Planning and scoping templates
Workplace Investigation Checklist: Phases, Clock and Disruptions
Last updated 2026-07-30
Most published investigation checklists are a list of eight verbs. Receive. Assess. Plan. Interview. Decide. Report. Close. They are accurate and they are useless, because the things that sink investigations do not live in the verbs — they live in the dates between them, and in the events nobody planned for.
This page is a phase tracker with dated check-items, and it carries two things the eight-step articles do not. The first is the clock: what starts it, what an acceptable gap looks like, and how to record a legitimate delay so it reads as a decision rather than as neglect. The second is the disruption set — the respondent resigns, the complainant goes on medical leave, the complainant asks to withdraw, police open a file on the same conduct, a witness raises a retaliation complaint while the report is in draft. Each has a wrong answer that organizations reach for under pressure.
On authority: the EEOC's 2024 Enforcement Guidance on Harassment in the Workplace was rescinded on 22 January 2026 and no replacement has issued. Do not cite it. The 1999 vicarious-liability guidance and the 2016 retaliation guidance remain operative, and the statutory framework is untouched — an employer relying on the Faragher/Ellerth affirmative defense still has to show it exercised reasonable care to prevent and correct harassing behavior promptly. The instruction to document a complaint from intake through resolution comes specifically from the EEOC's 2017 Promising Practices for Preventing Harassment, which is technical assistance and states on its face that it does not have the force and effect of law. None of these prescribes a number of days.
Phases 3 through 7 are deliberately thin here, because the reasoning behind those choices belongs in the investigation plan and the evidence log rather than in a tracker. The checklist records that a step happened and when; the plan records why.
Jurisdiction
Written primarily against US federal standards — EEOC guidance, NLRB decisions and Title VII case law — and against general investigative practice. State law, sector rules (public employers, education, regulated industries) and collective agreements impose additional requirements this page does not cover. Where a page borrows a concept from another jurisdiction it says so explicitly. Outside the US, treat the structure as transferable and the legal references as not.
Workplace Investigation Checklist: Phases, Clock and Disruptions template
Free Word download, no email required. Or open it in Professional Drafter — it lands in your template library, ready to draft against.
When to use this document
- Running an investigation end to end and needing a single tracker for what has been done, when, and by whom.
- Auditing a live matter someone else started, where the first question is what has been missed.
- Standardizing process across an HR or ER team so two investigators produce comparable files.
- A matter likely to be reviewed later by an agency, an arbitrator or opposing counsel, where the file has to show the sequence as well as the conclusion.
- Something has gone wrong mid-matter — a resignation, a leave, a withdrawal, a parallel police file — and the decision needs to be made once and recorded.
Worked example
Fictional scenario, continuing the dispatch-team matter RW-2026-038 at a logistics company. Complainant Nadia Okafor, Dispatch Coordinator; respondent Sean Whelan, Team Lead; investigator R. Hall, HR Business Partner (internal). Complaint letter dated 29 May 2026, received 30 May; acknowledged 1 June; interim measures decided 3 June, effective 4 June; report issued 14 July. Allegations 1 and 2 substantiated, Allegation 3 inconclusive. What follows is not the investigation — that is written up elsewhere in this library. It is the checklist run over the closed file, and the three lines that failed.
Phase 1 — Intake, triage and the start of the clock
The intake record of 30 May 2026 has one date on it: complaint received, 30 May. There is no line for first notice, and nobody asked.
On 9 June, in her first interview, Ms Okafor mentioned that she had raised the comments with the Shift Supervisor in March 2026 — in passing, not as a formal report. R. Hall interviewed the Shift Supervisor on 23 June, who recalled the conversation, described it as Ms Okafor venting, and had neither escalated nor recorded it. The report finds that a report was made to a member of management in March 2026 and was not escalated.
That finding moves the clock. The file's headline figure — 45 days from written complaint to report, 32 working days from acknowledgment — is accurate and is measuring the wrong interval. From first notice the elapsed period is roughly four months, and about ten weeks of it belong to a manager who did nothing, in a period when the conduct was continuing.
The checklist cannot undo that. What it does is separate the two intervals so the file argues its own case: the organization's response time is poor and the investigation's is good, and those are different criticisms with different answers. A single 'date received' field merges them, and the merged version is the worse one.
