Investigation report templates
Workplace Investigation Report Template & Example
Last updated 2026-07-30
A workplace investigation report has one job: let a reader who was not there follow the reasoning from allegation to finding, and see why the finding is supported. Everything else — formatting, length, house style — is secondary to that.
The report is also the most durable artifact of the investigation. It gets read by people the investigator never meets: an arbitrator, opposing counsel in a wrongful-termination claim, a regulator, a successor HR director reviewing a pattern. Each of them is reading for a different reason, and each is looking for the same thing — whether the process was fair and the conclusions are traceable to evidence.
The template below follows the structure most commonly used by professional investigators. The filled-in example that follows it is written against a fictional scenario so you can see how the sections read when they are actually populated — including the parts that are hardest to write, like a credibility determination and a finding on a disputed allegation.
Jurisdiction
Written primarily against US federal standards — EEOC guidance, NLRB decisions and Title VII case law — and against general investigative practice. State law, sector rules (public employers, education, regulated industries) and collective agreements impose additional requirements this page does not cover. Where a page borrows a concept from another jurisdiction it says so explicitly. Outside the US, treat the structure as transferable and the legal references as not.
Workplace Investigation Report template
Free Word download, no email required. Or open it in Professional Drafter — it lands in your template library, ready to draft against.
When to use this document
- A formal complaint has been made and the organization needs a documented, defensible outcome.
- The allegations, if substantiated, could result in discipline, termination, or legal exposure.
- An external investigator has been retained and must deliver a written work product.
- The matter is likely to be reviewed later — by an arbitrator, an agency such as the EEOC or a state FEP agency, an auditor or a court.
Worked example
Fictional scenario. A logistics company's regional dispatch team. The complainant, a dispatcher, alleges that her team lead made repeated comments about her appearance over roughly four months and, on one occasion, blocked her path in a corridor. The respondent accepts making two comments, characterizes them as compliments, and denies the corridor incident entirely. One witness (Witness A) partially corroborates the comments and separately recalls the complainant being upset on a date she can approximately fix; a second saw nothing relevant.
Executive summary
The complainant, a Dispatch Coordinator, alleged that her Team Lead made unwelcome comments about her appearance between approximately February and May 2026, and that on one occasion in April 2026 he physically blocked her path in a corridor. Three allegations were investigated. Allegations 1 and 2 (repeated comments about appearance; comments continuing after the complainant asked him to stop) are substantiated. Allegation 3 (physically blocking her path) is inconclusive. The substantiated conduct breaches sections 4.1 and 4.3 of the Respectful Workplace Policy. This report makes no recommendation as to discipline, which was outside the scope of the investigation.
Scope of the investigation
I was instructed by the Director of Human Resources on 2 June 2026 to determine whether the conduct alleged in the complainant's written complaint of 29 May 2026 occurred, and if so whether it breached the Respectful Workplace Policy. I was expressly not asked to determine what disciplinary action, if any, would be appropriate, nor to reach any conclusion on legal liability. On 16 June 2026 the scope was extended, at my request and with the Director's written agreement, to include whether the conduct continued after the complainant asked the respondent to stop — an issue that emerged during her interview and was not addressed in the original complaint.
Standard of proof
I have applied the preponderance of the evidence: whether each allegation is more likely than not to have occurred. This is the standard applicable to a workplace finding. It is not the standard applied by a court determining legal liability, and a finding in this report should not be read as a legal conclusion.
Credibility assessment
The material conflict is whether the corridor incident of approximately 17 April occurred as described. The complainant's account has been consistent across her written complaint, her first interview, and her follow-up interview, and she volunteered detail against her own interest — she could not recall whether the corridor was otherwise empty, where a less careful account would simply have said it was. The respondent denied the incident outright and, when asked, could not recall being in that part of the building at that time; his account was internally consistent but largely a general denial, which is inherently harder to test.
Witness A recalls the complainant appearing distressed near the dispatch office on a Friday in mid-April, which is consistent with the complainant's timeline but does not speak to the incident itself. No CCTV covers that corridor; I requested the footage on 16 June and was informed by Facilities on 18 June that the corridor camera has been out of service since January 2026. No document or third-party account corroborates or contradicts either version.
I have not resolved this conflict. Both accounts are plausible, neither is corroborated, and I identified no motive to fabricate on either side. I note that I found the complainant credible on Allegations 1 and 2; I have not treated that as determinative here, because credibility on one matter does not establish an uncorroborated account on another.
Findings of fact
Allegation 1 — that the respondent made repeated comments about the complainant's appearance between February and May 2026: SUBSTANTIATED. The respondent accepts making comments on at least two occasions. The complainant describes five. Witness A directly recalls two comments and describes them as making her uncomfortable as a bystander. The messages at Appendix 4 (14 March) contain a further comment in writing. On the preponderance of the evidence the comments were repeated rather than isolated.
