Template · Employee relations and discipline

Workplace investigation report template

By TapTalent Editorial TeamUpdated

In short

A workplace investigation report template gives HR a standard structure to record how a complaint was investigated and what was found: the allegations, the evidence, a summary of each interview, credibility assessments, findings on each allegation and recommended action. It includes an investigation checklist and core interview questions for complainants, respondents and witnesses.

Workplace Investigation Report template

Workplace Investigation Report

Confidential: prepared at the request of [HR / Legal]. [If counsel is directing the investigation: Privileged and confidential, prepared at the direction of counsel.] Write in neutral, factual language. Make one finding per allegation. Attach witness statements, documents and the evidence log. Store in the investigation file, not the personnel file.

1. Case information

Case number
Date complaint received
How received
Complaint formVerbal report to HRReport to managerHotline / anonymousAgency chargeObserved by management
Investigator name and title
Investigator independence confirmed (no reporting line or personal link to parties)
Investigation start date
Report date
Policy or policies involved

2. Parties

Complainant (name, title, department, manager)
Respondent(s) (name, title, department, manager)
Witnesses interviewed (name, title, date interviewed)
Witnesses identified but not interviewed, and why

3. Allegations

Allegation 1 (specific: who, what, when, where)
Allegation 2
Allegation 3
Interim measures taken during the investigation (and dates)

4. Evidence reviewed

Documents and records (emails, chat logs, schedules, timeclock data, call recordings, CCTV, prior complaints)
Evidence requested but not available, and why
Site visit or other observation

5. Interview summaries

Complainant interview: date, who was present, summary of account
Respondent interview: date, who was present, response to each allegation
Witness interviews: date and summary for each
Follow-up interviews (if any)

6. Analysis and credibility

Undisputed facts
Disputed facts
Credibility assessment (consistency, corroboration, plausibility, motive, demeanor only as supporting factor)

7. Findings

Standard of proof used
Preponderance of the evidence (more likely than not)Other (state)
Allegation 1 finding
SubstantiatedNot substantiatedInconclusive
Allegation 1 reasons
Allegation 2 finding
SubstantiatedNot substantiatedInconclusive
Allegation 2 reasons
Allegation 3 finding
SubstantiatedNot substantiatedInconclusive
Allegation 3 reasons
Policy violations found (policy name and section)
Other issues identified that were outside the allegations

8. Recommendations and closure

Recommended action for respondent (none, coaching, training, warning, suspension, termination)
Recommended action for the team or organization (training, policy change, schedule or reporting-line change)
Steps to prevent retaliation and planned check-ins with complainant
Outcome communicated to complainant (date, by whom)
Outcome communicated to respondent (date, by whom)
Decision-maker name and title
Investigator signature
Decision-maker signature

Investigation checklist

  • Log the complaint and assign a case number the day it is received
  • Assess safety and decide on interim measures that do not disadvantage the complainant
  • Appoint an investigator with no reporting line or personal link to the parties
  • Issue a document preservation notice for emails, chats, recordings and CCTV
  • Write an investigation plan: allegations, witnesses, documents, order of interviews
  • Interview the complainant first, then witnesses, then the respondent; re-interview as needed
  • Give the respondent each allegation in enough detail to respond
  • Remind every interviewee about non-retaliation and confidentiality to the extent allowed by law
  • Have each interviewee review and sign a witness statement or the investigator's notes
  • Make a finding on each allegation using the stated standard of proof
  • Send the report to the decision-maker; the investigator recommends, management decides
  • Close the loop with both parties and schedule a retaliation check-in at 30 and 90 days

Core investigation interview questions

  • Complainant: Tell me in your own words what happened, starting from the beginning.
  • Complainant: When and where did this happen? Who else was there or nearby?
  • Complainant: What exactly was said or done? Use the words as closely as you remember them.
  • Complainant: Has this happened before? Did you tell anyone at the time?
  • Complainant: Do you have messages, photos or other records? Who else should I talk to?
  • Respondent: I need to put some concerns to you. On [date], it is reported that [specific allegation]. What is your account?
  • Respondent: Is there anyone who could confirm your account, or any records I should look at?
  • Respondent: How would you describe your working relationship with [complainant]?
  • Witness: What did you see or hear on [date] at [location]? What did you do afterward?
  • Witness: Has anyone spoken to you about this matter since it happened?
  • All: Is there anything else I should know that I have not asked about?

How to use this template

  1. Open the report the day the investigation is assigned and fill in case details, parties and the specific allegations.
  2. Use the checklist to plan interviews and preserve evidence before you contact the respondent.
  3. Summarize each interview the same day, using the interviewee's words for key statements, and attach signed statements.
  4. Separate undisputed and disputed facts, then explain your credibility assessment for each disputed point.
  5. Make a finding on each allegation (substantiated, not substantiated or inconclusive) with reasons tied to the evidence.
  6. Write recommendations, hand the report to the decision-maker, and record when and how both parties were told the outcome.

