I-9 compliance doesn’t forgive confusion about who’s responsible. And in a co-employment arrangement, that confusion is remarkably common.

Business owners who work with Vensure Employer Solutions often assume their PEO is handling the I-9 process. Vensure provides the platform, the onboarding workflow, sometimes the E-Verify integration — so it’s a reasonable assumption. It’s also frequently wrong, and the consequences of getting it wrong land on you, not Vensure.

USCIS doesn’t care that you’re using a PEO. If your I-9s are incomplete, improperly documented, or missing entirely, the penalties follow the employer who controlled the hiring process. In most co-employment arrangements, that’s you. ICE penalty ranges for substantive I-9 violations are published by USCIS and adjusted periodically through the Federal Register — they’re significant enough per form that a single audit of a growing company can produce a genuinely painful outcome.

This guide is written specifically for Vensure clients and business owners evaluating Vensure. It covers how I-9 verification actually works within the co-employment model, what Vensure’s platform handles versus what remains your operational responsibility, and the specific mistakes that trip up otherwise competent operators. If you need broader context on PEO compliance structures and co-employment fundamentals, that foundational material lives elsewhere — this guide assumes you understand the basic PEO model and focuses tightly on I-9 execution.

What follows is a practical walkthrough: from clarifying legal responsibility in your contract, through executing the process correctly for each hire, managing E-Verify, maintaining audit-ready records, and honestly evaluating whether Vensure’s I-9 support is actually worth what you’re paying for it.

Step 1: Clarify Who Owns I-9 Responsibility in the Vensure Co-Employment Model

Before you touch the platform, you need to understand the legal landscape. This isn’t bureaucratic throat-clearing — it’s the single most important thing to get right, because misunderstanding it is how businesses end up exposed.

Under USCIS guidance, the entity that exercises day-to-day control over hiring and work assignments is generally treated as the employer for I-9 purposes. In a PEO co-employment arrangement, that’s almost always the client company — meaning you. Vensure is the employer of record for payroll and benefits purposes, but that designation doesn’t automatically transfer I-9 responsibility to them. If you’re unclear on how the difference between PEO and employer of record affects compliance obligations, it’s worth reviewing before proceeding.

What Vensure typically provides is the infrastructure: the digital I-9 form, the onboarding workflow, document upload functionality, and E-Verify connectivity. What Vensure typically does not do is physically examine your new hire’s documents, complete Section 2 on your behalf, or absorb your legal liability if something goes wrong. The platform supports your compliance process. It doesn’t replace your obligation to run it correctly.

This distinction matters enormously in practice. “My PEO was supposed to handle it” has never been a successful defense in an ICE audit. The agency looks at who controlled the employment relationship, not who provided the HR software.

What to do right now: Pull your Vensure Client Service Agreement and read the section covering I-9 responsibility allocation. This language varies. Some agreements are explicit about which party bears primary responsibility for Section 2 completion and document examination. Others are vague in ways that could create ambiguity during an audit. If the language is unclear, ask your Vensure account representative in writing to clarify what they do and don’t handle — and keep that correspondence.

A few things to look for in the CSA:

Responsibility for Section 2 completion: Does the agreement state that you (the client) are responsible for employer verification, or does Vensure take on any portion of this?

E-Verify obligations: If your state mandates E-Verify participation, the agreement should address who submits cases and who manages Tentative Non-Confirmations.

Record retention: Does Vensure retain I-9 records on your behalf, or are you expected to maintain parallel storage?

The goal of this step isn’t to alarm you — it’s to ensure you’re operating with accurate information. Many Vensure clients have been running their I-9 process correctly for years. But the ones who run into trouble are almost always the ones who assumed the PEO was handling more than it actually was. For a useful comparison of how other providers handle this same responsibility split, see how Insperity structures I-9 verification within their co-employment model.

