LCA, PAF, and PERM, in plain language.

LaborLess is a cloud-based compliance platform that allows U.S. employers, in-house immigration teams, and immigration law firms to electronically post Labor Condition Applications (LCAs), automatically generate and maintain corresponding Public Access Files (PAFs), and post PERM Notices of Filing (NOFs) — all in a single, audit-ready system of record. Built specifically for H-1B, H-1B1, E-3, and PERM compliance under 20 CFR 655.734, 20 CFR 655.760, and 20 CFR 656.10(d), LaborLess replaces the traditional paper-based posting process — printing notices, taping them to bulletin boards, photographing them, emailing PDFs back and forth, and storing them in shared drives — with a single, secure, time-stamped electronic workflow.

With LaborLess, posting an LCA takes a few clicks: upload the LCA form, confirm the worksite and pay information, and post to a unique, branded electronic bulletin board. The platform automatically captures proof of posting, notifies affected employees, and builds a corresponding electronic PAF that updates in real time as documents are added, posted, or taken down. PERM NOFs work the same way and are timed to the regulation’s 10-business-day posting window. Every action is time-stamped and stored in the cloud, so the entire compliance file is one click away. LaborLess is used by AmLaw 100 immigration practices, boutique immigration firms, in-house corporate immigration teams, and HR departments across the United States.

LaborLess is built for anyone responsible for H-1B, H-1B1, E-3, or PERM compliance. That includes immigration attorneys and paralegals at law firms (from solo practitioners to AmLaw 100 teams), in-house corporate immigration counsel, global mobility managers, HR business partners, and compliance officers. Law firms typically use LaborLess to centralize LCA and PERM NOF posting across employer clients without the overhead of mailing physical notices or chasing email confirmations. Corporate immigration and HR teams use LaborLess to standardize compliance across multiple worksites, business units, and subsidiaries operating in the U.S. The platform supports both single-user accounts for solo practitioners and enterprise deployments with role-based access, multiple petitioner profiles, and SSO integration. If your organization files LCAs or PERM applications, LaborLess is designed for you.

The LaborLess workflow has three steps. First, upload the LCA (or PERM NOF) and a few key data points. Second, post the notice with one click — the platform generates a unique URL hosted on the employer’s branded electronic bulletin board, time-stamps the posting. Third, store and retrieve: every posted LCA is automatically added to a corresponding Public Access File that LaborLess builds in the background, and every action is logged for the regulatory retention period. Users can edit records before posting, save drafts, and link the LCA to the case management system. When the LCA is taken down after the minimum 10-day posting window, the PAF is updated automatically. Audit responses that used to take days — pulling files from email chains, network drives, and physical folders — can be delivered in minutes.

When you post an LCA in LaborLess, the platform automatically generates a corresponding electronic Public Access File that contains the documents uploaded by users, which are listed in 20 CFR 655.760: a copy of the certified LCA (Form ETA-9035), the wage rate paid to the H-1B worker, the prevailing-wage determination and its source, an explanation of the actual-wage system, documentation of the notice posting, and a summary of benefits. When the LCA is taken down or expires, LaborLess updates the PAF to reflect the change while preserving the historical record. Because the regulation requires PAFs to be “available for public examination” within one working day of LCA filing and retained for one year past the last date of employment under the LCA, LaborLess helps enforce those timing rules and provides a public-facing access link your firm or company can share if a request for examination is received.

Yes. The LaborLess API allows direct integration with leading immigration case management platforms and internal systems, eliminating duplicate data entry between case management and the compliance platform.

LaborLess is built for the data-security expectations of immigration law firms and corporate compliance teams. The platform uses encryption in transit (TLS) and at rest, role-based access controls so that only authorized users can view sensitive records, full audit logging of every user action, and configurable PAF retention policies. Beneficiary-facing links are tokenized and expire, so an LCA shared with an H-1B worker isn’t publicly indexable. For enterprise customers, LaborLess offers SSO and a variety of product and SLA customization.

LaborLess offers tiered pricing based on volume and per-case. Solo practitioners and small firms can use per-LCA pricing for low-volume posting; mid-market firms and corporate teams typically opt for an annual subscription that includes unlimited LCAs and PAFs, multiple petitioner profiles, user seats, and API access. Enterprise pricing is available for high-volume law firms and larger employers and can include dedicated onboarding, SSO, customized SLAs and more. For current pricing, please visit laborless.io and contact us.

