Below is a practical“compliance-ready” document checklist for small businesses (U.S.). I’ve separated what is typically required (by federal rules for most employers) from what is required only if you meet certain thresholds (headcount/industry) and what is strongly recommended to reduce risk and show consistent practices.

Important note: Requirements vary by law coverage (e.g., FLSA/FMLA), industry, and state. The U.S. Department of Labor notes that not all employers are covered by every statute, and it provides a poster advisor to determine which notices apply. [dol.gov], [employer.gov]

1) Required workplace postings (most small employers)

These are “must-post” notices in a physical workplace (and often must also be made accessible to remote workers).

Federal posters (coverage-based, but commonly required)

• DOL workplace posters (varies by statute; use the DOL poster advisor). [dol.gov], [employer.gov]
  • Start here: U.S. DOL Workplace Posters [dol.gov]
  • Or use: Employer.gov Required Posters overview [employer.gov]
• OSHA “Job Safety and Health” poster (must be displayed where workers can easily see it; OSHA provides it free). [osha.gov]
  • OSHA workplace poster page [osha.gov]
• EEOC “Know Your Rights” (anti-discrimination) poster — EEOC states employers are required to post a notice describing federal employment discrimination laws. [eeoc.gov]
  • EEOC Small Business: Legal requirements & poster [eeoc.gov]

State posters (always check your state)

The DOL explicitly notes that states have their own posting requirements and points employers to state labor offices. [dol.gov], [employer.gov]

Florida example (since you’re in FL): Florida’s official employer page states Florida businesses must display federal and State of Florida employment law posters where employees can easily view them. [floridajobs.org]

• FloridaJobs.org – Display Posters and Required Notices [floridajobs.org]

2) Required hiring/onboarding documents (federal)

Form I‑9 (Employment Eligibility Verification)

• You must keep a completed Form I‑9 on file for each employee (hired after Nov. 6, 1986). [uscis.gov]
• Retention rule: retain I‑9s three years after hire OR one year after employment ends, whichever is later. [uscis.gov]
• USCIS guidance: USCIS M‑274: Retaining Form I‑9 [uscis.gov]

Best practice (also common in audits): store I‑9s separately from personnel files (so you can produce them quickly without exposing unrelated employee data). USCIS explains the requirement to produce forms within three business days of an inspection request. [uscis.gov]

Withholding certificates and payroll setup forms

The IRS requires you to keep copies of employees’ withholding certificates (e.g., Forms W‑4) as part of your employment tax records. [irs.gov]

3) Required payroll & timekeeping records (FLSA + IRS)

FLSA wage/hour records (if you’re covered by FLSA)

The DOL explains that covered employers must maintain records including identifying info and wage/hour data (hours worked, pay basis, deductions, pay period, etc.). [dol.gov]

• DOL Fact Sheet #21 (recordkeeping): FLSA Recordkeeping Requirements [dol.gov]
• Retention: DOL states payroll records must generally be preserved at least 3 years, and records used to compute wages (timecards, schedules, wage tables, deductions) at least 2 years. [dol.gov]

IRS employment tax records

The IRS instructs employers to keep employment tax records for at least four years and lists the types of records (EIN, wage payment details, employee identifying data, W‑4 copies, tax deposit dates/amounts, returns filed, fringe benefits substantiation, etc.). [irs.gov]

• IRS guidance: Employment tax recordkeeping [irs.gov]

4) Required safety documentation (OSHA – coverage-based)

OSHA injury/illness recordkeeping (if you meet size/industry criteria)

OSHA states that many employers with more than 10 employees are required to keep records of work-related injuries and illnesses using OSHA forms (300/300A/301) or equivalent forms, and it outlines the recording/reporting requirements. [osha.gov]

• OSHA overview: OSHA Recordkeeping [osha.gov]

OSHA severe incident reporting (applies broadly)

OSHA states that all employers must report certain severe incidents (fatalities within 8 hours; in-patient hospitalization, amputation, or loss of an eye within 24 hours). [osha.gov]

5) “Core HR documents” that are commonly expected for compliance readiness (recommended, and sometimes required by specific laws/industries)

Even when not explicitly mandated by one federal statute for all employers, these documents are often the difference between “we’re compliant” and “we can prove it.”

Your HR10 startup checklist captured many of the common core documents small businesses keep on hand, including: Employee Handbook, Code of Conduct, Anti-Harassment/Discrimination policy, Leave & Attendance policy, Remote Work policy, job descriptions, offer letters, onboarding checklist, I‑9, W‑4, privacy policy for employee data, personnel files, performance review templates, and training records. [ecfr.gov]

• HR10 reference list: https://www.hr10.us/startup-services/ [ecfr.gov]

If you do government contracting, HR10’s GovCon page also highlights that government contractors face expanded HR compliance and documentation expectations (FAR clauses, timekeeping/labor charging compliance concepts, reporting, etc.). [law.cornell.edu]

Quick “Small Business HR Compliance Binder” (simple way to implement)

If you want a practical structure, keep these five folders:

1. Posters & Notices (federal + state; document where posted and how remote staff access) [dol.gov], [floridajobs.org]
2. Hiring & Work Authorization (I‑9s stored separately; retention tracked) [uscis.gov]
3. Payroll & Timekeeping (FLSA wage/hour + IRS tax records) [dol.gov], [irs.gov]
4. Safety (OSHA poster + incident logs if applicable + severe incident reporting process) [osha.gov], [osha.gov]
5. Policies & Acknowledgements (handbook/policies, signed acknowledgements, training logs) [ecfr.gov]