Document Tracking Spreadsheet or Dedicated Tool? What Each Can Check

This article is for information only and is not legal advice. Regulatory references are accurate at the date of publication and describe federal rules; provincial rules vary. Seek qualified advice for any decision about an individual file.

A document tracking spreadsheet is enough while the job is to record which documents have arrived and when they expire. It stops being enough when the job becomes comparing them: does the name on the pay stub match the driver's licence, does the corporation number exist in the registry, does the bank account belong to the applicant. A spreadsheet stores what a person typed; a dedicated tool reads the fields from the documents and compares them. The choice depends less on how many files you handle than on which checks those files need.

What a spreadsheet does well, and where it stops

A spreadsheet is a good tracker and a poor checker. It records status, owner and dates cheaply, and anyone can adapt it in an afternoon. Trouble starts when the same sheet is asked to prove that a file is consistent.

The middle rows are the point. A sheet that says "ID received: yes" and "pay stub received: yes" says nothing about whether the two belong to the same person. Our guide to verification automation covers the wider pipeline; this article stays on the tracking-versus-checking line.

The cross-checks a tracker cannot run on its own

A cross-check compares one field on one document with a field on another document or a public registry, and defines in advance what a mismatch looks like and what the reviewer does next. If the sheet only holds a "received" box per document, none of these exist. If it holds typed values, the comparison depends on the typist.

Two rules keep this table honest. A mismatch is a question, not a verdict: accents, compound surnames and marriage explain most name differences, and rejecting on them alone is unfair. And the next step is written down per mismatch type so the outcome does not depend on who is on shift. A spreadsheet can hold the rules as a text column, but it cannot apply them.

Where spreadsheets break in practice

Spreadsheet trackers fail quietly, which is why they last longer than they should. The common failure modes are structural, not a sign of careless staff.

1. Dates stored as text. "03/12/2027" typed by one person and "2027-03-12" by another sort and filter differently; an expiry formula returns nothing and the row looks fine.
2. Copies in circulation. Two people download the sheet on Monday; by Friday there are two versions of the truth.
3. Sensitive data in an uncontrolled place. Licence numbers, SINs and banking details in a shared sheet are visible to everyone with the link, and rows for rejected applicants stay indefinitely.
4. Overwritten history. When a status flips from "mismatch" to "OK," the sheet rarely records who decided and why.
5. Rules that live in someone's head. The knowledge that a joint account is acceptable for a tenant but not for payroll is nowhere in the file.

For private-sector organizations, PIPEDA's fair information principles include limiting retention: personal information should be kept only as long as needed for the purpose. A sheet with no purge logic is where files outlive their purpose. Several provinces have their own private-sector statutes, and Quebec's Law 25 adds further duties for files about Quebec residents.

Canada: what each official check proves

An official check proves a status on the day it was run, not that your copy of the document is genuine. Your tracker should record the result, the date and the person.

For corporate applicants and suppliers, compare the corporation number and legal name on their paperwork with the record held by Corporations Canada for federal corporations, or by the relevant provincial registry for provincial ones. Registries show what is registered, such as status and name, not who is behind the upload. For Quebec entities the registry is the Registraire des entreprises; see the French-Canadian version of this article for details.

For reporting entities under the PCMLTFA, FINTRAC's guidance on verifying identity sets out the accepted methods and the records to keep for each, and FINTRAC's sector guidance sets minimum retention periods, which for many record types is at least five years. Confirm the period for your sector in the current guidance before configuring deletion. FINTRAC can ask for records to be produced within 30 days, so a tracker that cannot retrieve a file by client quickly is a compliance risk.

For employment, the Service Canada rules on the Social Insurance Number and the employer's duty to protect it sit alongside privacy law; keep SINs out of general-access sheets.

What people ask about spreadsheet trackers

Recurring questions in compliance, HR and operations communities are practical.

"Can I just use Excel or Google Sheets for document control?" Yes, for a small, stable process: one document type, a handful of files a week, one owner. Add data validation on dates, restrict the sheet to named users and add a purge-date column. Stop when a second person edits it or when you need field comparisons.

"How do I keep the sheet from going stale?" Make the document the source of truth, not the sheet: a typed expiry date will drift. Tools that extract the date remove the retyping, where most drift starts.

"Is there a free document tracking template I can download?" Many exist, and most give you columns for name, status and date. None provides the comparison rules in the table above. Treat a template as a status list and write your own mismatch rules beside it.

When to move: five triggers

Move when any one of these is true, not when volume hits an arbitrary number.

1. More than one person edits the tracker in a day.
2. Reviewers retype data from documents into cells.
3. A regulator or auditor asks who approved a mismatch and when.
4. Files include a time-limited document that must be re-checked (work permit, insurance certificate, licence).
5. Chasing missing or inconsistent documents takes more time than reviewing them.

Migration need not be abrupt. Keep the sheet for reporting, move capture and comparison to the tool, and export the mismatch log back for management. A related case is tracking expiry of supplier documents, where the re-check is the whole purpose.

Choosing a tool: questions for a vendor

1. Does it read fields from each document, or only store the images?
2. Can I write my own comparison rules and choose which block and which flag?
3. Does it show the reviewer both values side by side, with the source document?
4. Does it log who resolved each mismatch and what they decided?
5. Where is data stored, for how long, and can I set retention per file type? Ask specifically about Canadian data residency if your policy requires it.
6. Does it state plainly what it does not check? Be wary of any tool implying that a field match proves authenticity.

Where CheckFile fits

CheckFile is a validation layer that compares the documents in a file: whether it is complete, whether dates are current, and whether names, addresses, income figures and bank details agree across documents. Mismatches go to a reviewer with the fields highlighted, and the decision stays with your team. It does not replace the identity-verification methods FINTRAC prescribes, and a match is not proof that a document is genuine. For onboarding files see the HR onboarding solution, or review pricing. For more depth, read the article on cross-document consistency checks.

Frequently Asked Questions

Is a spreadsheet enough to track documents?

It is enough to track status and expiry dates for a small, stable process with one owner. It is not enough once you need to compare fields across documents or evidence who approved a mismatch.

What is the difference between document tracking and document validation?

Tracking records that a document is present and when it expires. Validation reads the document and compares its fields with other documents or a registry, then routes mismatches to a reviewer.

Can a spreadsheet meet PIPEDA expectations?

It can, with access controls, a retention date per row and deletion when the purpose ends. Those controls are manual in a sheet, which is why they are often missed.

Does a dedicated tool prove my documents are genuine?

No. A tool shows whether fields agree and dates are in range. Whether the original is authentic is a separate question that field matching does not answer.

How much does a dedicated tool cost compared with a spreadsheet?

A spreadsheet looks free but costs reviewer hours in retyping and chasing. Compare a tool's per-file price with those hours, and get the pricing basis in writing.