How to Conduct a Workplace Investigation: A Small Business Guide

A complaint lands on your desk. An employee says a coworker is harassing them, or you discover money is missing, or two team members got into something serious. Now what? At a large company, this goes to a trained HR investigator with a playbook. At a 15-person business, it goes to you, the owner, and you have to get it right, because getting it wrong creates legal exposure, damages trust, and can cost you good people either way.

Most guides on workplace investigations are written for HR departments that already know the basics. This one is written for the small business owner or manager doing this for the first time, without a dedicated HR team. It covers the full process step by step, the legal standards you need to meet, how to run the interviews, and the mistakes that create liability, all in plain language and scoped to a small team. The goal is that you can handle a complaint competently and defensibly, even if it is your first one.

I write the FirstHR blog for founders and operators who run HR alongside everything else. A workplace investigation is one of the highest-stakes things you will do in that role, and it is very learnable if you follow a sound process.

What Is a Workplace Investigation?

A workplace investigation is a structured, impartial process an employer uses to gather facts about a complaint or incident and decide what happened and what to do about it. Whether the issue is harassment, discrimination, theft, or a policy violation, the aim is the same: a prompt, thorough, and impartial fact-finding that reaches a reasoned conclusion based on evidence rather than assumption. Courts and regulators look for exactly those three qualities, prompt, thorough, and impartial, when judging whether an employer responded properly.

The reason investigations matter so much for a small business is that they are your legal shield as well as your fact-finding tool. When an employer conducts a proper investigation and takes reasonable corrective action, it demonstrates that it took the complaint seriously, which is central to defending against a later claim. Skipping or botching the investigation does the opposite: it can turn a manageable internal issue into a lawsuit. Doing it well is not bureaucracy, it is protection.

When Should You Investigate?

You should investigate whenever you receive a complaint or become aware of conduct that, if true, would violate the law or your policies. That includes formal written complaints, informal verbal ones, and situations you learn about secondhand. The trigger is knowledge, not just a formal filing: once you know or reasonably should know about a potential problem, the duty to act begins. When in doubt, treat it as worth looking into, because the cost of a needless inquiry is far lower than the cost of ignoring a real one.

Not every issue requires a full, formal investigation. A minor, uncontested matter may be resolved quickly once the facts are clear. But harassment, discrimination, retaliation, threats of violence, and theft always warrant a genuine investigation, even if they feel awkward to pursue on a small team where everyone knows each other. The instinct to smooth things over informally is exactly what creates liability. If the allegation is serious, investigate it properly.

Common Types of Workplace Investigations

Workplace investigations cover a range of issues, and knowing the category helps you gauge the seriousness and legal sensitivity of a given complaint. The types below are the ones a small business is most likely to face. Some, like harassment and discrimination, carry specific legal obligations; others, like a policy violation, are more internal but still deserve a fair process.

The legally sensitive categories, harassment, discrimination, and retaliation, are the ones where a misstep is most costly, because they involve protected characteristics and federal law. Theft, violence, and policy violations still require fairness and documentation, but the legal framework is different. Whatever the type, the core process is the same, and a consistent approach is what keeps you defensible. Building clear expectations into your HR policies and a strong harassment prevention approach in advance makes every investigation easier, because you are measuring conduct against a written standard everyone already agreed to.

The Workplace Investigation Process: 8 Steps

The process below is the standard sequence used across well-run investigations, condensed into eight steps. Following it in order is what makes an investigation defensible, because each step builds the factual and procedural record that protects everyone. You do not need to be a lawyer to follow it, but you do need to follow it consistently.

The order of these steps is not arbitrary. Taking interim action early prevents harm while you work; interviewing in sequence ensures the respondent can answer the actual allegations; and documenting throughout, not just at the end, builds the contemporaneous record that stands up later. If you skip ahead or reorder, you weaken the process. When the matter touches discipline or termination, the employee discipline guide covers how to apply consequences fairly and consistently.

Conducting the Interviews

The interviews are the heart of the investigation, and the order matters. You interview the complainant first to understand the allegation in full, then the respondent so they can answer the specific claims, then any witnesses who have firsthand knowledge. Interviewing out of order, such as talking to witnesses before you understand the complaint, wastes the conversation and can taint it.

A few principles apply to every interview. Ask open-ended questions and let people talk rather than leading them to an answer. Stick to firsthand knowledge and avoid rumor. Take detailed, factual notes or, better, contemporaneous written records of what each person said. Tell each interviewee that retaliation is prohibited and that you expect discretion, while being honest that you cannot promise absolute confidentiality. Treat the respondent fairly: they are entitled to hear the allegations and respond before any conclusion is reached. Handling these conversations with care is a skill that overlaps with managing any difficult employee situation, where staying factual and calm is everything.

