Investigating harassment claims: interview techniques, documentation, retaliation
The HR investigator’s playbook for harassment, discrimination, and code-of-conduct claims — intake, scope, interview structure, documentation standards…
On this page▾
- Take every complaint seriously, every time. Failure to investigate is independently actionable — and even ‘weak’ complaints are early warnings of patterns.
- Decide internal vs. external in the first 24 hours. Use an external investigator when the respondent is C-suite, the complaint involves the GC/CHRO, the legal exposure is high, or there is any conflict of interest.
- Interview order matters: complainant → witnesses → respondent. Document each interview in a contemporaneous memo (within 24 hours), then circulate to the interviewee for accuracy corrections.
- Credibility is assessed against five factors (EEOC: inherent plausibility, demeanor, motive, corroboration, past record). Never on ‘gut feel’ alone — write the analysis down.
- Retaliation is the most common claim that survives summary judgment. Lock in retaliation prevention from day 1 — written non-retaliation notice to respondent, monitored 1:1s with complainant at 30/60/90 days.
Workplace investigations are where HR’s craft is most tested and most often fails. The patterns of failure are well-known — minimizing the complaint, rushing to a conclusion, leaking the respondent’s name, failing to protect the complainant from retaliation — and the cost of each is measured in employees lost, settlements paid, and reputational damage that lingers.
Intake & first 24 hours
- Take the complaint in person where possible, video where not. Schedule 90 minutes. Do not type into a system while the person is talking — listen, take handwritten notes, transcribe into a memo within 24 hours.
- Open question: ‘Tell me what happened, in your own words, from the beginning.’ Then silence. Do not interrupt. Do not redirect.
- Capture: who, what, when, where, who else was present, who else they have told, any documents/screenshots/messages, what outcome they are hoping for.
- Explain confidentiality honestly: ‘We will share only what is necessary to investigate. We cannot promise total confidentiality, but we will protect your identity wherever possible.’ Never promise total confidentiality — it is a lie that destroys credibility later.
- Explain the non-retaliation policy, in writing, before they leave the room.
- Decide interim measures immediately: do they need to stop reporting to the respondent? Do schedules need to change? Should the respondent be placed on paid administrative leave during the investigation? Bias toward protecting the complainant, but do not act as though guilt is established.
- Within 24 hours: written acknowledgement to the complainant that the investigation is open, name of the investigator, expected timeline, retaliation hotline contact.
Internal vs. external investigator
| Use internal HR investigator when | Use external investigator when |
|---|---|
| Mid-level employee respondent, no power dynamic over HR | Respondent is C-suite, board member, or senior leader |
| Single-incident, narrowly scoped | Pattern allegation or multiple complainants |
| No prior similar complaints involving same parties | Complainant or respondent has direct relationship with HR/GC |
| Low likelihood of litigation | Likely to litigate or be subpoenaed |
| Investigator has training and bandwidth | Public profile risk (regulatory, press, board awareness) |
External investigators (typically employment counsel or specialized firms) cost $15K–$60K per investigation. The cost is often a fraction of a single discrimination settlement and provides a credibility shield no internal investigator can.
Defining scope
- Write a scope memo before any witness interview: parties, allegations (specific conduct, specific dates), policies potentially implicated, time period covered, materials to be reviewed.
- Scope creep is real. New issues that emerge during interviews should be triaged: are they related (incorporate) or separate (new investigation, new scope memo)?
- Define the deliverable upfront: written findings memo? Findings + recommendations? Findings + recommended discipline? Get alignment with the decision-maker (often GC or CEO) before you start.
The interview protocol
- 1Complainant (re-interview)Deeper-dive after intake. Walk through the timeline minute by minute. Probe for context, prior incidents, supporting documents. 90–120 minutes.
- 2WitnessesInterview in order of relevance — closest witnesses first. Open with: ‘I’m conducting an internal investigation. I’m not at liberty to share the details. I’d like to ask you about [event/period/working relationship].’ Never name the complainant unless absolutely necessary.
- 3Respondent (last)Always last. The respondent is entitled to know the specific allegations against them and to respond to each. Read each allegation, ask for their account, document carefully. Do not bluff with evidence you do not have, and do not reveal sources unless protecting witnesses requires it.
- 4Follow-up roundsOften needed. New evidence from one interview triggers re-interview of earlier participants. Plan for at least two interview rounds in any non-trivial matter.
- Two HR people in every interview where feasible — one leads, one takes notes. Reduces credibility disputes later.
- Ask open questions before closed. ‘Tell me about your working relationship with X’ before ‘Did X do Y on date Z?’
- Never ask leading questions on the substantive facts. ‘What happened next?’ not ‘And then he touched your arm, correct?’
