How Long to Keep Form I-9: The Retention and Purge Playbook

Software & Technology
Risk Management
1
minutes to read
Open lateral filing cabinet drawer in an HR office with color-tabbed personnel folders, desk and office chair in the background.

Someone terminates in Workday on Friday. The I-9 system still shows them active on Monday because nobody told it employment ended. The one-year retention clock never started, or a blanket auto-purge fired six months later and deleted the form while ICE still expected it on file.

Federal law requires you to keep each Form I-9 until the later of three years from hire or one year after employment ends. The rule is simple to quote and hard to operationalize. Most retention failures we see are not math errors on paper. They are missing termination dates in the system that actually holds the I-9.

The federal retention rule

You must retain a completed Form I-9 for every employee hired after Nov. 6, 1986, for the entire time they work for you. When employment ends, keep the form until the later of:

  • Three years from the date of hire (First Day of Employment on Section 2), or
  • One year from the date employment ended

That conditional rule is in USCIS retention guidance and 8 CFR 274a.2(b)(2)(i)(A). It applies to paper and electronic records. You must produce requested I-9s within three business days of a Notice of Inspection.

USCIS publishes a retention calculator that resolves to the same later-of date. Use it to spot-check your logic before you trust a spreadsheet.

How to calculate the destruction date

Never destroy a current employee's I-9. The one-year-after-termination branch does not run until employment actually ends.

For a former employee, calculate both dates and keep the form until the later one:

  • Date A: hire date + 3 years
  • Date B: termination date + 1 year
  • Destroy on: whichever date comes later

Long tenure. Hired Jan. 1, 2019; terminated Jan. 1, 2026. Date A = Jan. 1, 2022. Date B = Jan. 1, 2027. Keep until Jan. 1, 2027.

Short tenure. Hired March 1, 2024; terminated June 1, 2024. Date A = March 1, 2027. Date B = June 1, 2025. Keep until March 1, 2027. A three-month job still runs three years from hire if that date is later.

Try your own dates: I-9 retention calculator.

Why the termination date has to reach the I-9 record

Payroll knows the separation date. Benefits knows it. The I-9 file often never gets the message.

Without a recorded termination date on the I-9 itself (or in the dedicated I-9 platform), three bad outcomes show up in audits:

  • The system keeps treating the person as active, so no destruction date is calculated and records pile up past the legal window.
  • A generic HRIS archive rule deletes personnel files 90 or 180 days after term, which is almost always before the later-of date for the I-9.
  • During an inspection, the employer cannot prove when employment ended, which makes the retention math undefendable.

The fix is operational: every separation event in the HRIS should update the I-9 system the same day, with the same termination date payroll used.

Connect terminations through the I-9 API

If your I-9 vendor offers an HRIS integration, the separation workflow belongs in the API layer, not a quarterly spreadsheet cleanup.

On i9 Intelligence, that means calling POST /api/NewHire/terminate when an employee leaves. Pass the HRIS employee ID, location unit number, and the official terminationDate (YYYY-MM-DD). The platform marks the I-9 status TERMINATED, stores the date for retention math, closes any open E-Verify case, and keeps the record available for audit. The destruction date is calculated from that term date using the later-of rule, not from when someone remembered to update a spreadsheet.

That terminate call is the retention hook. Create handles new hires; terminate closes the retention clock. If you only sync hires and never sync separations, you do not have a retention program. You have a filing cabinet with a broken clock.

What a connected stack looks like in practice:

  • Hire confirmed in HRIS → API create initiates Section 1 workflow
  • Periodic or event-driven sync → status endpoint writes I-9 completion back to the employee profile
  • Termination in HRIS → API terminate records the separation date the same day payroll posts it
  • Retention engine → calculates later-of destroy date and purges only when that date passes

Integration overview and field mapping: API integrations. Technical walkthrough: developer docs cover create, status, delete (pre-start cancel), and terminate as four core workflows.

Any serious I-9 provider should expose a termination path with a retention date. If yours does not, you are manually exporting term reports or hoping HR remembers to click a button. That gap is where under-retention happens.

Build a defensible purge workflow

Four parts, same logic for every employee and location:

  • Set the destruction date at termination. Do not wait for an annual purge project.
  • Purge only on that date. No fixed "delete 6 months after term" rule.
  • Document each destruction. What was destroyed, when, under which policy.
  • Apply uniformly. Ad hoc retention is what auditors notice.

