permitting administrators to modify completed Forms I-9 without leaving a permanent record may present substantial risk.

Under 8 C.F.R. § 274a.2(g)(2), action or inaction that results in unauthorized alteration, loss, or erasure may violate the retention requirements when the employer knew, or reasonably should have known, that the result was likely.

Electronic-Signature Requirements

An electronic signature should not be treated as a decorative image or typed name. The system must create a reliable connection between the signature, the signer, and the applicable Form I-9.

A compliant process should:

Present the applicable attestation;
Allow the signer to acknowledge having read it;
Attach or logically associate the signature with Form I-9;
Affix the signature at the time of the transaction;
Verify the signer’s identity;
Preserve the identity-verification record;
Record the signature date;
Prevent transfer of the signature to another form; and
Provide the required confirmation of the transaction.

A checkbox stating “I agree” may be part of a compliant process, but the checkbox alone may not satisfy every requirement.

Employee and Employer Signatures Should Be Separate

The system should distinguish between:

The employee completing and signing Section 1;
A preparer or translator completing Supplement A;
The employer or authorized representative completing Section 2; and
The employer representative completing Supplement B.

One person should not use the employee’s credentials or sign for the employee unless the applicable preparer, translator, accommodation, or other legal requirements are satisfied.

The employer representative’s certification should not be automatically applied merely because the employee completed Section 1 or uploaded documents.

Prefilled Information and Automated Entries

Electronic systems frequently transfer information from an employment application, payroll platform, or HR profile into Form I-9.

The employer should confirm that:

The employee can review and correct Section 1;
The system does not select an immigration-status attestation for the employee;
Optional fields are not improperly made mandatory;
A preferred name does not replace the employee’s legal name;
Data is not silently overwritten by another system;
Document information is entered by the appropriate representative;
Section 2 is not certified before document examination; and
Imported and corrected information is properly recorded.

Software should not make legal attestations for the employee or employer representative.

Indexing and Retrieval

The employer must be able to locate and produce retained Forms I-9.

The system should support searches through reliable information such as:

Employee name;
Employee identification number;
Date of hire;
Employment status;
Work location;
Business entity;
Termination date; and
Retention or destruction date.

An indexing system should not depend solely on a Social Security number or email address.

The employer may wish to test retrieval for employees who:

Changed names;
Transferred locations;
Moved between business entities;
Were rehired;
Became inactive;
Were acquired through a corporate transaction; or
Were entered under duplicate profiles.

Reproduction and Inspection

The system must be capable of producing legible and readable copies.

During an inspection, the employer may need to produce:

Completed Forms I-9;
Supplements A and B;
Retained document copies;
Audit trails;
Electronic-signature records;
Relevant E-Verify information; and
System documentation.

USCIS states that an inspection may include associated audit trails showing actions performed within or on the system. USCIS Handbook for Employers: Inspection

Exports should:

Display the correct Form I-9 version;
Include all entered information;
Include signatures and dates;
Include completed supplements;
Be readable without proprietary software;
Remain associated with the correct employee; and
Be organized for government review.

Retention Requirements

Electronic storage does not change how long Form I-9 must be retained.

Employers must retain Form I-9:

Throughout employment for current employees; and
For former employees until the later of three years after the first day of employment or one year after employment ends.

The system should calculate destruction dates correctly and prevent premature deletion.

Additional review may be appropriate when:

An employee is rehired;
Employment records contain multiple hire dates;
The company changes HR systems;
Business entities merge;
A location closes;
A legal hold applies; or
The employer receives a Notice of Inspection.

Once an inspection, investigation, or reasonably anticipated dispute begins, ordinary destruction may need to be suspended.

System Documentation

The employer should maintain documentation describing:

How Forms I-9 are created;
How information is entered and modified;
How signatures are authenticated;
How audit trails are generated and retained;
How access is granted and removed;
How records are indexed;
How forms and attachments are retrieved;
How backups and recovery operate;
How corrections are performed;
How retention dates are calculated;
How records are exported; and
How records are preserved after the vendor relationship ends.

Vendor marketing materials may not be sufficient technical or procedural documentation.

Quality-Assurance Program

The regulations require an inspection and quality-assurance program evidenced by regular system evaluations.