A Labor Condition Application (LCA) is a federal form (Form ETA-9035 / ETA-9035E) that a U.S. employer must file with and obtain certification from the U.S. Department of Labor (DOL) before petitioning U.S. Citizenship and Immigration Services (USCIS) to employ a foreign worker in H-1B, H-1B1, or E-3 status. By signing the LCA, the employer makes four binding attestations to the DOL: (1) it will pay the H-1B worker the higher of the actual wage paid to similarly employed workers or the prevailing wage for the occupation in the area of intended employment; (2) employment of the H-1B worker will not adversely affect the working conditions of similarly employed U.S. workers; (3) there is no strike, lockout, or work stoppage in the occupation at the place of employment; and (4) notice of the LCA filing has been provided to workers in the occupational classification, either through the bargaining representative or, where there is none, through posting.

The LCA requirement was created by the Immigration Act of 1990 and is codified at section 212(n) of the Immigration and Nationality Act (8 U.S.C. 1182(n)). The DOL’s implementing regulations are at 20 CFR Part 655, Subparts H and I. The fourth attestation — the notice obligation — is the focus of 20 CFR 655.734, titled “What is the fourth LCA requirement, regarding notice?” That section spells out who must receive notice, what the notice must say, where it must be posted, and how long it must remain available. Failure to meet any of the four attestations — including the notice attestation — exposes the employer to back-wage liability, civil money penalties, and program debarment under 20 CFR 655.810.

A Public Access File (PAF) is the set of LCA-related documents that a U.S. employer of H-1B, H-1B1, or E-3 workers must make available for examination by any interested member of the public. The PAF is required by 20 CFR 655.760, which is titled “What records are to be made available to the public, and what records are to be retained?” The regulation requires the employer to assemble the PAF within one working day of the date the LCA is filed with the DOL, and to make the PAF available for public examination at the employer’s principal place of business in the United States or at the place of employment.

20 CFR 655.760(a) specifies the documents that must be in the PAF. They include: a copy of the completed LCA (ETA-9035 / ETA-9035CP); documentation showing the actual wage rate paid to the H-1B worker(s); a full, clear explanation of the system the employer used to determine the actual wage; a copy of the prevailing-wage determination and an explanation of how it was obtained; documentation that the notice required under 655.734 was provided (the posted notice itself, plus the dates and locations of posting); and a summary of benefits offered to U.S. workers in the same occupational classification. The PAF must be retained for one year beyond the last date on which any H-1B, H-1B1, or E-3 nonimmigrant is employed under the LCA, or — if no nonimmigrants were employed under the LCA — one year from the date the LCA expired or was withdrawn (20 CFR 655.760(c)). Other payroll-related records must be retained for three years under separate regulations and the Fair Labor Standards Act.

The LCA notice and the Public Access File are two distinct compliance obligations that often get confused. The LCA notice (governed by 20 CFR 655.734) is the posting that informs workers in the occupational classification at the worksite that an LCA has been or will be filed. It can be a hard-copy notice posted in two or more conspicuous places at the worksite, an electronic notice that “appears” on the company intranet for 10 days, or a direct-electronic-communication notice (such as email) sent to each affected employee. The notice is the outward-facing compliance step — it puts current employees on notice that an H-1B filing is happening so they can raise concerns with the DOL. The Public Access File (governed by 20 CFR 655.760) is the inward-facing compliance file — the dossier of supporting documents the employer must keep so that any member of the public who wants to verify the employer’s wage and notice attestations can do so. The notice is one of the documents contained in the PAF, but the PAF is far broader: it includes wage data, the actual-wage methodology, the prevailing-wage source, the benefits summary, and the LCA itself. Both obligations are mandatory; satisfying one does not satisfy the other.

Any U.S. employer who petitions USCIS to employ a worker in H-1B, H-1B1 (Chile/Singapore), or E-3 (Australia) status must file an LCA and maintain a PAF for each LCA filed. The obligation attaches to the petitioner — the entity that signs Section H of Form I-129 — regardless of whether a third-party staffing arrangement, agent relationship, or end-client placement is involved. Even if the H-1B worker is placed at a customer site, the petitioning employer remains responsible for posting the LCA notice at the place of employment (which under DOL guidance includes the end-client worksite where the worker is actually performing services) and for assembling and retaining the PAF. Employers that are H-1B-dependent or have been found to be willful violators have additional attestations and PAF contents under 20 CFR 655.760(a)(7)–(11), including documentation of recruitment of U.S. workers and proof that no U.S. worker was displaced.

