Vaccine mandates aren’t enough. Big Tech wants employees to prove it.

As the delta variant spreads, large tech companies are requiring proof of vaccination, rather than taking employees' word for it.

Two hands passing off a COVID-19 vaccination record card.

Google, Facebook, Microsoft, Lyft, Uber and Twitter all now require employees to submit proof that they're vaccinated before coming to the office.

Photo by Grant Hindsley/AFP via Getty Images

As vaccine mandates gain popularity, more tech companies are now requiring their employees to provide proof of vaccination, rather than simply taking them at their word.

Google, Facebook, Microsoft, Lyft, Uber and Twitter all now require employees to submit proof that they're vaccinated before coming to the office.

That's a departure from a month ago, when out of the four companies that had told Protocol they were requiring vaccines (Adobe, VMware, Twilio and Asana), only one — Asana — was requiring proof.

There are two likely reasons for the change, according to Sheeva Ghassemi-Vanni, a partner in the employment practices and litigation groups at the Silicon Valley law firm Fenwick and West.

"The federal government came down with some [vaccine] mandates for its workers, as well as certain states," Ghassemi-Vanni said. "I think that coupled with the delta and delta-plus and lambda and whatever else may be out there on our horizon on variants … I think that created a perfect storm to empower employers to feel that they could not only require a vaccine, but get proof of that."

Beyond tech and government workers, vaccine mandates are taking hold throughout U.S. society.

CNN fired three employees who went to the office without being vaccinated, the news network said Thursday, and vaccines are now required of California health care workers and anyone entering a restaurant, gym or theater in New York City. There's been some talk of a similar mandate in San Francisco.

Who's not requiring proof?

Requiring proof is now the dominant approach to implementing vaccine mandates among large tech companies, and that has ripple effects in the rest of the industry.

"The big tech companies coming out and taking a stand — that certainly has influenced startup clients who often look to Big Tech for direction and want to follow suit," Ghassemi-Vanni said. "If you're going to require the vaccine, why not erase the doubt and get proof of the vaccine?"

Still, not every company implementing a vaccine mandate is requiring proof of vaccination.

Pure Storage is one company that still says it will allow employees to "self-certify" their vaccination status if they choose to work from the office. (Like many others, Pure is letting its employees work remotely through at least the end of the year, but will eventually require them to come to the office part-time.)

"We trust our employees for lots of different things, including truthfulness on their job application, that they're not stealing from the company, that their expense reports are accurate," Pure CEO Charlie Giancarlo told Protocol last month. "If they lie on any of those things, of course, that is a big concern and could lead to disciplinary action, and the same is true on this."

The hardware and software maker has its employees check a box that says "I am fully vaccinated" on Workday. The vaccination status screen doesn't ask for proof, but warns employees that Pure "may be able to request documentation or verification of my vaccination status."

Twilio, Adobe and VMware — the three companies that told Protocol last month they weren't requiring proof of vaccination — have not indicated any change to that policy.

How to require proof

Collecting a photo or scanned copy of the paper vaccine card that a worker received when they were vaccinated is the most popular and definitive form of proof. Companies do face the risk that a worker will forge a fake vaccine card, but that "will hopefully be the minority," Ghassemi-Vanni said.

In addition to vaccine cards, Twitter — which closed its offices last month and has not yet set a date for when they will reopen — said it would accept documentation of vaccination from a health care provider, or the digital vaccine records issued by state governments in California and New York.

"Most companies are either having employees submit their proof of vaccination to a designated vaccine email address," Ghassemi-Vanni said, or requesting the proof through a human resources management system.

Lyft is collecting its employees' proof of vaccination over Workday while the cloud collaboration software maker Airtable is using a Dropbox form.

Tying vaccination records to employees' badge access to the office building is a common way of enforcing vaccine mandates. Lyft and Pure are among the companies implementing this process.

Some companies may opt to have a gatekeeper at the office — an HR or security person, for example — who cross-references employee records to see who is listed as vaccinated and can therefore enter the office.

Uber is adding proof of vaccination to its existing list of safety requirements to get a daily "boarding pass" to enter its offices using ServiceNow software. As part of a daily check-in to access the office, Uber employees must agree to several safety-related statements.

