How to Conduct a Workplace Investigation: A Small Business Guide
How to conduct a workplace investigation step by step for a small business: the process, legal duties, interviews, documentation, and avoiding retaliation.
How to Conduct a Workplace Investigation
A step-by-step guide for small businesses without an HR department
A complaint lands on your desk. An employee says a coworker is harassing them, or you discover money is missing, or two team members got into something serious. Now what? At a large company, this goes to a trained HR investigator with a playbook. At a small business, it goes to you, the owner, and you have to get it right, because getting it wrong creates legal exposure, damages trust, and can cost you good people either way.
Most guides on workplace investigations are written for HR departments that already know the basics. This one is written for the small business owner or manager doing this for the first time, without a dedicated HR team.
The guide covers the full process step by step, the legal standards you need to meet, how to run the interviews, and the mistakes that create liability, all in plain language and scoped to a small team. By the end you should be able to handle a complaint competently and defensibly, even if it is your first one.
I write the FirstHR blog for founders and operators who run HR alongside everything else. A workplace investigation is one of the highest-stakes things you will do in that role, and it is very learnable if you follow a sound process.
What Is a Workplace Investigation?
A workplace investigation is a structured, impartial process an employer uses to gather facts about a complaint or incident and decide what happened and what to do about it. Whether the issue is harassment, discrimination, theft, or a policy violation, the aim is the same: a prompt, thorough, and impartial fact-finding that reaches a reasoned conclusion based on evidence rather than assumption.
The U.S. Equal Employment Opportunity Commission (EEOC) names the same three qualities in its Promising Practices for Preventing Harassment (2017), which tells employers to promise a prompt, impartial, and thorough investigation in their harassment policies.
For a small business, an investigation is your legal shield as well as your fact-finding tool. When an employer conducts a proper investigation and takes reasonable corrective action, it demonstrates that it took the complaint seriously, which is central to defending against a later claim. Skipping or botching the investigation does the opposite: it can turn a manageable internal issue into a lawsuit.
When Should You Investigate?
You should investigate whenever you receive a complaint or become aware of conduct that, if true, would violate the law or your policies. That includes formal written complaints, informal verbal ones, and situations you learn about secondhand. The trigger is knowledge, not just a formal filing: once you know or reasonably should know about a potential problem, the duty to act begins.
The EEOC's sexual harassment guidelines use the same knowledge test: an employer is responsible for sexual harassment between coworkers that it knows or should have known about, unless it can show it took immediate and appropriate corrective action (29 C.F.R. 1604.11(d)).
When in doubt, treat a concern as worth looking into, because the cost of a needless inquiry is far lower than the cost of ignoring a real one. Not every issue requires a full, formal investigation: a minor, uncontested matter may be resolved quickly once the facts are clear.
Harassment, discrimination, retaliation, threats of violence, and theft are different: they always warrant a genuine investigation, even if they feel awkward to pursue on a small team where everyone knows each other. The instinct to smooth things over informally is exactly what creates liability.
Common Types of Workplace Investigations
Workplace investigations cover a range of issues, and knowing the category helps you gauge the seriousness and legal sensitivity of a given complaint. The types below are the ones a small business is most likely to face. Some, like harassment and discrimination, carry specific legal obligations; others, like a policy violation, are more internal but still deserve a fair process.
The legally sensitive categories, harassment, discrimination, and retaliation, are the ones where a misstep is most costly, because they involve protected characteristics or protected activity under federal law. Theft, violence, and policy violations still require fairness and documentation, but the legal framework is different.
Whatever the type, the core process is the same, and a consistent approach is what keeps you defensible. Building clear expectations into your HR policies and a strong harassment prevention approach in advance makes every investigation easier, because you are measuring conduct against a written standard everyone already agreed to.
An employee misconduct investigation into theft, expense abuse, or a safety breach differs from a harassment case in one practical way. It usually turns on records rather than accounts, so pull the system logs, receipts, schedules, and access data before anyone is interviewed. While you check, paid time away from work keeps the person clear of the evidence without looking like discipline you cannot yet justify.
