How to Handle I-9 Verification Through Paychex PEO: A Practical Walkthrough

When you bring on a PEO like Paychex, there’s a natural tendency to assume the compliance heavy lifting just… gets handled. And for a lot of HR functions, that’s roughly true. But I-9 verification is different, and misunderstanding how it works under a co-employment arrangement is one of the more expensive assumptions a business owner can make.

I-9 errors aren’t theoretical. Under USCIS guidelines enforced by ICE, substantive violations can run from several hundred to over two thousand dollars per form, with penalties for repeat violations climbing significantly higher. The co-employment structure with Paychex doesn’t eliminate your exposure — in some ways, it creates new confusion about who’s actually on the hook.

The mechanics of I-9 verification through Paychex PEO involve a real division of labor between you and the platform. Paychex Flex handles a lot: electronic form delivery, deadline tracking, E-Verify submission, and storage. But there are critical steps — particularly around physical document inspection — that remain squarely on your side of the line, regardless of what the platform can do.

This walkthrough covers the full process from setup through annual auditing. If you’re already using Paychex PEO, this will help you identify any gaps in your current workflow. If you’re still evaluating providers, how a PEO handles I-9 infrastructure is actually a useful signal of their compliance maturity overall.

Let’s get into it.

Step 1: Understand the Co-Employment Split on I-9 Responsibility

Before you touch Paychex Flex, you need to understand something that trips up a lot of PEO clients: co-employment does not transfer your I-9 document review duties to Paychex.

Under the co-employment model, Paychex is the employer of record for payroll and benefits purposes. But for I-9 compliance, USCIS regulations require that the employer who controls the day-to-day work — that’s you, the worksite employer — is responsible for physically examining employment eligibility documents. Paychex doesn’t have eyes on your new hire. They can’t inspect a passport or a Social Security card. That responsibility stays with you or someone you designate.

What Paychex PEO does own in this process is meaningful but different. The platform manages the compliance infrastructure: electronic form delivery, deadline tracking, E-Verify case submission, audit-ready record storage, and reverification alerts. That’s genuinely valuable. But it’s the scaffolding around your core obligation, not a replacement for it. For a broader look at what the platform covers beyond I-9, the Paychex PEO services overview breaks down the full picture.

Here’s where the liability exposure becomes real. If you assume Paychex is handling document review because they’re “the employer of record,” and an ICE audit reveals that Section 2 was completed without physical document inspection, the penalties land on you. The PEO relationship doesn’t shield you from that. In fact, it can create a false sense of security that makes the gap harder to catch until it’s too late.

The division of responsibility looks roughly like this:

Your responsibility: Physically examining original documents in the employee’s presence, completing Section 2 attestation, managing the authorized representative process for remote hires, and ensuring deadlines are met.

Paychex’s responsibility: Delivering the electronic I-9 workflow, tracking compliance deadlines, submitting E-Verify cases, maintaining compliant electronic storage, and providing audit-ready record retrieval.

This split is documented in your Paychex PEO client service agreement. Before you onboard another hire, pull that agreement and find the section that specifically addresses I-9 responsibilities. Confirm what Paychex has committed to and what they’ve explicitly left with you. If the language is vague, ask your Paychex account representative for clarification in writing. This is not a place for ambiguity.

One more thing worth noting: the specific allocation can vary depending on how your agreement is structured and whether your account includes additional compliance support. Don’t assume the default. Verify it.

Step 2: Configure I-9 Workflows in Paychex Flex

Once you’re clear on the responsibility split, the next step is making sure your Paychex Flex account is actually set up to support compliant I-9 processing. The platform has solid infrastructure here, but it doesn’t configure itself.

Log into Paychex Flex and navigate to the onboarding module. I-9 management sits within the new hire onboarding workflow, typically accessible through the HR or Onboarding section of your dashboard. If you’re not sure where to find it, your Paychex implementation contact or the Flex help center can point you to the right location — the interface has evolved over time, so exact navigation may differ slightly depending on your account setup.

The key configuration you want in place is an automated trigger that initiates the I-9 workflow the moment a new hire is entered into the system. Without this, there’s a real risk that someone adds a new employee to payroll and the I-9 process starts late — or doesn’t start at all. Automated triggers remove that dependency on manual follow-through.

