I-9 Internal Audit Checklist
Audit Form I-9 records for completeness, timing, retention, and correction readiness before an internal review or ICE Notice of Inspection. Use this checklist to catch missing signatures, late Section 2 entries, and rehire or reverification gaps.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: General Industry · Construction · Healthcare · Hospitality · Food Service
Overview
This I-9 Internal Audit Checklist is for reviewing Form I-9 records before an internal compliance review, a government inspection, or a broader HR file cleanup. It walks the reviewer through audit setup and scope, Section 1 employee information, Section 2 employer verification, reverification and rehire tracking, retention and correction integrity, and closeout actions. The structure is designed to surface both obvious omissions and process failures that create repeat risk across the workforce.
Use it when you need to confirm that I-9s are complete, signed on time, retained correctly, and linked to the right employee records. It is especially useful after onboarding process changes, a merger, a system migration, or when a location manager has been completing forms inconsistently. It also helps you document which files were reviewed, what defects were found, and who owns remediation.
Do not use this as a substitute for legal advice or as a one-time cleanup with no follow-through. If the audit reveals missing forms, questionable document entries, repeated late completions, or correction issues that could be viewed as substantive, escalate those findings for legal review. The checklist is strongest when it is used as a repeatable control, not just a one-off search for missing paperwork.
Standards & compliance context
- This checklist supports internal readiness for federal employment eligibility recordkeeping expectations and the way ICE typically reviews Form I-9 files.
- Retention checks should align with federal recordkeeping rules and your company retention schedule so active and terminated employee files are handled consistently.
- Correction steps should preserve an audit trail and avoid altering original entries in a way that obscures who made the change and when.
- If your organization uses electronic I-9 workflows, the checklist should be paired with controls that support version integrity, access control, and timestamp reliability.
- High-risk findings should be reviewed with counsel or qualified compliance staff before remediation, especially when missing forms or repeated process failures are involved.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Audit Setup and Scope
This section defines exactly which employee files are in scope so the audit is defensible and repeatable.
-
Audit population and sample scope documented
Record the employee group, date range, and whether this is a full-file audit or a sample review.
-
Audit date and reviewer identified
Capture the audit date and the name or role of the reviewer performing the inspection.
-
Reference policy or audit SOP attached
Document the internal policy, SOP, or legal guidance used for the review.
-
Employee file list reconciled to HR roster
Verify the audit list matches the active and terminated employee roster for the selected period.
Section 1 Employee Information Review
This section checks whether the employee completed their part accurately and on time, which is where many preventable defects start.
-
Employee name, address, date of birth, and attestation completed
Confirm all required Section 1 fields are present and legible.
-
Employee attestation selected correctly
Verify the employee selected the appropriate citizenship or immigration status attestation.
-
Employee signature and date present
Confirm Section 1 is signed and dated by the employee or authorized preparer/translator where applicable.
-
Preparer/translator section completed when used
If a preparer or translator assisted, confirm the certification is completed and signed.
Section 2 Employer Review and Document Verification
This section verifies that the employer completed its verification duties correctly and recorded acceptable document details.
-
Section 2 completed within required timeframe
Confirm the employer completed Section 2 within 3 business days of the employee’s first day of employment.
-
Document title, issuing authority, number, and expiration recorded accurately
Verify the document information entered in Section 2 matches the original documents presented.
-
Employer representative signed and dated Section 2
Confirm the employer or authorized representative completed the certification and date fields.
-
Document combination appears acceptable for the form
Check that the documents presented reasonably satisfy List A or List B and List C requirements without requesting prohibited documents.
Reverification and Rehire Review
This section catches expiration tracking failures and disconnected rehire records before they become compliance gaps.
-
Reverification required dates tracked
Confirm employees with expiring work authorization are tracked before document expiration.
-
Reverification completed before authorization expiration
Verify reverification was completed on or before the employee’s authorization end date when required.
-
Rehire documentation linked to prior Form I-9
Confirm rehires were matched to the original Form I-9 or a new form was completed when required.
Retention, Corrections, and Record Integrity
This section confirms the file can survive an outside review by checking retention timing, correction method, and record completeness.
-
Retention rule applied correctly for active and terminated employees
Verify each form is retained for the required period based on hire date and termination date rules.
-
Corrections made using proper audit trail method
Confirm corrections are initialed, dated, and explained without obscuring original entries.
-
Missing forms or supporting documents identified
Flag any missing Form I-9s, missing pages, or absent supporting records for remediation.
-
Potential substantive or technical errors logged
Document any errors that may require legal review or correction before an inspection.
Closeout and Corrective Actions
This section turns findings into accountable follow-up so the audit produces remediation, not just a list of defects.
-
Deficiencies summarized with employee identifiers
List each deficiency by employee record reference and brief issue description.
-
Corrective action owner and due date assigned
Document who is responsible for remediation and the target completion date.
