Loading...
compliance

I-9 Retention and Purge Schedule Policy

Use this I-9 Retention and Purge Schedule Policy to track Form I-9 retention deadlines, separate active from expired records, and securely destroy documents on schedule.

Get Started

Trusted by frontline teams 15 years of frontline software AI customization in seconds

Built for: Healthcare · Retail · Manufacturing · Hospitality · Staffing And Temp Labor

Overview

This I-9 Retention and Purge Schedule Policy defines how the organization tracks Form I-9 retention deadlines, stores active records, and securely destroys expired records after the required retention period. It is designed for employers that need a repeatable process for both paper and electronic I-9 files, including a clear owner, review cadence, and purge log.

Use this template when you want to standardize recordkeeping across HR, payroll, and compliance teams, especially if you have frequent hiring, terminations, or multiple worksites. It is also useful before an audit, after an HRIS migration, or when you are cleaning up legacy files that may have been retained too long. The policy should be paired with a retention tracker so each employee's destruction date is calculated from the correct hire and separation dates.

Do not use this template as a general employee-file retention policy. It is not meant for performance records, medical files, payroll records, or leave documentation, which may have different retention rules under FLSA, FMLA, ADA, Title VII, ADEA, or state law. It also should not be used to justify deleting records that are under litigation hold, government inquiry, or internal investigation. The policy should make clear that when a hold applies, destruction stops until the hold is released.

Standards & compliance context

  • This policy should align with USCIS Form I-9 retention guidance and the employer's federal employment verification obligations.
  • If the organization also stores copies of identity or work authorization documents, the policy should apply the same secure retention and destruction controls to avoid inconsistent handling under federal anti-discrimination principles enforced by the EEOC.
  • The policy should preserve records needed for FLSA, FMLA, ADA, Title VII, ADEA, NLRA, OSHA, or other employment investigations when a legal hold applies, even if the I-9 retention period has otherwise expired.
  • State privacy and record-destruction rules may add requirements for access control, notice, or deletion procedures, so California, New York, Illinois, Washington, and similar jurisdictions should be reviewed for local overlays.

General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.

What's inside this template

Purpose

Explains why the policy exists and what compliance problem it solves.

  • This policy establishes the organization’s standard schedule for retaining Form I-9 records and the process for securely destroying expired records. The policy is intended to support compliance with USCIS Form I-9 guidance, including the USCIS Handbook for Employers (M-274), and to reduce the risk of retaining records longer than necessary.

Scope

Defines which employees, records, systems, and jurisdictions the policy applies to.

  • This policy applies to all U.S. employees, former employees, and contingent workers for whom the organization maintains Form I-9 records. It applies to paper and electronic I-9 files, supporting documentation retained with the form, purge logs, and any backup or archive copies under HR or records management control.

    Applicable jurisdictions: United States. California employees: if I-9 records are stored with broader personnel files, ensure any state privacy and personnel-file access requirements are also followed. All jurisdictions: if a legal hold, government audit, or investigation is active, destruction must be suspended until the hold is lifted.

Definitions

Clarifies terms like retention period, purge, secure destruction, legal hold, and policy holder.

  • For purposes of this policy:

    • Form I-9 means the Employment Eligibility Verification form required for U.S. employment eligibility verification.
    • Retention trigger date means the later of: (1) the employee’s date of hire plus three years, or (2) the employee’s separation date plus one year.
    • Purge date means the date on which a Form I-9 becomes eligible for secure destruction after the retention trigger date has passed.
    • Supporting documents means copies of identity or work authorization documents retained with the I-9, if the organization chooses to retain copies.
    • Documented warning means a written notice issued when a required purge review or destruction step is missed or delayed.
    • PIP means a performance improvement plan used only when repeated process failures require corrective action.

Policy

States the organization's rules for retaining, tracking, and destroying I-9 records.

    1. The organization will retain each Form I-9 for three years after the date of hire or one year after employment ends, whichever is later, in accordance with USCIS guidance.
    2. The retention period applies to the Form I-9 and any copies of supporting documents retained by the organization.
    3. Expired I-9 records must be securely destroyed according to the approved destruction method and documented in the purge log.
    4. Records subject to a legal hold, audit, government inquiry, or litigation hold must not be destroyed until the hold is released in writing.
    5. The organization will maintain only the minimum necessary access to I-9 records, limited to authorized HR, compliance, legal, and records management personnel.

Procedure

Shows the step-by-step workflow for calculating deadlines, reviewing files, and completing destruction.