Three Workplace Investigation Examples
The categories above become much easier to handle once you can see how a complaint moves from the first conversation to a written outcome. The three below are composites of the situations that arrive at a small company, not real cases, and each one turns on a different kind of evidence.
| What arrives | What the investigation turns on | How it closes |
|---|---|---|
| A designer says her team lead comments on her appearance in front of clients, and names four occasions over three months | Whether the conduct occurred and whether it was unwelcome, so the account of every person who was in those meetings matters more than any document | Substantiated on two of the four occasions described. A written warning is issued, the lead moves off client meetings for a quarter, and a retaliation check is booked for four weeks out |
| A shift supervisor reports that a colleague has been clocking in a friend who is not on site | Records rather than accounts: badge data, the schedule, the point-of-sale log, and the timesheet corrections, all pulled before anyone is interviewed | Substantiated. Termination for the person clocking in the absent employee, a repayment calculation for the hours, and the clock-in rule restated to everyone |
| An employee alleges that a manager sidelined him from a project after he raised a safety concern with the owner | Sequence and comparison: what changed after the complaint, when it changed, and how the same manager treated everyone else on that project | Inconclusive on the motive but the timing was indefensible. The assignment is restored, the manager receives coaching, and the decision is documented in case a claim follows |
Notice what the third row does. An inconclusive finding, meaning the evidence cannot settle what happened, is a legitimate outcome, and it still ends in an action and a written record rather than a shrug. The mistake small employers make is treating anything short of proof as if nothing happened.
The Workplace Investigation Process: 8 Steps
The process below is the standard sequence used across well-run investigations, condensed into eight steps. Two terms recur in them: the complainant is the person who raised the concern, and the respondent is the person the complaint is about.
Following the steps in order is what makes an investigation defensible, because each step builds the factual and procedural record that protects everyone. You do not need to be a lawyer to follow them, but you do need to follow them consistently.
The order of these steps is not arbitrary. Taking interim action early prevents harm while you work; interviewing in sequence ensures the respondent can answer the actual allegations; and documenting throughout, not just at the end, builds the contemporaneous record that stands up later. If you skip ahead or reorder, you weaken the process.
Drawn as a flowchart, the sequence has two branch points rather than one straight line. The first sits at step one: investigate, or write down why the concern did not call for it. The second sits at step seven, where a finding comes back substantiated, unsubstantiated, or inconclusive. All three findings still end in a written outcome and a retaliation check.
Conducting the Interviews
The interviews are the heart of the investigation, and the order matters. You interview the complainant first to understand the allegation in full, then the respondent so they can answer the specific claims, then any witnesses who have firsthand knowledge. Interviewing out of order, such as talking to witnesses before you understand the complaint, wastes the conversation and can taint it.
A few principles apply to every interview. Ask open-ended questions and let people talk rather than leading them to an answer. Stick to firsthand knowledge and avoid rumor. Take detailed, factual notes of what each person said, written at the time rather than rebuilt from memory later.
Tell each interviewee that retaliation is prohibited and that you expect discretion, while being honest that you cannot promise absolute confidentiality. Treat the respondent fairly: they are entitled to hear the allegations and respond before any conclusion is reached.
Sample Interview Questions for the Accused
The interview with the person a complaint is about follows the same rules as the others, with one addition: they have to hear the allegation in enough detail to answer it. Read out the conduct described and the dates you have, then work through the conversation in this order.
| Stage of the conversation | What to say or ask |
|---|---|
| Opening | A concern has been raised about your conduct. No conclusion has been reached, and the purpose of this meeting is to hear your account. Nobody involved in this process may be treated differently for taking part in it. |
| The allegation, in specifics | On [date], it is alleged that you [conduct described]. Do you recall that occasion? What is your account of what happened? |
| Their version, uninterrupted | Tell me what happened, from the start. Who else was there? What was said, as close to the words as you remember? |
| The points in dispute | You disagree with that. Why would they describe it that way? Has anyone raised a similar concern with you before, formally or informally? |
| Evidence and witnesses | Is there anything in writing that supports your account? Who else should we speak to, and what would they be able to tell us? |
| Closing | Is there anything else you want on the record? Here is what happens next and when you will hear from me. Do not discuss this with the other people involved. |
Three cautions. Do not present the conclusion as already reached, because that single impression is what turns a defensible process into a claim about bias. Expect to come back a second time, since witnesses often raise something the first interview did not cover, and the person is entitled to answer it. And take the same notes here as everywhere else: a thin record of the respondent interview is the gap an attorney will find first.
Sexual Harassment Investigation Questions
A sexual harassment investigation needs a few questions the general script does not cover. The test the EEOC applies turns on whether the conduct was unwelcome and whether it was severe or pervasive enough to create a work environment that a reasonable person would consider intimidating, hostile, or abusive (U.S. Equal Employment Opportunity Commission).
To test both points, ask what was actually said or done, whether the person objected, and what changed at work afterward.
| Who you are interviewing | Questions specific to a harassment complaint |
|---|---|
| The person who complained | What exactly was said or done, in the words you remember? Did you tell the person it was unwelcome, and how did they respond? Has it changed how or where you do your job? Did you raise it with anyone before now? |
| The person the complaint is about | Do you recall the incident described, and what is your account of it? Did anyone ever ask you to stop? Has a similar concern been raised with you before? Who else was present? |
| Witnesses | What did you see or hear firsthand, and in what words? How did each person react at the time? Have you seen similar behavior toward anyone else? Did either of them talk to you about it afterward? |
Two cautions. Questions about what the complainant was wearing or about their personal life read as an attempt to discredit them, so leave them out. Asking why they waited to report can read the same way, so ask about timing only to fix the sequence of events. For the general question set that works in any complaint, the employee relations investigations guide sets out what to ask each party.