An effective program may include:

Sampling completed Forms I-9;
Reviewing electronic signatures;
Testing audit trails;
Testing searches and exports;
Reviewing user permissions;
Verifying retention calculations;
Testing document-image readability;
Reviewing E-Verify integration;
Testing corrections and reverifications;
Monitoring vendor updates; and
Documenting remediation.

The employer should preserve evidence showing when reviews occurred, who conducted them, what was tested, and how identified problems were addressed.

Security and Access Controls

Forms I-9 contain sensitive personally identifiable information. Electronic systems should restrict access and protect records from alteration, loss, and disclosure.

Employers should evaluate:

Unique credentials;
Multifactor authentication;
Role-based permissions;
Encryption;
Access logs;
Vendor and subcontractor access;
Data hosting;
Incident procedures;
Backup and recovery;
Download security; and
Removal of former users’ access.

The system should generally avoid giving every HR user unrestricted authority to view, change, download, or delete every Form I-9.

May Paper Forms I-9 Be Safer?

For some employers, paper Forms I-9 may currently present fewer compliance risks than relying exclusively on an electronic platform.

Electronic systems introduce requirements involving signatures, access controls, system documentation, audit trails, data retention, and reproduction. A failure at one level may affect numerous forms.

A properly completed, manually signed paper Form I-9 generally does not require the employer to establish the validity of an electronic signature or produce electronic audit trails.

Paper may be worth considering when:

The employer has a manageable workforce;
HR can consistently complete and review paper forms;
Forms can be stored centrally and securely;
The employer lacks resources to evaluate a vendor;
Available software does not provide reliable audit trails;
The employer cannot obtain complete system documentation;
System settings can be changed by ordinary users;
The vendor cannot produce records promptly; or
The employer has experienced configuration or migration problems.

Paper is not automatically compliant. Paper forms may be lost, completed late, stored at different locations, damaged, corrected improperly, or destroyed too early.

The appropriate method may depend on workforce size, hiring volume, locations, remote employees, available personnel, and internal controls.

Practical Problems With Electronic Audit Trails

We have encountered employers whose HR personnel inadvertently disabled audit-trail or related tracking features because prompts, notifications, or workflow requirements were viewed as an annoyance.

The employer did not intend to conceal information. Nevertheless, the configuration change created difficulty establishing when forms were completed, signed, accessed, or corrected.

Electronic records may also be affected by:

Software updates;
Vendor configuration changes;
Permission errors;
Integration failures;
Data migrations;
Synchronization problems;
Duplicate employee profiles;
Shared accounts;
Deleted attachments;
Incomplete exports; or
Audit information retained for less time than Form I-9.

If ordinary users can disable required tracking without creating a permanent record, the employer should carefully evaluate the system’s controls.

An employer using an electronic system should consider:

Restricting configuration authority;
Prohibiting shared accounts;
Requiring approval for material changes;
Receiving alerts when logging features change;
Testing audit trails periodically;
Exporting audit information during internal audits;
Confirming how long logs are retained;
Reviewing changes after updates; and
Preserving records during migrations.

Informal HSI Auditor Observation

In a recent informal conversation, an HSI auditor indicated that maintaining paper Forms I-9, or relying primarily on paper forms, may be prudent because of recurring problems involving electronic records and audit trails.

This reflects the experience and opinion of an individual auditor. It is not an official ICE policy and should not be described as a government requirement or universal recommendation.

The observation is consistent with a practical concern. An electronic system creates additional evidence and technical requirements that the employer may need to preserve, explain, and produce.

May an Employer Use a Hybrid Process?

Potentially.

One approach may be to complete and manually sign the original Form I-9 on paper while retaining a scanned electronic copy for backup, centralized access, or internal review.

Under that approach:

The manually signed paper form may remain the controlling record;
The electronic copy may provide backup;
The paper original should be securely retained;
The electronic repository should remain secure; and
Corrections should be reflected consistently.

Periodic electronic exports may also support business continuity for employers using electronic systems. These exports may include:

Completed Forms I-9;
Supporting document copies;
Audit trails;
Electronic-signature records; and
System documentation.

Printing or exporting an electronically signed form does not necessarily cure a defective signature process or missing audit trail.

The employer should identify the controlling record and avoid inconsistent paper and electronic versions.

