• (888) 634-7684
MetaSource Document Management Software & Workflow Automation Solutions








Current BPO Engagements


HR Document Security: How to Secure Personnel Files

Colin Graf | Sunday, November 01, 2015

HR Document Security: How to Secure Personnel FilesHR Directors are under enough pressure to help ensure that employees are happy and productive. The last thing they need to worry about is secure access to employee files. Here's how this aspect of their job can be made a whole lot easier.

Cloud Document Management

Cloud document management software is the first step for enabling truly secure, electronic document storage. Once employee files are scanned and indexed, access rights and retention scheduling are applied to each document to ensure that only the appropriate personnel can view them. Cloud document management can also keep I-9s separate from the standard employee file, and so that sensitive information from all files (medical, salaries, etc.) is not accessible from unauthorized internal personnel. An additional benefit is that external auditors can be given access to your system so they can conduct a "self-service" audit, which typically takes a fraction of the time.

SOC II, Type 2

To ensure that your cloud is secure, you'll want to work with a cloud document management partner that has achieved SOC 2 certification. SOC 2 certifies that your software handles all of your employee files with controls that are fully documented and tested to minimize the risk of data being lost or compromised, and that the software adheres to both your corporate policies an external regulations, like HIPAA. This certification was established by the AICPA and centers around the creation of the Service Organization Control (SOC) Report that is prepared by an independent CPA.

I-9 Auditing

Did you know that over 100 business owners, managers and supervisors were arrested on criminal charges related to employing illegal workers last year? One way to ensure that you're not one of them is to only hire those legally eligible to work and to capture this information on the I-9 employment eligibility verification form for every employee.

Consider the following as reported by the Immigration & Customs Enforcement (ICE) agency:

  • Over 2,200 employers were audited last year
  • Employers were fined over $50 million last year (up from $1 million in 2009)
  • 223% more employers were debarred from Federal Contracts last year

Audit Trails & External Audits

One way to ensure compliance with ICE, state and federal retention requirements and corporate policies is to conduct an internal audit of your documents and processes. These audits will highlight areas of improvement and any information gaps that may exist so that you are prepared for an external audit. Document management audit logging is a tool that can help streamline the internal audit process.

The Next Step

Once you've gotten HR document access, security, I-9 management, and audit trails under control, then we can explore automated retention scheduling, mobile access and security, and workflow automation.

Contact us to learn more about keeping your HR documents secure


All Recent Posts


loan origination software (LOS) careers captiva document capture software electronic health/medical records (EHR/EMR) metastor gartner magic quadrant ax 16.3 Strategic Advisory Council remittance processing credit union contractor management emc partners lendercare medical records robotic process automation (RPA) information rights management (IRM) court documents workflow automation software accounts payable (AP) automation contractor onboarding emc applicationxtender (ax) emc captiva construction law enforcement emc world advanced document capture document scanning competitive advantage patient records state's attorney emc infoarchive diskxtender (DX) applicationxtender 8.1 emc remote support certification SFTP information governance esubmit post-close quality control (QC) philanthropy emc software document security personnel files SOC 2, Type II government partner portal opentext document management software mortgage cloud document management software paper checks kofax whitepaper captiva 7.5 legacy software decommissioning applicationxtender 16.3 I-9 records management workflow automation national partner meeting contact center services Business Process Outsourcing (BPO) legacy application data migration lockbox enterprise content management (ECM) check 21 infoarchive property-assessed clean energy (PACE) accounts receivable (AR) high performance teams customer service clean energy 5 dysfunctions of a team applicationxtender 8.0 case study human resources (HR) ax 8.0 business process as a services (BPaaS) pre-fund quality control (QC) captiva mobile capture Productivity body worn and dashboard cameras kofax kapow trucking transportation ImageTrust