More employers now complete and store Form I-9 electronically instead of on paper. It is allowed, and for many organizations it is the better choice. But an electronic I-9 system is not just a PDF in a shared folder. Federal regulations set specific standards for how electronic forms are generated, signed, stored and retrieved, and an employer that falls short can face the same exposure as one with missing paper forms.
This guide walks through what the rules require, what an inspector may ask for, and the questions to ask before you trust any system with your I-9 records.
Where the rules come from
The standards for electronic Form I-9 are in the Department of Homeland Security regulations at 8 CFR 274a.2. They cover three areas:
- Electronic generation and storage of the form, including how records are kept accurate and retrievable.
- Electronic signatures, including how the employee and employer attest to their sections.
- Documentation and security, including what the employer must be able to show about the system itself.
You may use one system or several, and you may keep some forms on paper and others electronically. The same rules apply to every electronic record, no matter who built the system.
Integrity, accuracy and reliability
The regulations require reasonable controls that keep electronic I-9 records intact and trustworthy. In practice, that means the system should:
- Prevent and detect the unauthorized or accidental creation, change or deletion of stored forms.
- Include regular inspections or quality checks of the system and the records in it.
- Have a retrieval method that lets you find any individual record, typically through an index that ties each form to the employee.
- Produce a legible, readable copy of any form, on screen and on paper, when it is needed.
The last point matters more than it looks. If an inspector asks for a stack of forms, you need to be able to produce clean, complete copies, including any supporting documents you chose to keep and any Supplement A or Supplement B pages.
The audit trail
An electronic I-9 system must keep an audit trail. Each time a form is created, completed, updated, modified, changed or corrected, the system should record who did it, when it happened, and what action was taken.
This is one of the clearest differences between a compliant system and a workaround. A scanned form saved to a drive shows what the document looks like today. It does not show who changed it last month. A real audit trail lets you demonstrate that a correction was made the right way, by the right person, at the right time, rather than silently overwriting the original entry.
The audit trail also protects you. When a correction is made electronically, the history of that correction is part of the record, which is the electronic equivalent of the strike-through, initial and date method used on paper.
Electronic signature requirements
When the employee signs Section 1, or when the employer or an authorized representative signs Section 2 or Supplement B, the system must use an electronic signature process that meets the regulatory standards. The system should:
- Attach the signature to the electronically completed form at the time of the transaction.
- Create and preserve a record verifying the identity of the person who signed.
- Show the signer the attestation they are agreeing to, so they know what they are signing.
- Offer the signer a printed or downloadable confirmation of the transaction.
A typed name in a text box, with no identity record and no attestation, does not meet the standard. Neither does a signature that can be applied later by someone other than the signer.
Documentation of the system
Employers using an electronic system must keep documentation that describes it and be ready to provide that documentation to inspectors. This includes a description of the system and how it generates and stores forms, the indexing method used to find records, and the business processes that create, modify and maintain the records.
If you use a vendor, ask them for this documentation up front rather than at the moment you receive a Notice of Inspection. You have three business days to produce Forms I-9 after a Notice of Inspection, and you will not want to be chasing technical descriptions during that window.
Security requirements
The regulations also expect a security program for electronic I-9 records. Reasonable controls include:
- Limiting access to authorized personnel only.
- Backup and recovery procedures to protect against loss of records.
- Training staff so they understand the system and their responsibilities.
- Secure storage of the audit trail, so that records of changes cannot themselves be altered.
Form I-9 records contain sensitive personal information, so these controls protect your employees as well as your compliance position.
Retention still applies
Going electronic does not change how long you keep forms. You must retain each Form I-9 for three years after the date of hire or one year after employment ends, whichever is later. A good system calculates that date for every employee and tells you when a form is eligible for purging, so you are not keeping records longer than needed or deleting them too early.
Electronic storage does not change the rules for supporting documents either. If you keep copies of the documents employees present, keep them with the form and apply the policy consistently to every employee.
Moving older paper forms into a system
Many employers have both paper forms and newer electronic ones. You can scan paper forms into an electronic system as long as the scanned images meet the same standards for legibility, indexing and retrieval. The original form remains the record you are responsible for, so scan carefully, check the result, and do not "fix" errors during scanning without following the proper correction process.
Questions to ask about any electronic I-9 system
Before you rely on a system, ask:
- Does it keep a full audit trail of every creation, change and correction, including who made it and when?
- How does it handle electronic signatures, and does it record the signer's identity and give a confirmation?
- Can it produce legible copies of any form, with supplements and attached documents, quickly?
- Is documentation of the system, its indexing and its business processes available for an inspection?
- Who can access records, and how are backups handled?
- Does it calculate retention dates and track reverification deadlines?
If the answer to any of these is unclear, treat it as a risk to resolve before your next hire, not during an inspection.
How Clear I-9 helps
Clear I-9 by TRAK is built to meet these standards from the start. Electronic signatures capture each attestation for Section 1, Section 2 and Supplement B, and a complete audit trail records every action and correction. Error checks catch common mistakes before a form is saved, workflows and tracking handle reverification and retention dates, and centralized reporting lets you find and produce any record when an inspector asks.
Want an electronic I-9 process you can stand behind in an inspection? Request a demo of Clear I-9 and we'll walk you through it.
This article is for general information only and is not legal advice. For guidance on your specific situation, consult qualified employment counsel and the official USCIS resources.