If You Do Not Have an HR Department

Most guidance assumes a trained HR investigator is available. On a small team, that person is usually you or a manager, and that is workable as long as you meet the one non-negotiable requirement: impartiality. The investigator cannot be the person accused, cannot be someone who reports to either party, and cannot have a personal stake in the outcome. If you can be genuinely neutral, you can run the investigation. If you cannot, you need someone who can.

There are specific situations where a small business should bring in outside help rather than handle it internally. If the complaint is against you or another owner, if it involves a senior leader everyone reports to, if the facts are legally complex, or if the whole team is too close to be impartial, that is when you engage an outside investigator or an employment attorney. Paying for a few hours of counsel is far cheaper than mishandling a serious complaint. Knowing your limits here is a strength, not a weakness.

The other challenge for a small business without HR is that you have no built-in system for tracking complaints, documenting steps, and storing records. That gap is where problems hide: a complaint mentioned verbally and never written down, a step taken but never recorded. A platform like FirstHR helps by giving you a place to document each stage, store the complaint intake, interview notes, and final report against a record, and keep the whole matter organized and retrievable, which is exactly what you need if the investigation is ever questioned. The infrastructure that runs the rest of your small business HR is what turns an ad hoc investigation into a defensible one.

Documentation and the Investigation Report

In an investigation, if it was not documented, it effectively did not happen. Thorough, contemporaneous documentation is what turns your process into a defensible record, and it is the single most common thing small employers get wrong. Document from the moment the complaint comes in: the complaint itself, the steps you took, the interviews, the evidence, your findings, and the action taken. Write it as you go, not from memory weeks later.

The investigation report is where it all comes together. A good report states the allegation, the scope of the investigation, who was interviewed and what they said in substance, the evidence reviewed, the findings and the reasoning behind them (on a more-likely-than-not basis), and the corrective action taken. It should be factual and objective, not emotional or conclusory. Keep it stored securely and separately from general personnel files, given its sensitivity. This report is both the conclusion of your process and your primary protection if the matter is ever challenged.

Confidentiality and Avoiding Retaliation

Two things trip up small employers repeatedly: over-promising confidentiality and failing to prevent retaliation. On confidentiality, the honest position is that you will protect privacy as much as possible and share information only on a need-to-know basis, but you cannot guarantee absolute secrecy, because a fair investigation requires talking to the respondent and witnesses. Promising total confidentiality and then breaking it is worse than being honest up front.

Retaliation is the bigger legal danger, and it deserves special attention because it is the most common charge employers face. Retaliation means taking any adverse action, firing, demotion, worse shifts, exclusion, against someone for making a good-faith complaint or participating in an investigation. It is a separate legal claim, which means an employee can lose the underlying complaint but still win a retaliation case if you punished them for speaking up.

The practical defense against both problems is the same: clear communication and documentation. State plainly that retaliation will not be tolerated, keep the circle of information small, monitor the complainant's treatment afterward, and record that you did so. These are simple habits, but they are exactly the ones that protect a small business when a complaint later becomes a legal matter.

Your Legal Obligations

You do not need to be a legal expert to run a sound investigation, but you should understand the framework you are operating in. Federal anti-discrimination law, principally Title VII, generally applies to employers with 15 or more employees and creates a duty to investigate complaints of harassment and discrimination promptly and take corrective action. The Equal Employment Opportunity Commission has made clear that a prompt, thorough, and impartial investigation is what employers are expected to conduct (U.S. Equal Employment Opportunity Commission).

A few specific points are worth knowing. A well-conducted investigation is central to the legal defense available to employers in harassment cases, so the process itself has real legal value. Findings are made on a preponderance of the evidence, meaning more likely than not, not the criminal beyond-a-reasonable-doubt standard. And if any part of your workforce is unionized, employees have the right to request a union representative during an investigatory interview they reasonably believe could lead to discipline, known as Weingarten rights (National Labor Relations Board). Even for at-will, non-union employees, the duty to investigate and not retaliate still applies.

The reassuring news is that meeting these obligations does not require a legal department. It requires a consistent, documented, impartial process, which is exactly what this guide lays out. Get the process right, document it, know when to call counsel, and you will meet the standard the law expects, even as a small business handling this for the first time. Keeping your employee handbook clear on complaint procedures and anti-retaliation is what sets the whole thing up to work.

Frequently Asked Questions