Save a complete copy of your SF-86 while the questionnaire system still gives you an authorized download or print option. Post-submission access is not guaranteed. The copy can support later updates and interview preparation, but it contains sensitive personal data and needs restricted, encrypted storage.

When should I save my SF-86?

Save it after completing your review and before final release whenever the system offers an authorized copy function. Include every continuation page or comment. Then confirm that the file opens and contains the complete record. Your login may close after submission.

The system and sponsoring agency control access. DCSA says e-QIP has been replaced by eApp and NBIS Agency. For federal, military, and DoD employees and non-DoD federal contractors, DCSA names the sponsoring or employing agency’s human-resources or personnel-security office as the first contact for access and completion help; for DoD contractor employees it names the DCSA Applicant Knowledge Center for account lockouts, resets, and technical support. Its 2023 Subject eApp Guide specifically tells applicants to save a copy once the form is fully completed.

If the system does not offer a copy, ask your security contact how to obtain an authorized record. Use only a workaround that contact approves.

What should the saved record include?

Retain the completed questionnaire as released, plus any certification, signature, release, or submission confirmation the system makes available. Keep those items together but label them separately. A questionnaire copy shows your answers; a receipt shows that an action occurred.

Use a simple inventory so you know what you have:

Name the files so you can distinguish the submitted copy from later working notes. Keep the original PDF unedited. If you annotate a duplicate, put “working copy” in its filename and keep the unmodified record. This prevents a later note from being mistaken for an answer you actually submitted.

Record the submission month, sponsoring organization, and questionnaire type in the inventory. Those details can help the sponsor identify the correct historical record later.

Where should I store my SF-86 copy?

Use encrypted storage with strong authentication, access limited to you, and a recovery method you have tested. The correct setup depends on your device, employer policy, storage location, and risks. Keep the form out of ordinary email, an unprotected downloads folder, and broadly shared drives.

NIST SP 800-111 (2007) explains that storage encryption uses encryption and authentication to restrict access to stored information. It also says the appropriate solution depends on the storage type, amount of data, environment, and threats. That is a framework, not an endorsement of a particular product.

Consider who administers the device and account. A company-managed laptop or shared household cloud may give other administrators or users access. A personal encrypted container can fail if you lose the key. Choose a solution you are permitted to use, protect recovery credentials separately, and verify that backups remain encrypted.

Limit duplicates. Search your downloads, print queue, scanner folder, and email attachments after you establish the protected copy, then remove unneeded copies through your normal secure-deletion process. If you printed the form, keep it in locked storage and shred superseded copies when policy permits.

Why avoid ordinary email and shared drives?

The questionnaire contains identifiers, addresses, relationships, employment history, and other information useful for identity theft or social engineering. Email forwarding, shared-folder inheritance, sync clients, and automatic backups can create copies you did not intend.

DCSA’s records-request form makes the transmission risk explicit. It permits secure email as one delivery method and tells requesters to ensure their email system is adequate for sensitive information because the request contains personally identifiable information. The same caution should shape how you transmit a returned form.

If an investigator or security office requests part of the form, verify the recipient and approved channel first. Send only what is requested. A familiar name or urgent message does not prove identity. Your sponsoring security office can tell you which channel it authorizes.

What belongs in a separate update log?

Track changes likely to matter on a later questionnaire: dates and locations of residences, employers and supervisors, unemployment periods, education, travel, foreign contacts, police or court events, financial issues, and security reporting. Record the source you would use to verify each entry.

Keep the log intentionally sparse. A move entry may need dates, city, address source, and verifier reminder, but not a copied Social Security number. A foreign-contact reminder can flag that a relationship changed without reproducing every identifier from the form. Store supporting sensitive records separately with the full questionnaire.

This log is not a substitute for required self-reporting. If a current rule requires you to report an event, use the authorized security channel when the event occurs. The log merely helps you reconstruct facts later. How missing SF-86 information affects review explains why waiting for perfect memory is a poor strategy.

How can the saved copy help with an investigator interview?

Review it to remember what you actually reported, identify changes, and gather source records rather than memorizing old wording. If something was incomplete or inaccurate, prepare the correction and supporting context instead of trying to remain consistent with an error.

Bring the copy only if instructed and transmit it only through an approved channel. You can often prepare with a narrow worksheet listing the relevant section, old answer, corrected or updated fact, date learned, and supporting document. That reduces unnecessary exposure of unrelated information.

The submitted form can also help you give references and verifiers accurate context without sharing the questionnaire itself. For more on their roles, see security-clearance verifiers and SF-86 references. Preserve their privacy just as you preserve your own.

What if I no longer have portal access?

If a federal agency sponsored your questionnaire, ask its personnel-security or human-resources office whether it can grant an Applicant Access role in the old e-QIP system so you can save the form. DCSA assigns that capability to agencies. If a company sponsored you, ask your FSO whom at the sponsoring agency to contact, or use the INV 100 request route below.

The DCSA legacy e-QIP guidance does not say a private employer can grant the role or promise that DCSA will create access directly for every applicant. Give the correct agency enough information to locate the prior request and ask what identity verification it needs.

If agency access is unavailable and DCSA holds the record, its INV 100 Privacy Act request form offers a “Standard Form Only” selection that includes SF-86 and e-QIP records. Use of the form is optional; DCSA says you may instead send a written request containing the requested information. Follow the form’s identity-verification and delivery instructions.

Retrieval may not be immediate, so do not wait for the old copy before gathering current facts. The explanation of e-QIP versus eApp can help you identify which system handled the submission, but your sponsor remains the first contact for a live request.

Should I reuse old answers in a new questionnaire?

Entries from an earlier questionnaire may already appear in eApp. DCSA’s November 2025 SF-86 guide tells applicants to delete old or irrelevant entries, including residences and jobs older than 10 years, fix earlier mistakes, and update addresses and phone numbers for relatives and people who know them well. Use your saved copy to check what you entered before, not as text to paste.

The SF-86 certification requires answers to be true, complete, correct to the best of your knowledge and belief, and made in good faith. Consistency is useful only when the underlying fact has not changed and the previous answer was accurate.

Re-read every current question, time period, definition, and instruction. Compare the old form with source documents and your change log, correct mistakes, and flag any entry you cannot verify. Before release, save the newly completed record through the authorized function and retire the prior working copy without erasing the historical submitted copy.

Frequently Asked Questions

Can I log back in after submitting my SF-86?

Do not count on post-submission access. The system and sponsor control access. Save an authorized copy before release when offered, and ask the sponsoring office about retrieval if access has closed.

May I keep my SF-86 in a cloud drive?

Only after evaluating access control, encryption, account recovery, device sync, sharing, and any applicable employer policy. A default shared folder is a poor location for this record.

Can I request only the questionnaire instead of my full investigation?

DCSA’s INV 100 form includes a “Standard Form Only” option, with examples that include SF-86 and e-QIP. The form is optional; you may submit a written request containing the required information instead.

Should I email the form to myself as a backup?

Ordinary email can create uncontrolled copies and may not protect sensitive personal data adequately. Use approved encrypted storage and a protected backup instead. If transmission is necessary, verify the authorized secure channel.

What should I do immediately before submitting?

Review every current answer, use the portal’s authorized copy function if available, open the saved file to confirm completeness, and move it into your chosen encrypted storage before ending the session.