Under 20 CFR 655.734(a), an employer must provide notice of the LCA filing to workers in the same occupational classification at each place of employment where any H-1B nonimmigrant will be employed. There are two acceptable methods: (1) hard-copy posting — the notice must be of “sufficient size and visibility” and posted in two or more conspicuous places at the worksite where workers in the occupational classification can easily see and read it; or (2) electronic notice — the employer may provide notice “by direct electronic communication” (such as an email to each affected employee) or by causing the notice to “appear” for 10 days on a company-wide intranet, web page, or electronic bulletin board accessible to affected employees.

Whether the notice is hard-copy or electronic, it must contain six elements: (a) the fact that H-1B nonimmigrants are sought; (b) the number of nonimmigrants to be employed; (c) the occupational classification; (d) the wage rate to be paid (or wage range); (e) the period of employment; (f) the worksite location(s); and a statement that complaints of misrepresentation or failure to meet the LCA’s terms can be filed with the DOL Wage and Hour Division. The notice must be posted on or within 30 days before the LCA is filed and must remain in place for a total of 10 days or more. Where there is a collective bargaining representative, the notice obligation is satisfied by providing the LCA to the bargaining representative on or before the LCA filing date.

Yes. Electronic LCA posting has been expressly permitted since the DOL added subsection (B) to 20 CFR 655.734(a)(1)(ii) in the year 2000, and the DOL clarified the electronic-posting rules in Field Assistance Bulletin No. 2019-3 (March 15, 2019). Under those rules, an employer may satisfy the notice obligation electronically by (a) sending a direct electronic communication — typically email — to each affected employee in the occupational classification at the worksite, including a copy of or hyperlink to the LCA notice; or (b) posting the notice on a company-wide intranet, electronic bulletin board, or website that is accessible to affected employees, where the notice “appears” for the full 10-day period. The electronic notice must contain the same content elements as a hard-copy notice. During the COVID-19 pandemic, the DOL issued temporary guidance allowing more flexibility for remote workforces; that guidance was rescinded once normal operations resumed, but the underlying electronic-posting authority under 655.734(a)(1)(ii)(B) remains in force. LaborLess’s electronic bulletin-board feature is designed to satisfy the “appears for 10 days” prong while time-stamping the posting and tracking access by affected employees.

LCA notices are posted for 10 days, which, most practitioners agree, the DOL treats as 10 calendar days, not 10 business days. This is a frequent source of confusion. The relevant regulation, 20 CFR 655.734(a)(1)(ii)(A), simply says the notice “shall remain posted for a total of 10 days,” without distinguishing between calendar and business days. DOL guidance and longstanding agency practice interpret this to mean 10 consecutive calendar days. Importantly, this is different from the PERM Notice of Filing, which under 20 CFR 656.10(d)(1)(ii) is posted for 10 consecutive business days. Mixing up the two is a common compliance mistake. If you take down an LCA notice on day 7 because you treated the requirement as 10 business days minus a long weekend, you have just created a regulatory violation. LaborLess’s posting calendar automatically applies the 10-calendar-day rule for LCAs and the 10-business-day rule for PERM NOFs, so users do not need to track this manually.

LCA notice must be provided at each place of employment where any H-1B nonimmigrant will be employed. “Place of employment” is defined broadly in 20 CFR 655.715 and generally means the worksite or physical location where the work is actually performed, including a third-party end-client site where the H-1B worker has been placed. If the H-1B worker will work at multiple worksites (for example, two offices in different metropolitan areas), the notice obligation applies at each worksite. Hard-copy notices must be posted in two or more conspicuous places — typically the same kinds of locations where federal labor-law notices are posted (break rooms, time-clock areas, common bulletin boards). For remote workers whose place of employment is their home, DOL guidance (per FAB 2019-3 and subsequent informal guidance) treats the home as the place of employment, and the notice obligation is generally satisfied by direct electronic communication to the affected employee (most commonly, the H-1B worker themself). Where the worksite is on-premises but no co-workers are physically present (for example, during a remote-work arrangement), an electronic posting that is accessible to the affected employees satisfies the rule.

