The audit notice arrived on a Tuesday. Your HR coordinator forwarded it without comment, and now you’re staring at a letter from ICE requesting I-9 records for your entire workforce. Half your engineering team is on H-1B visas. Your PEO handles payroll. And nobody is entirely sure who owns what.
Or maybe you’re the CFO at a healthcare company that just onboarded a PEO, and you assumed, reasonably, that immigration compliance was part of the deal. It wasn’t spelled out in the sales call. It wasn’t in the summary sheet. And now a clinical hire’s EAD is expiring in six weeks and no one has flagged it.
These situations happen more than PEO vendors would like to admit. “Immigration compliance” sounds like a single thing, but it’s actually a spectrum of services ranging from basic I-9 record-keeping all the way to active visa sponsorship and PERM labor certification. Most PEOs handle the front end of that spectrum reliably. Very few go deep on the back end. And almost none of them volunteer the distinction during a sales conversation.
Here’s the spine of what this article will show you: a PEO can meaningfully reduce your I-9 exposure and keep your employment records audit-ready. That’s a real benefit. But if your workforce includes active H-1B holders, OPT employees, or anyone in a green card process, you need to ask very specific questions before you sign a client service agreement, because the answers will not be in the brochure.
We’ll break down what PEOs actually cover, which vendors do it better than others, where the co-employment structure creates complications for visa sponsorship, and what contract language you need to find before you sign anything.
Breaking Down What “Immigration Compliance” Actually Means
When HR leaders talk about immigration compliance in a PEO context, they’re usually conflating several distinct services. Getting clear on the categories is the first step to asking the right questions.
The spectrum looks like this:
I-9 verification and record-keeping: Completing Form I-9 for every new hire, storing the forms correctly, and maintaining them for the legally required retention period after employment ends. This is administrative work, but it’s where most employers get into trouble.
E-Verify enrollment and case management: Submitting new hire information to the federal E-Verify system, resolving Tentative Nonconfirmations (TNCs), and maintaining enrollment compliance. Federal contractors and employers in certain states are required to use E-Verify; others do it voluntarily.
Work authorization tracking and re-verification alerts: Monitoring expiration dates on Employment Authorization Documents (EADs), TN status, OPT and STEM OPT authorizations, and other time-limited work permissions, then alerting HR in advance so re-verification happens before the document lapses.
Visa sponsorship support: Assisting with H-1B petitions, TN applications, O-1 cases, and green card processes including PERM labor certification. This is where most PEOs stop or hand off to outside counsel.
State-level compliance: Managing the additional documentation and E-Verify requirements that vary by state, particularly for multi-state employers with foreign national workers in states that have their own mandates.
Most reputable PEOs handle the first three categories as standard services. The fourth is where things get complicated, and the fifth depends heavily on which states your employees work in.
The co-employment mechanics matter here in a way that surprises many buyers. In a PEO arrangement, the PEO is the employer of record for payroll tax and benefits purposes. That’s the whole point. But for visa sponsorship, the structure is different. The client company typically remains the petitioning employer for H-1B purposes. The PEO’s name is on the W-2; the client company’s name is usually on the Labor Condition Application.
This distinction is not a technicality. It means the compliance obligation for visa sponsorship does not fully transfer to the PEO the way payroll processing does. Some PEOs will co-sign petitions or provide supporting documentation, but the underlying legal responsibility stays with the client company in most arrangements.
Buyers who assume the PEO “takes over” immigration the way it takes over benefits administration are setting themselves up for a gap in coverage. Get the specific answer in writing before you sign.
The Standard Coverage: I-9, E-Verify, and Expiration Tracking
Let’s talk about what most mid-to-large PEOs actually deliver well, because there’s genuine value here and it’s worth being specific about it.
A reputable PEO with a solid HR platform will give you electronic I-9 completion at onboarding, which eliminates the most common source of audit findings: forms that were never completed, completed incorrectly, or completed on paper and then lost. The PEO stores the records, manages the retention schedule, and in many cases provides an audit trail showing who completed each section and when. For a company that has been managing I-9s in a filing cabinet or a shared drive, this is a meaningful upgrade.
E-Verify integration is standard at most national PEOs. The practical question, which we’ll return to in the checklist section, is whether the PEO enrolls as the employer of record or whether the client company must maintain its own enrollment. For federal contractors subject to the FAR E-Verify clause, this distinction affects how you demonstrate compliance. Get a straight answer before assuming the PEO’s enrollment covers you.
