An investigation report is written to resolve a problem and read to prove one. If the underlying complaint becomes a claim, the report is usually the first document requested — and a single characterization written in the wrong tense or without a basis can undo months of careful work. These are the eight checks attorneys run.
Why it matters: An investigation run by the accused's direct supervisor, by someone who witnessed the events, or by a manager who reports to the person under scrutiny is vulnerable regardless of how carefully it was conducted. Impartiality is judged on the record, not on intentions, and a conflict that surfaces later can call every finding into question.
Check: The report names the investigator, their role, and their relationship to the parties, and states that no conflict exists — or explains how an unavoidable one was managed.
Why it matters: Language betrays sequence. "The investigation confirmed what we suspected," "as expected, the complaint was unfounded," or an opening paragraph that describes the outcome before the evidence suggests the conclusion preceded the inquiry. Subjective characterizations of people rather than conduct — "she has always been difficult," "he is not a team player" — carry the same problem and are easy to quote out of context.
Check: Conclusions appear after the evidence, describe conduct rather than character, and are phrased as what the evidence supports rather than what the writer assumed.
Why it matters: Where accounts conflict, someone has to be believed — and "the investigator found Employee A more credible" without explanation is nearly impossible to defend. Guidance from the EEOC has long identified factors investigators can weigh, including the inherent plausibility of each account, demeanor, motive to falsify, corroborating evidence, and any past record of similar conduct. A report that applies those factors explicitly is far more durable than one asserting a conclusion.
Check: Each credibility call identifies the factors relied on and the corroboration considered, rather than resting on the investigator's impression.
Why it matters: Unattributed assertions — "it was reported that," "several employees mentioned" — cannot be tested, and their weight tends to collapse under examination. Undated interviews make it impossible to reconstruct the sequence, which matters when the timing of the investigation is itself at issue.
Check: Each account identifies who said it, when they were interviewed, who conducted the interview, and whether anyone else was present.
Why it matters: Two failure modes appear repeatedly. A report that never addresses one of the allegations leaves the employer having "investigated" a complaint it did not actually resolve. A report that wanders into unrelated performance history reads as an effort to build a case against the complainant — particularly if discipline follows.
Check: The report lists the allegations investigated, addresses each one, and explains any allegation not pursued rather than leaving it unmentioned.
Why it matters: Telling employees not to discuss an investigation with anyone has been a moving target under the National Labor Relations Act. Under the NLRB's Stericycle framework, work rules are evaluated for their tendency to chill protected activity, and a rule restricting discussion of an investigation generally needs a legitimate and substantial business justification. A blanket instruction reproduced in the report can create an independent problem — and this area has shifted with successive Boards, so current requirements are worth confirming with counsel.
Check: Any confidentiality instruction is case-specific, tied to a stated reason such as protecting witnesses or preserving evidence, and does not purport to bar employees from discussing wages, terms of employment, or contacting an agency.
Why it matters: In harassment cases the employer's defense often depends on showing it took prompt and appropriate corrective action. A report that substantiates the complaint and then goes silent on what happened next leaves the most important part of that showing undocumented. Follow-up with the complainant — confirming the conduct stopped and no retaliation occurred — is frequently missing and frequently asked about.
Check: The report or its file records the action taken, the date, who communicated it, and any follow-up check-in with the complainant.
Why it matters: Delay is one of the most common criticisms of an investigation: unexplained gaps between the complaint, the first interview, and the outcome get used to argue the employer did not take it seriously. Separately, once litigation is reasonably anticipated, the duty to preserve relevant material generally attaches — deleted messages or overwritten files can become their own problem. Whether the report is privileged is a decision made at the start, not after it is written, and relying on the investigation as a defense may waive protection.
Check: Key dates are recorded with reasons for any gaps, relevant evidence is preserved, and any privilege intent was decided with counsel before the investigation began.
Upload your report and see the risks flagged — checked against 100+ issues attorneys look for, in about 60 seconds.
Scan your report freeNo account required · PII redacted before analysis · Original file never stored
Blanket directives have been a moving target under the NLRA. Under the Board's Stericycle framework, rules are evaluated for their tendency to chill protected activity, and restricting discussion of an investigation generally needs a legitimate and substantial business justification. Many employers now use case-specific instructions tied to identified reasons and confirm current requirements with counsel.
A report that gathers facts and stops can leave you without a documented basis for the action you take. Where evidence conflicts, investigators commonly make findings on the balance of the evidence and explain the basis. "Inconclusive" is sometimes honest, but it should be explained rather than used to avoid a hard call.
Not automatically. Reports prepared by or at the direction of counsel may be protected, but privilege can be waived — including when an employer relies on the adequacy of its investigation as a defense. That choice is best made before the investigation starts, because it affects who investigates and how the report is written.
In nearly all cases, yes. Conclusions about someone who was never given a chance to respond are difficult to defend as fair, and the omission tends to be the first thing opposing counsel highlights. Any decision not to interview a key participant should be explained in the report.
This guide is general information, not legal advice, and reading it does not create an attorney-client relationship. Employment law varies by state and changes frequently; consult a licensed employment attorney about your specific situation. DefensibleHR.ai scan results are AI-generated starting points for review, not a substitute for counsel.