  • 1) Retention calculation

    • For each employee, calculate the retention trigger date using the later of:
      • Hire date + 3 years, or
      • Termination date + 1 year.
    • If the employee is still active, the purge date is based on the hire date plus three years.
    • If the employee has separated, the purge date is based on the later of the two dates above.

    2) Monthly purge review

    • HR or Records Management will run a monthly report of I-9 records reaching or past the purge date.
    • The reviewer will confirm whether any legal hold, audit request, or investigation applies.
    • Eligible records will be grouped by destruction method and approved for purge.

    3) Secure destruction

    • Paper records must be cross-cut shredded, pulped, or destroyed by a certified destruction vendor.
    • Electronic records must be permanently deleted using approved deletion methods that prevent reasonable reconstruction.
    • If records are stored in a document management system, the system owner must verify deletion from active folders and retention archives where permitted.

    4) Purge documentation

    • The reviewer must record the employee identifier, record type, purge date, destruction method, date destroyed, and approver.
    • The purge log must be retained as a compliance record.
    • Any missed purge must be escalated to the HR Manager and Compliance Officer within five business days.

    5) Exceptions

    • If an I-9 is under legal hold, the retention period is suspended until the hold is released.
    • If a record is discovered to have been destroyed early, HR must document the incident, assess risk, and notify Legal/Compliance immediately.

Roles & Responsibilities

Assigns ownership for retention tracking, approvals, storage, and escalation.

    • HR Manager / Policy Holder: Owns the policy, approves exceptions, and ensures annual review.
    • HR Generalist: Maintains I-9 files, calculates purge dates, and prepares monthly purge lists.
    • Compliance Officer: Reviews exception cases, legal holds, and purge logs for good-faith compliance.
    • Records Manager: Executes or oversees secure destruction and retains destruction certificates.
    • Legal Counsel: Issues and releases legal holds and advises on investigations or audits.

Compliance / Discipline

Describes what happens when the policy is missed and how exceptions are handled.

  • Failure to follow this policy may result in corrective action, up to and including removal of records access, retraining, a documented warning, a PIP for repeated process failures, or other discipline consistent with company policy and applicable law. Intentional destruction of records subject to a legal hold may result in immediate escalation to Legal and senior leadership. This policy does not limit employee rights under the NLRA, FLSA, FMLA, ADA, or EEOC-enforced laws where applicable.

Review & Revision

Sets the effective_date, version control, review_frequency, and update process for legal changes.

  • This policy will be reviewed at least annually and updated when USCIS guidance, federal law, retention requirements, or internal recordkeeping systems change. Revisions must be approved by the policy holder, HR leadership, and Legal/Compliance as needed.

How to use this template

  1. 1. Set the effective_date, version, applicable_jurisdictions, applicable_roles, and review_frequency fields before publishing the policy.
  2. 2. Define which systems and file locations contain Form I-9 records, including paper files, electronic repositories, and any copies of supporting documents.
  3. 3. Assign a policy holder and backup owner to calculate retention deadlines, review the purge list, and approve secure destruction.
  4. 4. Run the retention review on the stated cadence, flag records that have reached the later of the hire-date or separation-date retention trigger, and confirm no legal hold applies.
  5. 5. Destroy eligible records using a documented secure method, then record the destruction date, method, and reviewer in the purge log.
  6. 6. Reconcile the purge log against the I-9 inventory after each cycle and escalate missing, duplicate, or overdue files for correction.

Best practices

  • Calculate each retention deadline individually instead of using a single bulk purge date for the whole workforce.
  • Keep I-9 records in a restricted repository separate from the general personnel file to reduce access and privacy risk.
  • Document the destruction method for each purge cycle, especially for paper shredding and secure electronic deletion.
  • Apply the same retention workflow to all employees to avoid inconsistent handling that can create discrimination concerns.
  • Pause destruction immediately if a government inquiry, audit notice, or litigation hold is issued.
  • Review terminated employee files on a recurring schedule so expired records do not accumulate past the purge date.
  • Train HR staff to recognize when a file is incomplete, missing signatures, or needs correction before it is archived.

