Electronic I-9 Requirements: A Guide for Employers

Moving Form I-9 out of a filing cabinet can make onboarding easier. But a digital workflow is not automatically a compliant one. A signed PDF, an electronic signature tool, and a searchable folder each solve only part of the problem.

For employers hiring across multiple locations, the central question is whether the entire process meets electronic I-9 requirements—from signing and corrections through storage, retrieval, and eventual disposal.

Here is what HR, payroll, and technology teams should evaluate before adopting a system or migrating existing records.

Can employers complete and store Form I-9 electronically?

Yes. Employers may complete, sign, and retain Form I-9 electronically if their processes meet applicable federal requirements. They may also retain electronic copies of properly completed paper forms.

These are different workflows:

• Electronic completion: The employee and employer enter information and sign through an electronic system.
• Electronic storage: A completed paper form is scanned and retained digitally.
• Hybrid processing: Some steps occur on paper and others electronically, with the complete record preserved.

None of these approaches changes the underlying completion deadlines, document examination responsibilities, or anti-discrimination obligations.

Also, electronic I-9 processing is not the same as remote document examination. Moving a form online does not, by itself, authorize an employer to inspect documents over video. Employers must follow the applicable physical examination rules or qualify for an authorized alternative procedure.

What must an electronic I-9 system do?

The governing requirements appear in 8 CFR § 274a.2. Employers should confirm current requirements and USCIS guidance when evaluating a workflow.

In practical terms, the system needs to support five core functions.

1. Preserve accurate, readable records

Electronic records must remain complete, legible, and accessible throughout the required retention period. A storage process should include reasonable controls to protect their integrity, accuracy, and reliability.

For scanned records, check that every completed section, signature, date, and annotation is readable. Include applicable supplements and retained supporting documents.

A useful quality-control test is simple: Can someone unfamiliar with the employee open the record and understand what was completed without consulting a separate email chain?

2. Prevent and detect unauthorized changes

The system must have reasonable controls to prevent and detect unauthorized or accidental creation, alteration, deletion, or deterioration of stored records.

Practical safeguards include role-based permissions, controlled deletion, backups, and documented recovery procedures. Access should reflect actual job responsibilities rather than giving every manager broad editing rights.

Employers also need an inspection and quality-assurance program that regularly evaluates the storage system, including periodic checks of electronically stored I-9 records.

3. Maintain a reliable audit trail

Electronic I-9 systems must preserve a secure, permanent record of relevant record activity, including creation and changes. The audit trail should show when a record was created or changed, who performed the action, and what action occurred.

This matters when correcting an error. The workflow should not silently replace the original information and leave only a clean final version.

Ask a provider to demonstrate an actual correction. Can your team identify the change, the person responsible, and the date? Can that history be produced outside the platform?

4. Support indexing and retrieval

The system needs an indexing method that allows relevant records to be identified and retrieved. A folder containing thousands of inconsistently named scans creates avoidable inspection risk.

At minimum, test how staff locate records for:

• An employee whose last name changed.
• A worker rehired under a new employee number.
• A former employee from a closed location.
• Employees transferred during an HR system migration.

These are operational tests, not additional statutory indexing fields. Their purpose is to expose retrieval problems before an agency request does.

5. Produce records for inspection

Employers must be able to retrieve and reproduce legible records and make relevant system documentation available for government inspection. Electronic storage requirements also address access to the personnel, hardware, and software necessary to locate and reproduce records.

Do not evaluate this capability solely by asking whether a form can be printed. Test whether your team can retrieve associated audit trails and supporting records as well.

What makes an electronic I-9 signature acceptable?

A typed name alone does not establish that an electronic signature process meets I-9 requirements.

The process must allow the signer to acknowledge reading the applicable attestation and attach the electronic signature to an electronically completed Form I-9. The signature must be affixed at the time of the transaction, with a record verifying the identity of the person producing it. The system must also provide a printed confirmation of the transaction upon request.

For vendor review, ask:

• How does the employee see and acknowledge the attestation?
• How is the signer’s identity documented?
• Is the signature connected to the specific form being signed?
• How can the signer obtain confirmation?

An employer representative cannot simply type an employee’s name into a signature field as a substitute for the employee’s attestation.

Can employers scan paper I-9s and destroy the originals?

Federal I-9 rules generally permit employers to scan properly completed paper forms and retain them electronically instead of keeping the paper originals, provided the electronic storage system satisfies the requirements.

Before destroying paper, verify that:

1. Every applicable page and retained attachment was captured.
2. Images are complete and readable.
3. Records are correctly indexed and retrievable.
4. Storage controls, backups, and inspection capabilities are in place.
5. No litigation hold or other applicable preservation obligation requires continued retention.

Scanning does not repair a missing signature or an incomplete section. Keep image-quality review separate from substantive compliance review.

How long must electronic I-9s be retained?

The retention period is the same for electronic and paper forms. Keep an employee’s Form I-9 throughout employment. After employment ends, retain it until the later of three years after the date of hire or one year after the date employment ends.

Do not configure automatic deletion based only on the form’s age. A long-serving active employee’s form still needs to be retained.

Our guide to I-9 retention after termination explains the calculation in more detail.

Make portability part of your buying decision

Before selecting a platform, run a sample export. Confirm you can obtain readable forms, supplements, retained document copies, and associated audit information—not just a spreadsheet of employee names.

Your contract and transition plan should address access after termination, export formats, migration support, and responsibility for retained records. Outsourcing administration does not remove the employer’s compliance responsibilities.

For high-volume hiring, Trak’s Form I-9 verification and E-Verify services can support a more coordinated compliance workflow.

This article provides practical information, not legal advice. Confirm current agency requirements and consult counsel about specific compliance concerns.

Need help evaluating your I-9 workflow? Contact Trak Services to discuss your onboarding and recordkeeping needs.