How to Redact Form I-9 and Immigration Documents Before Sharing Them
A completed Form I-9 packet rarely stays in one filing cabinet. HR forwards it to a payroll vendor during onboarding, an immigration attorney needs a copy to prepare a sponsorship petition, an internal audit samples it before a merger, or a new employer asks a departing one to confirm work authorization. Every one of those copies can carry a Social Security number, an A-Number, and a scanned passport or green card — far more than most recipients actually need. This guide covers what to redact from an I-9 packet or immigration document before sharing it, what you must never redact, and how to do it without uploading a file that identifies someone's immigration status to a server.
Key takeaways
- Redact the SSN, A-Number and date of birth from a copy you're sending to a payroll vendor, internal auditor or acquirer — most of them only need to confirm that verification happened, not the identifiers themselves.
- Never redact anything in the actual Form I-9s and supporting documents you produce for a real ICE Notice of Inspection — employers get three business days to hand over unaltered originals or copies, and redaction only belongs on copies made afterward for other purposes.
- An A-Number (Alien Registration Number) is a permanent identifier DHS assigns and links across a person's entire immigration case history — treat it with the same care as an SSN.
- USCIS requires employers to keep each Form I-9 for three years after the date of hire or one year after employment ends, whichever is later — a long retention window that makes minimizing who else sees a copy worth doing.
- A black box drawn over a PDF only covers the pixels; SladdPDF's Secure mode rasterizes the page in your browser so the underlying data is actually destroyed.
Why an I-9 packet ends up being shared beyond HR
Form I-9 confirms someone is authorized to work in the US, but the packet built around it moves for reasons that have nothing to do with the original hire. A payroll or HRIS vendor taking over onboarding needs to see that verification happened. An immigration attorney preparing a green card or visa sponsorship petition needs the underlying case details. A company being acquired discloses HR files, I-9s included, during due diligence. A departing employee's new employer sometimes asks the old one to confirm a work-authorization detail. In each case, the person receiving the copy needs to confirm a fact, not retain every identifier that made the original verification possible.
What's actually in an I-9 packet
Section 1, filled out by the employee, includes full legal name, address, date of birth, and — depending on citizenship status — a Social Security number, an Alien Registration Number (A-Number), a USCIS Number, or a Form I-94 admission number. Section 2, completed by the employer, records which List A, B or C document the employee presented — commonly a US passport, permanent resident card, employment authorization document (EAD), driver's license or Social Security card — along with the document title, issuing authority and expiration date. If the employer chose to keep copies of those documents (optional, but must be done consistently for every employee if adopted), the packet also holds a scanned passport photo page, green card, or EAD with its own document number, photo and signature.
That's a dense bundle: the same SSN, date of birth and government-issued photo ID that a background check or credit report carries, plus an immigration-specific identifier the person may use for the rest of their life.
What to redact, and what you must not touch
The right answer depends entirely on who's receiving the copy and why. This table covers the common cases.
| Recipient | SSN / A-Number | Date of birth | ID document copies |
|---|---|---|---|
| Payroll or HRIS vendor (onboarding transfer) | Redact unless the vendor's own system requires it directly | Redact unless required for tax setup | Redact document number; keep confirmation a document was verified |
| Immigration attorney (sponsorship, petition) | Keep — required for the filing | Keep | Keep — the case needs the underlying documents |
| Internal HR or compliance audit (not a government inspection) | Redact for auditors who are only checking that Section 2 was completed correctly | Redact unless relevant to the sample | Redact unless the audit is specifically checking document authenticity |
| Acquirer during M&A due diligence | Redact for early-stage review; unredact only under a data room NDA if deal-specific verification is required | Redact for early-stage review | Redact for early-stage review |
| ICE, in response to an actual Notice of Inspection | Do not redact — produce unaltered originals or copies | Do not redact | Do not redact |
Why the retention window makes minimizing sharing worth it
USCIS requires employers to retain each Form I-9 for three years after the date of hire, or one year after the employee's employment ends, whichever is later — and, per the agency's Handbook for Employers, if an employer chooses to keep copies of the documents an employee presented, it must do so consistently for every employee, not selectively. That's a multi-year window during which the packet, and whichever copies of it that got forwarded along the way, has to be tracked, kept secure and eventually disposed of properly. The more places an unredacted SSN and A-Number sit — a payroll vendor's system, an old HR laptop, an acquirer's data room — the more places that retention obligation and disposal risk actually apply. Minimizing what leaves the original personnel file, for every recipient except the ones who legally require the full document, shrinks that footprint from the start.
The A-Number is as sensitive as a Social Security number
An Alien Registration Number, or A-Number, is a seven-, eight- or nine-digit identifier the Department of Homeland Security assigns the first time someone applies for a green card, employment authorization, asylum or a similar long-term immigration benefit. Unlike a one-off case or receipt number, it stays with that person for life and links their entire immigration history — every petition, renewal and status change — across USCIS, ICE and CBP systems. That makes it functionally equivalent to an SSN for anyone trying to pull together a fuller picture of someone's immigration record, and it deserves the same redaction discipline: don't leave it in a copy going to a recipient who doesn't need to look someone up by it.