"To me, the easiest would seem to be through the badge, although theoretically you could badge someone in, so there's always that risk," Ghassemi-Vanni said. "But I think most employers are trying to put in as many safeguards as they can while also trying to put a level of trust and autonomy into their employees."

Privacy concerns

Companies can opt to simply inspect the proof of vaccination rather than store a copy of it, but it's more common to store a copy, Ghassemi-Vanni said.

Storing a copy has obvious benefits, but carries privacy concerns.

Crucially, if companies store a copy of the proof, companies should limit internal access to the records and ensure that they're stored separately from personnel files.

"At the end of the day, this is medical information and it has to be treated and stored as such," Ghassemi-Vanni said. "It's relatively easy to manage and store, but I think what's really important is if you are going to require proof, to convey in that policy or communication to employees that this information will be treated confidentiality and will be stored appropriately."


Should your salary depend on meeting DEI goals?

Diversio just raised $6.5 million to use AI to fix DEI.

Laura McGee has spent her entire career thinking about diversity and business. At one point, she helped lead the Trump-Trudeau Council for Advancement of Women, working with the prime minister and president to build a plan to grow the North American economy through diversity. During that time, she kept hearing from CEOs that they cared about diversity and wanted to improve, but that they had “no data and no metrics.”

That was when she decided to build Diversio: a platform that makes data collection, as well as acting on it, “super simple.”

Keep Reading Show less
Michelle Ma

Michelle Ma (@himichellema) is a reporter at Protocol, where she writes about management, leadership and workplace issues in tech. Previously, she was a news editor of live journalism and special coverage for The Wall Street Journal. Prior to that, she worked as a staff writer at Wirecutter. She can be reached at

Sponsored Content

A CCO’s viewpoint on top enterprise priorities in 2022

The 2022 non-predictions guide to what your enterprise is working on starting this week

As Honeywell’s global chief commercial officer, I am privileged to have the vantage point of seeing the demands, challenges and dynamics that customers across the many sectors we cater to are experiencing and sharing.

This past year has brought upon all businesses and enterprises an unparalleled change and challenge. This was the case at Honeywell, for example, a company with a legacy in innovation and technology for over a century. When I joined the company just months before the pandemic hit we were already in the midst of an intense transformation under the leadership of CEO Darius Adamczyk. This transformation spanned our portfolio and business units. We were already actively working on products and solutions in advanced phases of rollouts that the world has shown a need and demand for pre-pandemic. Those included solutions in edge intelligence, remote operations, quantum computing, warehouse automation, building technologies, safety and health monitoring and of course ESG and climate tech which was based on our exceptional success over the previous decade.

Keep Reading Show less
Jeff Kimbell
Jeff Kimbell is Senior Vice President and Chief Commercial Officer at Honeywell. In this role, he has broad responsibilities to drive organic growth by enhancing global sales and marketing capabilities. Jeff has nearly three decades of leadership experience. Prior to joining Honeywell in 2019, Jeff served as a Partner in the Transformation Practice at McKinsey & Company, where he worked with companies facing operational and financial challenges and undergoing “good to great” transformations. Before that, he was an Operating Partner at Silver Lake Partners, a global leader in technology and held a similar position at Cerberus Capital LP. Jeff started his career as a Manufacturing Team Manager and Engineering Project Manager at Procter & Gamble before becoming a strategy consultant at Bain & Company and holding executive roles at Dell EMC and Transamerica Corporation. Jeff earned a B.S. in electrical engineering at Kansas State University and an M.B.A. at Dartmouth College.

Why low-code and no-code AI tools pose new risks

The low-code trend has come to AI, but skeptics worry that gifting amateurs with Easy-Bake Ovens for machine-learning models is a recipe for disaster.

The same things that make low- and no-code AI so appealing can pose problems.

Image: Boris SV/Moment/Getty Images

“No code. No joke.”

This is the promise made by enterprise AI company C3 AI in splashy web ads for its Ex Machina software. Its competitor Dataiku says its own low-code and no-code software “elevates” business experts to use AI. DataRobot calls customers using its no-code software to make AI-based apps “AI heroes.”

