Is an electronic attestation legally enforceable

Yes in most circumstances. Electronic signatures meet the ESIGN Act (15 U.S.C. ch. 96) and UETA requirements when intent, consent, attribution, and retention are present; exceptions include certain court filings and testamentary instruments.

Do I need a BAA for vaccine data

If the attestation contains protected health information and a vendor stores or transmits that data, a Business Associate Agreement is required under HIPAA before using the vendor for PHI handling.

Can employees use scanned vaccination cards

Yes, scanned cards are acceptable if authentic and legible; implement a verification step, note the verifier, and retain the image in the secured personnel record.

What if an employee challenges an attestation

Maintain change and correction procedures, preserve original records, and follow internal review steps. A documented dispute resolution process reduces escalation risk and supports compliance with employment law.

Are notarization or witnesses required

Generally no for workplace attestations. Notarization or witnesses are rarely necessary unless state law or a specific contractual requirement mandates heightened authentication.

How long must we keep signed attestations

Retain per applicable rules: at least three years for many employment records and six years for HIPAA-related records (45 CFR §164.530(j)); consult counsel for industry-specific timing.

Electronic Signature
Templates
HR
Employee Vaccination Attestation Template

Employee Vaccination Attestation Template

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

EMPLOYEE VACCINATION ATTESTATION

Employee Name: Employee ID:

Personal Information

Address Primary Phone Email Address

Position Information

Job Title Department Reporting Manager Start Date (with employer) Work Location

Vaccination Declaration

I hereby attest to the following (select all that apply):

Fully vaccinated (completed primary series)

Partially vaccinated (received at least one dose)

Not vaccinated

Claim medical exemption Claim religious exemption

Vaccine Details (if applicable)

Dose 1

Vaccine / Manufacturer Lot Number Provider / Clinic Date of Dose 1

Dose 2 (if applicable)

Vaccine / Manufacturer Lot Number Provider / Clinic Date of Dose 2

Booster (if applicable)

Vaccine / Manufacturer Date of Booster If claiming exemption, provide a brief explanation and supporting facts

Consent and Authorization

By signing below, I authorize the employer to verify my vaccination status with health care providers, clinics, prior employers, or other custodians of vaccination records as necessary to comply with employer policy. I authorize those entities to disclose vaccination information to the employer for verification purposes.

I consent to verification of my vaccination records

I authorize the employer to retain a copy of my vaccination documentation in my personnel record

Legal Certifications and Acknowledgements

I certify that the vaccination information provided on this form is true, complete, and accurate to the best of my knowledge. I understand that providing false or misleading information may subject me to disciplinary action, up to and including termination of employment. I acknowledge that submission of this attestation does not by itself constitute medical advice or a medical determination by the employer.

I understand that the employer may adopt and enforce policies related to vaccination, testing, workplace safety, and accommodations. I acknowledge that the employer may take employment-related actions consistent with those policies and applicable law.

I certify that all information provided in this attestation is true and accurate.

Employment History

Employer 1

Company Title Dates Employed Primary Responsibilities Reason for Leaving

Employer 2

Company Title Dates Employed Primary Responsibilities Reason for Leaving

Education

Highest Degree Institution Graduation Date

Professional References

Reference 1

Reference 2

Reference 3

Legal Disclosures

At-Will Employment: Nothing in this attestation alters the at-will nature of employment unless expressly stated in a separate written agreement signed by an authorized representative of the employer.

Equal Opportunity: The employer provides equal employment opportunity to all employees and applicants regardless of protected characteristics. Decisions related to vaccination policies, accommodations, or employment status will be made in accordance with employer policy and applicable law.

Applicant Certification and Acknowledgement

I certify that I have read and understand the statements above. I authorize the release and verification of information provided in this form to the extent necessary to confirm vaccination status or to evaluate exemption requests. I understand that the employer may take actions necessary to preserve a safe workplace in accordance with its policies.

I acknowledge and agree to the certification and authorizations above.

Employee Printed Name:

Signature:

Date:

What the Employee Vaccination Attestation Template Is

An Employee Vaccination Attestation Template is a standardized form employers use to document an individual worker's vaccination status or exemption. The template records identifying information, vaccine product and lot numbers, dates of vaccination, and a signed statement from the employee confirming accuracy. Organizations use the completed attestation to support workplace safety policies, reasonable accommodations, or access controls while maintaining a verifiable record for compliance and internal audits. The template is designed to be compatible with both paper and electronic signing platforms and to integrate into HR files and secure document repositories.

Why a Formal Attestation Matters

A written attestation creates a clear, dated record of an employee's vaccination status, reduces disputes about compliance, and helps employers meet public health, payroll, and workplace safety obligations while supporting consistent enforcement across the workforce.

Who Typically Completes and Manages These Attestations

Employers, HR teams, and employees each have distinct roles when issuing and returning vaccination attestations.

Human resources staff who issue, track, and store attestations for personnel files and compliance checks.
Supervisors or occupational health teams who may request attestations for site access or operational purposes.
Employees who complete the attestation, provide accurate vaccine data, or declare a documented exemption when applicable.

Proper role separation helps preserve confidentiality, ensures valid collection of consent where required, and supports defensible recordkeeping.

Step-by-step: Completing an Employee Vaccination Attestation

Follow these steps to complete and verify an attestation while preserving record integrity and privacy.

01

Prepare: Provide the template and guidance to the employee before collection.
02

Complete: Employee fills name, vaccine details, dates, and exemption info if applicable.
03

Authenticate: Verify identity using employer-approved method such as email, badge, or ID check.
04

Sign & Store: Employee signs; employer stores the signed record in a secured HR repository.

