Pass Any I-9 Inspection: HR Workflow and 5 Field Retention Checklist

Pass Any I-9 Inspection: HR Workflow and 5 Field Retention Checklist

The I-9 retention rule is fixed: employers must keep each completed Form I-9 for whichever comes later, three years after the hire date or one year after employment ends, per USCIS. There’s no discretion on that math, and no exception for long-tenured staff. Once an inspector shows up, you have three business days to hand the forms over, so the real work isn’t remembering the rule. It’s building a system that actually finds the right form on the right day.

TL;DR:

Employers must retain each Form I-9 for the later of three years from hire or one year after employment ends, with no exceptions for long-tenured staff.
Only completed pages with employee entries and rehire or reverification supplements need to be stored; reference pages and general instructions can be discarded.
Electronic storage systems must meet specific DHS and USCIS standards, including access controls, audit trails, and legible reproductions, to be compliant.
Rehiring within three years of the original I-9 allows use of Supplement B; more than three years requires completing a new form.
Centralized, indexed storage with automated retention alerts reduces compliance risks and eases inspection readiness.

Table of Contents

• How to Calculate the I-9 Retention Deadline
• Which I-9 Pages Do You Actually Have to Keep?
• What Storage Formats Actually Meet I-9 Compliance Requirements?
• When Do You Complete Section 3 vs. a New I-9 for Rehires?
• How Do You Stay Ready for an I-9 Inspection?
• Turning the Rules Into a Retention Checklist
• The Real Tension in I-9 Retention
• Automating I-9 Retention Dates Without the Spreadsheet Chaos
• Sources
• FAQ

How to Calculate the I-9 Retention Deadline

The “later of” rule sounds simple until you’re staring at two different dates that point in opposite directions. For an employee still on your payroll, the three-year clock from hire date almost always wins, since you haven’t started the one-year termination clock yet. For someone who left the company, you run both calculations and keep whichever date falls further out.

Two examples make it concrete:

• Long-tenured, active employee: hired March 1, 2023. You keep the form indefinitely until they leave, then recalculate according to the retention rule.
• Short-term hire: hired January 10, 2025, terminated June 15, 2025. You calculate retention based on the later of three years from hire or one year after termination.

One historical footnote worth knowing: employers in the Commonwealth of the Northern Mariana Islands (CNMI) operated under a phased-in verification timeline tied to the region’s transition into the federal immigration system, which occasionally still surfaces in older personnel files during audits of long-tenured CNMI-based staff.

Which I-9 Pages Do You Actually Have to Keep?

Not every page attached to a Form I-9 needs to sit in your files forever. USCIS draws a clear line between required entries and reference material.

1. Keep every page with completed entries. That means Section 1 (employee information), Section 2 (employer review), and Supplement B (formerly Section 3) whenever it’s been filled out for reverification or rehire.
2. Discard the reference pages. The Lists of Acceptable Documents and the general instructions pages don’t need retention, since they contain no employee-specific data, according to the official Form I-9 instructions.
3. If you copy documents, copy consistently. Retaining photocopies or scans of the identity and work authorization documents an employee presented is optional, but once you start doing it for one employee, you must do it for all, or you risk a discrimination claim. Store any copies with the corresponding I-9, not in a separate file, and keep them for the same retention period as the form itself.

Never mail completed forms to USCIS or ICE. They stay with you until requested.

What Storage Formats Actually Meet I-9 Compliance Requirements?

Paper, microfilm and microfiche, and electronic records are all acceptable under USCIS storage guidance. Each comes with tradeoffs. Paper is simple but bulky, easy to misfile, and slow to search when you’re under a three-day inspection clock. Microfilm and microfiche are rare in modern HR shops. Most growing companies land on electronic storage because it scales and it’s searchable, but the law doesn’t hand you a free pass just for going digital.

An electronic I-9 storage system has to meet specific technical standards:

• Access controls that restrict who can view or edit records.
• An audit trail that logs every access, edit, and reproduction event.
• Data integrity protections so records can’t be altered without a trace.
• Indexing and retrieval functions that let you locate a specific form fast.
• Backup and recovery procedures in case of system failure.
• Legible reproduction, meaning the system must output a readable paper copy on demand.

Properly scanned electronic records can legally replace paper originals, but only if the system meets those DHS and USCIS standards. That includes documenting your own process for signatures, audit logging, and reproduction, not just buying software and assuming it qualifies.

Pro Tip: When you scan a signed paper I-9, log who scanned it, the date, and a file hash or checksum. That log is what proves the record hasn’t been altered if an inspector ever questions its integrity.

When Do You Complete Section 3 vs. a New I-9 for Rehires?

Rehiring someone doesn’t automatically mean starting from scratch. The rule hinges on timing and on whether the employee’s original work authorization has expired.

• Use Supplement B (Section 3) if the employee is rehired within three years of the date the original Form I-9 was completed, or if you’re reverifying expiring work authorization for a current employee.
• Complete a brand-new Form I-9 if the rehire happens more than three years after the original form’s completion date, since the old record is considered too stale to rely on.
• Track expiration dates actively. If an employee’s authorization document has an expiration date, that date needs to sit on a calendar somewhere with enough lead time to reverify before it lapses, not after.