Allegation 2 — that the comments continued after the complainant asked the respondent to stop: SUBSTANTIATED. The complainant states she asked him to stop in early April. The respondent does not recall such a request but does not deny it was made. Her text to Witness A of 8 April (Appendix 5) refers to having 'said something to him yesterday' — a contemporaneous record created before any complaint was made — and Witness A recalls her saying at the time that she had 'told him to knock it off'. The complainant describes two further comments in the fortnight that followed, which the respondent does not specifically address. The message at Appendix 4 (14 March) pre-dates the request and I have not relied on it for sequence. I accept that the request was made and that at least one comment followed it.
Allegation 3 — that the respondent physically blocked the complainant's path in a corridor in April 2026: INCONCLUSIVE. For the reasons at the credibility assessment above, the evidence does not permit a determination either way. This is not a finding that the incident did not occur.
Section-by-section guide
What each section is for, what a good one contains, and where they typically go wrong.
1.Report header and matter identifiers
Identifiers first, so the document is self-locating years later. Include the date of the report itself as distinct from the dates of the investigation — the gap between them is one of the first things a reader checks when promptness is at issue.
2.Executive summary
Write this last, and keep it to allegations and findings. Many readers will read only this section, so it must be accurate on its own — but it must not introduce reasoning that does not appear in the body. A summary that asserts more than the analysis supports is the most common source of internal inconsistency in a report.
3.Scope of the investigation
State what you were asked to determine, and — just as important — what you were not. An explicit scope statement protects against the two commonest criticisms: that the investigation strayed beyond its mandate, and that it ignored something it should have covered. If the scope changed mid-investigation, say so and say why.
4.Allegations
Itemize and number every allegation separately, phrased as a factual assertion capable of being proved or disproved. Vague allegations produce vague findings. If the complainant framed a grievance broadly — "he creates a hostile environment" — break it into the specific incidents relied on, and note that you did so.
5.Methodology
How the investigation was conducted, so a reader can assess its adequacy. Include who was interviewed and when, what documents were reviewed, and — critically — what you tried to obtain but could not, and why. A recorded gap reads as diligence; an unrecorded gap reads as an oversight.
6.Applicable policies and standards
Quote the policy provisions actually in play, with their version and effective date. An investigation that measures conduct against a policy the employee was never given, or a version that post-dates the conduct, has a problem that no amount of careful fact-finding repairs.
7.Standard of proof
State it explicitly. In most US private-sector workplace investigations the standard is the preponderance of the evidence — more likely than not. (UK, Australian and Canadian materials call the same threshold the 'balance of probabilities'. If you are working from those sources, use the US term in a US report; the threshold is identical but the phrasing signals where your materials came from.) Investigators routinely omit this, then write findings that read as though a criminal standard was applied, or fail to make a finding at all on a disputed allegation because they were waiting for certainty that was never required.
8.Summary of evidence
Set out what each witness said and what each document showed, organized by allegation or chronologically — pick one and hold to it. Keep this section descriptive. The temptation is to start analyzing here; resist it, because the value of the report comes from the reader being able to see the evidence before they see your conclusions about it.
9.Credibility assessment
Where accounts conflict on a material point, explain which you accepted and why, by reference to objective factors: inherent plausibility, corroboration by independent evidence, internal consistency, consistency with contemporaneous records, and any motive to fabricate. Treat demeanor with caution and never rest a determination on it alone — nervousness is not deception, and confident delivery is not truth.
10.Findings of fact
One finding per allegation, using the numbering from the allegations section so nothing is orphaned. Each finding is substantiated, not substantiated, or — where the evidence genuinely does not permit a determination — inconclusive. "Inconclusive" is a legitimate outcome and should be used honestly rather than avoided; what is not legitimate is leaving an allegation unaddressed.
11.Policy analysis
Apply the substantiated facts to the policy provisions quoted earlier. Keep this separate from the findings of fact: what happened is one question, whether what happened breached a policy is another, and conflating them makes both harder to review.
12.Matters outside scope but noted
Investigations routinely surface issues nobody asked about — a manager who never escalated an earlier complaint, a policy that is unworkable in practice. Note them briefly and hand them back rather than investigating them uninstructed. This section is also where you record any concern about ongoing risk.
13.Investigator's statement and signature
A short attestation: that the investigation was conducted impartially, that the report reflects the investigator's own analysis, and what the report is not — usually, that it makes no legal determination and no recommendation on discipline unless expressly instructed.
14.Appendices
Index the appendices and number them, so the body can cross-reference specific pages. A report that refers to "the emails" without a citation forces every future reader to re-do the investigator's work.
Common mistakes
The failure modes that show up most often when this document is reviewed later.