How to set up a digital attestation workflow

Configure an electronic workflow that captures fields, authenticates signers, and preserves an audit trail.

Field	Configuration
Identity Authentication	Email link plus SMS code for moderate assurance
Required Fields	Make name, DOB, product, lot, date, and signature mandatory
Conditional Logic	Show exemption fields only when exemption selected
Storage Location	Save to encrypted HR folder with restricted access

Where signed attestations should go and who receives copies

Define routing so signed attestations reach appropriate stakeholders without oversharing protected health information.

Employee Copy: Deliver a receipt copy to the signer for their records.
HR File: Store an encrypted master record in the employee personnel file.
Occupational Health: Send a restricted copy to occupational health if policy requires medical review.
Compliance Log: Record the signing event in a centralized audit log for reporting.

Technical considerations for electronic collection and submission

Use a platform that supports secure storage, authentication, and an auditable signing process.

File formats: PDF, DOCX supported
Integrations: Connects with HRIS and cloud storage
Authentication: Email, SMS, or stronger methods

Ensure the chosen platform can produce a tamper-evident signed PDF and retain an audit trail showing signer identity, timestamps, and IP addresses.

Typical timelines and review periods

Identify the timing expectations for completing and updating attestations so compliance tasks remain timely and auditable.

Initial Submission:

Provide attestation on hire or when policy is implemented

Follow-up Doses:

Submit additional dose attestation within 14 days of administration

Annual Review:

Conduct annual status verification or policy reaffirmation

Policy Changes:

Employees must re-attest within 30 days of policy change

Exemption Updates:

Update attestation immediately upon change in exemption status

Common mistakes to avoid when preparing attestations

Collecting excessive medical information beyond vaccination status and valid exemption details, increasing privacy risks and HIPAA exposure.
Allowing unsigned or unsigned-dated attestations into personnel files without verification, creating gaps in auditability and legal defensibility.
Storing signed attestations in shared drives without encryption and access controls, which can cause inadvertent disclosure of protected health information.
Failing to require identity verification for electronic signatures, which can result in questions about attribution and intent.

Risks and potential consequences of improper attestations

Privacy Violation: HIPAA penalties and BAA exposure

Employment Claims: Discrimination or ADA accommodation disputes

Record Invalidity: Unsigned forms may be legally unreliable

Regulatory Fines: OSHA or state agency enforcement risk

Data Breach Costs: Notification and remediation expenses

Operational Disruption: Loss of site access for noncompliant staff

Essential security and compliance controls to include

Encryption: AES-256 at rest

Transport Security: TLS 1.2/1.3 in transit

BAA Required: Business associate agreement for PHI

Access Controls: Role-based access to HR folders

Audit Trail: Timestamped signer events recorded

Retention Policy: Defined retention and disposal rules

Key elements a professional attestation should include

A complete template balances clarity, verification, and minimal medical detail while enabling secure storage and retrieval.

Employee Declaration

A concise statement the employee signs confirming the truthfulness of the information and that submission is made under penalty of perjury where applicable.

Identity Fields

Full legal name, date of birth, and employee ID to ensure the attestation can be matched accurately to HR and payroll systems.

Vaccine Details

Brand, lot number, dose sequence, and vaccination dates to support public health traceability and internal verification.

Exemption Section

Structured fields for medical or religious exemption claims, including documentation requirements and reviewer notes for adjudication.

Verification Notes

Placeholder for employer verification steps, verifier name, date, and method used to confirm documentation authenticity.

Retention Notice

Clear notice about how long records are retained and who to contact for corrections or questions about data handling.

Practical examples of how organizations use attestations

These scenarios show common, nonproprietary ways employers collect and act on vaccination attestations.

Municipal Transit Agency

Introduced a standardized attestation during a public health directive to confirm frontline staff vaccination status.

Used conditional fields to collect exemption documentation.
Results included a centralized, auditable roster that supported scheduling and reduced ad hoc document requests across departments.

Regional School District

Required attestations for staff returning to buildings after a policy update to health protocols.

Used secure electronic collection with identity verification.
The district reduced physical file handling and expedited verification while preserving confidentiality for sensitive staff health information.

Comparing eSignature options for attestation collection

Vendor pricing and capabilities vary; signNow appears below first per page conventions and pricing reflects common starting tiers.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium)	Yes	Yes	Yes	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
Envelope Cap	No cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Frequently asked questions about attestations and e-signatures

Answers below address legal validity, privacy, digital signing, and practical issues employers commonly encounter.

Need help? Contact support

Is an electronic attestation legally enforceable
Yes in most circumstances. Electronic signatures meet the ESIGN Act (15 U.S.C. ch. 96) and UETA requirements when intent, consent, attribution, and retention are present; exceptions include certain court filings and testamentary instruments.
Do I need a BAA for vaccine data
If the attestation contains protected health information and a vendor stores or transmits that data, a Business Associate Agreement is required under HIPAA before using the vendor for PHI handling.
Can employees use scanned vaccination cards
Yes, scanned cards are acceptable if authentic and legible; implement a verification step, note the verifier, and retain the image in the secured personnel record.
What if an employee challenges an attestation
Maintain change and correction procedures, preserve original records, and follow internal review steps. A documented dispute resolution process reduces escalation risk and supports compliance with employment law.
Are notarization or witnesses required
Generally no for workplace attestations. Notarization or witnesses are rarely necessary unless state law or a specific contractual requirement mandates heightened authentication.
How long must we keep signed attestations
Retain per applicable rules: at least three years for many employment records and six years for HIPAA-related records (45 CFR §164.530(j)); consult counsel for industry-specific timing.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now