Workplace Investigation Report Example and Template
- Sentry Private Investigators
- 1 hour ago
- 10 min read
A manager notices a pattern that doesn't fit the medical certificates on file. An employee has reported sick repeatedly, yet colleagues have seen them undertaking activities that appear inconsistent with the stated absence. HR has gathered emails, attendance records and witness accounts, but the business owner now wants one answer: can the evidence support disciplinary action if the matter reaches an Employment Tribunal?
A poorly written report can weaken a carefully conducted investigation. A defensible workplace investigation report example does more than repeat allegations. It shows what was investigated, how evidence was obtained, which facts were established, what remains uncertain and why the investigator reached each conclusion.
Why Your Investigation Report Must Be Tribunal-Ready
The report may begin as an internal HR document, but it can later become part of the evidence considered in an Employment Tribunal. That changes the standard required from a hurried summary to a structured, impartial account of the investigation.
Consider a business owner who suspects fraudulent sickness absence. The attendance pattern looks unusual, but the employee says the absences were genuine and that activity outside work was compatible with recovery. If the report says the employee was “obviously dishonest”, the conclusion is vulnerable. It tells the reader what the investigator thinks, not how the evidence supports that view.
A stronger report records the allegation precisely, identifies the relevant dates, summarises the employee's explanation and tests each account against available material. It separates established facts, facts not established and unresolved matters, rather than forcing every allegation into a neat outcome.
Practical rule: A tribunal-ready report should allow a reader who knows nothing about the case to follow the reasoning without relying on the investigator's memory.
Internal HR can often manage a straightforward matter where the allegations are narrow, witnesses are accessible and the evidence is held within ordinary business systems. External support becomes more valuable where the investigation involves covert surveillance, senior employees, suspected fraud, serious conflicts of interest or a concern that internal decision-makers may appear partial.
A useful reporting dashboard can help identify patterns before the investigation begins. For example, Power BI HR reporting insights may help HR teams organise absence and workforce information, but a dashboard doesn't replace a properly reasoned evidential assessment. Where the matter may develop into litigation, Sentry Private Investigators litigation support can help businesses organise investigative material and preserve a clearer evidential trail.
Essential Components of a UK Workplace Investigation Report
Acas says a UK workplace investigation report should be objective, concise, jargon-free and complete, with conclusions reflecting the investigator's own judgement rather than HR's preferred outcome. The report should also include all collected evidence, not only the material that supports the proposed action. Acas explains the expected post-investigation report standard.
Terms of reference
Start by recording the original reason for the investigation, the allegation, the relevant policy and the boundaries of the enquiry. Identify the investigator, the parties involved and the questions the investigation is intended to answer. Clear terms of reference prevent scope drift and make it easier to show that irrelevant issues weren't pursued.
Procedure and evidence
Record how evidence was gathered. Include interview dates, the people interviewed, documents reviewed, searches undertaken and any difficulties encountered. Each exhibit should have a clear identifier, such as an attendance record, email chain, CCTV file or interview note, with the appendix showing exactly what the investigator relied upon.
The evidential appendix should be complete enough for another reader to trace each important finding back to its source. Include relevant material that weakens the allegation as well as material that supports it.
Findings and recommendations
Address each allegation separately. State which facts were established, which were not established and whether the available evidence permits a reasoned case-to-answer assessment. Recommendations should remain separate from findings and should be included only if requested. The investigator should explain their own conclusion rather than adopt HR's suggested wording.
Annotated Workplace Investigation Report Example
The following abbreviated example concerns a Midlands employer investigating suspected sickness absence misconduct. It demonstrates the difference between factual language and a conclusion that overreaches.
Terms of reference
Allegation: The employee may have undertaken work for another business while absent due to sickness, contrary to the organisation's absence and outside-interests policies.
Scope: To establish what activities took place during the relevant absence period, whether the employee participated in those activities and whether the conduct was inconsistent with the stated reason for absence.
Annotation: This wording avoids assuming fraud. It identifies a question to investigate rather than treating the allegation as proven.
Evidence reviewed
The investigator reviewed attendance records, the employee's fit notes, relevant emails, an interview with the employee, interviews with two colleagues and lawfully obtained footage from a public location.
Annotation: Every item should be identifiable in the appendix. “Reviewed CCTV” is weak unless the report states what recording was reviewed, what period it covers and what it shows.
Evidence summary
One colleague stated that they saw the employee carrying equipment into commercial premises. The second colleague said they saw the employee at the same premises but couldn't confirm what activity they were undertaking. The employee accepted attending the premises but said they were collecting personal property.
Annotation: Attribute each account. Don't turn a witness's assumption into an established fact.