What this template typically catches

Issues teams running this template most often surface in practice:

I-9 forms are kept past the required retention period because no one owns the purge calendar.
Expired records are destroyed without a written log, making it hard to prove good-faith compliance.
I-9s are mixed into general personnel files, which increases access risk and makes purging inconsistent.
Retention dates are calculated incorrectly because the organization uses hire date only and ignores separation date.
Paper and electronic copies are treated differently, leaving duplicate records in one system after the other is purged.
Records subject to a legal hold are deleted too early because the hold status was not communicated to HR.
Supporting document copies are retained selectively, creating inconsistent document-handling practices.

Common use cases

Multi-site retail HR manager
A regional HR manager needs one retention schedule for stores in several states, with a clear purge cadence and a log that proves each location followed the same process. The template helps standardize ownership while allowing state-specific carve-outs where local privacy rules differ.
Healthcare compliance coordinator
A compliance coordinator managing high-turnover clinical staff needs to separate active I-9s from terminated employee files and destroy expired records without exposing medical or leave documents. This template keeps the process focused on employment verification records only.
Staffing agency operations lead
A staffing firm with frequent rehires and short assignments needs a repeatable way to track each worker's retention deadline across multiple placements. The policy supports a documented purge log and reduces the risk of keeping records longer than necessary.
Manufacturing HRIS administrator
After moving to a new HRIS, the administrator needs to reconcile legacy paper files, scanned I-9s, and duplicate document copies before the old system is decommissioned. The template provides a controlled purge procedure and a review trail for the migration.

Frequently asked questions

What records does this policy cover?

This policy covers Form I-9 records and the supporting retention log used to track when each form becomes eligible for destruction. It should also address copies of identity and work authorization documents if your organization keeps them, since those copies often follow the same retention workflow. The policy is not a general personnel-file retention policy, so it should stay focused on I-9 compliance and secure purge controls.

When should an I-9 be destroyed?

An I-9 is typically retained for the required period after the employee's hire date and then for the additional period after employment ends, using the later applicable retention point. The policy should require the retention date to be calculated and documented at the time of separation or file closure. A common mistake is purging by calendar year alone instead of by each employee's specific retention deadline.

Who should run the retention and purge process?

HR, payroll, or a designated compliance owner usually manages the process, with legal or immigration counsel involved for exceptions and audits. The policy should name a policy holder and assign backup responsibility so purges do not depend on one person. Managers should not independently destroy records unless they are specifically authorized to do so.

How often should I-9 files be reviewed for purge eligibility?

Review frequency should be at least annually, with a more frequent cadence if your workforce turnover is high or you maintain large paper files. Many employers also run a monthly or quarterly exception check for terminated employees whose retention windows are nearing expiration. The key is to use a documented schedule rather than ad hoc cleanups.

What laws or agencies does this policy need to align with?

The policy should align with USCIS Form I-9 retention guidance and the employer's obligations under federal immigration verification rules. If the policy also covers storage and access controls, it should be consistent with general employment recordkeeping practices and any state privacy or data-destruction rules that apply. Where state law is stricter on records handling, the stricter rule should be called out explicitly.

Can we keep copies of employee documents with the I-9?

Yes, if your organization chooses to retain copies, but the policy should say whether copies are kept consistently for all employees or not kept at all. Inconsistent copying practices can create discrimination risk if they are applied unevenly across workers or document types. The policy should also define where copies are stored and when they are destroyed.

What are the biggest mistakes in I-9 retention?

The most common mistakes are keeping forms too long, purging them too early, failing to document the destruction date, and mixing I-9s into general personnel files without access controls. Another frequent issue is using an informal spreadsheet without a review owner or backup. The policy should require a documented warning or escalation path if records are overdue for purge or missing from the file.

How does this differ from an ad hoc cleanup process?

An ad hoc cleanup process usually depends on memory, which makes missed deadlines and inconsistent destruction more likely. This template creates a repeatable procedure, assigns responsibility, and preserves an audit trail for each purge event. That makes it easier to show good-faith compliance if the organization is reviewed.

Go deeper on the topic

Related concepts
  • An SOP (standard operating procedure) hub is the single, owned place where a company's step-by-step procedures live — how to handle a return, how to close a...
  • Training is the practice of building the skills and knowledge employees need to do their jobs — onboarding, compliance, product, safety, leadership. The...
  • Succession planning is the practice of identifying, developing, and tracking potential successors for critical roles across the organization — so that when a...
  • A standard operating procedure (SOP) is a documented, step-by-step procedure for a repeatable task — the written version of "how we do this here." Good SOPs...
Related guides

Ready to use this template?

Get started with MangoApps and use I-9 Retention and Purge Schedule Policy with your team — pricing built for small business.

Get Started