Paper Versus Electronic Form I-9 Systems

Consideration	Paper process	Electronic process
Activity history	Established through the original form and documented manual corrections	System should record creation, access, signatures, changes, users, dates, and actions
Signature risk	Manual signatures may be easier to authenticate	Employer should establish compliance with electronic-signature requirements
User error	Missing fields, late signatures, handwriting, and improper corrections	Incorrect settings, shared accounts, overrides, automated entries, and disabled features
Technology risk	Limited	Outages, integrations, updates, migrations, and lost metadata
Retrieval	May be slower across multiple locations	May be faster if records are correctly indexed
Storage	Requires secure physical space	Requires security, backups, access controls, and vendor continuity
Government production	Paper records can be copied and organized	Forms, signatures, audit trails, attachments, and system documentation may be requested
System-wide failure	Errors may affect individual forms or locations	One defect may affect a large portion of the workforce
Remote hiring	May be logistically difficult	May provide greater convenience, subject to current document-examination rules
Vendor dependence	Limited or none	Employer may depend on vendor support, exports, and record retention

Evaluating an Electronic Form I-9 Vendor

A vendor’s statement that its product is “Form I-9 compliant” should not end the employer’s review.

The employer may wish to request a written explanation showing how the configured system satisfies 8 C.F.R. § 274a.2.

Evaluation may involve legal, HR, information technology, information security, records management, and procurement personnel.

Questions to Ask a Vendor

Form creation and version control

Which Form I-9 version does the system use?
How quickly will the vendor implement a new version?
Will historical forms remain in their original version?
Can the system prevent use of an expired version?
Does it preserve supplements and attachments?
Can it distinguish drafts from completed forms?
Does it automatically enter information that a person should provide?

Electronic signatures

How does the system verify the signer’s identity?
How is the signature associated with Form I-9?
Does the signer view and acknowledge the attestation?
Does the system record the date and time?
Can one user sign for another?
Can shared accounts be used?
Can signatures be copied between forms?
Is the identity-verification record preserved?
Does the signer receive the required confirmation?

Audit trails

Does the system record creation, access, viewing, updates, and corrections?
Does it show original and revised information?
Does it identify the user, date, time, and action?
Can logging be disabled?
Can administrators alter or delete the audit trail?
Are configuration changes recorded?
How long are audit trails retained?
Are they included in standard exports?
Can they be produced without vendor assistance?
Will they remain available after contract termination?

Document storage

Can supporting documents be associated with the correct employee?
Does the system preserve the front and back when required?
Are images readable when exported?
Can attachments be replaced or deleted?
Are attachment changes recorded?
Can the employer apply a consistent copying policy?
How are multiple Forms I-9 handled?

Retention and destruction

How are retention dates calculated?
How are rehires treated?
Can destruction be suspended?
Does the employer receive notice before deletion?
Can accidentally deleted records be restored?
How long are backups retained?
Are audit trails and attachments deleted with the form?
Is employer approval required for destruction?

Government production

The vendor should be able to demonstrate:

Locating a defined employee population;
Exporting complete Forms I-9;
Exporting Supplements A and B;
Exporting supporting documents;
Exporting audit trails;
Producing electronic-signature records;
Producing E-Verify information;
Separating current and former employees;
Identifying incomplete forms; and
Organizing records by legal entity and worksite.

Security

Does the system support unique accounts?
Is multifactor authentication available?
Can permissions be restricted?
Are access and downloads logged?
Can former users be removed promptly?
Where is data hosted?
Does the vendor use subcontractors?
How is data encrypted?
What breach procedures apply?
How are backups tested?
Can vendor personnel access Form I-9 information?

A cybersecurity certification may provide useful information, but it does not establish compliance with Form I-9 regulations.

Contract Terms With the Vendor

The contract may address:

Employer ownership of all data;
Access throughout the contract;
Access after termination or vendor insolvency;
Export of forms, attachments, signatures, and audit trails;
Assistance during government inspections;
Response times for urgent requests;
Notice of system changes;
Notice of compliance-related changes;
Security and breach notification;
Backup and recovery;
Retention of system records;
Restrictions on subcontractors;
Prohibition against unauthorized deletion;
Testing rights;
Migration assistance;
Allocation of responsibility for defects;
Indemnification, when appropriate;
Confidentiality; and
Data return and destruction.

A contract may allocate financial responsibility between the parties. It may not prevent ICE from holding the employer responsible for its Forms I-9.

Vendor Assistance During an ICE Inspection

The employer should not first discover during an inspection that vendor assistance requires a new contract, additional payment, or an ordinary support ticket.