A black box over a scanned ID is not redaction
An I-9 packet's document copies are usually scans or photos of a passport, green card or EAD card — image files or image-based PDF pages with no separate text layer. A rectangle drawn over the document number in a markup tool or PDF annotator sits on top of the pixels; it doesn't remove them, and a copy-paste or a simple image edit can lift what's underneath. For the Section 1 form itself, if it was filled out digitally and has a real text layer, the risk is worse — covered text can often be selected and copied directly out of the PDF. We cover this pattern in more detail in why a black box is not redaction.
Real redaction deletes the underlying data or flattens the page into a fresh image with nothing recoverable beneath the mark, which is what SladdPDF's Secure mode does.
How to redact an I-9 packet locally, step by step
An I-9 packet combines exactly the fields identity thieves and immigration scammers look for — SSN, A-Number, date of birth, a scanned passport or green card — which makes it a poor fit for any "free online redaction" tool that requires an upload. SladdPDF runs entirely in your browser: nothing is sent to a server, the file is processed locally with JavaScript and WebAssembly, and it keeps working offline once the page has loaded.
- Confirm this copy isn't for an active ICE inspection. If you're responding to a real Notice of Inspection, stop — produce the originals unaltered. Everything below is for copies made for other recipients.
- Load the packet in your browser. Open sladdpdf.com and load the PDF of the I-9 and any attached document copies.
- Decide what this specific recipient needs. Confirmation that verification happened, a specific case detail, an audit sample — use the table above as a starting point.
- Redact the SSN and A-Number. Black out both identifiers unless the recipient's role — typically an immigration attorney handling the underlying case — specifically requires them.
- Redact document numbers on ID copies. Cover the passport, green card or EAD number, and the photo if it isn't needed, on any scanned document image in the packet.
- Export in Secure mode. Secure mode rasterizes each page to a flat image, so the text and hidden data underneath the redactions are destroyed and unrecoverable.
- Remove the metadata and verify. Enable metadata removal on export, then try to select and copy text over the redacted areas in the result to confirm the data is actually gone.
If the copy you're preparing is for a background check tied to the same hire, our guide to redacting a background check or credit report covers that document specifically. For the passport, green card or driver's license scans inside the packet, see how to redact a passport, ID card, or driver's license.
This article is general guidance, not legal advice. If you're responding to an actual government inspection or audit, confirm what you're required to produce with counsel before redacting anything.
Redact an I-9 packet or immigration document without uploading it anywhere
SladdPDF runs 100% locally in your browser — the file never leaves your device. Free with no page limit; Pro unlocks 300 DPI export.
Redact a PDF nowFrequently asked questions
What should I redact from an I-9 packet before sending it to a payroll provider or attorney?
For a payroll or HRIS vendor, redact the SSN, A-Number, date of birth and any document numbers on scanned IDs unless their system specifically requires the identifier itself — most only need confirmation that verification occurred. For an immigration attorney handling a sponsorship or petition tied to that employee, keep those fields intact since the filing depends on them.
Can I redact information before responding to an ICE Notice of Inspection?
No. When ICE issues a Notice of Inspection, employers must produce the Form I-9s — and any copies of supporting documents they retained — as they exist, within three business days, unaltered. Redaction only applies to separate copies you make afterward for other purposes, such as an internal audit or a payroll transfer, not to what you hand over in response to the inspection itself.
What is an A-Number, and why should I protect it like a Social Security number?
An A-Number (Alien Registration Number) is a permanent identifier the Department of Homeland Security assigns the first time someone applies for a green card, work authorization, asylum or a similar benefit. It links that person's entire immigration case history across federal systems, which makes it just as useful to someone trying to look up or misuse a person's records as an SSN — worth redacting from any copy that doesn't specifically need it.
How long does an employer have to keep Form I-9 and copies of ID documents?
USCIS requires employers to retain each Form I-9 for three years after the date of hire, or one year after the employee's employment ends, whichever is later. If the employer chooses to keep copies of the documents presented, that choice has to apply consistently to every employee, not selectively.
Is a black box over a scanned passport or green card enough to redact an I-9 packet?
No. A rectangle drawn over a scan or photo in most PDF viewers or markup tools just sits on top of the image — the document number, photo or text underneath is still in the file and can often be recovered. Real redaction deletes the underlying data or flattens the page into a fresh image, which is what SladdPDF's Secure mode does.
- USCIS: Handbook for Employers M-274 — 10.0 Retaining Form I-9 — uscis.gov
- USCIS: Handbook for Employers M-274 — 10.2 Retaining Copies of Form I-9 Documents — uscis.gov
- USCIS: Glossary — A-Number/Alien Registration Number — uscis.gov
- U.S. Immigration and Customs Enforcement: Form I-9 Inspection fact sheet — ice.gov