Automated re-verification alerts are where PEO technology earns its keep for immigration-adjacent compliance. An EAD that expires without a re-verification creates both an I-9 violation and a work authorization gap. A PEO system that flags expiring documents 90, 60, and 30 days out gives HR time to act. Without that system, the tracking falls on whoever manages the spreadsheet, and spreadsheets get ignored.
Here’s how the major vendors compare on these baseline services:
ADP TotalSource has mature I-9 and E-Verify infrastructure built into their HR platform, backed by compliance support staff who can walk clients through TNC resolution and audit preparation. That’s a genuine strength for companies that want a human in the loop, not just a software workflow. The limitation: anything beyond I-9 and E-Verify, meaning actual visa sponsorship support, is handled by referral to outside immigration counsel. ADP TotalSource is not an immigration law firm and doesn’t try to be one.
Insperity provides solid I-9 management tools and compliance alerts through their HR platform. Their compliance team is responsive and their documentation practices are generally strong. The limitation is that immigration support beyond I-9 management is advisory only and varies by market. Clients in major metros may get more support than clients in smaller markets.
Rippling takes a technology-first approach with automated I-9 workflows and E-Verify integration that’s genuinely well-designed. For companies that want a clean, modern onboarding experience, it’s a real strength. The limitation is that compliance depth depends heavily on self-service. Complex immigration situations, like a TNC that involves a foreign national on a visa, may require more hands-on support than the platform provides by default.
TriNet serves a lot of tech and life sciences companies, which means their client base has a higher-than-average concentration of foreign national employees. They have immigration referral networks and some familiarity with the questions that come up in visa-heavy workforces. The limitation: direct visa sponsorship support is not a core TriNet service and is not included in standard pricing. Expect a referral, not in-house handling.
Justworks handles E-Verify and basic I-9 management, which is appropriate for its target market of smaller, less complex companies. The limitation is straightforward: Justworks is less suited for companies with high-volume or complex immigration needs. If you have more than a handful of employees on work visas, you’ll likely outgrow what Justworks offers in this area.
Visa Sponsorship Through a PEO: The Co-Employment Complication
This is the section most PEO sales decks skip entirely, so let’s be direct about how it actually works.
H-1B sponsorship in a PEO arrangement requires careful structuring because two entities are involved in the employment relationship. The client company is typically the worksite employer and often the petitioner. The PEO may or may not appear as a co-petitioner depending on how the arrangement is structured. USCIS has issued guidance on co-employment and H-1B petitions over the years, but the mechanics vary by PEO and by petition type. There is no single standard answer.
What this means practically: if you have employees on H-1B visas and you’re considering a PEO, you need to ask the PEO exactly how they structure H-1B petitions before you onboard those employees. The onboarding process itself can trigger questions about the employment relationship that affect petition validity. Do not assume the PEO has figured this out. Ask, get the answer in writing, and have your immigration attorney review it.
PERM labor certification is cleaner in one sense and more limited in another. PERM is filed by the sponsoring employer, and in a PEO arrangement that is almost always the client company. The PEO’s role is typically limited to providing payroll records and employment verification letters when the immigration attorney needs them. That’s useful administrative support, but it’s not case management. Buyers who expect the PEO to “manage” a PERM process will find that the PEO’s involvement ends at document production.
TN status for Canadian and Mexican nationals is somewhat simpler because TN is not employer-sponsored in the same way H-1B is. But TN workers still appear on your I-9s with time-limited status, and re-verification tracking matters. A PEO with solid expiration alerts handles this adequately.
The honest recommendation for companies with ten or more foreign nationals on work visas: the right model is a PEO plus a retained immigration attorney, not a PEO alone. The larger national PEOs, ADP TotalSource, Insperity, and TriNet, have more infrastructure for supporting immigration-adjacent compliance than smaller regional PEOs. But none of them function as immigration law firms. They’ll tell you that themselves if you ask directly. The ones who don’t tell you that are the ones to watch out for.
One more thing worth saying plainly: the PEO’s co-employer status does not insulate the client company from immigration enforcement. If ICE shows up, both entities may be in scope. The PEO holds the I-9 records; the client company often holds the visa petitions. Both have exposure. The question of who responds and who bears the cost of defense should be answered in your contract, not discovered after the fact.