The employer may wish to require:

An emergency contact;
A defined response time;
Bulk export assistance;
Help interpreting audit trails;
Production of system documentation;
Preservation of relevant records;
Suspension of deletion; and
Cooperation with counsel.

The company should still maintain practical access to its records without depending entirely on one vendor employee.

Implementing a New System

Before launch, the employer should consider:

Identifying each employing legal entity;
Mapping hiring processes;
Identifying authorized representatives;
Configuring permissions;
Confirming deadlines;
Testing signatures;
Testing audit trails;
Reviewing automated entries;
Configuring retention;
Testing document uploads;
Reviewing E-Verify integration;
Establishing remote examination procedures;
Creating escalation procedures;
Training users;
Conducting a pilot;
Reviewing pilot forms; and
Maintaining a paper contingency procedure.

The employer should document implementation decisions and testing.

Shared Accounts

Shared usernames may prevent the employer from establishing who examined documents, certified Section 2, made a correction, or changed a setting.

Employers should generally require unique credentials. Several HR representatives should not complete Forms I-9 under a shared “HR Department” account.

Training System Users

Training should address:

Form I-9 deadlines;
Employee choice of documents;
Document examination;
Electronic signatures;
Remote examination;
E-Verify;
Receipts and automatic extensions;
Corrections;
Reverification;
Rehire;
Audit-trail significance;
Prohibition against shared credentials;
Outage procedures;
Escalation; and
Preservation during an inspection.

Training should explain that convenience features should not be disabled without approval. A prompt that appears repetitive may support a required attestation, signature, or audit record.

System Configuration Changes

A change-management process may require:

A documented reason;
Legal or compliance review;
Testing outside the production environment;
Approval by designated personnel;
Verification that audit trails remain active;
Review of signature functionality;
Confirmation that existing records remain intact;
Communication to users; and
Post-change testing.

The employer should retain a history of material configuration changes.

What If the Audit Trail Was Disabled?

If an employer discovers that an audit trail or related tracking feature was disabled, it should avoid reconstructing or backdating records.

The employer may consider:

Preserving the system and available logs;
Recording when the problem was discovered;
Determining who changed the setting;
Identifying when and why it changed;
Determining which forms may be affected;
Obtaining information from the vendor;
Preserving emails and support tickets;
Suspending unnecessary changes;
Consulting counsel;
Restoring the required functionality;
Testing the restored feature; and
Documenting remediation.

Other reliable records may help establish when actions occurred. They should not be presented as a contemporaneous audit trail if they are not one.

Technology Failures and Outages

A system outage does not necessarily extend Form I-9 deadlines.

A contingency procedure may include:

Completing a paper Form I-9;
Preserving the manually signed original;
Recording why the system was unavailable;
Uploading or recording the form after restoration;
Avoiding inconsistent duplicate forms;
Reviewing the resulting audit trail; and
Escalating extended outages.

The system should not assign a false completion date when a paper form is later uploaded.

Remote Document Examination

An electronic platform does not, by itself, authorize remote examination of documents.

Employers must use a legally permitted document-examination process. Depending on current DHS rules, this may involve:

Physical examination by the employer or an authorized representative; or
A DHS-authorized alternative procedure for qualifying employers.

An authorized remote procedure may require:

Receiving document copies;
Examining documents during live video interaction;
Reviewing the front and back when applicable;
Determining that documents reasonably appear genuine and relate to the employee;
Retaining required copies;
Indicating use of the alternative procedure; and
Creating an E-Verify case or satisfying another program requirement.

USCIS maintains current information about remote examination of Form I-9 documents.

Eligibility and procedures may change. Employers should verify current rules rather than relying solely on a software workflow.

Authorized Representatives

An employer may designate an authorized representative to complete Section 2 or Supplement B.

The employer remains responsible for the representative’s errors.

The system should:

Identify the representative;
Require unique credentials;
Present the employer attestation;
Record the representative’s signature;
Record the date of examination;
Prevent the employee from certifying Section 2 for the employer;
Provide instructions; and
Preserve the representative’s actions.

E-Verify Integration

E-Verify and Form I-9 are related but separate processes.

The employer should complete Form I-9 properly before creating an E-Verify case. An E-Verify confirmation does not cure missing signatures, late completion, improper document examination, or storage violations.

