Form I-9 is one of the most universally applicable federal compliance obligations for U.S. employers. USCIS and ICE conduct I-9 audits both proactively and in response to tips. Civil penalties for paperwork violations reach $2,789 per form for repeated violations. Here is what every startup employer needs to know.

The Legal Basis

The Immigration Reform and Control Act of 1986 (IRCA), codified at 8 U.S.C. § 1324a, requires every U.S. employer to verify the identity and employment authorization of every employee hired after November 6, 1986. There are no exceptions based on employer size.

Completion Timeline

Acceptable Documents

Employees may present either one List A document (establishes both identity and authorization — U.S. Passport, Permanent Resident Card, EAD) OR one List B document (identity only — driver's license) AND one List C document (authorization only — Social Security Card). Employers may not specify which documents an employee must present — doing so is document abuse under IRCA.

Remote I-9 Verification

DHS made permanent the option for E-Verify employers to conduct remote document review effective August 1, 2023. Non-E-Verify employers must still review original documents in person (or via an authorized representative).

Retention Requirements

Retain completed I-9 forms for: (a) 3 years after the hire date, or (b) 1 year after termination, whichever is later. Store separately from personnel files.

Penalties (2025)

How Compliance Singularity Handles I-9

Compliance Singularity integrates with your HRIS or payroll system to detect new hires and trigger I-9 Section 1 reminders to new employees and Section 2 reminders to HR staff. The system tracks the 3-business-day deadline and escalates if Section 2 is not completed. Retention deadlines are calculated automatically for each employee based on hire and termination dates.