Findings
Finding on attendance: Established. The employee attended the premises during the absence period. This is supported by the employee's admission and the location footage.
Finding on paid work: Not established. The available evidence doesn't prove that the employee performed paid work. The first witness inferred work from the equipment, while the second witness couldn't confirm the purpose of the visit.
Finding on policy breach: Unresolved on the present evidence. Attendance alone doesn't establish a breach. Further evidence would be required to determine the nature of the activity and whether it conflicted with the employee's medical restrictions or policy obligations.
Recommendation
If requested, the investigator might recommend that the decision-maker consider whether further evidence is proportionate, or proceed only on the findings established. The report shouldn't recommend dismissal because the allegation appears serious.
Strong wording records what the evidence proves, not what the investigator suspects happened.
Documenting Incomplete and Conflicting Evidence
Real investigations contain missing records, unavailable witnesses and accounts that don't match. Many online templates show clean findings, but Acas says the report shouldn't try to prove guilt. It should identify which facts were established and not established and reflect the investigator's own conclusions. The Acas investigation guidance covers handling evidence and findings.
Use a short evidential-gap entry whenever the investigation cannot obtain material that might have assisted the assessment.
Unavailable witness: Record who the witness was, why they were relevant, the steps taken to contact them and whether they declined, couldn't be located or were unavailable for another reason.
Anonymous statement: Record the substance separately, explain how it was received and avoid presenting anonymity as proof of reliability. An anonymous account may identify a line of enquiry, but its weight depends on whether other evidence supports it.
Conflicting accounts: Set out each material version side by side. Identify points of agreement, points of conflict and any independent evidence that supports or weakens either account.
Missing records: State what was requested, from whom, when it was requested and why it wasn't available. Don't imply that missing evidence supports either party unless there is a proper basis for doing so.
A useful finding might read: “The allegation is not established on the available evidence. The complainant's account is consistent on the central event, while the respondent denies it. No independent witness or documentary evidence resolves the conflict. The finding is therefore limited to the evidence obtained and doesn't determine whether the allegation did or didn't occur.”
That is more useful than “inconclusive” without explanation. It shows the decision-maker that the investigator recognised the evidential limitation and didn't hide it.
Types of Evidence That Strengthen Your Report
Witness evidence can be important, but it isn't the only material available. Acas identifies computer records, phone records, CCTV recordings and vehicle trackers as examples of evidence investigators may need to review in a workplace case. Acas lists workplace investigation evidence sources.
Evidence Type | Strengths | Limitations | Best Used For |
|---|---|---|---|
Computer records | Can establish system activity, document history and communication sequences | Access, retention and authorship may need careful assessment | Testing timelines and confirming account activity |
Phone records | May help establish contact patterns or relevant communications | Availability, privacy and context can limit their value | Corroborating calls or communications |
CCTV recordings | May provide direct visual evidence of movement or attendance | Coverage, image quality, retention and lawful access matter | Testing whether a person attended a location |
Vehicle trackers | Can help establish vehicle movements and timings | A vehicle's location doesn't necessarily prove who was driving or why | Comparing claimed movements with recorded journeys |
Witness statements | Provide context, explanation and observations unavailable from systems | Memory, perspective and credibility can differ | Understanding events and interpreting documentary material |
The report should explain the evidential purpose of each item. A vehicle record may show that a company car reached a location, but it may not establish the employee's activity there. CCTV may corroborate attendance while leaving the purpose of the visit unresolved.
Digital material also needs disciplined handling. Preserve the original source where possible, identify who supplied it, record when it was reviewed and avoid editing screenshots in a way that removes context. The appendix should enable the decision-maker to distinguish an original record from the investigator's summary.
Covert Monitoring and Data Protection Compliance
Covert monitoring can produce useful evidence, but it also creates legal and reputational risk when investigators treat surveillance as automatically justified. The ICO says covert workplace monitoring should be authorised by senior management, supported by a Data Protection Impact Assessment, limited to the shortest possible timeframe and stopped when the investigation ends. Covert audio or video monitoring shouldn't be used in private areas such as toilets or changing rooms. The ICO's worker-monitoring guidance sets out these safeguards.
Before surveillance starts, the business should define the legitimate purpose, consider less intrusive options and document why the proposed monitoring is necessary and proportionate. The instruction to an investigator should specify the subject, scope, locations and retention approach. Broad surveillance creates more personal data and can make the resulting evidence harder to defend.
If a private investigator collects information covertly, the ICO says the employer must use a contract requiring collection in a way that satisfies data protection law. The ICO also says covert monitoring is unlikely to be justifiable in most usual circumstances, so a commercial need alone isn't enough.