Phase 2 — Preservation, interim measures and immediate risk
The interim measures memo of 3 June is a good memo. It identifies a specific risk — Mr Whelan controlled shift allocation for the dispatch team including two witnesses — rejects moving the complainant with reasons recorded, states that it is precautionary, and sets a review date of 30 June. It transfers dispatch shift allocation to the Shift Supervisor with effect from 4 June.
Six days later, on 9 June, the Shift Supervisor became a person in the facts: the manager who received the March report and did not escalate it. Nobody re-ran the interim-measures check. The rota stayed where it was.
The 30 June review took place and answered the question the memo had set: is the risk of Mr Whelan influencing the evidence still live? It was, and the measure continued. The review did not ask whether anything had changed for the complainant or the witnesses. The July rota was published that same day. Ms Anand — Witness A, the corroborating witness, who had signed her statement on 24 June — moved from weekday earlies to a rotating pattern including two weekend nights, the only coordinator whose pattern changed. On 1 July she came off the trainee-mentoring rota.
Two checklist lines would have caught this and neither existed on the form used. The first is a conflict check on the recipient of a transferred function, re-run whenever the facts move. The second is a review scope that covers the participants' conditions and not only the respondent's restriction. A review that asks one of the two questions produces a completed review item and an uncontrolled risk.
Disruption protocols — the complaint that arrived on 3 July
On 3 July Ms Anand raised a retaliation complaint about the rota change and the mentoring rota. The RW-2026-038 report was eleven days from issue.
The decision was taken on 6 July by the Director of HR and recorded the same day. Nothing in RW-2026-038 was held. The retaliation complaint was opened as a separate matter, RW-2026-039, with a different investigator — R. Hall was excluded because the knowledge question in the new matter turns on what was put to Mr Whelan in the interview of 19 June, and R. Hall conducted it. An investigator cannot take evidence about their own conduct of an interview.
One question did land back in RW-2026-038: was Ms Anand's evidence now contaminated by her own grievance? It was not, and the file could show why without argument. Her statement was prepared from her interview of 12 June, sent to her on 20 June, corrected in two places and signed on 24 June — six days before the rota was published. The account was fixed in writing before the detriment she complains of existed. That is a two-line answer available only because the statement carries its own preparation history on its face.
Both parties were told on 6 July that a separate matter had been opened and that it did not alter the scope of theirs. The report issued on 14 July, on the target date.
The clock — the gap table for this matter
Investigation phase, 30 May to 14 July. Recorded activity on 1, 2, 3, 4, 9, 12, 15, 16, 18, 19, 20, 23, 24, 26 and 30 June, and on 3, 6, 9 and 14 July. No interval between activities exceeds five working days. There is not a single gap in this file that requires a documented reason.
Pre-complaint period, March to 30 May. One row. Cause: a report to management was not escalated or recorded. Decision-maker: none — that is the finding. Work that continued: none. Complainant informed: not applicable.
The uncomfortable conclusion is the useful one. This is a fast, clean investigation with a full activity record and it is still exposed on promptness, because the exposure was created ten weeks before an investigator was appointed and nothing done after 30 May could reduce it. An employer relying on the Faragher/Ellerth defense has to show it corrected promptly, and prompt correction is measured from when the employer knew.
What the file does have is the check itself: the question asked on 9 June, the Shift Supervisor interviewed on 23 June, the non-escalation found in the report and handed back under Matters Outside Scope. A recorded ten-week gap with a named cause is a manageable problem. The same ten weeks discovered by opposing counsel is not.
Phase 11 — Closure, follow-up and retention
14 July: report issued. 17 July: outcome letters to both parties, with a ten-working-day review window.
17 July: interim measures converted rather than lapsed. Shift allocation moved to the Operations Manager — not returned to Mr Whelan, and deliberately not left with the Shift Supervisor, whose own handling was now on the record. The reason was written into the decision.
17 July: the March non-escalation, recorded in the report under Matters Outside Scope, was assigned to the Head of Employee Relations with a review date. A systemic finding with no owner is a paragraph.
Follow-up checks with Ms Okafor calendared for 13 August and 12 October, contact routed through the Director of HR rather than through her line management — arranging a retaliation check through the people it might concern discloses the matter to exactly the wrong audience.