An “affected employee” is a worker employed at the same place of employment and in the same occupational classification in which the H-1B nonimmigrant will be employed. Critically, affected employees need not be employed by the H-1B petitioner. If your H-1B engineer is being placed at a customer site where the customer’s own employees work in the same occupational classification, those customer employees are also “affected employees” entitled to notice. This is the basis for the DOL’s 2019 guidance that, for off-site placements, the petitioner must arrange for the LCA notice to be available to affected employees at the end-client worksite — typically by coordinating with the end client to post the notice or distribute it electronically. Failing to provide notice to affected employees at the end-client site is one of the most common LCA notice violations cited in DOL Wage and Hour investigations.

LCA notice violations are enforced by the DOL’s Wage and Hour Division. Penalties depend on whether the failure is “substantial” or “willful,” and they can include civil money penalties for substantial failures (and significantly higher for willful violations or violations involving displacement of U.S. workers), back-wage liability for affected H-1B workers, and debarment from the H-1B program for one to three years (or longer). Beyond direct penalties, an LCA notice violation often opens the door to a broader audit covering wage payment, PAF contents, and whether the employer made other LCA misrepresentations — meaning a small notice slip-up can become a multi-year compliance investigation. With the launch of the DOL’s “Project Firewall” initiative in 2025–2026, which includes increased AI-assisted screening and Secretary-certified investigations of H-1B employers, the practical consequences of poor LCA notice and PAF practices have escalated significantly. Maintaining a complete, time-stamped electronic record of every LCA posting — the kind LaborLess produces by default — is now table stakes for audit-readiness.

Under 20 CFR 655.760(a), every PAF must contain the following documents within one working day of LCA filing: (1) a copy of the completed LCA (Form ETA-9035 / ETA-9035CP), bearing the DOL certification; (2) documentation of the wage rate to be paid to the H-1B worker; (3) a full, clear explanation of the system the employer used to set the actual wage paid to similarly employed U.S. workers in the occupation at the worksite (the “actual wage memorandum”); (4) a copy of the documentation the employer used to establish the prevailing wage (whether obtained from the DOL’s Office of Foreign Labor Certification, an authorized state workforce agency, an independent wage survey, or a published wage source), including the date of issuance and the source’s identification; (5) documentation that the 655.734 notice was provided — meaning the posted notice itself plus the dates and worksite locations of posting (for hard-copy postings) or proof that the electronic notice appeared for 10 days (for electronic postings); and (6) a summary of the benefits offered to U.S. workers in the same occupational classification, including any differences between benefits offered to U.S. workers and H-1B workers. H-1B-dependent and willful-violator employers have additional PAF contents under 655.760(a)(7)–(11), including documentation of recruitment of U.S. workers and proof that no U.S. worker was displaced.

The PAF must be assembled and made available for public examination within one working day of the date the LCA is filed with the DOL (20 CFR 655.760(b)). This is a critical timing rule. “Filed” here means submitted to DOL, not certified — meaning the PAF must exist before the LCA is even certified. In practice, employers should prepare the PAF documents (the wage memorandum, prevailing-wage source, benefits summary) at the same time they prepare the LCA itself, so that on the day of LCA filing, the PAF is ready. LaborLess automatically generates the PAF skeleton at the moment the LCA is uploaded, and supporting documents can be attached so that the PAF is complete and date-stamped within the one-working-day window. Note that the notice posting itself happens at LCA filing or within 30 days before filing, and the proof-of-posting document is added to the PAF as soon as posting is complete.

The PAF must be retained for one year beyond the last date on which any H-1B, H-1B1, or E-3 nonimmigrant is employed under the LCA (20 CFR 655.760(c)(1)). If no nonimmigrants were ultimately employed under the LCA, the retention period is one year from the date the LCA expired or was withdrawn (20 CFR 655.760(c)(2)). Note that this PAF-retention period is separate from the payroll record-retention requirement under 20 CFR 655.731(b)(3), which requires payroll records (including documentation of the actual wage paid) to be retained for three years from the date the records were created. LaborLess enables users to set PAF expiration dates and thus helps them purge PAFs that no longer have to be retained.

The PAF must be kept at the employer’s principal place of business in the United States or at the place of employment (20 CFR 655.760(b)). It must be available for “public examination” — meaning any member of the public, not just government auditors, has the right to inspect the file. This is the “public access” in Public Access File. In practice, requests for examination most commonly come from current or former employees, journalists, advocacy groups, or competing employers; the DOL itself accesses the file separately during an investigation. Electronic PAFs (such as those maintained in LaborLess) satisfy the regulation as long as the employer can produce the file on request — the regulation does not require physical, paper files. Employers that maintain PAFs electronically typically share a secure access link or print the requested file when an examination request is received. The regulation does not require the employer to mail the PAF or to allow remote examination, but providing electronic access is increasingly common and reduces friction.

