Managing Compliance Documents with the Vault¶
Overview¶
The Compliance Vault is 4Geeks Payroll’s centralized, secure document storage system for all employment-related documentation. It helps you stay compliant across 50+ countries by managing contracts, IDs, tax forms, and local compliance documents β with automated reminders and full audit trails.
In this tutorial, you will:
- Understand the Compliance Vault structure and document types
- Upload and organize employee documents
- Create and manage employment contracts with digital signatures
- Set up automated expiration reminders
- Configure role-based access permissions
- Run compliance reports and audits
- Use the onboarding checklist for new hires
Prerequisites¶
- 4Geeks Payroll account with Employee Stream enabled
- Employees added to the system
- Employee documents ready for upload (contracts, IDs, tax forms)
Step 1: Understanding the Compliance Vault¶
What It Stores¶
The Compliance Vault organizes documents into these categories:
| Category | Documents |
|---|---|
| Employment Contracts | Full-time, part-time, fixed-term, contractor agreements |
| Identification | Passports, national IDs, work permits, visas |
| Tax Documents | W-8BEN, W-4, local tax forms, social security numbers |
| Compliance | Background checks, certifications, professional licenses |
| Local Requirements | Country-specific mandatory documents |
How It’s Organized¶
Each employee has their own document repository within the vault:
Compliance Vault
βββ Employee: Ana GarcΓa
β βββ Employment Contract (signed)
β βββ National ID (front & back)
β βββ W-4 Form
βββ Employee: Carlos Ruiz
β βββ Employment Contract (signed)
β βββ Passport
β βββ Work Permit
β βββ Background Check
βββ Employee: Maria Torres
βββ Contractor Agreement
βββ W-8BEN
βββ Professional License
Key Features¶
- Enterprise Encryption β AES-256 at rest, TLS 1.3 in transit
- Version Control β Every document change is tracked
- Audit Trails β Every view, upload, and edit is logged
- Automated Reminders β Never miss a document expiration
- Role-Based Access β Granular control over who sees what
Step 2: Upload and Organize Documents¶
Upload a Single Document¶
- Go to Payroll β Compliance β Compliance Vault
- Search for the employee or select them from the list
- Click Upload Document
- Select the Document Type from the dropdown:
- Employment Contract
- National ID / Passport
- Tax Form
- Work Permit / Visa
- Certification / License
- Background Check
- Other
- Choose the file (supported formats: PDF, JPG, PNG; max 10 MB)
- Enter optional details:
- Document Name β A label for easy identification (e.g., “Ana GarcΓa - Employment Contract 2026”)
- Expiration Date β When the document expires (e.g., passport expiry, visa expiry)
- Notes β Any additional information
- Click Upload
The document appears in the employee’s document list. If you set an expiration date, the system automatically starts tracking it.
Upload Multiple Documents at Once¶
- From the Compliance Vault, click Bulk Upload
- Select multiple files from your computer
- For each file, assign:
- Employee (search by name)
- Document type
- Expiration date (optional)
- Click Upload All
Upload on Behalf of an Employee¶
If an employee has submitted documents through the mobile app:
- Go to Compliance β Pending Documents
- Review each submitted document
- Click Approve to accept, or Reject with a reason
- Approved documents are stored in the employee’s vault automatically
Step 3: Create and Manage Employment Contracts¶
Create a Contract Using Templates¶
- Go to Payroll β Compliance β Contracts
- Click New Contract
- Select the employee
- Choose a Template based on the country:
- Pre-built templates include standard clauses for each country’s labor laws
- Templates include mandatory local provisions
- Fill in the contract details:
| Section | Fields |
|---|---|
| Parties | Employer name, Employee name, addresses |
| Position | Job title, department, reporting manager |
| Terms | Start date, end date (if fixed-term), probation period |
| Compensation | Salary, currency, payment frequency, bonus structure |
| Hours | Working hours, overtime policy, break policy |
| Benefits | Health insurance, pension, vacation, other benefits |
| Termination | Notice period, severance terms |
| Local Clauses | Country-specific mandatory provisions |
- Customize any sections as needed
- Click Save as Draft or Send for Signature
Send for Digital Signature¶
- From the contract detail view, click Send for Signature
- The employee receives an email with a secure link
- The employee reviews and signs electronically
- You receive a notification when signed
- The signed contract is automatically stored in the Compliance Vault
Track Contract Status¶
| Status | Meaning |
|---|---|
| Draft | Being created, not yet sent |
| Sent | Awaiting employee signature |
| Signed | Employee has signed |
| Counter-Signed | Both parties have signed |
| Expired | Contract term has ended |
| Amended | Contract has been modified with an amendment |
Contract Amendments¶
To modify an existing contract:
- Open the signed contract
- Click Create Amendment
- Document what is changing (e.g., “Salary increase from $50,000 to $55,000”)
- Send for signature (both parties sign)
- The amendment is attached to the original contract with version history
Contract Renewal¶
- Open the contract approaching its end date
- Click Renew
- Update terms if needed (new salary, new end date)
- Send for signature
- The renewal is linked to the original contract in the version history
Step 4: Set Up Automated Reminders¶
Configure Expiration Alerts¶
- Go to Settings β Compliance β Reminders
- Click Add Reminder Rule
- Configure:
| Setting | Description | Recommended Value |
|---|---|---|
| Document Types | Which types trigger reminders | All types |
| First Reminder | Days before expiration | 30 days |
| Second Reminder | Days before expiration | 14 days |