Retention: base period applied under 29 CFR 1602.14, from the later of the making of each record and the personnel action involved. The preservation hold stays live: RW-2026-039 is open and a charge remains possible on either matter, so both files are held together and to the same date, and the release will be a recorded decision by a named person rather than an IT cleanup of a stale hold list.
Section-by-section guide
What each section is for, what a good one contains, and where they typically go wrong.
1.Phase 1 — Intake, triage and the start of the clock
Record two dates, not one: the date the written complaint arrived, and the date the organization first had notice of the conduct. They are frequently months apart, and only the second one is the clock. Ask the question at intake and write the answer down even when it is the same day — an unasked question and a same-day answer look identical in a file. Triage is a documented decision with three outcomes, formal investigation, informal resolution, or no action, and each needs a recorded reason, because a matter closed at triage without a written rationale is indistinguishable later from a matter nobody looked at.
2.Phase 2 — Preservation, interim measures and immediate risk
This phase runs in parallel with planning, never after it. Short-retention evidence is the only category that expires on a schedule you do not control: CCTV is frequently overwritten in 14 to 30 days, door access logs and call detail records in 30 to 90, messaging platforms according to whatever the admin set. A hold issued in week three arrives after the thing you needed. The checklist item that makes the difference is a request date against each item rather than an intention to request it — an intention with no date attached is not a control. On interim measures, track one thing the memo itself tends not to: whoever receives a transferred function inherits authority over the parties and the witnesses, and that recipient needs the same conflict check the investigator gets.
3.Phase 3 — Investigator selection and separation of roles
Decide who investigates and who decides, and keep them different people. An investigator who also imposes discipline has merged the fact-finder and the decision-maker, which is the structural defect most likely to be argued at a hearing. Record the conflicts check as a completed step with a stated conclusion, not as an absence of concern.
4.Phase 4 — Plan and scope control
The plan is the artifact; this checklist records only that it exists and when it was revised. What the tracker adds is a dated amendment row. Scope legitimately changes when a new allegation surfaces in an interview; scope drift is the same change with no record of who approved it.
5.Phase 5 — Notice to the parties
The respondent needs enough detail to answer the case, and the timing of that is a judgment call rather than a rule. Too early risks evidence being altered; too late means the respondent's first sight of the allegations is at the interview, which produces a weak answer and a strong procedural complaint. The workable default is the substance in the interview invitation and the particulars in the interview itself. Whatever you choose, record the choice and the reason.
6.Phase 6 — Interview coverage
The checklist tracks coverage, not content: every person on the witness list is either interviewed with a date or carries a recorded reason why not. A witness who declined, left the business or was unreachable is a documented gap; a witness who was never contacted is an omission, and the file cannot tell them apart unless someone writes it down. Keep the list open — it starts with the names in the complaint and should end with names the complaint never mentioned.
7.Phase 7 — Documentary and electronic evidence
Every item that reaches the report needs a source, a date and a custodian. A fact with no source reference is an assertion. The negative log carries the rest of the weight: what was requested, from whom, on what date, and what came back. Unavailable CCTV requested on day 12 and confirmed dead on day 14 is a different fact from CCTV nobody asked about, and only the log distinguishes them. Full guidance on custody and provenance sits in the evidence log.
8.Phase 8 — Analysis, credibility and findings coverage
Work allegation by allegation using the numbering from Phase 1, and state the standard: the preponderance of the evidence, more likely than not. Where accounts conflict on a material point, the conflict is either resolved with stated reasoning or expressly left unresolved as immaterial. Silence is the third option and it is the one that gets attacked.
9.Phase 9 — Report and quality-control review
Build in one review pass by someone who was not in the interviews, reading for a single question: can a stranger follow each finding back to the evidence it rests on? The reviewer is not re-weighing evidence — that is the investigator's job — but reliably catches the executive summary that asserts more than the body supports, and the allegation that appears on page two and never again.
10.Phase 10 — Outcome communication and remedial action
Both parties are told the outcome; they are not told the same amount. The complainant learns whether the allegations were substantiated and that action is being taken, not the specific sanction. The respondent gets the findings in enough detail to understand and, where policy allows, appeal. The recurring failure is telling the complainant nothing, which reliably converts a closed matter into a retaliation claim — post-complaint treatment is squarely within the EEOC's 2016 retaliation guidance, and under Burlington Northern the adverse-action test is whether the treatment might dissuade a reasonable worker from complaining, which is a wider net than discipline.
