Form I-9 Signed Electronically: Systems, Storage, and Penalties

Form I-9 can be signed electronically by both the employee and the employer, as long as the electronic signature is captured inside a system that meets the standards in 8 CFR 274a.2. ¹ The regulation covers how each signature is captured, how the completed form is stored, how corrections are tracked, and how the record is produced during a government inspection. A signature that meets those standards has the same legal weight as ink on paper. One that does not is treated as if the form was never completed at all.

What Makes an Electronic Signature Valid

DHS finalized the electronic signature and storage rule in 2010, and the standard runs differently for each signer. The employee’s electronic signature must be captured by a system that verifies the identity of the person signing, attaches the signature to the form at the moment of the transaction, and confirms the signer has actually read the attestation. The employer’s electronic signature follows a similar rule, with the system including a method for the employer to acknowledge that the attestation was read before signing. ¹

If the employee asks for one, the system has to give them a printed confirmation of the transaction. And employers who use an electronic system that fails these standards face the same penalties as employers who never completed an I-9. There is no partial credit for a system that almost works.

What the Electronic System Itself Must Do

An employer can recreate Form I-9 inside a commercial software platform or a custom-built system, but the form has to look the same and contain every data element and instruction on the official version. Nothing added, nothing removed, nothing rearranged. ² Beyond the form itself, the system has to meet several functional standards:

Create and preserve a record confirming who produced each signature.
Generate a secure, permanent audit trail every time an I-9 is created, completed, updated, or corrected, showing the date, the identity of the person accessing the record, and the action taken.²
Prevent and detect unauthorized changes, accidental deletions, and deterioration of records.
Produce clear, readable copies of each I-9 in both electronic and paper format on demand.
Index stored forms so any single record can be identified and retrieved quickly.
Run a periodic inspection and quality-assurance program that spot-checks stored forms and signatures.

The system also cannot restrict access by any U.S. government agency. That matters because some proprietary platforms require special logins or software to view records; if an auditor cannot get to the forms easily, the compliance problem belongs to the employer, not the vendor. Full liability sits with the employer regardless of what a third-party vendor promised. A system-wide deficiency, such as a broken audit trail, can let the government treat every I-9 the system produced as non-compliant.

Before buying or building, employers should confirm the product meets 8 CFR 274a.2(e) through (i), which covers integrity controls, indexing, electronic signatures, audit trails, and reproduction capability. The employer also has to keep documentation of the business processes that create, modify, and authenticate stored forms, and hand that documentation over when asked.

The USCIS PDF Is Not an E-Signature Tool

The downloadable Form I-9 on the USCIS website does not, by itself, support electronic signatures. Typing a name into the signature field of that PDF is not the same as signing electronically under the regulation. Going fully digital requires a separate system built or purchased for that purpose, one that meets every requirement above.

Correcting Errors on an Electronic I-9

Only the employee, or their preparer or translator, can fix errors in Section 1. Only the employer or an authorized representative can fix errors in Section 2 or Supplement B. ³

For paper forms, the fix is to draw a line through the wrong entry, write in the correct information, and initial and date the change. The same principle applies electronically, but the audit trail has to capture every correction. Never conceal a change. Methods that hide what was originally entered can increase liability under federal immigration law. If a section has too many errors to fix cleanly, the employer can redo that section on a new form, attach it to the original, and add a written explanation.

One common trap: if Section 2 was never dated when it was originally completed, do not backdate it. Enter the current date and initial the field. The audit trail will show the honest correction, which is what the government expects to see rather than a fabricated timestamp.

Storage and Retention

Every Form I-9 has to be kept for three years after the hire date or one year after employment ends, whichever is later. ⁴ Electronic storage is permitted alongside paper and microfilm, and employers can run more than one electronic system at the same time, as long as each one meets the full set of standards.

Paper I-9s that were completed by hand can be scanned into a compliant electronic system, and once the electronic copy is stored securely, the paper original can be destroyed. A backup and recovery plan is required so the records survive a system failure. Throughout the retention period, the stored forms must remain fully accessible, legible, and reproducible in both electronic and paper formats.

Producing Electronic I-9s in a Government Inspection

When DHS, the Department of Justice’s Immigrant and Employee Rights Section, or the Department of Labor issues a Notice of Inspection, the employer has at least three business days to produce the requested I-9 records. ⁵ Records can be delivered electronically or as hard copies, depending on what the agency requests.

For electronic I-9s, the employer also has to be ready to hand over summary files, essentially spreadsheets containing all the information fields from the stored forms, if the inspecting agency asks for them. ⁶ Refusing or delaying production is treated as its own compliance failure, separate from anything the forms themselves contain. Indexing and retrieval capabilities earn their keep here; an employer with hundreds of electronic I-9s and no working search function is in for a rough three days.

Penalties When Electronic Signatures or Systems Fall Short

As of the inflation adjustment effective January 2, 2025, the civil penalty ranges are: ⁷

Paperwork violations: $288 to $2,861 per form. This covers missing signatures, incomplete fields, late completion, and failures in electronic system compliance.
Knowingly hiring unauthorized workers, first offense: $716 to $5,724 per worker.
Second offense: $5,724 to $14,308 per worker.
Third or subsequent offense: $8,586 to $28,619 per worker.

These figures are per form or per worker, so an employer with 100 deficient I-9s can be looking at exposure in the hundreds of thousands. When an electronic system lacks a proper audit trail or fails another regulatory requirement, the government can determine that the deficiency invalidates every I-9 the system produced, not just individual forms with visible problems. A pattern or practice of knowingly hiring unauthorized workers can also draw criminal penalties on top of the civil fines. ⁸

1
eCFR. 8 CFR 274a.2 – Verification of Identity and Employment Authorization
2
U.S. Citizenship and Immigration Services. 10.1 Form I-9 and Storage Systems
3
U.S. Citizenship and Immigration Services. Correcting Errors or Missing Information on Form I-9
4
U.S. Citizenship and Immigration Services. 10.0 Retaining Form I-9
5
U.S. Citizenship and Immigration Services. Inspection
6
U.S. Department of Justice. How to Avoid Unlawful Discrimination and Other Form I-9 Violations When Using Commercial or Proprietary Programs to Electronically Complete the Form I-9
7
Federal Register. Civil Monetary Penalty Adjustments for Inflation
8
U.S. Immigration and Customs Enforcement. Form I-9 Inspection Under Immigration and Nationality Act 274A