| Final Reminder | Days before expiration | 3 days |
| Escalation | If no action after final reminder | Escalate to HR Admin |
- Choose who receives reminders:
- Employee β They get notified to renew their document
- Manager β Gets notified if employee doesn’t act
-
HR Admin β Gets escalated notifications
-
Click Save
Reminder Behavior¶
| Timeline | Action |
|---|---|
| 90 days before | Early warning sent to HR (for complex renewals like work permits) |
| 60 days before | Employee receives first reminder (for W-8BEN, which is valid 3 years) |
| 30 days before | Employee receives reminder; manager is CC’d |
| 14 days before | Second reminder to employee and manager |
| 3 days before | Final warning β urgent action needed |
| Expired | Employee and manager notified; HR admin notified |
| 7 days expired | Escalated to HR Admin level |
Step 5: Configure Role-Based Access¶
Access Levels¶
| Role | Can View | Can Upload | Can Approve | Can Delete |
|---|---|---|---|---|
| Employee | Own documents only | Own documents | β | β |
| Manager | Team documents | Team documents | Approve submissions | β |
| HR Admin | All documents | All documents | Approve, manage permissions | Delete (with audit) |
| Auditor | Read-only access | β | β | β |
| Payroll Provider | Payroll-related only | β | β | β |
Setting Permissions¶
- Go to Settings β Compliance β Access Control
- Click Add Role Assignment
- Select the user or role
- Choose the permission level
- Optionally restrict to specific document categories or countries
Grant Payroll Provider Access¶
To share documents with your local payroll provider:
- Go to Settings β Compliance β External Access
- Click Add Provider
- Enter:
- Provider Name β e.g., “ABC Payroll Costa Rica”
- Contact Email β Provider’s authorized user email
- Access Scope β Payroll-related documents only
- Expiration β Set an end date for access
- Click Send Invite
- The provider receives a limited-access login
- They can only view payroll-relevant documents (not contracts or IDs)
Step 6: Run Compliance Reports¶
Document Expiration Report¶
- Go to Compliance β Reports β Document Expiration
- View:
- Documents expiring in the next 30, 60, or 90 days
- Filter by country, department, or document type
- Export to CSV or PDF
- Use this report for weekly compliance reviews
Missing Documents Report¶
- Go to Compliance β Reports β Missing Documents
- Identify:
- Employees missing required documents
- Documents not yet uploaded
- Compliance risk level (high/medium/low)
- Click Send Reminders to automatically notify employees and managers
Audit Summary Report¶
- Go to Compliance β Reports β Audit Summary
- View:
- All document activity in a date range
- Who viewed which documents and when
- Uploads, edits, and deletions
- Access attempts (including failed ones)
Real-Time Compliance Dashboard¶
The main Compliance tab shows:
| Metric | What It Tracks |
|---|---|
| Compliance Score | % of workforce with complete documentation |
| Expiring Soon | Documents expiring in next 30 days |
| Expired | Documents past expiration date |
| Missing Documents | Required documents not yet uploaded |
| Pending Approvals | Documents awaiting HR approval |
| Active Contracts | Contracts currently in effect |
Step 7: Use the Onboarding Checklist¶
Automate document collection for new hires:
How the Onboarding Workflow Works¶
- HR creates a new employee profile (see Employee Management)
- The system checks the employee’s country and generates a document checklist
- The employee receives an email with a link to upload required documents
- The employee uploads documents through the mobile app or web portal
- HR reviews and approves each document
- Once all required documents are approved, the employee is marked as Compliant
Configure Onboarding Checklists¶
- Go to Settings β Compliance β Onboarding Checklists
- For each country, configure required documents:
Example β Costa Rica: - [x] Employment Contract (signed) - [x] National ID (cΓ©dula) - [x] W-4 Tax Form (local equivalent) - [x] Bank Account Details - [x] Emergency Contact Form
Example β Mexico: - [x] Employment Contract (signed) - [x] CURP (tax ID) - [x] RFC (tax registration) - [x] IMSS Registration - [x] Bank Account Details - [x] Proof of Address
- Mark documents as Required or Optional
- Click Save
Block Payroll for Non-Compliant Employees (Optional)¶
- Go to Settings β Compliance β Payroll Gating
- Toggle Block Payroll Processing
- When enabled, employees marked “Non-Compliant” are excluded from payroll runs
- A warning appears during payroll run creation listing non-compliant employees
Best Practices¶
Document Management¶
- Standardize file names β Use a consistent format:
EmployeeName_DocumentType_Date.pdf - Set expiration dates β Always set them when uploading; reminders won’t work without them
- Replace, don’t delete β Upload a new version and mark the old one as replaced (preserves audit trail)
- Use categories consistently β Proper categorization makes filtering and reporting accurate
Compliance Cadence¶
- Weekly β Check the Compliance Dashboard for expired/missing documents
- Monthly β Run the Document Expiration Report and send reminders
- Quarterly β Full compliance audit, review all employee documentation
- Annually β Re-verify all documents, update expired ones
Security¶
- Review access permissions quarterly β Ensure only the right people have access
- Remove access for terminated employees immediately β Part of offboarding
- Audit external provider access β Verify payroll providers still need access
- Enable 2FA for all admin accounts β Extra layer of security
What’s Next?¶
- Learn how to Manage Employees, Bonuses & Deductions
- Review the Local Compliance reference documentation
- Learn about Time Tracking and Attendance
Need Help?¶
- Documentation: docs.4geeks.io/en/payroll
- Support: Available through the console dashboard
- Get Started: console.4geeks.io/payroll
Still questions? Ask on Discord or explore tutorials