11.Phase 11 — Closure, follow-up and retention
Two things routinely fall off the end. The first is the follow-up check: a short scheduled contact with the complainant at 30 and 90 days asking whether the conduct has stopped and whether anything has changed at work since. It is the cheapest retaliation control that exists and it produces a dated record that the employer checked. The second is retention. Under 29 CFR 1602.14 — the Title VII and ADA recordkeeping rule, not a general retention schedule — personnel and employment records are kept for one year from the making of the record or from the personnel action involved, whichever is later, extended to one year from the date of termination for an involuntarily terminated employee. Once a charge is filed, all records relevant to it must be preserved until final disposition of the charge or any lawsuit, including appeals. State law, contract and any litigation hold routinely extend that further.
12.The clock: promptness, acceptable gaps and documenting delay
There is no statutory number of days for a private-sector workplace investigation, and any source quoting one is quoting its own house standard. What is actually assessed is not elapsed time but whether the elapsed time is accounted for. A six-week investigation with a documented twelve-day wait for a witness on pre-booked leave is defensible. A three-week investigation with an unexplained eleven-day silence in the middle is harder to defend, because the reviewer has to guess what happened and will guess unfavorably. The clock starts at first notice to the organization, not at the written complaint. That is the rule with the most consequence attached, because it moves the start date backwards into a period the investigator had no control over and often did not know about. A gap of more than five working days with no recorded activity should carry a one-line reason written at the time, not reconstructed later. A documented delay has four elements: the external constraint, the person who decided to wait, what work continued during the pause, and the revised target date. Add a fifth for the complainant — the date they were told, because the complaint that follows a slow investigation is almost always about the silence rather than the speed. Witness on pre-booked leave, a peak-season period where releasing operational staff is not feasible, counsel's advice to hold off interviewing one specific person, a respondent signed off sick: each is defensible when the file shows all five. None is defensible as a bare gap.
13.Disruption protocols: when the investigation is interrupted
The respondent resigns. Do not close the file. Finish wherever the allegations are serious, wherever the complainant is still employed, and wherever a pattern may exist — the complainant's own claim survives the departure entirely. What changes is the interview: a former employee cannot be compelled, so invite them, record the invitation and the refusal, and make findings on the available evidence while stating plainly that the respondent did not respond. Move fast on the leaver's accounts and devices, because offboarding will deprovision them on a schedule nobody consulted the investigator about. The complainant goes on medical leave. Leave is neither a blanket bar on contact nor no obstacle at all. Route contact through a single named person, offer to proceed on the material already given, ask whether they want to nominate a representative, and take occupational health advice on fitness to participate where the leave relates to the complaint. An indefinite pause with a silent file produces a promptness problem and, where the leave is protected, a retaliation risk. Most of the investigation usually continues without them. The complainant withdraws. A withdrawal is information, not an instruction. The obligation to address conduct the employer now knows about does not transfer to the complainant, and the more serious the allegation the less the withdrawal matters. Record the reason for it, because a change of mind and a fear about shift allocation require entirely different responses, and the second is a new complaint in its own right. Where you proceed anyway, say so and say why. Parallel criminal or police investigation. The frequent error is suspending everything until the criminal matter concludes, which can take two years and leaves an unaddressed workplace risk running throughout. The employment standard is the preponderance of the evidence and the criminal standard is beyond a reasonable doubt; an acquittal does not resolve the workplace question. Take counsel's advice on a limited hold, usually confined to interviewing the individual facing charges, and continue everything else. Record the advice, its scope and its date. A participant raises a new complaint arising from the investigation. Open it under its own reference with its own investigator, and do not fold it into the live matter. Merging produces one report covering two respondents, two element sets and two finding dates, and hands the first respondent an argument that the original findings were contaminated. Where the existing investigator is a witness to the events in the new matter — which is common, because the new matter often turns on what was said in an interview they conducted — they cannot run it.
Common mistakes
The failure modes that show up most often when this document is reviewed later.