If You Do Not Have an HR Department
Most guidance assumes a trained HR investigator is available. On a small team, that person is usually you or a manager, and that works as long as you meet the one non-negotiable requirement: impartiality.
The investigator cannot be the person accused, cannot be someone who reports to either party, and cannot have a personal stake in the outcome. If you can be genuinely neutral, you can run the investigation. If you cannot, you need someone who can.
A small business should bring in outside help in a handful of specific situations rather than handle the complaint internally, and the box below lists them. Paying for a few hours of counsel is far cheaper than mishandling a serious complaint, and knowing your limits here is a strength, not a weakness.
Impartiality is easy to assert and hard to prove months later, so record the choice at the time you make it. Answering these questions in writing also forces the outside-help decision into the open on day one, rather than three interviews in, when switching investigators looks like a reaction to what you found.
The other challenge for a small business without HR is that you have no built-in system for tracking complaints, documenting steps, and storing records. That gap is where problems hide: a complaint mentioned verbally and never written down, a step taken but never recorded.
A record that lives in one place closes the gap. FirstHR gives you one place to store the complaint intake, the interview notes, and the final report together, which is exactly what you need if the investigation is ever questioned.
Documentation and the Investigation Report
In an investigation, if it was not documented, it effectively did not happen. Thorough, contemporaneous documentation is what turns your process into a defensible record, and it is one of the most common things small employers get wrong.
Document from the moment the complaint comes in: the complaint itself, the steps you took, the interviews, the evidence, your findings, and the action taken. Write it as you go, not from memory weeks later.
The investigation report is where it all comes together. A good report states the allegation, the scope of the investigation, who was interviewed and what they said in substance, the evidence reviewed, the findings and the reasoning behind them (on a more-likely-than-not basis), and the corrective action taken.
Keep the report factual and objective: no emotional language, and no conclusion without the reasoning behind it. Store it securely and separately from general personnel files, given its sensitivity. It is both the conclusion of your process and your primary protection if the matter is ever challenged.
Investigation Report Template
A blank page at the end of a difficult few weeks is how reports end up thin. Work from a fixed structure instead. Use one copy per investigation, fill it in as the matter closes, and keep it with the interview notes rather than in the personnel file.
Keep the finished report in the same file as the impartiality record above, and the paper trail is complete: who looked into it, what they did, what they found, and what changed. For a fill-in checklist to work through while the investigation is still running, the employee relations investigations guide carries one.
Confidentiality and Avoiding Retaliation
Two things trip up small employers repeatedly: over-promising confidentiality and failing to prevent retaliation.
On confidentiality, the honest position is that you will protect privacy as much as possible and share information only on a need-to-know basis. You cannot guarantee absolute secrecy, because a fair investigation requires talking to the respondent and witnesses (California Civil Rights Department). Promising total confidentiality and then breaking it is worse than being honest up front.
Retaliation is the bigger legal danger, and it deserves special attention because it is the most common charge employers face. It means an adverse action taken against someone for making a good-faith complaint or taking part in an investigation: firing, demotion, worse shifts, exclusion.
The list of qualifying actions is wider than most owners expect. The EEOC names reprimanding an employee, giving a performance evaluation lower than it should be, and transferring someone to a less desirable position among the actions that can count (U.S. Equal Employment Opportunity Commission).
Retaliation is also a separate legal claim, so an employee can lose the underlying complaint and still win a retaliation case, as the EEOC's guidance on retaliation explains.
The practical defense against both problems is the same: clear communication and documentation. State plainly that retaliation will not be tolerated, keep the circle of information small, monitor the complainant's treatment afterward, and record that you did so.
Your Legal Obligations
You do not need to be a legal expert to run a sound investigation, but you should understand the framework you are operating in. Federal anti-discrimination law, principally Title VII of the Civil Rights Act of 1964, reaches employers with 15 or more employees for each working day in each of 20 or more calendar weeks in the current or preceding calendar year (42 U.S.C. 2000e).
The duty that follows is to act on what you learn. A covered employer is expected to respond promptly to harassment and discrimination complaints and take corrective action. The Promising Practices for Preventing Harassment guidance the EEOC issued in 2017 describes what that looks like in practice: prompt, thorough, and neutral investigations run by an objective investigator (U.S. Equal Employment Opportunity Commission).