Never stating the standard of proof
Without it, a reader cannot tell whether an 'inconclusive' finding reflects a genuine evidential deadlock or an investigator waiting for certainty the standard never required. It also invites the criticism that a criminal standard was applied to a workplace matter.
Blending evidence with analysis
When what a witness said and what the investigator concluded appear in the same paragraph, a reviewer cannot separate the raw material from the reasoning — which is exactly what a reviewer is there to do. Keep the evidence summary descriptive.
Resting a credibility determination on demeanor
Nervousness is not deception and confidence is not truth. Demeanor-based determinations are the easiest to attack and correlate poorly with accuracy. Lead with plausibility, corroboration, consistency and motive.
Leaving an allegation unaddressed
Every numbered allegation needs a finding, including 'inconclusive'. An allegation that appears at the start of the report and never reappears is the single most visible defect a reviewer can find.
Recommending discipline when you were not asked to
It exceeds most investigative mandates, compromises the appearance of impartiality, and mixes a factual finding with an employment decision that belongs to the organization.
Not recording evidence you tried and failed to obtain
The missing CCTV, the witness who declined, the deleted message thread — if the attempt is not documented, the gap looks like something the investigator never thought of.
Questions
- What standard of proof applies in a workplace investigation?
- In most private-sector workplace investigations the standard is the preponderance of the evidence — whether the conduct is more likely than not to have occurred. That is a lower threshold than the criminal standard and it is not a legal determination of liability. State the standard explicitly in the report; omitting it is one of the most common defects.
- Should the investigation report recommend disciplinary action?
- Only if you were expressly instructed to. The default position for most investigators is that the report determines what happened and whether policy was breached, and the organization decides the consequence. Volunteering a disciplinary recommendation blurs the line between fact-finder and decision-maker.
- Can an investigation report be used against the employer in litigation?
- Yes — investigation reports are frequently produced in discovery. Whether attorney-client privilege or work-product protection applies depends on who conducted the investigation and for what purpose, and it is not automatic simply because a lawyer was involved. If privilege matters in your matter, the engagement terms need to address it before the investigation starts, not after.
- How long should a workplace investigation report be?
- As long as the reasoning requires and no longer. A single-allegation matter with two witnesses may be well served by six pages; a multi-allegation pattern complaint may need forty. Length is not a proxy for thoroughness — traceability is.
- What if the evidence does not allow a finding either way?
- Make an inconclusive finding and explain precisely why: what evidence was sought, what was unavailable, and which conflict could not be resolved. An honest inconclusive finding is defensible. Avoiding the allegation entirely is not.
The blank template
Exactly what is in the Word download, so you can see the structure before deciding whether you want it.
Report header and matter identifiers
Executive summary
Scope of the investigation
- [Question 1 the investigation was asked to determine]
- [Question 2 ...]
- [Expressly outside scope: e.g. whether discipline is warranted, whether the law was breached, performance issues unrelated to the complaint]
Allegations
- [Allegation 1 — what is alleged to have occurred, when, and which policy provision it would engage]
- [Allegation 2 — ...]
Methodology
Applicable policies and standards
Standard of proof
Summary of evidence
Credibility assessment
- [Conflict 1 — the disputed point, the competing accounts, the factors, the determination]
- [Note where a conflict was immaterial and therefore not resolved]
Findings of fact
Policy analysis
Matters outside scope but noted
Investigator's statement and signature
Appendices
Download this template
Free Word download, no email required. Or open it in Professional Drafter — it lands in your template library, ready to draft against.
Sources
Related templates
Workplace Investigation Plan Template & Example
An investigation plan template covering scope, allegations, witnesses, evidence, sequencing and interim measures — written before the first interview.
Credibility Assessment Template & Example (Workplace Investigation)
A structured credibility assessment template using objective factors — plausibility, corroboration, consistency and motive — with a filled-in worked example showing the reasoning written out.
Allegation Matrix Template & Example
An allegation matrix template that tracks every allegation to its evidence and its finding, so nothing is left unaddressed in the final report.
Findings of Fact Template: Substantiated, Not Substantiated, Inconclusive
A findings-of-fact worksheet that ties each allegation to the evidence relied on, the standard applied, and a clear substantiated / not substantiated / inconclusive outcome.
Harassment Investigation Report Template & Example
A harassment investigation report template covering unwelcomeness, severity or pervasiveness, the protected characteristic, and employer notice — with a worked findings example.
Short Investigation Report Template & Sample
A short-form investigation summary report template for straightforward matters — when a full report is more process than the complaint warrants, without dropping what makes a finding reviewable.
Investigation Report Examples: The Pre-Issue Review Record
A pre-issue review record for a draft investigation report — twelve checks, with a filled-in example finding five defects three days before signature.
This page is a documentation aid, not legal advice. Workplace investigation requirements vary by jurisdiction, sector and policy, and a template cannot tell you what your matter requires. The worked example describes a fictional scenario.