Step 2: Set Up and Navigate Vensure’s I-9 Module in the Employer Portal

Once you’ve confirmed your responsibility allocation, the next step is making sure your platform is configured correctly. This sounds straightforward, but Vensure has grown significantly through acquisitions, which means clients on different legacy platforms may encounter different interfaces and feature sets. Don’t assume your experience mirrors what another Vensure client describes.

The I-9 workflow is typically accessed through Vensure’s HRIS or onboarding portal. When functioning as intended, the digital module generally includes electronic Section 1 completion pushed to the new hire, document upload fields for supporting documentation, employer-side Section 2 fields for your verification entries, and storage and retention management tied to the employee record.

Before you rely on any of these features, confirm the following with your account representative:

Is electronic I-9 included in your plan tier? Vensure offers varying service packages, and not all include the same technology stack. Some clients are on plans where digital I-9 is an add-on rather than a standard feature. If you’ve been assuming it’s included and it isn’t, that’s a gap worth identifying now rather than during an audit. Smaller companies should pay particular attention here — the feature set available to a Vensure client with 10 employees may differ significantly from what larger accounts receive.

Is E-Verify integration active for your account? E-Verify connectivity may need to be enabled separately, and in some cases requires you to complete your own E-Verify enrollment with DHS before the integration functions. Don’t assume it’s running because you can see the option in the portal.

How are authorized representatives configured? If you have remote hires, you’ll need a process for designating an authorized representative to complete Section 2 on your behalf. Vensure’s platform may support this workflow, but you need to set it up correctly — and you remain responsible for the authorized representative’s actions during document examination.

What notifications and deadline triggers are active? The platform should be generating alerts for approaching Section 2 deadlines and upcoming work authorization expirations. Confirm these are enabled and routing to the right people on your team, not just to an inbox nobody monitors.

One practical note: take time to walk through a test onboarding flow in a non-production environment if Vensure offers that option. Understanding exactly what the new hire sees, where they can get stuck, and what the employer-side completion steps look like will save you from discovering process gaps on someone’s actual first day.

Step 3: Execute the I-9 Process for Each New Hire — Timing and Documentation

This is where compliance actually happens or fails. The federal requirements here are specific, and the Vensure platform, however well-configured, doesn’t change them.

Section 1 timing: The employee must complete Section 1 no later than their first day of employment. It cannot be completed before a job offer has been accepted. Vensure’s onboarding flow typically sends the Section 1 link digitally as part of the new hire packet, which is the right approach — but you need to confirm the employee actually completed it, not just that the invitation was sent. Check completion status in the portal before or on the start date, not after.

Section 2 timing: You or your authorized representative must complete Section 2 within three business days of the employee’s start date. This is a hard federal deadline under 8 CFR 274a.2. If someone starts on a Monday, Section 2 must be completed by Thursday. Missing this window creates a substantive violation regardless of whether the documents were eventually verified.

The document examination requirement: This is the most commonly misunderstood aspect of I-9 compliance in a digital environment. The employee’s original documents must be physically examined. You’re looking at the actual document, checking that it reasonably appears genuine and relates to the person presenting it. A digital upload in Vensure’s portal supports your recordkeeping — it does not satisfy the legal examination requirement. It’s worth noting that this same challenge applies across PEO platforms — the walkthrough on Paychex PEO I-9 verification covers similar document examination pitfalls.

This is a real operational problem for businesses with remote hires or distributed teams. If your new hire is in another city and you’re relying on them uploading a photo of their passport, you have not completed a legally valid I-9. You need an authorized representative physically present with the employee to examine the original documents.

DHS has introduced alternative document examination procedures for certain E-Verify employers — this is an evolving regulatory area that has changed in recent years. Before relying on any remote or virtual examination approach, verify the current DHS guidance directly rather than assuming any prior flexibility still applies.

What acceptable completion looks like: Every new hire has a fully completed I-9 with Section 1 done on or before day one, Section 2 completed within three business days, proper List A or List B plus List C documentation recorded with document titles, issuing authorities, document numbers, and expiration dates where applicable, and the employer’s signature and date in Section 2. That’s your baseline for every single hire.