What the report needs to show

A workplace investigation report is read by people who were not there: the decision-maker, sometimes a lawyer, and occasionally an agency investigator or jury years later. It has to show three things clearly. That the investigation was fair (an independent investigator, both sides heard, relevant witnesses interviewed). That it was thorough enough for the seriousness of the allegations. And that the findings follow from the evidence.

The structure in this template mirrors that. Allegations are stated precisely, evidence is listed, each interview is summarized, credibility is reasoned, and each allegation gets its own finding. A report that jumps from "I interviewed five people" to "the complaint is unfounded" fails, even if the conclusion is right.

Writing findings that hold up

Most HR investigations use the preponderance of the evidence standard: is it more likely than not that the conduct happened? You do not need proof beyond reasonable doubt, and you do not need a confession or an eyewitness. Many harassment allegations come down to one person's word against another's, and investigators still make findings by weighing consistency, corroboration and plausibility.

For example, a complainant says a team lead made repeated comments about her accent on the evening shift. The team lead denies it. Two agents say they heard similar comments, though not on the dates given; chat logs show the lead joking about "translation" when she took escalations. The complainant's account has stayed consistent across two interviews. That is enough to find the allegation substantiated, even without a witness to the exact incident.

Use "inconclusive" honestly. It means the evidence does not tip either way, not that the investigator would rather not decide. Never use the report to make a legal conclusion, such as "this was sexual harassment under Title VII"; find whether the conduct happened and whether it broke company policy.

Interviews and statements

The usual order is complainant, then witnesses, then respondent, then follow-up with anyone whose account needs testing. The respondent must hear each allegation in enough detail to answer it; a vague "there have been concerns about your behavior" is not fair and produces nothing useful.

Take detailed notes or, where everyone consents and state law permits, record. Several states require all-party consent to record. Have interviewees review and sign a witness statement form or the investigator's summary. For complaints that started on an employee complaint form, attach the original; for safety events, attach the incident report.

In the US, a prompt and thorough investigation is a large part of an employer's defense to harassment claims, and a poor one is often the evidence used against it. Union-represented employees may ask for a representative in investigatory interviews that could lead to discipline. Confidentiality instructions to witnesses should be limited and justified, because broad gag rules can conflict with NLRA rights of non-supervisory employees.

If counsel is directing the investigation, label drafts accordingly and agree in advance whether the report may be disclosed, since relying on it in litigation can waive privilege. Store the report in a separate investigation file with restricted access. Rules on interview recording, privacy and representation vary by state and country.

Common mistakes

  • An investigator who reports to the respondent or is a friend of either party.
  • Interviewing the respondent first, before knowing the details of the allegation.
  • Writing opinions about character ("she seemed emotional") instead of reasons tied to evidence.
  • One overall finding instead of a finding per allegation.
  • Taking weeks to start. Memories fade and evidence such as CCTV is often overwritten within 30 days.
  • Never telling the complainant the outcome, which is the fastest route to an outside charge.

Investigations at scale

Large hourly workforces generate a steady flow of investigations, most of them about supervisor conduct, scheduling fairness and co-worker conflict. Build a small pool of trained investigators across sites, use this template for every case so reports are comparable, and track cases from intake to closure with target times (for example, 30 days for standard cases). Review closed cases each quarter by site and allegation type. Repeated substantiated findings at one site usually point to a leadership issue that no single investigation will fix.

Frequently asked questions

What should a workplace investigation report include?

Case details, the parties, specific allegations, interim measures, evidence reviewed, interview summaries, undisputed and disputed facts, credibility analysis, a finding on each allegation with reasons, policy violations found, recommendations and how the outcome was communicated.

What is on an HR investigation checklist?

Logging the complaint, assessing safety, appointing an independent investigator, preserving evidence, planning interviews, interviewing all parties, getting signed statements, making findings on each allegation, reporting to the decision-maker, closing the loop and checking for retaliation.

What questions should be asked in a workplace investigation interview?

Open questions first: ask the person to describe what happened in their own words. Then specifics: when, where, who was present, exact words or actions, earlier incidents, records and other witnesses. Put each allegation to the respondent in enough detail to answer it.

Who should conduct a workplace investigation?

A trained investigator with no reporting relationship or personal connection to the parties. That is often an HR business partner from another site, an employee relations specialist, or an outside investigator for senior leaders or high-risk cases.

Does the employee get a copy of the investigation report?

Usually not in full. Both parties are normally told the outcome and, where appropriate, that action was taken, without details that would breach others' privacy. Disclosure rules differ by country, and some data protection laws give employees access rights.

How long should a workplace investigation take?

Most single-issue investigations can be completed within two to four weeks. Complex cases with many witnesses take longer. Start within a few days of the complaint and document any reason for delay.