Transferring a supervisory function under interim measures to whoever is nearest in the org chart
The recipient inherits authority over the complainant and the witnesses for the duration, which is exactly the power the measure was designed to remove from someone else. Run the same conflict check on the recipient that you run on the investigator, and re-run it when the facts move — the manager who looks neutral on day three is sometimes in the findings by day ten.
Scoping the interim-measures review to the respondent's restriction only
The review then completes, the file shows a review happened, and nobody has asked the question that matters: has anything changed for the complainant or the witnesses since the measure went in? A review that answers one of two questions is worse than no review, because it converts an open risk into a closed check-item.
Building the witness list from the names in the complaint and closing it there
The complaint names the people the complainant thought were relevant. It almost never names the manager who was told months earlier, because that conversation did not feel like a report at the time. That person is frequently the most consequential witness in the matter and appears on no list until someone asks a general question about prior reports.
Folding a new complaint arising from the investigation into the live matter
You end up with one report covering two respondents, two element sets and two finding dates, and the first respondent gains an argument that findings against him were reached under the influence of a later allegation he was not party to. Separate reference, separate investigator, separate report — and check whether the earlier evidence was signed before the new events.
Recording 'no prior complaints' from a search of the current HRIS
The check fails silently where the matter predates a system migration, sat in a manager's own file, or was closed informally at triage. A nil result is only worth what the search behind it was worth, so record which systems and paper files were searched and how far back — otherwise the negative is an assumption in the shape of a fact.
Releasing the preservation hold when the report issues
The report is not the trigger and never was; anticipated litigation is, and it commonly outlasts the investigation by years. The release is usually done by an administrator clearing a stale hold list, not by anyone who has read the file, which is why the destruction is discovered later by the other side rather than by you.
Arranging the 30- and 90-day follow-up through the complainant's line manager
The check exists to detect detriment, and the most likely source of detriment is the management chain you just used to schedule it. It also tells that chain the matter is still live. Route the contact through the named investigation contact and log the call even when the answer is that nothing has happened.
Questions
- We discovered mid-investigation that a manager was told months ago. Does that change our timeline?
- It changes what the timeline is measuring. Promptness runs from the organization's first notice, so a March conversation with a supervisor moves the start date backwards into a period nobody in the investigation controlled. You cannot repair it, but you can stop it contaminating the investigation's own record: keep two intervals in the file, first notice to complaint and complaint to report, and account for each separately. The first is a management-escalation failure and belongs in remedial actions; the second is the investigation's performance. Merged into one figure they read as a single slow response, which is the more damaging version and usually the less accurate one.
- A witness raised a retaliation complaint while the main report was still in draft. Do we pause?
- No, and do not merge it either. Open it under its own reference with its own investigator, keep the original matter on its target date, and tell both parties in the original matter that a separate complaint exists without disclosing its content. Two checks are worth running immediately. First, whether the existing investigator is a witness to the events now in issue — if the alleged retaliation follows what was put to someone in an interview, the person who conducted that interview cannot investigate it. Second, whether the witness's evidence in the original matter was signed and dated before the alleged detriment; if it was, the contamination argument fails on the face of the document.
- The respondent has left and IT has deprovisioned his mailbox. What are our options?
- Ask before you assume it is gone. Most enterprise platforms retain a deleted mailbox for a defined recovery window, and many organizations hold an archive or backup independently of the live account. Ask for the retention setting rather than the answer, in writing, and ask on the day you learn about the departure. The wider fix is upstream: a preservation hold has to be flagged into the leaver process, because offboarding runs on a schedule that has never heard of your investigation and will do exactly what it is designed to do.
- Our policy says the investigation will conclude within 30 days and we are going to miss it.
- A self-imposed deadline binds you in a way that no statute does, because it is the standard you published and will be measured against. Amend the target in writing before the date passes, with the reason and the new date, and tell the complainant on the same day. Missing a stated deadline and explaining it afterwards is a different fact from revising it in advance, and the difference is visible in the file. Then fix the policy, because a fixed number that is routinely missed is a liability rather than a commitment.
- Do the 30- and 90-day follow-up checks have to be in writing?
- The record matters more than the form. A phone call logged with the date, who called, the two questions asked and the answer given is sufficient and often gets a more honest response than an email. Keep it to two questions — has the conduct stopped, has anything changed at work for you since — and resist turning it into a satisfaction survey, which invites a general grievance you did not ask for. Log the check even when the answer is that nothing has happened; the nil result is the point of the exercise.