Next, set up deadline notifications. The critical window is Section 2: you have three business days from the employee’s start date to complete document review and attestation. Paychex Flex can send alerts to you or a designated HR contact as that deadline approaches. Make sure these notifications are going to someone who will actually act on them — not a shared inbox that no one monitors. While you’re configuring onboarding workflows, it’s also worth reviewing how to set up background checks through Paychex PEO, since that process runs in parallel with I-9 completion.

If you’re running a multi-location operation or you’re not the person who will be physically reviewing documents, you’ll need to designate an authorized representative in the system. This is the person who will complete Section 2 on your behalf at a specific location. Paychex Flex allows you to assign these roles, and getting this right before your next hire is far better than scrambling to figure it out on Day 1 of someone’s employment.

A few configuration items worth double-checking:

E-Verify enrollment status: If your business is required to use E-Verify — or has voluntarily enrolled — confirm that the integration is active in your Paychex Flex account. E-Verify case creation is time-sensitive, and the connection between Section 2 completion and automatic case submission needs to be live before it matters.

Current I-9 form version: USCIS periodically updates the I-9 form. Paychex should be delivering the current version through the platform, but it’s worth confirming — especially if your account hasn’t been touched in a while.

Notification recipients: Review who is receiving I-9 deadline alerts. If the original setup pointed to someone who has since left the company, those alerts are going nowhere.

Getting the workflow configured correctly upfront is what makes the rest of this process manageable. It’s a one-time investment that pays off every time you bring on a new hire.

Step 3: Walk the New Hire Through Section 1 Completion

Section 1 is the employee’s portion of the I-9. They’re attesting to their identity and work authorization status. Under Paychex Flex, this is delivered electronically through the onboarding portal — typically sent to the new hire before their start date or on Day 1.

The hard deadline: Section 1 must be completed no later than the employee’s first day of work for pay. Not the end of the first week. Not whenever they get around to it. Day 1.

Paychex tracks this deadline and the platform will flag overdue forms. But enforcement is on you. If a new hire hasn’t completed Section 1 by the end of their first day, you need to follow up directly. The platform can remind them, but it can’t make them do it.

Paychex Flex does catch some common Section 1 errors automatically — missing required fields, formatting issues, incomplete entries. That’s helpful. What it doesn’t catch are substantive errors that look technically complete: a name that doesn’t match their documents, an incorrect citizenship status selection, or a preparer/translator certification that was skipped when it should have been completed. Those errors are on you to catch during document review. Having a well-documented employee handbook that outlines onboarding expectations can help set the right tone from the start.

Remote workers and tech-averse employees create a specific challenge here. If someone doesn’t have reliable internet access or isn’t comfortable with the electronic portal, you’ll need a plan. Options include having them complete Section 1 on a company device before or on Day 1, or having a manager or HR contact assist them through the process in person. What you can’t do is have someone else fill it out for them — unless they’re using a preparer or translator, which requires the preparer/translator certification block to be completed.

For employees who genuinely cannot use the electronic system, paper I-9 completion is still permissible under USCIS rules. If you go that route, you’ll need a process for getting that paper form entered into or attached to your Paychex records. Confirm with your Paychex account team how paper forms are handled in your specific setup.

Step 4: Complete Section 2 — Document Review and Verification

This is where your responsibility is heaviest, and where I-9 violations most commonly occur.

Section 2 requires you — or your designated authorized representative — to physically examine the employee’s original identity and work authorization documents in the employee’s physical presence. Not scanned copies. Not photos on a phone. Original documents, in person, examined by a real human being.

The employee presents either one document from List A (which establishes both identity and work authorization, like a U.S. passport) or one document from List B (identity) combined with one document from List C (work authorization). You confirm the documents appear genuine and relate to the person in front of you, then record the document details in Paychex Flex.

Within the platform, Section 2 completion is structured: you select the document type from a dropdown, enter the document number, record the expiration date if applicable, and confirm the examination. The platform’s structure helps prevent common entry errors, but it doesn’t validate whether the document you examined was legitimate. That judgment call is yours. It’s worth understanding how other PEOs handle this same step — the TriNet PEO I-9 verification walkthrough offers a useful comparison point.

A few critical mistakes to avoid:

Accepting photocopies: Never. USCIS requires examination of original documents. A photocopy — even a high-quality one — is not acceptable for Section 2 purposes.

Accepting expired documents: An expired U.S. passport, for example, is not an acceptable List A document. Paychex Flex will flag expiration date issues in some cases, but don’t rely on the system to catch this — verify it yourself at the time of examination.

