Every Nepali employer is carrying a set of legal obligations they may not be fully aware of. The Labour Act 2074, the SSF regulations, and the Income Tax Act together require employers to maintain specific employee records - appointment letters, attendance logs, wage payment records, gratuity ledgers, SSF enrollment documents - and to make them available for inspection by government authorities on demand. A business that cannot produce these records when asked does not have a paperwork problem. It has a compliance problem.
For most growing businesses, employee records are scattered in ways that feel manageable until they are not. Appointment letters were issued but physical copies were not filed. Citizenship certificates were collected at joining but stored in a personal folder that left with the last HR manager. Salary history is in a payroll spreadsheet that was redesigned twice and where the historical columns are not all consistent. When a labour dispute arises, a former employee's records need to be produced, or an audit requires documentation of current employment terms, the assembly process reveals gaps that should have been closed years earlier.
This article covers what employee records management should look like - what the law requires, how to organize documents within the HR record, who should see what, and how proactive expiry tracking prevents the compliance failures that come from paperwork that was never renewed.
What Employee Records Nepal Law Requires You to Maintain
The Labour Act 2074 and the Labour Rules place specific record-keeping obligations on employers. These are not suggestions - they are legal requirements, and failure to maintain them creates both administrative penalties and substantive legal exposure if a dispute arises. The documents and records an employer must maintain fall into three categories.
The first category is employment formation documents: the appointment letter confirming terms of employment, any subsequent contract amendments or promotions, and the employee's personal information as it was at the time of joining. These documents establish what was agreed, and they are the primary reference in any dispute about employment terms.
The second category is ongoing operational records: wage and salary payment records showing what was paid each period, attendance records showing days worked and absences, leave records showing leave taken and the balance remaining, and records of any disciplinary proceedings including the nature of the issue, the process followed, and the outcome. These records must be contemporaneous - created at the time the events occur, not reconstructed afterwards.
The third category is statutory compliance records: SSF enrollment documentation confirming the employee is registered and contributions are being made, PAN card records linking the employee's payroll TDS deductions to their individual tax record, and gratuity entitlement calculations showing the accrued liability from the date of joining. Employers who cannot produce these records during an inspection face penalties and back-liability claims.
Employment records are not a filing exercise - they are the documentary foundation of the employment relationship. The employer who cannot produce an appointment letter in a dispute is in a far weaker position than the employer who can. Every document the law requires is also a document that protects the employer's position in any adversarial situation.
Document Management Within the HR Record
A complete employee HR file in Nepal should contain the following documents. Use this as a checklist for every employee currently on your payroll.
Required documents per employee under Nepal's Labour Act and statutory framework: (1) Appointment letter signed by employer and employee - specifying designation, salary, working hours, leave entitlements, and employment type. (2) Citizenship certificate copy - verified against original at joining for identity and right-to-work confirmation. (3) PAN card copy - required for payroll TDS deduction attribution. (4) SSF enrollment card or registration confirmation from the SSF portal. (5) Educational certificates relevant to the role - degrees, professional certificates, trade certifications. (6) Two or more passport photographs. (7) Bank account details for salary credit. (8) Emergency contact information. (9) Any subsequent promotion or transfer letters. (10) Disciplinary records if applicable. (11) Gratuity calculation record maintained from date of joining. (12) Resignation or termination letter at end of employment. (13) Final settlement computation and acknowledgment on departure. Documents marked with an asterisk (citizenship, PAN, passport photographs) should be verified by the HR manager against originals at joining and the verification recorded.
Organizing these documents in a digital HR system rather than physical folders changes the accessibility and security of the entire record. A physical folder requires someone to physically retrieve it for every query. A digital record is searchable in seconds - find all employees whose citizenship certificates expire this quarter, or all employees who have not submitted a PAN card number yet, as instant filtered lists rather than manual folder-by-folder reviews.
Document linkage matters as well. When a promotion happens, the new appointment letter is added to the same employee record and linked to the original - so the complete history of the employment relationship is in one place, showing how terms evolved over time. When a salary change is approved, the updated salary confirmation is added alongside the original. The record grows with the employment relationship rather than existing as a snapshot of the joining date only.
A complete HR file at the time of joining is much easier to maintain than one that must be reconstructed years later. The effort of collecting all required documents at onboarding - citizenship copy, PAN, SSF enrollment, bank details, signed appointment letter - is small compared to the effort of tracking them down during a dispute or audit after the employee has left.
Access Control for Sensitive Employee Data
Employee records contain some of the most sensitive personal data in any organization: salary figures, personal identification documents, health information, disciplinary records, and bank account details. In a physical filing system, access is controlled by who has the key to the cabinet. In a shared drive, it is controlled by who has the folder password - which often means everyone in the office. Neither is appropriate for data this sensitive.
A useful framework for HR data access control divides employee information into three sensitivity tiers. Tier 1 (available to direct supervisors and HR): name, designation, department, join date, leave balance, attendance record. Tier 2 (HR and finance/payroll only): salary, bank details, payroll history, tax documents, SSF enrollment. Tier 3 (HR leadership and relevant HR manager only): disciplinary records, performance improvement plans, personal documents (citizenship copy, PAN), medical information, resignation and termination records. Applying this framework means the IT support team member who is also on the shared HR folder cannot see every employee's salary, and the department manager who is reviewing leave requests does not have access to the personal document scans of employees they supervise.