Before ICE asks, confirm you can produce any in-window I-9 in three business days. Book a free compliance call if you want us to stress-test your dates against a sample term list.

Edge cases that break retention math

Rehire within three years. You may complete a new I-9 or reverify with Supplement B. If you reverify the original, the original retention clock still governs.

Leave of absence. FMLA, sabbatical, unpaid leave: still employed. Do not record a termination date or purge the I-9.

M&A. Acquired I-9s keep their original hire and term dates. Retention obligations transfer with the records. See I-9 errors in M&A.

1099 to W-2 conversion. New I-9 at conversion. Retention clock starts at the W-2 hire date.

Electronic storage and the March 2026 enforcement line

Electronic I-9 systems must meet 8 CFR 274a.2(e): integrity controls, audit trail, immediate retrieval index, quality-assurance checks, legible reproduction. ICE's March 2026 fact sheet treats failure to maintain compliant electronic records as substantive, not a paperwork typo.

Retention period is identical for paper and electronic. Split storage across HRIS and a dedicated I-9 platform adds retrieval risk. More: storing I-9s in more than one system.

The two retention mistakes ICE fines

Under-retention. Form destroyed before the later-of date. Cannot produce it in three business days. Substantive failure. Paperwork range: $288–$2,861 per form (2026 I-9 penalties). One misconfigured auto-purge multiplied across dozens of former employees gets expensive fast.

Over-retention. Keeping every I-9 forever expands what an auditor can pull into the sample. A ten-year-old form with a Section 2 typo becomes a scored violation you could legally have destroyed years ago.

Why HRIS defaults fail I-9 retention

Workday, UKG, ADP, and similar platforms usually apply one personnel-file retention policy to everything attached to the employee record. I-9s need different math.

  • Auto-archive on termination is often shorter than the later-of window.
  • Settings are "X years from hire" OR "X years from term," not conditional later-of.
  • The I-9 module may not receive the HRIS termination event at all.

Manual verification: pick three long-tenured terms and three short-tenured terms. Calculate later-of by hand. Compare to what your systems would destroy today.

Retention and purge checklist

  • Later-of math on every former employee record
  • Termination date captured in the I-9 system the day employment ends
  • HRIS separation event wired to I-9 API terminate (or equivalent)
  • No early auto-purge before the calculated destruction date
  • Three-business-day production tested
  • I-9s stored separately from general personnel files
  • Electronic audit trail intact through migrations
  • Documented, uniform destruction after the legal date

"Payroll always knows the term date. The I-9 file often does not," says Patricia Duarte, Director of Compliance at i9 Intelligence. "If your HRIS fires a terminate event into payroll and benefits but not into the I-9 platform, you do not have a retention program. You have a hope. Wire the termination API call the same day, store the date, and let the system calculate later-of. That is how you purge on time instead of by accident."

Frequently Asked Questions

How long do I have to keep a Form I-9?

For current employees, the entire period of employment. For former employees, the later of three years from hire or one year from the date employment ended.

When can I destroy a Form I-9?

Only after the later-of retention date passes. Calculate at termination, destroy on that date, document the purge.

Can I keep I-9s forever to be safe?

Not advisable. Every retained I-9 is inspectable. Over-retention expands audit exposure without adding protection.

Does an API connection really matter for retention?

Yes, if the integration includes termination. Syncing hires without syncing separations leaves the I-9 system blind to when the one-year clock starts. A terminate endpoint with the official separation date is how automated retention stays accurate at scale.

Do electronic I-9s follow different retention rules?

Same time period. Additional storage requirements under 8 CFR 274a.2(e). Non-compliant electronic storage is a substantive violation under ICE's March 2026 guidance.

How fast must I produce I-9s in an audit?

Three business days from the Notice of Inspection. Weekends and federal holidays do not count.

Retention dates still wrong in your system

If terminations are not reaching your I-9 platform, fix that before the next purge cycle or inspection. We can map your HRIS events to create, status, and terminate calls and show you what later-of dates should look like on a live export.

Call us at (713) 668-6200 (Mon–Fri, 8 AM – 5 PM CT), email support@i-9intelligence.com, or submit a ticket.

Estimate exposure: I-9 Risk Calculator. See the terminate workflow: API integrations.