- We are using an external investigator. Who owns the checklist?
- The employer does, and the split is worth agreeing on day one. An external investigator's file typically covers investigator selection through to the report — roughly Phases 3 to 9 here. Intake, first-notice determination, preservation holds, interim measures, outcome communication, remedial actions, follow-up and retention all sit with the organization, and they are the phases where matters are most often lost. Name an internal owner for those before the engagement starts, or the checklist quietly ends when the report is delivered.
- How long do we keep the investigation file, and does an EEOC charge change it?
- Under 29 CFR 1602.14, the Title VII and ADA recordkeeping rule, personnel and employment records are preserved for one year from the making of the record or from the personnel action involved, whichever is later, extended to one year from the date of termination where an employee is involuntarily terminated. A charge changes it substantially: once one is filed, all records relevant to it must be preserved until final disposition of the charge or of any lawsuit based on it, including appeals. State law, contractual obligations and litigation holds extend this further. Keep the investigation file separate from the personnel file with restricted access, retain related matters together, and make the release of any hold a recorded decision by a named person.
The blank template
Exactly what is in the Word download, so you can see the structure before deciding whether you want it.
Phase 1 — Intake, triage and the start of the clock
- Complaint reduced to writing and confirmed back to the complainant as accurate, if it was made verbally.
- Allegations itemized and numbered at intake, before anything else happens.
- Severity and risk assessed: is anyone still exposed to the conduct today?
- Conflict flag raised if the complaint implicates HR, the investigator's reporting line, or an executive.
- Acknowledgment issued within a defined internal target and the send date recorded.
Phase 2 — Preservation, interim measures and immediate risk
- Automatic deletion suspended on the relevant mailboxes and channels, with written confirmation from IT.
- Leaver processes flagged: offboarding deprovisions mailboxes and devices on a schedule that will destroy evidence without asking anyone.
- Non-retaliation reminder issued in writing to the respondent and to anyone with authority over the complainant, with the date recorded.
- Safety escalation considered separately from the investigation where there is a threat of violence.
Phase 3 — Investigator selection and separation of roles
- Reporting lines between investigator and both parties checked, including dotted lines.
- Prior involvement in an earlier complaint by or against either party disclosed.
- Where the investigator is external, note which phases they own — an external file usually covers Phases 3 to 9 only, and the rest stays with the employer.
- See the investigation plan for how the impartiality conclusion is written up.
Phase 4 — Plan and scope control
- Every allegation numbered and carried into an allegation matrix so each one is tracked to a finding.
- Interview order set, with the reason recorded for any departure.
- Confidentiality wording drafted narrowly rather than as a blanket instruction. The NLRB's Stericycle standard governs this; it remains operative as of mid-2026, but the Board regained quorum in January 2026 with a changed composition and is expected to revisit it, so confirm the current position before relying on it.
- Target date for each phase and a scheduled plan review point.
Phase 5 — Notice to the parties
- Complainant told what the process is, roughly how long, and what will and will not be disclosed at the end.
- Support options offered to both parties and the offer recorded.
- Witnesses given the confidentiality wording and the non-retaliation reminder at the point of invitation.
- Any request for representation logged with the response given.
Phase 6 — Interview coverage
- Respondent put to every allegation, including any added by amendment.
- Each party given the opportunity to name further witnesses and to respond to contradictory accounts.
- Notes confirmed back, or the fact that confirmation was offered and declined recorded.
- Follow-up scheduled where a later account contradicts an earlier one — a conflict raised for the first time in the report is a conflict the witness never got to address.
Phase 7 — Documentary and electronic evidence
- Each exhibit numbered at the point of collection so the report cites a page rather than 'the emails'.
- Personal-device and personal-account material handled with consent and a documented scope limit.
- Chain of custody noted for anything collected from a device or a shared drive.
- Any system migration, archive purge or platform change in the relevant period noted, because it silently changes what a search can return.
Phase 8 — Analysis, credibility and findings coverage
- Standard of proof stated explicitly in the analysis, not assumed.
- Credibility grounded in plausibility, corroboration, internal consistency, consistency with contemporaneous records and motive, with demeanor used cautiously and never alone.