Access control in a digital HR system is enforced at the field and document level, not just at the folder level. An attendance supervisor can see attendance records for their team but not salary data. A department manager can see their team's leave balance but not their personal documents. The payroll team sees compensation fields but not disciplinary history. These controls are configured by the HR administrator and enforced by the system - no reliance on staff discretion about which tab of the spreadsheet they should not look at.
The audit trail is the other critical access control component. Every view, edit, and download of an employee record is logged with a timestamp and the user who performed the action. If a salary figure is changed, the audit trail shows who changed it, when, and what it was before the change. This is not surveillance for its own sake - it is the record that allows an organization to investigate a data leak, correct an unauthorized change, or demonstrate to a regulator that sensitive personal data is handled with appropriate controls.
Employee data access should follow the principle of minimum necessary: each person has access to only the employee data they need to do their specific job. In practice, this requires a system that can enforce field-level restrictions - a shared drive folder cannot. The risk of uncontrolled access to employee data includes both internal misuse and the reputational damage of a data handling incident.
Proactive Document Expiry Tracking
Several documents in a Nepal employee HR file have expiry dates that must be tracked: passport for employees with foreign travel requirements, professional licenses (medical registration, engineering certificate, driver's license for company vehicle drivers), work permits for foreign nationals, and sometimes educational certificates that require periodic renewal or re-verification. A business with 50 employees where nobody is actively tracking which documents expire when will discover expiries after the fact - usually at the worst possible moment.
The classic scenario is the company driver whose license expired three months ago. Nobody noticed because the physical license copy in the filing cabinet was filed at joining and has not been checked since. The driver continues operating company vehicles on an expired license until an accident, a traffic inspection, or an insurance claim surfaces the issue. The company's liability exposure in that scenario is compounded by the failure to maintain valid documentation, which the insurer may cite as a policy breach.
A digital HR system with document expiry tracking sends alerts 30, 60, or 90 days before a document expires - to the HR manager, and optionally to the employee themselves. The HR manager sees a dashboard showing all documents expiring in the next 90 days, categorized by type and by which employee they belong to. Renewals are requested proactively, the updated document is uploaded when received, and the expiry date is updated in the system. The alternative - a manual calendar reminder system or a spreadsheet with expiry dates - degrades as staff changes, columns are not maintained, and the reminder discipline erodes.
Document expiry tracking is entirely preventable as a problem category. It requires only that the expiry dates are captured at the time documents are collected, and that the system alerts the right people before the expiry happens. The cost of proactive tracking is small. The cost of an expired license, permit, or certificate discovered after an incident is not.
Frequently Asked Questions
Nepal's Labour Act and related regulations prescribe record retention periods, which should be checked against the current Labour Rules and any sector-specific regulations applicable to your industry. The general practice is to retain employment records for a minimum period after the employment ends - this covers the limitation period for employment disputes and any tax audit window relevant to the payroll periods during which the employee worked. For practical purposes, retaining records for at least five years after departure is a conservative baseline that most legal advisors recommend. A digital HR system makes this straightforward - records are archived rather than deleted, remaining searchable but clearly marked as former employee records.
Employee self-service access to their own records is good practice and increasingly expected by employees, particularly in organizations competing for professional talent. Employees should be able to view their own personal details, their payslip history, their leave balance and leave history, and their attendance record. They should also be able to request corrections to their personal details through the system - which routes to the HR manager for review and approval rather than being applied directly. Employees should not normally have edit access to their own compensation, contract terms, or disciplinary records. The self-service view gives employees the information they need without creating a data governance problem.
This is one of the most common causes of HR record gaps in growing businesses. When the HR manager who maintained physical files or managed the shared drive folder leaves, the knowledge of where records are stored often goes with them. In a digital system, records are attached to the employee, not to the HR manager's personal files or knowledge. When the new HR manager is set up in the system, they have full access to all historical employee records from day one - no knowledge transfer required, no folder searching, no reconstruction of records that were not formally handed over. The transition from one HR manager to the next becomes an administrative access change rather than a potential data loss event.
Every Employee Record Secure, Complete, and Accessible
MISAC's employee record module stores every document, field, and history entry against a single employee profile that persists through the entire employment lifecycle. Appointment letters, citizenship scans, SSF enrollment confirmation, PAN card copy, salary history, attendance and leave history, and disciplinary records all live in one place. When a labour authority inspection requires documentation, the HR manager exports the required records in minutes with a filtered export - not hours of folder searching. The system supports multi-page document attachments with OCR scanning, making it practical to digitize even paper documents that came in at joining.
MISAC's custom field architecture means you can add any field the business needs - a specific license type, a vehicle class for drivers, a professional registration number, a contract renewal date. These fields support expiry date configuration: when the expiry date arrives within a configurable alert window, the system notifies the HR manager and optionally the employee. No manual calendar system, no spreadsheet with expiry dates that nobody updates. The alert comes from the system, triggered by the data, without relying on someone remembering to check.
Field-level access control in MISAC means each user role sees exactly the employee data it should. The attendance supervisor sees attendance. The finance team sees payroll data. Personal documents are visible only to the HR managers configured to see them. Every access and change is logged in the full audit trail. MISAC Intelligence Pvt. Ltd. built the HR records module to match the compliance requirements of the Nepal Labour Act environment, with the flexibility to add the fields and document types that your specific business needs to track.
Ready to See MISAC in Action?
If your employee records are scattered across folders, spreadsheets, and email attachments, speak with our team about centralizing them in a system that is built for Nepal's compliance requirements.