A few specific points are worth knowing. A well-conducted investigation is central to the legal defense available to employers in harassment cases under the Supreme Court's decision in Faragher v. City of Boca Raton (1998), so the process itself has real legal value.
Findings are made on a preponderance of the evidence, meaning more likely than not, not the criminal beyond-a-reasonable-doubt standard (California Civil Rights Department).
If any part of your workforce is unionized, employees have the right to request a union representative during an investigatory interview they reasonably believe could lead to discipline, known as Weingarten rights (National Labor Relations Board). Even for at-will, non-union employees, the duty to act on complaints and not retaliate still applies.
The reassuring news is that meeting these obligations does not require a legal department. It requires a consistent, documented, impartial process, which is exactly what this guide lays out. Get the process right, document it, and know when to call counsel, and you can show you acted as the law expects, even as a small business handling this for the first time.
Frequently Asked Questions
What is a workplace investigation?
A workplace investigation is the process an employer follows to find out what really happened when someone raises a complaint or a problem comes to light, whether it involves harassment, discrimination, theft, or a policy violation. It is a fair, organized look at the facts that ends in a reasoned decision about what to do next. To hold up, it has to be prompt, thorough, and impartial, and its conclusion has to rest on the evidence rather than on assumption. Done well, it protects the employees involved and the business alike.
How do you conduct a workplace investigation?
Work through a clear sequence of steps. First decide whether the complaint, if true, would break the law or your policies, and if people need protecting, take interim action such as separating the parties or adjusting duties. Then pick an impartial investigator and set the scope. Interview the person who raised the concern first, the person it is about second, and witnesses last. Collect and preserve the relevant documents, messages, and records, weigh each account against them to judge which version of events is more probable than not, and apply proportionate corrective action. Finish with a written report and a later check that nobody is being retaliated against. Keeping the whole process prompt, thorough, and impartial is what makes it defensible.
Who should conduct a workplace investigation?
The investigator must be impartial and must not be the person accused, anyone they supervise, or anyone with a stake in the outcome. In a small business without an HR team, this is often the owner or a trusted manager outside the situation. When the complaint involves a senior leader, is legally complex, or the small team cannot be impartial, bring in an outside investigator or employment attorney. Impartiality matters more than title.
How long should a workplace investigation take?
There is no fixed deadline, but an investigation should be prompt. The California Civil Rights Department notes that for a less urgent complaint, many employers contact the person who raised it within a day or two and aim to finish within a few weeks, while a complaint of physical harassment or a threat of violence can call for action the same day. A simple, single-witness matter may take days; one with many witnesses or contested facts takes longer. What matters legally is that you act reasonably soon and do not let it drag, since delay can look like you failed to take the complaint seriously.
What standard of proof is used in a workplace investigation?
Workplace investigations use the preponderance of the evidence standard, meaning you decide whether it is more likely than not (more than 50 percent) that the alleged conduct occurred. This is a lower bar than the criminal standard of beyond a reasonable doubt. The California Civil Rights Department tells investigators to apply it, noting that civil courts use the same standard in discrimination and harassment cases. You weigh the credibility of each account and the available evidence, then reach a reasoned conclusion. You are not looking for absolute certainty, only what the evidence makes more probable than not.
Can you promise confidentiality in a workplace investigation?
No, you should not promise absolute confidentiality. What you can offer is discretion: keep the matter as private as you can and share details only with the people who need them. A fair process means talking to the person accused and to witnesses, so some details will always reach them and complete secrecy is not possible. A promise of total secrecy that you later break damages trust and can create legal problems, so say plainly at the start what you can and cannot keep private.
What is retaliation and how do I avoid it?
Retaliation means punishing someone because they raised a concern in good faith or took part in an investigation, for example by firing them, demoting them, giving them worse assignments, or excluding them. It is the most common charge filed with the EEOC, and it is a legal claim in its own right, so an employee can fail on the original complaint and still win on retaliation. To avoid it, tell everyone involved that retaliation is not allowed, watch how the complainant is treated once the investigation ends, and keep a written record showing that no adverse action followed.
Do small businesses have to investigate complaints?
Yes. If your business is covered by federal anti-discrimination law, which generally means 15 or more employees, you are expected to act on complaints of harassment and discrimination rather than let them sit. The EEOC's guidelines treat an employer as responsible for sexual harassment between coworkers if it knew or should have known about the conduct, unless it can show that it responded with immediate and appropriate corrective action. A prompt investigation is how you show that you did. Below that size, state laws often still apply, and ignoring a complaint carries real risk anyway. Investigating also helps a small business resolve problems early and shows employees that their concerns are taken seriously.