Step 4: Manage E-Verify Integration and Resolve Tentative Non-Confirmations

E-Verify is a federal system that checks new hire information against Social Security Administration and DHS databases. It’s mandatory for federal contractors and required by law for all or certain employers in a growing number of states, including Arizona, Mississippi, Alabama, and South Carolina, among others. If you’re in a state with E-Verify requirements, or if you’ve opted in through Vensure, you need to understand how this layer of the process works.

Submission timing: E-Verify cases must generally be created no later than the third business day after the employee’s start date. This aligns with the Section 2 deadline, which is intentional — you typically run E-Verify after completing the I-9, not before. If Vensure’s integration is active, the case creation may be triggered from within the portal, but confirm whether this is automatic or whether someone on your team needs to initiate it.

When a Tentative Non-Confirmation comes back: A TNC means the system couldn’t immediately confirm the employee’s eligibility. It does not mean the employee is unauthorized to work. TNCs occur for a range of reasons, including data entry errors, name mismatches, and database delays. Your obligations when a TNC is issued are specific and non-negotiable.

You must notify the employee of the TNC promptly, provide them with the referral letter generated by E-Verify, and allow them to decide whether to contest it. The employee has eight federal government workdays to contact the relevant agency. During this entire period, you cannot take any adverse action against the employee based on the TNC. No suspension, no termination, no reduction in hours. This prohibition is federal law, and violations are treated seriously regardless of how the underlying eligibility question resolves.

Vensure’s system may flag TNCs and generate notifications, but the action steps are yours. The platform can surface the issue — it cannot make the required notifications to your employee or manage the contest period on your behalf. For a detailed look at how a different PEO handles this same TNC workflow, the guide on TriNet PEO I-9 verification provides a useful comparison point.

When to escalate: Vensure’s compliance support team can help with platform-level questions and general process guidance. If you’re dealing with a Final Non-Confirmation, an employee contesting a TNC who believes the result is incorrect, or any situation involving work authorization documentation that raises questions you can’t answer confidently, that’s when you bring in immigration counsel. Don’t rely on your PEO’s support team to provide legal advice on individual immigration matters.

Step 5: Maintain Records, Handle Reverifications, and Prepare for Audits

Getting the I-9 right at hire is necessary. Keeping it right over time is where a lot of businesses fall down, especially when they assume the PEO is managing ongoing compliance automatically.

Retention rules: Federal law requires you to retain I-9 forms for three years after the hire date or one year after the employee’s termination, whichever is later. A long-tenured employee who was hired ten years ago and terminated last month? You need to keep that I-9 for another year. An employee who left after six months? You need the form for at least three years from their start date.

Confirm explicitly with Vensure whether they retain these records on your behalf and for how long. If they do, understand what happens to those records if you leave Vensure. You need a clear answer, in writing, about whether you can export your complete I-9 file when your service agreement ends. Some PEO clients have discovered this gap at the worst possible time.

Reverification: When an employee’s work authorization document expires, Section 3 of the I-9 must be completed to reverify their continued eligibility. Vensure’s system may send reminders as expiration dates approach — but you must act on those reminders. An expired document that wasn’t reverified is a compliance violation, and “the system should have reminded me” isn’t a defense.

Note: U.S. citizens and lawful permanent residents with permanent green cards do not require reverification. Reverification applies to employees with time-limited work authorization. Make sure your team understands which employees need it and which don’t.

Audit readiness: If ICE issues a Notice of Inspection, you typically have three business days to produce your I-9 records. Ask Vensure directly: can they generate your complete, current I-9 file on demand? What format does it come in? Is there any lag or manual process involved in pulling the records? If the answer is uncertain or involves a multi-day process, that’s a gap you need to address before you receive an NOI, not after.