Keep Reading Show less
Kate Kaye

Kate Kaye is an award-winning multimedia reporter digging deep and telling print, digital and audio stories. She covers AI and data for Protocol. Her reporting on AI and tech ethics issues has been published in OneZero, Fast Company, MIT Technology Review, CityLab, Ad Age and Digiday and heard on NPR. Kate is the creator of and is the author of "Campaign '08: A Turning Point for Digital Media," a book about how the 2008 presidential campaigns used digital media and data.

Boost 2

Can Matt Mullenweg save the internet?

He's turning Automattic into a different kind of tech giant. But can he take on the trillion-dollar walled gardens and give the internet back to the people?

Matt Mullenweg, CEO of Automattic and founder of WordPress, poses for Protocol at his home in Houston, Texas.
Photo: Arturo Olmos for Protocol

In the early days of the pandemic, Matt Mullenweg didn't move to a compound in Hawaii, bug out to a bunker in New Zealand or head to Miami and start shilling for crypto. No, in the early days of the pandemic, Mullenweg bought an RV. He drove it all over the country, bouncing between Houston and San Francisco and Jackson Hole with plenty of stops in national parks. In between, he started doing some tinkering.

The tinkering is a part-time gig: Most of Mullenweg’s time is spent as CEO of Automattic, one of the web’s largest platforms. It’s best known as the company that runs, the hosted version of the blogging platform that powers about 43% of the websites on the internet. Since WordPress is open-source software, no company technically owns it, but Automattic provides tools and services and oversees most of the WordPress-powered internet. It’s also the owner of the booming ecommerce platform WooCommerce, Day One, the analytics tool and the podcast app Pocket Casts. Oh, and Tumblr. And Simplenote. And many others. That makes Mullenweg one of the most powerful CEOs in tech, and one of the most important voices in the debate over the future of the internet.

Keep Reading Show less
David Pierce

David Pierce ( @pierce) is Protocol's editorial director. Prior to joining Protocol, he was a columnist at The Wall Street Journal, a senior writer with Wired, and deputy editor at The Verge. He owns all the phones.


How 'Dan from HR' became TikTok’s favorite career coach

You can get a lot of advice about corporate America on TikTok. ‘Dan from HR’ wants to make sure you’re getting the right instruction.

'Dan from HR' has posted hundreds of videos on his TikTok account about everything from cover letters to compensation.

Image: Dan Space

Daniel Space downloaded TikTok for the same reason most of us did. He was bored.

At the beginning of the COVID-19 pandemic, Space wanted to connect with his younger cousin, who uses TikTok, so he thought he’d get on the platform and try it out (although he refused to do any of the dances). Eventually, the algorithm figured out that Space is a longtime HR professional and fed him a post with resume tips — the only issue was that the advice was “really horrible,” he said.

Keep Reading Show less
Sarah Roach

Sarah Roach is a reporter and producer at Protocol (@sarahroach_) where she contributes to Source Code, Protocol's daily newsletter. She is a recent graduate of George Washington University, where she studied journalism and mass communication and criminal justice. She previously worked for two years as editor in chief of her school's independent newspaper, The GW Hatchet.


1Password's CEO is ready for a password-free future

Fresh off a $620 million raise, 1Password CEO Jeff Shiner talks about the future of passwords.

1Password is a password manager, but it has plans to be even more.

Business is booming for 1Password. The company just announced it has raised $620 million, at a valuation of $6.8 billion, from a roster of A-list celebrities and well-known venture capitalists.

But what does a password manager need with $620 million? Jeff Shiner, 1Password’s CEO, has some plans. He’s building the team fast — 1Password has tripled in size in the last two years, up to 500 employees, and plans to double again this year — while also expanding the vision of what a password manager can do. 1Password has long been a consumer-first product, but the biggest opportunity lies in bringing the company’s knowhow, its user experience, and its security chops into the business world. 1Password already has more than 100,000 business customers, and it plans to expand fast.

Keep Reading Show less
David Pierce

David Pierce ( @pierce) is Protocol's editorial director. Prior to joining Protocol, he was a columnist at The Wall Street Journal, a senior writer with Wired, and deputy editor at The Verge. He owns all the phones.

Latest Stories