A PERM Notice of Filing (NOF) is the worksite notice that an employer must post before filing an Application for Permanent Employment Certification (Form ETA-9089) with the DOL on behalf of a foreign worker seeking lawful permanent residence (a “green card”) through the employment-based PERM labor certification process. The NOF is required by 20 CFR 656.10(d), titled “Notice of filing.” That regulation requires the employer, before filing the ETA-9089, to provide notice of the filing of the application to the bargaining representative (if any) for workers in the occupational classification at the place of employment, or — where there is no bargaining representative — to the employer’s employees at the facility or location of the employment by posting a written notice. The NOF requirement is one of the cornerstones of the PERM regulatory scheme: by giving notice, the employer alerts current and prospective U.S. workers to the existence of the labor certification application so that any interested person can submit documentary evidence to the DOL Certifying Officer bearing on the application.

The regulation requires the notice to (1) state that the notice is being provided as a result of the filing of an application for permanent alien labor certification for the relevant job opportunity; (2) state that any person may provide documentary evidence bearing on the application to the Certifying Officer of the Department of Labor; (3) provide the address of the appropriate Certifying Officer; and (4) be provided between 30 and 180 days before filing the ETA-9089 (20 CFR 656.10(d)(4)). The NOF must include the same information that would appear in an advertisement for the position — including the rate of pay (which must equal or exceed the prevailing wage), job duties, education and experience requirements, and the worksite location.

PERM NOFs and LCA notices are sometimes confused because both involve worksite postings related to foreign-worker employment, but they serve different purposes, operate under different regulations, and have meaningfully different rules. The LCA notice (20 CFR 655.734) is part of the temporary H-1B/H-1B1/E-3 program; it is posted for 10 days (frequently read as 10 calendar days), must be available within 30 days before the LCA filing, and is satisfied by either hard-copy posting in two or more conspicuous places or an electronic notice that appears for 10 days. The PERM NOF (20 CFR 656.10(d)) is part of the permanent labor certification program; it must be posted for 10 consecutive business days (not calendar days), within a 30-to-180-day window before the ETA-9089 is filed (so the employer has more advance-notice flexibility), and the regulation specifically requires posting both in a conspicuous physical location at the worksite and in any and all in-house media (electronic or print) that the employer normally uses to recruit for similar positions.

Under 20 CFR 656.10(d)(1), an employer filing an Application for Permanent Employment Certification must post a written notice of the filing for at least 10 consecutive business days at the place of employment. The notice must be posted “in a conspicuous place at the place of employment,” and DOL guidance instructs that “appropriate locations” include locations in the immediate vicinity of the wage-and-hour notices required by 29 CFR 516.4 or the occupational safety and health notices required by 29 CFR 1903.2(a). In addition, the employer must publish the notice in any and all in-house media — whether electronic or print — in accordance with the normal procedures used for the recruitment of similar positions in the employer’s organization (20 CFR 656.10(d)(1)(ii)). This in-house-media requirement is mandatory and separate from the physical posting; failing to publish in in-house media even where the physical posting was perfect can be fatal to the application. The notice must be provided between 30 and 180 days before the ETA-9089 is filed (20 CFR 656.10(d)(4)). All of the posting evidence — the dated notice, the worksite locations, screenshots or print-outs of the in-house-media publications — must be retained in the PERM audit (compliance) file.

A PERM NOF must be posted for at least 10 consecutive business days (20 CFR 656.10(d)(1)(ii)). “Business days” excludes weekends and federal holidays. This is different from the LCA notice’s 10-calendar-day posting period and can be source of error. If a PERM NOF is taken down on day 10 calendar but only 7 business days have passed (say, because of a Memorial Day weekend), the posting may be non-compliant and the PERM application is at risk. The 10 business days must also be consecutive — taking the notice down for a day or two and then re-posting may not satisfy the rule.