I-9 Audits Inside a PEO: Who’s on the Hook
An ICE Notice of Inspection gives you three business days to produce I-9 records. If you’re in a PEO, the first question you’ll have is: who responds?
In a typical PEO arrangement, the PEO holds the I-9 records because they’re the employer of record for HR purposes. The audit notice may go to the PEO, to the client company, or to both, depending on how the worksite employer relationship is structured and which entity’s name appears on the I-9s. This is not a hypothetical edge case. It’s a real operational question that most buyers never think to ask until they’re staring at a three-day deadline.
Your client service agreement should spell out who responds to an audit notice, who retains legal counsel, and who bears the financial exposure for any penalties assessed. If your CSA is silent on these points, that’s a gap you need to close before you sign or renew. Ask your PEO to show you the specific contract language. If they can’t produce it, that tells you something.
Now for the genuine upside, because it’s real: a PEO with a robust electronic I-9 system substantially reduces the most common audit findings. Missing forms, incomplete Section 2, documents accepted that shouldn’t have been, expired work authorization not flagged for re-verification. These are the errors that generate substantive violations, and they’re mostly the result of manual, inconsistent I-9 processes. A PEO that centralizes and automates I-9 management reduces that exposure meaningfully.
For companies that have been managing I-9s on paper or in a patchwork of systems across locations, moving to a PEO with electronic I-9 infrastructure is one of the clearest risk-reduction moves available. The compliance benefit is concrete, not theoretical.
The limitation to be honest about: joining a PEO does not erase prior violations. If you have three years of I-9s that were completed inconsistently, those deficiencies exist whether or not you’re in a PEO. Before onboarding, you should conduct a self-audit of your existing I-9 records and correct what can be corrected under the technical correction rules. Some PEOs will assist with this remediation as part of onboarding. Most will not do it at no charge. Ask the question, understand the cost, and do the work before the audit notice arrives rather than after.
One more practical note: I-9 records have specific retention requirements tied to the later of three years from the date of hire or one year from the date employment ends. When a PEO relationship ends, you need to know who holds those records and for how long. This should also be in your CSA. Get it in writing.
The Questions to Ask Before You Sign Anything
If you’ve made it this far, you’re probably evaluating PEOs and trying to figure out how to pressure-test their immigration compliance capabilities in a vendor conversation. Here’s a concrete diagnostic you can use.
E-Verify enrollment structure: Does the PEO enroll in E-Verify as the employer of record, or does the client company maintain its own enrollment? For federal contractors, this affects how you demonstrate compliance with the FAR E-Verify clause. Get a direct answer, not a general assurance.
H-1B onboarding process: How does the PEO handle employees who are already on H-1B visas at the time of onboarding? Who is listed as the petitioner? Does the PEO appear as a co-petitioner? What documentation do they require from the client company? If the sales rep can’t answer this, ask to speak with their compliance team.
Re-verification alerts: Does the PEO provide automated alerts for expiring work authorization documents? What is the lead time, and who receives the alert? Is this a standard feature or an add-on? Ask to see a sample alert so you know what “alert” actually means in their system.
Audit response protocol: Who responds to an ICE Notice of Inspection? Does the PEO provide legal representation, or do they provide records and step back? Who bears the cost of outside counsel if needed? This conversation should happen before you sign, not after you receive a notice.
On the contract side, look for these specific provisions in the client service agreement:
Audit response responsibility: The CSA should assign clear responsibility for responding to government audits of I-9 records. Vague language about “cooperation” is not enough.
Indemnification for I-9 penalties: Does the PEO indemnify the client for penalties arising from I-9 errors that occurred under the PEO’s administration? What about errors that predated the PEO relationship? These are different questions with different answers.
Data retention after termination: How long does the PEO retain I-9 records after the relationship ends? Who has access? What happens if you need records for a post-termination audit?
These clauses are rarely discussed in sales conversations. They’re often buried in exhibits or addenda. The fact that a vendor doesn’t raise them doesn’t mean they’re not important. It means you need to raise them yourself.
If you want to see how specific PEOs answer these questions across a structured comparison framework, Compare PEO Plans and we’ll show you what the contract language actually looks like across the vendors we track.