- Do not promise outcomes. ‘I cannot tell you what discipline, if any, will follow.’ Promise process: ‘You will be notified when the investigation concludes.’
Documentation standards
- Within 24 hours of each interview, write a contemporaneous interview memo: date, attendees, location, opening admonitions given (confidentiality, non-retaliation, truthfulness), Q&A in substance (paraphrase OK, quote where exact words matter), documents reviewed.
- Send the memo to the interviewee with a request to confirm accuracy and submit any corrections within 5 business days. Their corrections become attachments.
- Maintain a single, secured investigation file: scope memo, all interview memos, all evidence (emails, Slack exports, calendar entries), policy excerpts, credibility analysis, final findings memo. Privilege-mark where appropriate.
- Use precise language. ‘The complainant reported that…’ rather than ‘X happened.’ Distinguish what people said from what you concluded.
- Retention: 7 years for harassment/discrimination matters in most US jurisdictions. Longer where state law or pending litigation requires.
Credibility assessment
When accounts conflict — and they will — assess credibility using the EEOC’s five factors. Write the analysis in the findings memo.
| Factor | What you’re asking |
|---|---|
| Inherent plausibility | Does the account, on its face, make sense in context? |
| Demeanor | Did the person appear truthful? Caution: do not over-weight — demeanor is culturally biased and trauma-affected. |
| Motive to falsify | Does the party have a reason to lie? On both sides — complainant motive (revenge, advantage) and respondent motive (protect job, reputation). |
| Corroboration | Documentary evidence, third-party witnesses, contemporaneous reports to friends/therapists. |
| Past record | Has this party had similar credibility issues — or similar conduct — before? |
Most harassment happens 1:1 with no witnesses. The standard of proof in internal investigations is preponderance of the evidence (more likely than not), NOT beyond reasonable doubt. A credible complainant + contemporaneous reports + a respondent with prior issues can support a finding even with no direct witness.
Findings & remedies
- Findings memo states: allegations, evidence considered, credibility analysis, factual findings (substantiated / not substantiated / inconclusive — per allegation), policy implications.
- Discipline recommendations live in a separate memo to the decision-maker. Investigators investigate; managers (or a discipline committee) discipline. Keep the firewall.
- Communicate the outcome to both parties: the complainant is told whether the investigation substantiated their concerns and that ‘appropriate action has been taken’ (specifics on discipline are usually withheld from the complainant). The respondent is told the findings and any discipline.
- Remedies often include policy training, restored conditions for the complainant, formal warning or termination of the respondent. Consider organizational remedies (manager training, policy updates, climate survey) where patterns are revealed.
Retaliation prevention
Retaliation claims succeed at higher rates than the underlying claims they accompany. The respondent — and their friends — often retaliate without realizing it. Lock in prevention from day 1.
- Written non-retaliation notice to the respondent at first interview, signed and dated. Plain English: ‘Retaliation against [complainant] or anyone who participates in this investigation is itself a violation that will lead to discipline up to and including termination.’
- Document the complainant’s pre-complaint performance, compensation, and project assignments. Any deviation downward in the 12 months following the complaint requires documented business justification.
- Monitored 1:1s between HR and the complainant at 30, 60, 90 days, and 6 months. Direct question: ‘Has anything in your work environment changed in a way that concerns you?’
- Train the respondent’s manager (if different) on retaliation. The retaliation often comes from a peer or new manager who was not directly involved — they need to be briefed without breaching confidentiality.
- Any subsequent adverse action against the complainant in the following 12 months — performance rating, comp, role change, layoff inclusion — must be reviewed by HR with the retaliation timeline in view.
Top investigator mistakes
- Promising confidentiality you cannot keep.
- Interviewing the respondent first or letting the respondent know before witnesses are interviewed.
- Failing to write interview memos within 24 hours (memories degrade fast and become contested evidence).
- Conflating the investigator role and the decision-maker role.
- Asking leading questions on substantive facts.
- Concluding ‘he said / she said is inconclusive’ as a default — that is abdication, not analysis. Apply the five factors.
- Forgetting the retaliation plan after the investigation closes — that is when most retaliation happens.
- Sharing findings narrative beyond the need-to-know circle. The biggest defamation risk is internal gossip.
Read next
All playbooksHow to terminate a single employee with dignity and defensibility — the 8-minute conversation script, the severance formula most companies use, what you…
Recruiters and hiring managers spend 30% of their offer time on the same 12 negotiation pushbacks. Here are the scripts — for ‘I need more,’ ‘I have a…
The 30-day playbook to run a reduction in force with legal defensibility and human dignity — WARN Act mechanics, defensible selection criteria, the comms…