An integrated system should be evaluated for whether it:

Creates cases within the required period;
Transfers information accurately;
Prevents case creation before Form I-9 completion;
Handles employees awaiting Social Security numbers correctly;
Presents Tentative Nonconfirmation notices;
Allows employees to decide whether to take action;
Avoids prohibited adverse action;
Completes photo matching;
Retains required document copies;
Records case numbers;
Identifies duplicate cases;
Supports case closure; and
Preserves E-Verify records.

Tentative Nonconfirmations

The system should not automatically suspend, terminate, delay training, reduce hours, or otherwise take adverse action because of a Tentative Nonconfirmation when the employee chooses to resolve it.

The employer should confirm that:

The employee receives the required notice;
The employee can decide whether to take action;
Referral instructions are provided;
Deadlines are monitored;
The system does not demand additional Form I-9 documents solely because of the mismatch; and
The final result is handled properly.

The employer remains responsible for premature or discriminatory action even if software initiated the workflow.

Correcting Electronic Forms I-9

Corrections should preserve the original information and create a reliable record showing:

What changed;
The corrected information;
Who made the change;
When it occurred;
Which section was affected; and
Why the correction occurred, when an explanation is appropriate.

The employee should ordinarily correct Section 1. The employer or authorized representative should ordinarily correct Section 2 or Supplement B.

The system should not overwrite the original entry or make the corrected information appear to have been entered at the time of hire.

Automated Corrections

The system should not silently modify signed information.

Automated features may:

Standardize addresses;
Change capitalization;
Remove punctuation;
Reformat names;
Modify dates;
Populate issuing authorities;
Calculate expiration dates; or
Synchronize data from another system.

Even a minor automated change may alter a signed attestation. The employer should determine what changes occur, whether they are recorded, and whether the user can review them.

Migrating Forms I-9 Between Systems

A migration may lose:

Electronic signatures;
Signature-authentication records;
Audit trails;
Supporting document copies;
Form versions;
Supplements;
E-Verify information;
Correction explanations;
Original entries;
User identities;
Time stamps; or
Retention dates.

Before migration, the employer should consider obtaining all of these records along with system documentation.

The employer should not authorize deletion from the old platform until migrated records have been validated.

Validating a Migration

Validation may include:

Reconciling the employee population;
Comparing record counts;
Sampling current and former employees;
Reviewing corrected forms;
Reviewing reverifications;
Confirming attachments;
Confirming audit trails;
Confirming electronic signatures;
Confirming form versions;
Testing searches;
Testing exports; and
Confirming retention dates.

If information cannot be migrated, the employer may need to preserve it separately for the entire retention period.

Changing From Electronic to Paper Forms

An employer may decide to use paper forms prospectively while preserving existing electronic records.

The employer should consider:

Whether existing forms were validly signed;
How signatures and audit trails will be retained;
Whether complete exports have been obtained;
Whether printing preserves all information;
Whether vendor access will continue;
How future corrections will be documented;
Which record controls;
How reverification will be completed; and
Whether users understand the transition date.

Printing an electronically signed Form I-9 does not necessarily convert it into a manually signed paper original.

Mock Notice of Inspection Test

Before relying on an electronic system, the employer should consider conducting a mock inspection.

The test may require production of:

Forms I-9 for current employees;
Retained forms for former employees;
Forms organized by entity and worksite;
Supplements A and B;
Supporting document copies;
Audit trails;
Electronic-signature records;
E-Verify records;
System documentation;
A list of missing forms; and
A reconciliation against payroll.

The employer should measure:

How long production takes;
Whether records are complete;
Whether exports are readable;
Whether users understand the reports;
Whether vendor assistance is required; and
Whether the employer can explain how the system works.

Electronic-System Warning Signs

An employer should consider further review if:

The vendor cannot explain signature authentication;
The system permits shared accounts;
Audit trails can be disabled;
Users can modify forms without preserving original information;
The platform records only the latest modification date;
Audit records are retained for less time than Forms I-9;
Forms cannot be exported without vendor assistance;
Exports omit signatures, supplements, or document copies;
Audit reports require an additional fee;
The platform cannot identify who completed Section 2;
The employee can certify Section 2 for the employer;
The system automatically backdates actions;
Corrections appear contemporaneous with the original hire;
Legal holds are unavailable;
Retention dates use incorrect information;
Records are deleted without approval;
System documentation is unavailable;
The contract restricts government access;
Updates alter previously completed forms; or
Records become unavailable after changing vendors.