The PERM NOF must be provided between 30 and 180 days before the ETA-9089 is filed with the DOL (20 CFR 656.10(d)(4)). That window applies to both (a) the date the notice was posted at the worksite and (b) the date the in-house-media publication appeared. A NOF that was posted only 25 days before filing is too recent; a NOF posted 200 days before filing may be too stale. In practice, many PERM teams target a posting that begins roughly 30–45 days before the planned ETA-9089 filing date, allowing for a 10-business-day posting period with a buffer for the recruitment-completion attestations and any final review. Note that the 30-to-180-day window is measured from the first day of posting, not the take-down date.

Under 20 CFR 656.10(d)(3) and longstanding DOL guidance, a compliant PERM NOF must include the following content: (1) a statement that the notice is being provided as a result of the filing of an application for permanent alien labor certification for the relevant job opportunity; (2) a statement that any person may provide documentary evidence bearing on the application to the Certifying Officer of the Department of Labor, including the address of the appropriate Certifying Officer (currently the Atlanta National Processing Center for most PERM applications); (3) the name of the employer; (4) the job title and a description of the job duties; (5) the minimum education, training, and experience requirements; (6) the rate of pay (which must equal or exceed the prevailing wage); and (7) the geographic place of employment with sufficient specificity that an interested U.S. worker could apply. The wage rate listed on the NOF must match (or be expressed as a range that includes) the prevailing wage on the corresponding ETA-9141 prevailing-wage determination; a mismatch between the NOF wage and the prevailing-wage determination is a frequent audit trigger.

Yes, with important nuances. The physical posting requirement under 20 CFR 656.10(d)(1)(ii) traditionally contemplated a hard-copy notice posted in a conspicuous location at the worksite, and DOL has consistently treated that physical posting as a baseline requirement. However, the in-house-media requirement in the same subsection expressly permits — and in fact requires — electronic posting where the employer normally uses electronic in-house media (such as a company intranet, internal job board, employee newsletter, or recruitment portal) to advertise similar positions. So a complete PERM NOF compliance posture typically includes both: (a) a hard-copy notice posted in a conspicuous location at the worksite for 10 consecutive business days, and (b) publication of the same notice in every in-house electronic and print medium the employer normally uses to recruit for similar positions, also for the equivalent period. For fully-remote workforces, where there is no traditional physical worksite, DOL guidance has evolved to recognize that the worker’s home or an electronic posting accessible to all employees may satisfy the worksite-posting prong, but this remains a fact-specific area where careful documentation matters. Whatever posting method is used, the audit file must contain dated proof of posting at each location for the full 10-business-day period.

A PERM audit file — sometimes called a “compliance file” — is the dossier of recruitment, posting, and supporting documentation that an employer must assemble for every PERM (ETA-9089) application. The audit file is required by 20 CFR 656.10(f), which requires the employer to retain documentation supporting the application and its supporting recruitment efforts, and to make that documentation available to a DOL Certifying Officer in the event of an audit (or supervised recruitment) under 20 CFR 656.20 and 656.21. The retention period is five years from the date of filing of the ETA-9089 (20 CFR 656.10(f)). After five years, employers may dispose of the audit file. Note that PERM audit files are not “public access files” — unlike the LCA PAF, the PERM audit file is provided only to the DOL on request, not to members of the public.

A complete PERM audit file should include: (1) a copy of the certified ETA-9089; (2) the prevailing-wage determination (ETA-9141) and supporting documentation; (3) the dated PERM NOF itself, plus dated proof of posting at each worksite (photographs of the posted notice, dated affidavits, sign-in sheets, and any other evidence that the notice remained posted for 10 consecutive business days); (4) dated proof of in-house-media publication — screenshots or print-outs of every in-house electronic medium where the notice appeared, plus copies of any printed in-house publications; (5) the State Workforce Agency (SWA) job order and proof of its 30-day posting; (6) tear sheets or affidavits of publication from the two required Sunday newspaper advertisements (or the journal advertisement for professional positions); (7) proof of the three additional recruitment steps for professional positions (job fair, employer website, job-search website, on-campus recruiting, trade or professional organization, private employment firm, employee referral program, campus placement office, local or ethnic newspaper, radio or television advertisement); (8) all U.S. worker resumes received during recruitment; (9) the recruitment report describing the recruitment steps undertaken, the results, the number of applicants, and the lawful, job-related reasons each U.S. applicant was rejected; (10) documentation of business necessity for any unusual job requirements; and (11) signed copies of any forms (notably ETA-9089 attestations). Missing any one of these items can result in a PERM denial.