Using documents not on the approved USCIS list: The List A, B, and C documents are specific. A document that looks official but isn’t on the list doesn’t qualify, regardless of how convincing it appears.

The remote hire situation deserves specific attention. If an employee is working remotely and won’t be physically present at your location, you need an authorized representative to complete Section 2 on your behalf. This can be anyone — a notary, a local HR contact, even a trusted family member in some cases — but they must physically examine the documents and complete the attestation. They’re acting as your agent, and you remain responsible for the accuracy of that process.

In Paychex Flex, you can document the authorized representative’s information as part of the Section 2 completion record. Make sure this is captured accurately. If an audit occurs, you’ll want a clear record of who examined the documents and when.

The Section 2 deadline is three business days from the employee’s first day of work. If you miss this window, you have a violation — even if everything else was done correctly. The Paychex Flex deadline alerts from Step 2 are your safety net here. Use them.

Step 5: Activate E-Verify Integration (If Applicable)

E-Verify is a federal system that cross-references I-9 document information against Social Security Administration and Department of Homeland Security databases to confirm work authorization. It’s separate from the I-9 process itself, but closely connected to it.

First, determine whether E-Verify is required for your business. Federal contractors and subcontractors are generally required to use it. Several states have their own E-Verify mandates — Alabama, Arizona, Mississippi, and South Carolina are among those with requirements, though the specifics vary by state and employer size. If you’re not certain whether you’re required, check your state’s current employment law requirements or consult with an employment attorney. This isn’t an area to guess on.

If E-Verify applies to your business, Paychex PEO can handle the submission process through Paychex Flex. Once Section 2 is completed, the platform can transmit the case data directly to E-Verify, which reduces manual steps and the risk of data entry errors. This integration is one of the more practical compliance benefits Paychex offers in the I-9 process. For a look at how Insperity handles I-9 verification, that comparison can help you benchmark Paychex’s approach.

The timing constraint is firm: E-Verify cases must be created within three business days of the employee’s first day of work. Because E-Verify case creation depends on Section 2 data being in the system, this reinforces why Section 2 completion can’t be delayed. If Section 2 is entered on Day 3, the E-Verify case needs to go out the same day.

When E-Verify returns a result, most cases come back as “Employment Authorized” quickly. But occasionally, the system returns a Tentative Nonconfirmation — a TNC — which means the information couldn’t be confirmed. A TNC does not mean the employee is unauthorized to work. It means there’s a discrepancy that needs to be resolved.

When a TNC occurs, there’s a specific process you must follow. The employee must be notified and given the opportunity to contest the result. You cannot take adverse action — termination, suspension, reduced hours — based solely on a TNC. Paychex provides guidance on the TNC process, but the employee notification and referral steps are your responsibility to execute correctly. Mishandling a TNC is its own compliance exposure, separate from the original I-9 issue.

Confirm with your Paychex account team that E-Verify is activated in your account and that the integration is functioning before you rely on it for a real hire. Testing the workflow with a sample case during setup is worth the effort.

Step 6: Set Up Compliant Storage and Reverification Tracking

Completing the I-9 correctly is only part of the compliance picture. You also need to store it correctly and track when reverification is required.

Paychex Flex stores completed I-9 forms electronically as part of your employee records. The retention rules under federal law are specific: you must retain each I-9 for three years from the date of hire or one year after the date of termination, whichever is later. For a long-term employee, that means the I-9 stays on file well beyond their departure date.

The electronic storage in Paychex Flex is designed to meet USCIS requirements for electronic recordkeeping systems, including audit trails and retrieval capabilities. That said, confirm with your Paychex team that your specific account configuration meets these standards — particularly if your account was set up some time ago and hasn’t been reviewed recently. Checking the Paychex PEO BBB rating and reputation can also give you a sense of how the company handles compliance-related client concerns.

Reverification is the part that catches many businesses off guard. If an employee’s work authorization has an expiration date — certain visa categories, Employment Authorization Documents, and similar credentials — you’re required to reverify their authorization before it expires. This is done in Section 3 of the I-9.

Paychex Flex sends automated alerts when work authorization is approaching expiration. These alerts are useful, but they only work if the expiration date was entered correctly during Section 2. If that field was left blank or entered incorrectly, the alert won’t fire. Spot-checking expiration date entries during your annual audit (more on that in Step 7) is a good habit.

When you receive a reverification alert, you need to complete Section 3 before the expiration date. The employee presents new documentation of continuing work authorization, you examine it, and you record it in Section 3. Paychex Flex should support electronic Section 3 completion, but confirm the workflow with your account team.