One warning sign does not necessarily invalidate every Form I-9. It may justify additional testing and review.

Common Electronic Form I-9 Mistakes

Employers should avoid:

Assuming the vendor bears all responsibility;
Purchasing software without reviewing signatures;
Failing to review audit trails;
Allowing users to disable compliance features;
Treating electronic alerts as legal advice;
Allowing software to request specific documents;
Retaining incomplete document images;
Automatically deleting records;
Discontinuing an old system before validation;
Maintaining inconsistent paper and electronic versions;
Using shared accounts;
Allowing former users to retain access;
Implementing updates without testing;
Treating E-Verify as a substitute for Form I-9; and
Waiting for an ICE inspection to test production.

Electronic Form I-9 Due-Diligence Checklist

Before purchasing or renewing a system, the employer should consider whether:

The system maps its features to 8 C.F.R. § 274a.2(e) through (i);
It uses and preserves the correct form versions;
Electronic signatures satisfy the applicable requirements;
Each user has unique credentials;
The system creates secure and permanent audit records;
Required tracking cannot be disabled without authorization;
Original information is preserved during corrections;
Forms and attachments are indexed and retrievable;
Exports are complete and readable;
Audit trails can be produced with the forms;
Retention dates are calculated correctly;
Legal holds can suspend destruction;
Remote examination follows current DHS rules;
E-Verify processes operate separately and correctly;
Vendor support is available during an inspection;
The employer owns and can export its data;
Records remain available after contract termination;
Security and backup controls are adequate;
Users receive appropriate training;
System changes are approved and tested; and
The company has completed a mock inspection.

What If the Existing System May Not Comply?

The employer should avoid immediate bulk changes before understanding the issue.

It may consider:

Preserving the existing system and available records;
Suspending automated deletion;
Restricting configuration changes;
Identifying when the problem began;
Determining which forms may be affected;
Obtaining technical information from the vendor;
Preserving support tickets, emails, and contracts;
Testing forms, signatures, and audit trails;
Consulting counsel before corrections;
Developing a remediation plan;
Considering paper completion prospectively; and
Documenting corrective measures.

The employer should not backdate Forms I-9, create artificial system records, or present reconstructed information as contemporaneous.

May Paper Forms Be Created for Defective Electronic Records?

Possibly, but the process should be evaluated carefully.

Completing a new paper Form I-9 may help establish current compliance in some circumstances. It does not necessarily cure a historical violation or eliminate the need to retain the defective electronic record.

The employer should consider:

Whether the original form was validly signed;
Whether the defect affects completion, retention, or both;
Whether documents should be examined again;
How the new paper form should be dated;
What explanation should be attached;
Whether the original electronic form must be preserved;
Whether employees should be notified; and
Whether the process should cover the entire workforce or a defined group.

A new form should reflect the actual date of completion. It should not be backdated.

Frequently Asked Questions

Are employers required to use an electronic Form I-9 system?

No. Employers may generally retain Forms I-9 on paper, microfilm, microfiche, electronically, or through a compliant combination.

Is an electronic Form I-9 better than paper?

Not necessarily. The appropriate method depends on the employer’s workforce, locations, hiring volume, personnel, technology resources, and controls.

May paper Forms I-9 be safer?

For some employers, yes. A properly completed and securely retained paper form may avoid electronic-signature, system-configuration, audit-trail, and vendor-access issues.

Paper has its own risks, including loss, late completion, improper corrections, and retrieval problems.

Does ICE recommend paper Forms I-9?

ICE permits paper and compliant electronic records. An individual HSI auditor informally indicated that paper may be prudent because of recurring electronic audit-trail problems. That observation is not an official ICE policy.

Is an audit trail required?

The regulations expressly require production of electronically retained Forms I-9 with associated audit trails. They also require a secure and permanent record whenever an electronic form is created, accessed, viewed, updated, or corrected.

OCAHO held in KLJ Leasing that an audit trail is an essential component of an electronic Form I-9 and that untimely production can constitute a substantive failure-to-present violation.

Could the OCAHO ruling be challenged?

Potentially. Final OCAHO agency decisions may be reviewed in the federal circuit courts of appeal.

The KLJ Leasing ruling provides significant administrative authority, but a federal appellate court could eventually clarify how the regulatory language applies to audit trails, technical failures, and late production.

What if HR disabled the audit-trail feature?