Matching Your Immigration Profile to the Right PEO
Not every company has the same immigration complexity, and the right PEO fit depends heavily on where your workforce falls on that spectrum.
Low complexity: Your workforce is primarily US citizens and permanent residents. You occasionally hire someone with an EAD, but it’s not a regular occurrence. In this situation, any reputable PEO with E-Verify handles your needs adequately. The baseline I-9 and E-Verify infrastructure at ADP TotalSource, Insperity, TriNet, Rippling, or Justworks is sufficient. You’re not buying immigration compliance depth; you’re buying operational consistency and audit-readiness.
Medium complexity: You regularly hire employees with EADs, including OPT and STEM OPT workers. You have TN employees from Canada or Mexico. Work authorization expiration tracking is a real operational concern because you have enough foreign national employees that a manual process breaks down. Here you need a PEO with strong automated tracking and a responsive compliance team, not just a software workflow. ADP TotalSource and TriNet are reasonable fits for this profile, with the clear caveat that neither replaces immigration counsel for anything beyond tracking and re-verification support.
High complexity: You have active H-1B sponsorship, ongoing PERM filings, L-1 intracompany transfers, or a workforce with ten or more employees on work visas. A PEO alone is not sufficient for this profile. The PEO handles payroll and benefits infrastructure; a dedicated immigration attorney manages the visa work. The two services complement each other but don’t substitute for each other. Budget for both.
The multi-state dimension adds another layer. Some states have broad E-Verify mandates that apply to all employers, not just federal contractors. Arizona is one example; others have requirements tied to public contracts or specific industries. State rules change, and a static list in an article is less reliable than checking current state requirements directly. What matters for your PEO evaluation is whether the PEO has multi-state compliance infrastructure that tracks these variations and keeps you current. A single-state or regional PEO may not have visibility into requirements outside their primary market.
The honest framing to close this section: no PEO is an immigration law firm. The ones that imply otherwise in a sales call, or who let you walk away believing they’ll “handle” your visa compliance, should raise a flag. The right PEO for an immigration-heavy workforce is one that is transparent about where their service ends and where outside counsel begins. That transparency is a feature, not a limitation. It means they understand the boundary and won’t leave you with a false sense of coverage.
For HR leaders navigating compliance across industries, the pattern holds whether you’re in healthcare, technology, or professional services: PEO compliance support is strongest where it’s systematic and process-driven. Immigration compliance, like HR compliance in senior care or other regulated sectors, rewards the PEOs that have built real infrastructure around it rather than listing it as a bullet point in a brochure.
The Bottom Line Before You Sign
The decision framework isn’t complicated once you’ve separated what PEOs actually do from what buyers assume they do.
PEOs reduce I-9 and E-Verify risk reliably. They centralize record-keeping, automate expiration tracking, and bring a level of process consistency that most companies can’t maintain on their own. That’s a genuine and concrete benefit, and it’s worth paying for.
PEOs do not replace immigration attorneys for visa sponsorship, PERM labor certification, or H-1B petition management. The co-employment structure means the client company typically retains the petitioning role and the compliance obligation for visa-related work. The PEO supports that work with payroll records and employment verification; it doesn’t own it.
The companies that get into trouble are the ones that assumed their PEO owned everything. They found out otherwise when an audit notice arrived, when an H-1B renewal was mishandled during onboarding, or when a PERM filing stalled because nobody had retained immigration counsel.
Before you sign, ask the specific questions in Section 5 above. Find the audit-response language in your CSA. Confirm E-Verify enrollment structure. If your workforce includes active visa holders, budget for outside immigration counsel regardless of which PEO you choose. That’s not a failure of the PEO model; it’s how the model is supposed to work.
PEO Metrics has compared 40+ PEOs across a 12-dimension methodology, with $2.1B in client payroll benchmarked and 850+ companies matched since 2019. We look at compliance infrastructure, contract terms, and pricing side by side so you can see exactly what each vendor covers and where the gaps are. The service is free to the buyer, and we report in 5 to 10 business days.
Don’t auto-renew. Make an informed, confident decision.
Before you sign that PEO renewal, make sure you’re not leaving money on the table.
Many businesses unknowingly overpay because of bundled fees, hidden administrative markups, and contracts designed to limit flexibility. We give you a clear, side-by-side breakdown of pricing, services, and contract terms—so you can see exactly what you’re paying for and choose the option that truly fits your business.