A specialist may be appropriate where internal staff lack the capability to conduct discreet observation or where independence matters. Businesses should also address suspected listening devices separately through TSCM bug sweeping, which is a different technical service from employee surveillance.
The final report should describe the authorisation, purpose, dates, method and safeguards. It should state what the footage shows and avoid broader claims that the recording cannot support.
Using National Absence Data to Benchmark Your Case
National data can provide context, but it shouldn't decide an individual case. The Office for National Statistics reported that UK workers lost 148.8 million working days to sickness or injury in 2024, with an average of 4.4 days lost per employee, while the sickness absence rate was 2.0% of working hours. These figures are available in the ONS sickness absence dataset.
A report can use these figures as a benchmark when describing an absence pattern. For example, it might state that the employee's record was reviewed against national absence context, then identify the particular features requiring explanation, such as repeated short absences, timing around particular events or activity that appears inconsistent with the stated restrictions.
The investigator should avoid implying that absence above a national average is suspicious. Illness varies by individual, occupation and health condition, and national data cannot prove dishonesty. Its proper role is contextual, not determinative.
The ONS trend also provides a useful comparison window. The sickness absence rate rose to 2.2% in 2021 from 1.8% in 2020, with 149.3 million working days lost in 2021, equivalent to 4.6 days per worker. By 2024, the rate had returned to 2.0%, compared with 1.9% in 2019, as reported in the ONS release covering sickness absence from 2023 to 2024.
For workplace absence investigations, this context can help frame questions, but the conclusion must remain tied to the employee's evidence, policy obligations and individual circumstances.
Pre-Submission Compliance Checklist
Before the report reaches the disciplinary decision-maker, audit it as if an independent reader will challenge every conclusion. ONS guidance specifically supports recording the original reason for the investigation, witness and document evidence, credibility doubts, why witnesses weren't used and a dated, signed account of interviews. The ONS investigation guidance provides a useful evidential record structure.
Scope and process
Confirm the terms of reference: State the allegation, scope, relevant policy and investigator.
Record the methodology: List interviews, documents, searches and any procedural obstacles.
Check interview records: Ensure each account is dated and signed or otherwise securely authenticated.
Explain non-participation: Record relevant witnesses who weren't interviewed and why.
Catalogue the appendix: Give every exhibit a clear reference and ensure the report points to it.
Analysis and fairness
Separate facts from conclusions: Identify established, unestablished and unresolved matters.
Address credibility carefully: Record material inconsistencies or reasons for doubt without using emotional language.
Include adverse evidence: Don't omit material that weakens the allegation.
Test mitigation: Record explanations, medical context and other circumstances relevant to the issue.
Protect independence: Make sure the conclusion is the investigator's own judgement, not HR's preferred outcome.
If covert evidence was used, check the senior authorisation, DPIA, necessity assessment, limited timeframe, retention decision and contractual controls. Confirm that private areas weren't monitored and that the report doesn't claim more than the footage or records demonstrate.
Recommendations should appear only if requested, and they should be clearly separated from factual findings. Proofread names, dates, exhibit references and policy titles. Small inconsistencies can distract from the substantive evidence.
When to Engage Professional Investigators
Internal HR is often well placed to investigate ordinary workplace concerns, particularly where the evidence sits in company systems and the parties can be interviewed fairly. The balance changes when the case depends on discreet observation, suspected absence fraud, corporate malpractice, theft, complex movement patterns or evidence that internal staff cannot obtain independently.
External investigators can provide a defined methodology, contemporaneous observation notes and a report that separates direct observations from interpretation. They can also help preserve photographs, video, location information and supporting records in a form that fits the evidential appendix. That doesn't remove the employer's responsibility to assess proportionality, data protection and procedural fairness.
Sentry Private Investigators Ltd provides corporate investigative services including covert surveillance, GPS vehicle tracking, background checks and workplace investigations. Its head office is in Birmingham, with coverage across Coventry, Wolverhampton, Worcester, Leicester, London and other UK locations. A business should choose an external provider only after discussing the allegation, legal basis, intended evidence, reporting format and data-handling arrangements.
The right time to ask for help is before surveillance begins, not after an improperly obtained recording has become the central piece of evidence. A properly scoped instruction gives the investigator a clear question to answer and gives the business a better chance of receiving evidence that can be assessed fairly.
Sentry Private Investigators Ltd can assist businesses with discreet workplace absence investigations, covert surveillance, GPS vehicle tracking and structured evidential reporting. Visit Sentry Private Investigators Ltd to discuss your circumstances confidentially and arrange an investigative approach suited to your UK workplace case.