Defensible records for workforce compliance.
An audit, a dispute, or an unemployment claim can ask for historical records created months ago. Explore the categories of compliance records an hourly employer must maintain, what makes them legally defensible, and how Hirebase secures them.
What every new hire signs before a first shift.
A set of federal and state forms is generated for nearly every hire, and these are usually the first records requested in an audit or a dispute over eligibility to work.
I-9, identity and work authorization
Form I-9 verifies an employee's identity and authorization to work in the United States, completed for every new hire regardless of citizenship status, referencing the specific identity and work-authorization documents the worker presented. It is a federal requirement, not an optional HR form.
For it to survive scrutiny, a system needs to hold a complete, dated I-9 tied to the correct hire, the specific documents relied on to complete it, and a retrieval path that does not depend on a manager remembering where a paper copy is filed.
W-4, federal withholding
Form W-4 is the federal form an employee completes to set how much federal income tax is withheld from their pay, based on filing status, dependents and other adjustments, typically completed at hire and updated when circumstances change.
A defensible record ties the signed form to the specific worker and hire date, and can show it was completed before the first payroll run it affected.
State withholding and new-hire registration (EDD or equivalent)
States generally require employers to register new hires with a state agency, both for state tax withholding and for new-hire reporting used in programs such as child-support enforcement. The specific agency and form vary by state; EDD is California's name for the function.
A defensible record ties the state registration, including any state-issued reference, to the correct worker and filing date.
A signature on a bundle proves less than a signature on a policy.
Handbook and individual policy sign-off
A handbook typically bundles a code of conduct, a safety policy, an anti-harassment policy, and other client-specific rules. A single acceptance click at the end of the bundle acknowledges that the document was presented, but it cannot show which specific policy inside it a worker actually read and agreed to.
A defensible record acknowledges each policy independently, with a timestamp and a signature or initial attributable to that one item, not to the bundle as a whole.
What matters is not that training happened, but that it can be shown to.
Course completion and knowledge assessment
Many roles require documented completion of a safety or skills course before a worker starts. A certificate alone shows attendance; a scored knowledge assessment shows the worker demonstrated a minimum standard of understanding, which is a stronger record in a dispute over whether someone was actually qualified.
A defensible record holds which course was assigned, the completion progress, the score and pass or fail result, and the date, not only a headline "trained" flag.
What makes a punch record hold up in a dispute.
A punch record is the most frequently disputed record in an hourly workforce, and the one most often reconstructed from memory after the fact. Its defensibility does not come from the total. It comes from the evidence attached to it.
The punch itself
A bare clock-in and clock-out time proves very little on its own. What makes a punch record defensible is the corroborating evidence attached to it at the moment it was made: where the worker was, whether their identity was confirmed, and whether they were briefed before starting.
A defensible record holds the timestamp, the location at the time of the punch, an identity confirmation, and any check the worker had to clear before the punch was accepted, all written at the time, not added afterward.
Adjustments to the record
The original punch is rarely the final word. Corrections happen constantly: a late clock-in caused by a device issue, a shift charged to the wrong job, a forgotten punch. What matters for a dispute is not that a correction happened, but whether it is traceable.
A defensible adjustment record holds the original value, the requested value, who requested the change, who reviewed it, and, for a rejection, the stated reason.
Meal and rest break timing
Many jurisdictions require non-exempt employees to receive breaks of a defined length and timing during a shift, and require the employer to keep a record showing the break was actually taken. Requirements vary significantly by state and by industry.
A defensible record shows the duration of each break against the shift it belongs to, not a total inferred after the fact from a longer gap in the punch log.
Filed the way it is later read.
OSHA recordability
US employers subject to OSHA recordkeeping requirements generally must log work-related injuries and illnesses that meet OSHA's recordability criteria, typically involving medical treatment beyond first aid, lost work time, restricted duty, or certain other defined outcomes. Not every incident is recordable, and the recordability determination itself is a judgment the employer makes against OSHA's specific criteria; a workforce system does not make that determination automatically.
What a system needs to hold is the detail a recordability determination is made from: the date, the employee and job context, a description of what happened, the treatment received, and enough medical and incident detail to apply the criteria after the fact, not a headline summary written days later.
DWC first report of injury
The DWC first report of injury is the workers' compensation intake document many US states require after a work-related injury, capturing what happened, who was involved, and the nature of the injury, submitted to the state workers' compensation authority. It is a separate requirement from OSHA recordkeeping, even though the same incident frequently triggers both.
A defensible record ties the DWC form status and dates to the same incident record the rest of the file is built on.
Workers' compensation
Workers' compensation is a state-mandated insurance system providing wage replacement and medical benefits to employees injured in the course of employment. A claim typically starts with a first report of injury, and the documentation an employer keeps at the time of the incident affects how defensible the claim is later.
A defensible record shows the incident detail was captured close to the time it happened, not assembled from memory once a claim is filed.
Governed by the client's policy, not the vendor's.
How long a record has to be held
How long a record has to be held, whether it is a hiring form, a payroll record, or an incident record, is set by the client's own document retention schedule and the jurisdiction the work was performed in, not by a default built into any vendor's platform. Retention periods differ by record type and by jurisdiction, and they are a decision the client makes with its own counsel, not one a software vendor should set on the client's behalf.
One record.
Built to hold up.
We will map Hirebase to your compliance framework,
your ERP and your region.
© 2026 Hirebase. All rights reserved.

