An internal Form I-9 audit is one of the most useful compliance habits an employer can build. It is a structured review of existing Forms I-9 to find gaps and fix them the right way, before a Notice of Inspection or a lawsuit forces the issue. Done well, an audit reduces risk. Done poorly, it can create new problems: incomplete corrections, rewritten history, or uneven treatment of employees that looks like discrimination.
This guide covers how to set scope, sample forms, document corrections, and keep the process fair and consistent.
Why run an internal audit
Forms I-9 sit quietly until someone asks for them. By then, missing signatures, late Section 2 dates, incomplete document fields, and skipped reverifications are already on the record. An internal audit lets you find those issues on your schedule, correct them under USCIS guidance, and improve the process that produced them.
An audit is not a license to rewrite the past. You cannot invent timely dates, erase errors, or recreate forms as if the original never existed. The goal is an honest, complete file that shows what happened and what you fixed when you found it.
Define the scope before you open a single form
Write down what you are reviewing before anyone starts. A clear scope keeps the work consistent and protects you if the audit is later questioned.
Decide at least:
- Population. Current employees only, or current plus former employees still within the retention period (three years after hire or one year after termination, whichever is later).
- Locations and entities. One site, every site, or a specific legal entity. Multi-entity employers should not mix files without a plan.
- Form versions and storage. Paper, electronic, or both. Note which systems or cabinets hold the records.
- Time window. All active forms, forms completed after a process change, or a defined hire-date range.
- What you will check. Section 1 completeness and employee signature/date, Section 2 document review and employer certification timing, Supplement B reverification and rehire entries, retention eligibility for purge, and whether document copies (if retained) match what was recorded.
Assign an owner, a small review team, and a deadline. Keep counsel in the loop when the workforce is large, when prior government attention is possible, or when you expect many missing forms.
Sampling vs. full review
A full review of every Form I-9 is ideal when the population is manageable or when you are preparing for known scrutiny. For larger workforces, a documented sampling plan is common and acceptable for internal quality control, as long as you apply it evenly.
Useful sampling approaches include a random sample across the whole population, a stratified sample by location or hire channel (onsite, remote, staffing), and targeted follow-up when one site shows late Section 2 or missing Supplement B entries. Document how you chose the sample and expand the review when problems cluster. Ignoring a bad location is not good faith.
What to look for on each form
Work from a checklist so every reviewer applies the same standard.
Section 1. Identifying fields complete; citizenship or immigration status checked; alien or admission number when required; employee signature and date on time; Supplement A completed when a preparer or translator helped.
Section 2. List A, or List B and List C, recorded with title, issuing authority, number, and expiration when applicable; first day of employment listed; employer or authorized representative certification signed and dated within three business days of the start date (or the same day when the employee will work three days or fewer, per current guidance); remote verification and any DHS alternative procedure applied consistently.
Supplement B. Reverification and rehire entries only when required; no reverification of U.S. citizens or permanent residents solely because an identity document expired.
Retention. A form for every employee in scope; no forms kept past the retention period without a written reason; electronic files retrievable with an audit trail if you rely on an electronic system.
Do not treat optional practices as mandatory. If your policy is not to photocopy supporting documents, do not flag every form for "missing copies."
Documenting corrections the right way
When you find an error, correct it under the same rules that apply day to day:
- Draw a single line through the incorrect information so the original remains readable.
- Enter the correct information nearby.
- Initial and date the change with the real correction date—never the original completion date.
- For Section 1 errors, have the employee make the correction when available. Employers should not rewrite the employee's attestation.
- For many Section 2 errors, complete a new Section 2 and attach it to the original with a signed, dated note explaining why, rather than making the form unreadable.
- For a missing Form I-9 for a current employee, complete a new form as soon as possible with actual completion dates. Do not backdate.
Keep a simple audit log: employee identifier, issue found, action taken, who corrected it, and the date. That log helps train staff and shows a systematic process if questions arise later. Never use white-out, heavy erasure, or a "clean" replacement form that hides the original.
Avoiding discrimination and document abuse
An internal audit can create civil rights risk if it is applied unevenly or if reviewers push employees toward certain documents.
- Apply the same checklist to everyone in scope. Do not scrutinize only foreign-sounding names, certain nationalities, or one worksite while skipping others with similar hire patterns.
- Do not ask employees for more or different documents than Form I-9 allows. Employees choose from the Lists of Acceptable Documents.
- Do not reverify based on appearance, accent, or expired List B identity documents for citizens and permanent residents.
- Do not treat paperwork errors as grounds to terminate without careful legal review.
- Train reviewers that the audit is about form completeness and process, not about who "looks" authorized to work.
If you contact current employees for Section 1 corrections, use neutral language and the same follow-up timeline for everyone similarly situated.
Closing the loop: fix the process, not only the files
Every recurring error points to a process gap: late Section 2, weak remote workflows, manual expiration tracking, or unclear Section 1 instructions. After the audit, update training, tighten ownership for remote hires and rehires, adjust the next sample toward where errors clustered, and schedule the next review so this stays a habit.
How Clear I-9 helps
Clear I-9 by TRAK supports audit-ready records with centralized Forms I-9, error checks before signatures, and reporting that surfaces incomplete forms and approaching reverification dates. Workflows and tracking keep Section 2 and Supplement B on schedule for onsite and remote hires, and electronic signatures plus document imaging keep each employee's file together. When you use E-Verify, instant E-Verify ties case results to the same record so an internal review does not require hunting across systems.
Want I-9 files you can audit without a scramble? Request a demo of Clear I-9 and we'll walk you through it.
This article is for general information only and is not legal advice. For guidance on your specific situation, consult qualified employment counsel and the official USCIS resources.