- Inconclusive used where the evidence genuinely does not permit a determination, and stated as such rather than avoided.
- Allegation matrix reconciled: every numbered allegation carries a finding, with none orphaned.
- Matters surfaced but outside scope noted and handed back rather than investigated uninstructed.
Phase 9 — Report and quality-control review
- Executive summary written last and checked against the body for reasoning that appears only in the summary.
- Every date in the report checked against the interview and evidence logs.
- Names, titles and the matter reference consistent throughout.
- Report states what it does not do — ordinarily no legal determination and no disciplinary recommendation.
Phase 10 — Outcome communication and remedial action
- Interim measures formally lifted, extended or converted, with a recorded decision either way.
- Non-retaliation reminder repeated at closure to the respondent and to anyone with authority over the complainant.
- Appeal deadline stated and calendared.
- Systemic issues assigned to a named owner rather than left sitting in the report.
Phase 11 — Closure, follow-up and retention
- Investigation file separated from the general personnel file, with restricted access.
- Follow-up contact routed so that arranging it does not itself disclose the matter to the complainant's line management.
- Data-subject and access-request position considered before anything is destroyed.
- Related matters retained together — a retaliation file and the matter that generated it are one evidential story and are read as one.
The clock: promptness, acceptable gaps and documenting delay
- Complainant updated at every revision of the target date, with the date of the update recorded.
- Work that continued during a delay recorded — a pause on one witness is not a pause on the investigation.
- Interim measures reviewed at each delay, since a longer investigation means a longer restriction on someone.
- Where an EEOC charge or state FEP filing is in play, note the filing deadlines running in parallel: they are not the investigation's deadline but they change what the file has to survive.
Disruption protocols: when the investigation is interrupted
- Former respondent invited to participate, with the invitation and any refusal recorded in writing.
- Withdrawal reason recorded and checked for any sign of pressure or detriment.
- Interim measures reassessed at every disruption — a hold that extends the timeline extends the restriction.
- Where a witness alleges detriment, check whether their evidence was fixed and signed before the alleged detriment occurred; the answer decides whether their account is contaminated.
- Findings written on the available evidence, stating explicitly what could not be tested and why.
Download this template
Free Word download, no email required. Or open it in Professional Drafter — it lands in your template library, ready to draft against.
Sources
- EEOC — Enforcement Guidance: Vicarious Liability for Unlawful Harassment by Supervisors (1999, still operative)
- EEOC — Enforcement Guidance on Retaliation and Related Issues (2016)
- EEOC — Promising Practices for Preventing Harassment (2017, technical assistance; states it does not have the force and effect of law)
- EEOC — Harassment (employer obligation to act promptly on notice)
- Faragher v. City of Boca Raton, 524 U.S. 775 (1998) — reasonable care to prevent and correct promptly
- Burlington Northern & Santa Fe Ry. Co. v. White, 548 U.S. 53 (2006) — materially adverse action standard
- NLRB v. J. Weingarten, Inc., 420 U.S. 251 (1975) — representation at investigatory interviews
- NLRB — Weingarten Rights
- NLRB — Board Adopts New Standard for Assessing Lawfulness of Work Rules (Stericycle, 2023)
- eCFR — 29 CFR 1602.14: Preservation of records made or kept
- EEOC — Recordkeeping Requirements
- EEOC — Time Limits for Filing a Charge
Related templates
Workplace Investigation Plan Template & Example
An investigation plan template covering scope, allegations, witnesses, evidence, sequencing and interim measures — written before the first interview.
Investigation Evidence Log & Chain of Custody Template
An evidence log template recording what was collected, from whom, when, and how it was preserved — including evidence sought but not obtained.
Suspension Pending Investigation & Interim Measures Memo
A memo recording interim measures during an investigation — the risk addressed, why the measure is not punitive, who decided, and when it will be reviewed.
Workplace Investigation Report Template & Example
A complete workplace investigation report template with a filled-in example report, plus a section-by-section guide covering scope, evidence, credibility, standard of proof and findings.
This page is a documentation aid, not legal advice. Workplace investigation requirements vary by jurisdiction, sector and policy, and a template cannot tell you what your matter requires. The worked example describes a fictional scenario.