Conducting Workplace Investigations

The complaint arrived at 6:42 p.m. on a Friday. A sales coordinator wrote that her manager had been making sexual comments after client dinners and had warned her not to be "dramatic" if she wanted to stay on the enterprise accounts. By Monday morning, two executives wanted a quick answer: "Can we just ask him and move on?"

No. Not if you want a fair process, a trustworthy culture, and defensible decisions.

A workplace investigation is the disciplined search for facts. It is not a trial, a rumor hunt, or a way to confirm what leadership already believes. The investigator's job is to gather enough reliable information for the employer to decide what happened, whether policy was breached, and what action is appropriate.

Know when to investigate

Investigate when the complaint or information, if true, would require the company to act. That includes:

• Harassment or sexual harassment.
• Discrimination or retaliation.
• Violence, threats, bullying, or intimidation.
• Fraud, theft, bribery, or conflicts of interest.
• Serious safety concerns.
• Data privacy or confidentiality breaches.
• Wage, timekeeping, or payroll manipulation.
• Repeated conduct issues where facts are disputed.
• Grievances that cannot be resolved informally.

Not every workplace irritation needs a formal investigation. Two colleagues arguing over meeting etiquette may need mediation or manager coaching. But if the allegation involves protected status, abuse of power, safety, money, or possible dismissal, do not handle it casually.

Choose the right investigator

The investigator must be neutral, capable, and available. They do not need to be the most senior person in the company. They need to know how to plan, interview, document, assess evidence, and avoid leading questions.

Use an internal investigator when:

• The facts are limited and lower risk.
• The investigator has no conflict.
• The company has trained HR or employee relations capacity.
• The parties are not senior executives.
• The allegation does not involve HR's own conduct.

Use an external investigator when:

• The complaint involves the CEO, founder, board member, senior leader, or HR.
• The complaint alleges harassment, discrimination, retaliation, or fraud with serious exposure.
• The company is too small to provide neutrality.
• There is likely litigation, media attention, regulator interest, or whistleblower protection.
• The parties do not trust the internal process.

Build an investigation plan

Do not start interviews with only a vague complaint and a calendar invite. Write a plan first.

Interim measures might include schedule changes, reporting line changes, temporary remote work, paid suspension, access restrictions, or separating parties. Be careful: interim measures should protect the process and people involved, not punish the complainant.

Preserve evidence early

Evidence can disappear quickly. Slack retention windows, CCTV overwrite cycles, email deletion, phone loss, and employee departures can all damage the process.

Evidence may include:

• Emails, chat messages, texts, calendar invitations, meeting notes.
• HRIS records, time records, payroll records, location logs.
• CCTV, badge access, device logs, CRM notes, ticket history.
• Policies, training records, acknowledgments.
• Prior complaints, manager notes, performance records.
• Photos, documents, receipts, screenshots.

Create an evidence log with source, date collected, collector, storage location, and relevance. Keep original files intact where possible. Work from copies.

Interview with open questions

The best investigation interviews are boring in the right way: calm, structured, non-leading, and documented. The investigator should explain the purpose, confidentiality limits, no-retaliation expectations, and what will happen next.

Start broad:

• "Tell me what happened."
• "When did you first notice it?"
• "Who was present?"
• "What did you do next?"
• "What documents, messages, or records should I review?"
• "Who else may have relevant information?"

Then narrow:

• "You said it happened after the client dinner. What time did the dinner end?"
• "You mentioned a message. Was that on WhatsApp, Slack, SMS, or email?"
• "What exact words do you remember?"

Avoid:

• "He touched you, right?"
• "You were offended because of your age, correct?"
• "Everyone knows she exaggerates, doesn't she?"
• "Are you sure you did not misunderstand?"

Keep confidentiality real, not absolute

You can and should ask participants to keep the process confidential. But do not promise total confidentiality if the company may need to interview witnesses, review documents, take action, or comply with law.

Use language like:

"We will share information only with people who need it to conduct the investigation, make decisions, or meet legal obligations. We cannot promise complete confidentiality, but we will handle the information as carefully as possible."

If a participant says they want to stay anonymous, explain what is possible and what is not. Some complaints cannot be investigated fairly without revealing enough detail for the respondent to answer.

Assess evidence fairly

Many investigations do not produce perfect proof. Employers usually make workplace decisions on a balance of probabilities or similar civil standard, depending on jurisdiction and policy. That means deciding what is more likely than not, based on the evidence available.

Look at:

• Consistency: Does the account stay stable across time?
• Corroboration: Do documents, witnesses, or logs support it?
• Plausibility: Does the account fit known facts?
• Motive: Is there evidence of bias, retaliation, or personal interest?
• Opportunity: Could the event have happened as described?
• Detail: Does the person provide concrete, testable detail?

Do not overvalue confidence. Some honest people are nervous and fragmented. Some dishonest people are smooth. Trauma, fear, language differences, hierarchy, and culture can all affect how a person tells a story.

Write the report for decisions, not drama

The report should be factual, organized, and clear enough that a decision maker can act.

A strong report includes:

• Scope and allegations.
• Investigator identity and independence.
• Policies reviewed.
• Documents and evidence reviewed.
• Witnesses interviewed.
• Summary of relevant facts.
• Credibility assessment, if needed.
• Findings for each allegation.
• Unresolved issues.
• Attachments or evidence index.

Avoid inflammatory adjectives. "Witness A stated that the manager shouted 'you are useless' in the open office" is better than "the manager was abusive and toxic." Let the facts do the work.

Communicate outcomes carefully

The complainant needs to know the matter was taken seriously and closed. The respondent needs to know the decision and consequences. The company must protect privacy and avoid retaliation.

You can usually share:

• That the investigation is complete.
• Whether the allegation was substantiated, not substantiated, or inconclusive, if policy allows.
• That appropriate action has been or will be taken.
• Expectations for future conduct.
• No-retaliation reminders.
• Appeal or escalation routes where applicable.

Do not share another employee's discipline details unless counsel approves or local law requires it.

Key takeaways

• Investigate when alleged facts, if true, would require employer action.
• Choose an investigator who is neutral in structure, not just temperament.
• Preserve evidence before interviews where possible.
• Use open questions and document carefully.
• Confidentiality has limits; explain them honestly.
• Findings should connect evidence to each allegation.
• Communicate closure without exposing private discipline details.