One gap that’s easy to overlook: terminated employees. Their I-9s need to be retained for the required period, then purged. Holding onto I-9s beyond the required retention period creates unnecessary exposure in an audit — more forms means more potential violations if errors exist. Paychex can automate the purge process based on retention rules, but this feature needs to be confirmed as active in your account. Don’t assume it’s running if you’ve never verified it.

If you receive an ICE Notice of Inspection, Paychex Flex should be able to generate your I-9 records for production. USCIS gives employers three business days to produce records following a notice. Know in advance how to pull these records from the platform so you’re not figuring it out under pressure.

Step 7: Audit Your Process Annually and Recognize the Limits

Running through this process once and then assuming it’s handled is how compliance gaps accumulate. An annual self-audit is the practical way to stay ahead of problems before they become ICE violations.

Paychex Flex can generate I-9 compliance reports that surface incomplete forms, missing signatures, overdue reverifications, and other red flags. Pull this report at least once a year — more frequently if you have high turnover or a large hourly workforce. Review it with the same attention you’d give a financial audit. The goal is to find and correct errors before an external party does.

When you find errors, the correction process matters. USCIS has specific guidance on how to correct I-9 errors — you don’t simply white out a mistake or overwrite it. Generally, corrections require drawing a line through the incorrect information, entering the correct information, and initialing and dating the change. Paychex Flex may handle this differently for electronic forms, so confirm the correction workflow with your account team.

There are situations where Paychex PEO’s I-9 support may not be sufficient on its own:

High-turnover industries: Businesses in hospitality, construction, agriculture, or staffing that are processing large numbers of new hires frequently have a higher volume of I-9 touchpoints — and more opportunities for errors. The platform helps, but the human review burden is real.

Heavy remote workforces: If most of your hires are remote, the authorized representative process creates operational complexity that Paychex Flex doesn’t fully solve. You need a reliable, scalable process for remote Section 2 completion that goes beyond what the platform provides.

States with additional requirements: Some states layer additional employment verification requirements on top of federal I-9 rules. Paychex’s compliance support is primarily federal-facing. Know your state’s specific requirements independently.

If you’ve received an ICE Notice of Inspection, or if your self-audit reveals significant gaps, bring in outside I-9 counsel rather than relying solely on Paychex’s compliance team. Paychex can support you, but they’re not your legal representative. An immigration attorney or I-9 compliance specialist can assess your exposure and guide remediation in ways a PEO platform cannot.

And if you’re finding that Paychex’s I-9 workflow creates consistent friction — slow platform response, unclear responsibility handoffs, or inadequate remote hire support — that’s worth factoring into your next PEO evaluation. Some providers offer more hands-on document review support or more robust remote verification workflows. Comparing providers like TriNet vs Paychex PEO or Insperity vs Paychex PEO can help you see where the compliance support differences actually lie.

Your I-9 Compliance Checklist with Paychex PEO

Here’s the quick-reference version of everything covered above:

1. Confirm your I-9 responsibility split with Paychex in your client service agreement — get it in writing before your next hire.

2. Configure Paychex Flex onboarding to auto-trigger the I-9 workflow and set up deadline notifications to the right person.

3. Ensure Section 1 is completed by the employee on or before their first day of employment — track it, don’t assume it happened.

4. Complete Section 2 document review within three business days of the start date, in person, with original documents. Designate an authorized representative for remote hires.

5. Submit E-Verify cases promptly if required — within three business days of the hire date — and follow the TNC process correctly if a discrepancy comes back.

6. Verify that electronic storage is configured correctly, reverification alerts are active, and the retention/purge settings are running for terminated employees.

7. Self-audit at least annually using Paychex Flex’s reporting tools, and bring in outside counsel if you’ve received an inspection notice or found significant gaps.

Getting I-9 verification right isn’t complicated once you understand the actual division of responsibility. The confusion comes from assuming the PEO owns more of it than they do. Paychex provides solid infrastructure for this process — but the document examination, deadline enforcement, and audit response are yours to own.

If your current setup with Paychex leaves gaps, or if you’re still deciding between providers and want to see how others handle employment verification and compliance support, it’s worth doing a real comparison before you commit. Most businesses overpay due to bundled fees and unclear administrative markups. We break down pricing, services, and contract structures so you can make a smarter decision. Compare your options before you sign or renew.