Document every reverification with the date, the new document reviewed, and who conducted the review. A missed reverification is one of the more common findings in I-9 audits, and it’s entirely preventable with a basic tracking habit.

How Do You Stay Ready for an I-9 Inspection?

Inspectors from DHS, the Department of Labor, or the DOJ’s Immigrant and Employee Rights Section can request your Forms I-9 with only three business days’ notice before you must produce them, per USCIS. That’s a tight window if your forms are scattered across personnel files instead of centralized.

1. Store I-9s separately from personnel files. Keeping them apart means an auditor reviewing I-9s doesn’t stumble into unrelated personnel data, and it means you’re not pulling forms from dozens of separate folders under time pressure.
2. Index by name and hire date at minimum. A simple index cuts retrieval time from hours to minutes.
3. Run periodic QA checks, not just at hire, to catch missing signatures or unretained pages before an inspector does.
4. If a form can’t be located immediately, document the search: who looked, when, and where. A documented good-faith effort matters if the missing form later surfaces during an actual audit.

Indexing and centralized storage are the two controls regulators most consistently expect to see during an inspection, and they cost almost nothing to implement compared to the fines tied to a failed one.

Turning the Rules Into a Retention Checklist

Legal language doesn’t run your HR department. A workflow does. The USCIS retention formula only holds up in practice if someone owns the calculation for every employee, every time, and that’s where most compliance gaps actually open up, not in the law itself but in the tracking.

A workable checklist tracks five fields per employee record:

• Hire date
• Termination date (if applicable)
• Calculated retention cutoff (the later of the two rule)
• Record owner (who’s accountable for that file)
• Destruction log entry once purged

On the workflow side, automated retention-date alerts flag records approaching their cutoff so nobody has to remember four hundred individual dates. Role-based access limits who can view or destroy a record. A documented destruction approval, meaning someone signs off before a file is purged, protects you if a purge decision is ever questioned later. Reviewing your visa and work permit tracking process alongside your I-9 workflow often reveals the same gaps in both.

Pro Tip: Set your automated alert 30 to 60 days ahead of the calculated purge date, not on the date itself. That buffer gives you time to double check the calculation before anything gets deleted.

The Real Tension in I-9 Retention

Most compliance guidance treats retention as a floor: keep records as long as legally required, and longer feels safer. It isn’t. Every I-9 you hold past its purge date is another file an auditor can flag, another record containing sensitive identity documents that could leak in a breach. The safer instinct is disciplined deletion, not indefinite hoarding.

The fix isn’t complicated. Write down your retention policy, calculate purge dates consistently, and destroy records on schedule with a documented approval trail. Consistency is what protects you, not caution.

— Kuldeep

Automating I-9 Retention Dates Without the Spreadsheet Chaos

Manually tracking hire dates, termination dates, and purge calculations across dozens or hundreds of employee files is exactly the kind of work that quietly fails. Someone misses a date, a spreadsheet formula breaks, or a file gets purged early because nobody double checked the math.

Expiryedge is built for exactly this kind of deadline math. It calculates retention cutoffs automatically from the dates you enter, sends alerts before a record hits its purge window, and keeps an audit trail showing who accessed or destroyed each file. Indexed storage means you’re not digging through personnel folders when an inspector’s three-day clock starts ticking. Pairing that with the expiration date management practices most ops teams already use for contracts and certifications means I-9 tracking stops living in a separate mental category from everything else you’re responsible for. If you’re ready to see how automated retention alerts fit your team, you can start a free trial and set up your first tracking workflow today.

This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.

FAQ

How long do employers have to complete Section 2 of Form I-9?

Employers must complete Section 2 within three business days of the employee’s first day of work. If the job lasts fewer than three business days, Section 2 must be completed by the first day of employment.

Do you have to redo an I-9 every year?

No. Form I-9 doesn’t require annual renewal for most employees. You only complete a new form or Supplement B when there’s a rehire beyond the three-year window or when a work authorization document is expiring and needs reverification.

Do employers need to keep the original I-9?

Employers must keep the completed form itself, either the original paper document or a compliant electronic version, but retaining copies of the identity and work authorization documents an employee presented is optional and must be applied consistently across all employees.

How should I-9 forms be stored?

Forms can be stored on paper, microfilm or microfiche, or electronically, as long as an electronic system meets USCIS standards for access controls, audit trails, indexing, backup, and legible reproduction. A tool like dedicated expiration management software can help automate the indexing and alert side of that requirement.

What happens if a company can’t produce an I-9 during an inspection?

Missing forms can result in fines even when the employee is authorized to work, since the violation is the recordkeeping failure itself. Documenting a good-faith search effort helps, but the strongest protection is centralized, indexed storage that prevents the problem before an inspector ever asks.

Recommended

• Visa and Work Permit Tracking Mistakes HR Teams Make
• Inspection Deadline Automation: A 2026 Ops Guide
• Certification Expiration Tracking Checklist for Compliance Teams
• The Role of Expiry Alerts in HR Compliance