The single most important best practice is to build the audit file in real time, not retroactively. Many denials come from employers who treat the audit file as something to assemble after an audit notice arrives — by which time the recruitment is months in the past, witnesses have left, screenshots are gone, and physical postings have been taken down. The audit file should be complete on the day the ETA-9089 is filed. Specific best practices include: (a) time-stamp every posting — physical postings should be photographed on the day of posting and the day of take-down, with dated affidavits from the person who posted them; (b) capture in-house-media publications as they happen — take screenshots with visible URLs and dates of every internal posting, and save copies of any printed in-house publications; (c) archive recruitment-website postings — many job-search websites take down postings after a fixed period, so save the posting page on the day of expiration; (d) maintain a single recruitment log — a spreadsheet or system of record listing each recruitment step, the dates, the source, the cost, and the outcome; (e) preserve every U.S. worker resume, even resumes that arrived after the recruitment deadline or for clearly unqualified applicants — the recruitment report must address all responses; (f) draft the recruitment report contemporaneously, while details are fresh and lawful, job-related reasons for each U.S. worker rejection can be properly documented; and (g) store everything centrally — using a system like LaborLess for the NOF prong of the audit file can help ensure the posting evidence is electronic, time-stamped, and immediately retrievable.

A PERM audit usually begins when the DOL Certifying Officer issues an Audit Notification Letter under 20 CFR 656.20, requesting the employer’s recruitment and supporting documentation by a specified deadline (typically 30 days from the date of the letter). The audit may be triggered randomly, by a quality-control sample, by a specific issue noted on the ETA-9089 (such as an unusual job requirement or a wage discrepancy), or by information the DOL received from a third party (an interested U.S. worker, a former employee, or a competitor). The employer must produce the complete audit file — including the NOF and proof of posting, the SWA job order, the newspaper advertisements, the recruitment report, all U.S. worker resumes, and any business-necessity documentation — within the deadline. Failure to respond, or an incomplete response, results in denial under 20 CFR 656.20(b). To prepare: (1) build the audit file at the time of filing, not after; (2) reconcile the NOF wage and job description against the ETA-9141 and ETA-9089 before posting; (3) document the lawful, job-related reason every U.S. applicant was rejected, in writing, contemporaneously; (4) preserve electronic evidence of every in-house-media posting; and (5) maintain a single, organized compliance file (paper or electronic) that can be produced in a single response. With Project Firewall and the broader DOL enforcement push in 2026, audit volumes and supervised-recruitment orders are expected to climb, and the cost of an unprepared audit response — denial, refiling, lost priority date for the underlying I-140 — can be measured in years of delay for the affected worker.

“Project Firewall” is the DOL’s enforcement initiative, announced in late 2025 and operational in 2026, designed to dramatically increase oversight of the H-1B and PERM programs through a combination of AI-assisted screening of LCA filings, inter-agency data-sharing among DOL, USCIS, the EEOC, and the Department of Justice’s Civil Rights Division, and Secretary-certified investigations in which the Secretary of Labor personally certifies the initiation of an investigation where there is reasonable cause to believe an employer is out of compliance with H-1B requirements. DOL has reported a roughly 48% year-over-year increase in H-1B investigations under the program. Practically, Project Firewall means that LCA filings, public-access-file content, posting documentation, and wage-payment records are all under heightened scrutiny — and discrepancies between an LCA, an I-129 petition, payroll records, and IRS filings can be flagged automatically. For PERM, increased scrutiny is expected to take the form of higher audit and supervised-recruitment volumes. The compliance posture that mattered in 2019 — paper PAFs in a binder, undocumented postings, wage memos drafted after the fact — is no longer adequate. Audit-readiness requires complete, time-stamped, electronic documentation that can be produced within tight DOL deadlines. LaborLess was built for exactly this environment.

Three practices separate audit-ready employers from those who scramble. First, treat compliance as a system, not a project — every LCA must produce a complete, time-stamped PAF on the day of filing, every PERM must produce a complete audit file on the day of filing, and it’s best if there is a single source of truth (not a patchwork of email threads, attorney files, and HR folders). Second, rehearse the audit response — pull a random LCA filed 30 days ago and try to produce the complete PAF in 15 minutes; pull a random PERM filed 18 months ago and try to produce the audit file. If you cannot, the audit response will not be defensible. Tools like LaborLess for the LCA/PAF and PERM-NOF prongs of compliance, integrated with case management for the recruitment and wage-determination prongs, give immigration teams more peace of mind the moment the DOL letter arrives.