-
Legal review required for high-risk findings
Indicate whether counsel or a qualified immigration compliance specialist should review the findings.
-
Inspector signature
Signature confirming the audit review is complete and findings are accurate.
How to use this template
- Define the audit population, sample size, and date range, then attach the policy or SOP that governs how the review will be performed.
- Reconcile the employee file list to the HR roster so every active, terminated, rehire, and reverification case in scope is accounted for.
- Review Section 1 and Section 2 for each selected file, checking signatures, dates, attestation selections, document details, and completion timing against the required workflow.
- Verify reverification and rehire records by matching expiration dates, prior I-9 links, and any follow-up documentation needed to support continued authorization.
- Log each deficiency with the employee identifier, classify the issue as technical or substantive where appropriate, assign an owner and due date, and route high-risk findings to legal review.
- Close out the audit by summarizing trends, confirming corrective actions were completed, and retaining the audit record with the supporting evidence.
Best practices
- Audit against the current version of your I-9 process and retention policy, not a manager's memory of how the form used to be handled.
- Separate technical errors from substantive errors so remediation is consistent and high-risk issues get escalated quickly.
- Check completion dates against the actual hire and document-presentment timeline, because late Section 2 entries are easy to miss in a file-only review.
- Verify that rehire cases are linked to the prior Form I-9 when allowed, rather than creating disconnected records that break the audit trail.
- Photograph or export evidence of missing or incorrect items at the time of review so the deficiency log matches what was actually observed.
- Use a standard correction method and preserve the original entry history, since overwriting records can create a bigger compliance problem than the original mistake.
- Review terminated employee retention dates separately from active employee files so forms are not destroyed too early or kept longer than required.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this I-9 internal audit checklist cover?
This checklist covers the full internal review of Form I-9 records, including employee data in Section 1, employer verification in Section 2, reverification and rehire tracking, retention timing, and correction readiness. It is designed to identify missing fields, late completion, and record-integrity issues before an outside review. It also helps you document corrective actions and assign ownership for follow-up.
How often should we run an I-9 internal audit?
Most employers run it on a scheduled cadence, such as annually or semiannually, and again after a policy change, acquisition, or HR system migration. It is also useful before a government inspection or when you suspect file quality issues. The right cadence depends on hiring volume, turnover, and how often I-9s are completed by different managers or locations.
Who should complete the audit?
The audit should be run by a trained HR, compliance, or legal operations reviewer who understands Form I-9 rules and correction practices. For higher-risk findings, legal review should be included before any record changes are finalized. The reviewer should be independent enough to spot process errors, not just file missing paperwork.
Does this template align with ICE and federal I-9 requirements?
Yes, it is built to support internal readiness for Form I-9 compliance under federal employment eligibility rules and the recordkeeping expectations that ICE typically reviews. It focuses on completeness, timing, retention, and audit-trail quality rather than trying to replace legal review. It should be used alongside your company policy and current government guidance.
What are the most common mistakes this audit catches?
Common findings include missing employee signatures, incorrect attestation selections, late Section 2 completion, expired document tracking gaps, and reverification dates that were not acted on in time. It also catches rehire files that were not linked back to the prior I-9 and corrections that were made without a clear audit trail. These issues are often easy to miss in day-to-day onboarding.
Can we customize the checklist for our HRIS or document workflow?
Yes, the template is meant to be customized for your HRIS, file structure, and approval workflow. You can add fields for system record IDs, file locations, reviewer roles, or escalation paths for legal review. If your organization uses electronic I-9 workflows, you can also add checkpoints for system timestamps and version control.
How does this compare with an ad-hoc file review?
An ad-hoc review usually finds obvious missing forms but misses patterns such as repeated late completion, inconsistent correction methods, or retention errors across employee groups. This checklist gives the reviewer a consistent audit path, documented scope, and a repeatable way to log deficiencies and corrective actions. That makes it easier to defend the process and track remediation over time.
What should we do if the audit finds a high-risk error?
High-risk findings should be escalated for legal review before any correction is made, especially if the issue involves missing forms, questionable document entries, or repeated process failures. The checklist includes a closeout step for assigning owners and due dates so remediation does not stall. Keep the original record intact and use proper correction procedures with a clear audit trail.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
Artificial intelligence in the workplace: boost productivity, streamline tasks, and empower employees with smarter, more meaningful work.
-
Intranet file naming conventions that improve search, reduce clutter, and help employees find the right document fast.
-
Discover why manufacturing teams need mobile tools — from real-time safety alerts to on-the-go training and frontline recognition. See how MangoApps helps.
-
Discover 7 common intranet platform failures that exclude frontline workers—and the specific capabilities that close the gap for deskless teams.
Ready to use this template?
Get started with MangoApps and use I-9 Internal Audit Checklist with your team — pricing built for small business.