Correcting existing errors: If you discover mistakes in completed I-9s, the correction protocol matters. Draw a line through the incorrect information, enter the correct information, initial and date the correction. Do not use correction fluid. Do not create a new I-9 to replace a completed one unless the original is so fundamentally flawed that correction isn’t workable — and even then, the original should be retained alongside the new form. If you’re finding systemic errors across multiple records, loop in Vensure’s compliance team and consider whether external counsel should review before any ICE contact occurs. This is also a good time to evaluate whether Vensure’s broader compliance support — including areas like unemployment claims management — is meeting your expectations across the board.

Step 6: Evaluate Whether Vensure’s I-9 Support Actually Meets Your Needs

This is the step most PEO clients skip, and it’s worth taking seriously.

After working through the process above, ask yourself an honest question: is Vensure’s I-9 functionality meaningfully reducing your administrative burden, or are you still managing most of the compliance work yourself with a slightly more organized interface?

A well-integrated PEO I-9 solution should be doing real work for you: automating Section 1 delivery and tracking completion, managing E-Verify submission and flagging TNCs, sending reverification reminders with enough lead time to act, and maintaining audit-ready records you can export immediately. If you’re still manually tracking deadlines, chasing employees for Section 1 completion, and unsure whether your records are exportable, that’s not a full-service solution — that’s a digital filing cabinet.

Some PEO providers go further than Vensure on specific elements of I-9 administration. Certain providers offer authorized representative services for remote hire document examination, which is a genuine operational lift that matters if your workforce is distributed. Others provide more proactive compliance monitoring or clearer audit-response support. These aren’t universal differentiators, but they’re worth comparing if I-9 complexity is a real operational challenge for your business. If you’re weighing alternatives, the Justworks PEO I-9 verification walkthrough shows how a different platform approaches the same compliance requirements.

The cost angle is straightforward: if you’re paying for a full-service PEO and still dedicating meaningful internal time to I-9 compliance management, that’s a legitimate factor in your total cost-of-service evaluation. PEO pricing often gets evaluated on the headline rate without accounting for what administrative work actually gets lifted off your plate versus what you’re still running internally. Reviewing how Vensure handles other administrative areas like benefits administration can help you build a fuller picture of the value you’re actually receiving.

Some businesses in this situation benefit from supplementing their PEO with a standalone I-9 compliance tool or retaining immigration counsel for periodic audits. That’s a reasonable approach, but it does mean you’re paying for two layers of support to cover one compliance area — which is worth factoring into any PEO renewal conversation.

Your I-9 Compliance Checklist — And What Comes Next

Here’s the short version of everything this guide covers:

Confirm responsibility allocation: Read your Vensure CSA and get written clarification on exactly what they handle versus what stays with you. Don’t assume.

Configure the portal correctly: Verify that electronic I-9, E-Verify integration, authorized representative workflows, and deadline notifications are active and routing to the right people.

Nail the timing: Section 1 by day one, Section 2 within three business days. No exceptions, no workarounds. Physical document examination is required — digital uploads support recordkeeping, not the legal examination itself.

Manage E-Verify properly: Submit cases within three business days of start date. Follow TNC protocols precisely. Do not take adverse action during the contest period.

Maintain audit-ready records: Confirm Vensure’s retention practices, understand your export options, act on reverification reminders, and know how fast you can produce your complete I-9 file if ICE comes knocking.

Assess honestly: If Vensure’s I-9 support isn’t providing meaningful administrative relief, factor that into your next renewal decision.

I-9 compliance is one area where PEO involvement creates a genuine risk of false confidence. The platform looks like it’s handling things. The workflow feels automated. But the legal obligation hasn’t transferred — and the gap between what the software does and what federal law requires is where penalties live.

If you’re approaching a Vensure renewal or actively evaluating PEO providers, I-9 support quality is worth putting on the comparison list alongside pricing and benefits. Most businesses overpay for PEO services due to bundled fees and unclear administrative markups. Before you sign anything, compare your options — we break down pricing, services, and contract structures so you can make a smarter decision.