The employer should preserve available records, determine the affected period and forms, consult the vendor and counsel, restore appropriate controls, and document remediation.

It should not create false historical records or backdate corrections.

Does printing an electronic Form I-9 make it a paper Form I-9?

Not necessarily. If the form was electronically signed, the signature, identity-verification record, and associated audit trail may still be necessary.

May an employer keep paper originals and electronic copies?

Potentially. The employer should identify the controlling record, maintain consistency, secure both repositories, and reflect corrections appropriately.

May the employer destroy a paper original after scanning it?

Compliant electronic retention may be permitted. The employer should first confirm that the electronic repository satisfies the applicable requirements.

Some employers may choose to preserve the manually signed paper original.

Is a scanned Form I-9 the same as an electronically signed Form I-9?

No. A scan is an electronic copy of a manually signed paper record. An electronically signed Form I-9 depends on a compliant electronic-signature process.

Does E-Verify make an electronic Form I-9 compliant?

No. E-Verify confirmation does not cure completion, signature, document-examination, storage, or retention problems.

Does software certification protect the employer from ICE penalties?

Not necessarily. Certifications and warranties may provide useful evidence or contractual remedies, but the employer remains responsible for its records.

Can a vendor contract restrict ICE’s access?

An electronic system must not be subject to an agreement that improperly limits or restricts federal agency access permitted under the regulations.

How often should the system be tested?

The regulations require regular quality-assurance evaluations. The appropriate schedule may depend on hiring volume, system changes, identified problems, and employer risk.

Additional testing may be appropriate after updates, integrations, migrations, or configuration changes.

Should employers export their electronic Forms I-9?

Periodic exports may support continuity and inspection readiness. The export may need to include more than visible PDFs when signatures, attachments, audit trails, or system documentation are required.

Can electronic Forms I-9 be corrected?

Yes. The correction should preserve original information and identify who made the change, when it occurred, and what action was taken.

What happens if the vendor goes out of business?

The employer remains responsible for retaining and producing Forms I-9. Contracts and continuity planning should allow the employer to obtain complete records before access ends.

Should a company conduct an internal audit before changing systems?

An internal review may identify missing forms, signature problems, incomplete audit trails, incorrect retention dates, and migration requirements before the existing system is discontinued.

Final Recommendation

Employers should select the process they can operate, monitor, preserve, and defend most reliably.

For some employers, a controlled paper process may present fewer risks than an electronic platform with uncertain signatures, incomplete audit trails, or settings users can disable. Other employers may benefit from a properly evaluated and monitored electronic system, particularly when they have large, decentralized, or remote workforces.

A hybrid process may provide backup and retrieval benefits, but the employer should identify the controlling record and maintain consistency.

Employers considering an electronic system should not rely solely on convenience, automation, or vendor marketing. They should evaluate how the system works in practice, whether required controls can be disabled, whether complete records and associated audit trails can be produced, and whether the company can continue accessing its data without the vendor.

Attorney Insight

The question is not whether paper or electronic Forms I-9 are always better. The question is which process the particular employer can operate and defend most reliably.

For some employers, a carefully controlled paper process may currently be more defensible than an electronic platform with uncertain signatures, incomplete audit trails, or settings that users can disable. For other employers, a properly evaluated and monitored electronic system may provide stronger consistency and retrieval.

KLJ Leasing demonstrates that producing the visible Form I-9 may not be enough. OCAHO treated the associated audit trail as an essential and inseparable part of the electronic record.

Although that interpretation could eventually be tested in federal court, an employer should not plan its compliance system around the possibility that a reviewing court might later disagree with OCAHO. The more prudent approach may be to preserve and test the complete audit trail before ICE issues a Notice of Inspection.

Conclusion

Electronic Form I-9 systems may improve efficiency, consistency, and retrieval. They also create technical and legal obligations that do not exist in the same form with manually signed paper records.

A system defect, configuration change, user mistake, missing audit trail, or incomplete migration may affect a substantial portion of the workforce. Employers should evaluate electronic platforms before implementation, test them regularly, preserve complete records, and maintain a contingency process.

Please do not hesitate to contact Matthew Myers or Myers Immigration Law with questions concerning electronic Form I-9 systems, paper or hybrid recordkeeping, internal audits, E-Verify integration, or ICE inspection preparation at (210) 640-7424 or info@myersimmigration.com.

This article provides general information and does not constitute legal advice or create an attorney-client relationship.