INSIGHT

HR Audit Checklist: What to Review

Jill Pappenheimer • July 24, 2026

Services: Human Resources

---

An HR audit is a structured compliance review of your HR policies, practices, documentation, and systems designed to identify gaps, flag risks, and surface opportunities to strengthen how your organization manages its people function. Whether you conduct such an audit on a regular basis or in response to a specific trigger, the categories below give you a starting point for what to examine.

HR Audit Checklist by Category

The scope of your review will vary based on your organization’s size, industry, and workforce structure. This checklist is comprehensive by design. Use it as a full audit reference or focus on the categories most relevant to your current risk areas. Most thorough HR audits examine the following areas.

Employee Records and Documentation

Accurate, complete employee files are foundational to HR compliance. For each employee record, confirm the following:

• Signed offer letter, completed I-9, and current W-4 are on file
• Performance reviews and disciplinary documentation are present and consistently maintained
• Medical records, investigation files, and other sensitive documents are stored separately from general employee files
• Files are retained according to applicable federal and state requirements (at minimum, three years post-termination under FLSA; some states require longer)
• Access to employee files is limited to authorized staff only

Gaps in employee files are among the most common findings in an external HR audit and among the easiest to correct before one occurs.

Worker Classification

Misclassification is one of the most common and costly HR compliance failures. Your review should confirm:

• Each worker designated as an independent contractor meets the applicable federal and state legal tests, including stricter state-level ABC tests where relevant
• All salaried employees classified as exempt meet both the salary basis threshold and the applicable duties test under the FLSA
• Non-exempt employees are accurately tracking all hours worked, including any off-the-clock time
• Job descriptions reflect actual duties performed and support the classification assigned

A documented, good-faith classification review is one of the strongest defenses available if a misclassification claim arises.

Wage and Hour Compliance

Pay practice errors create significant liability, particularly across multi-state workforces. Confirm that:

• All employees are paid at or above the applicable federal, state, and local minimum wage
• Overtime is calculated and paid correctly for all non-exempt employees
• Break and meal period requirements are being met in each operating jurisdiction
• Payroll records document hours worked, earnings, deductions, and pay dates for at least three years
• Pay stubs meet state disclosure requirements
• Any time rounding practices comply with FLSA rules and do not systematically disadvantage employees
• Variable pay plans, bonuses, and commissions are documented and consistently applied

Pay practice errors are a frequent source of employment lawsuits, and multi-state employers carry compounding exposure with each additional jurisdiction. As pay processes are reviewed, a more in-depth payroll audit may be recommended.

Policies, Handbooks, and Required Notices

Handbooks and posted notices are only useful if they reflect current law. Review the following:

• Employee handbook addresses at-will employment, anti-harassment and anti-discrimination, leave entitlements, and remote work policies
• State-specific policy addenda are in place for each jurisdiction where you employ workers
• Required federal and state workplace posters are current and properly displayed, with digital access provided to remote employees
• Policies have been reviewed and updated within the past year

An outdated handbook can undermine otherwise sound HR practices, particularly if policies conflict with current law or recent internal changes.

Hiring and Onboarding Practices

Your hiring process carries its own compliance obligations. Confirm that:

• Job postings include salary ranges where required under state and local pay transparency laws
• Application forms do not include questions prohibited by applicable law, such as salary history bans or certain criminal history inquiries
• I-9 verification was completed on time for every hire and records are stored separately from employee files
• Hiring records, including job postings and selection documentation, are retained for at least one year
• If AI tools are used in screening or hiring decisions, bias audits and human oversight documentation are in place where required

Getting hiring documentation right from the start limits downstream exposure and creates a consistent record of compliant selection practices.

Benefits Administration

Benefits compliance spans multiple federal frameworks. Verify that:

• Plan documents are current and benefit plans are administered consistently with their terms
• Summary Plan Descriptions have been distributed to eligible employees
• COBRA notices are being sent within required timeframes following qualifying events
• FMLA eligibility determinations and required notices are handled correctly
• Health plan affordability meets current ACA thresholds
• ERISA-required benefits records are retained for at least six years

Inconsistent plan administration and missed notice deadlines are two of the most common benefits compliance failures, and both are addressable with regular review.

Performance Management and Employee Relations

Documentation gaps in this area create disproportionate legal risk. Assess whether:

• Employee performance conversations are documented, and reviews are conducted consistently across the organization.
• Disciplinary actions are documented contemporaneously and consistently applied
• Complaint and investigation procedures are clearly defined and accessible to employees
• Anti-retaliation policies are in place and managers are trained on them
• Accommodation requests and responses are documented appropriately

Consistent documentation across the employee lifecycle is one of the most effective ways to reduce legal exposure in termination and discrimination claims.

Separation Procedures

Both terminations and voluntary departures carry compliance obligations. Confirm that offboarding procedures address:

• Final pay timing, which varies by state and in some cases requires immediate payment upon termination
• COBRA and benefits continuation notices delivered within required timeframes
• Return of company property and revocation of system access
• Separation documentation that is consistent with any prior performance records on file

A clean, documented offboarding process protects the organization and creates a clear record in the event a departure is later disputed.

Training and Compliance Requirements

Required training is easy to overlook until it becomes relevant in a claim or investigation. Your audit should confirm:

• Harassment prevention training has been completed by all required employees within applicable state timeframes
• Workplace safety training and any role-specific certifications are current and documented
• Training completion records are retained and accessible
• Managers have received training on leave laws, accommodation obligations, and anti-discrimination requirements

Documented training completion is both a legal requirement in many jurisdictions and a practical defense if a harassment or safety claim arises.

HR Technology and Systems

Your systems shape the accuracy and defensibility of everything above. Assess whether:

• Payroll software, applicant tracking, and your HRIS reflect current configurations and access controls
• Sensitive employee data is encrypted and stored securely, with access limited by role
• System integrations are functioning correctly and not creating recordkeeping gaps through manual workarounds
• Data retention and deletion practices align with applicable legal requirements

System gaps that seem like operational inconveniences often carry compliance consequences, particularly when they affect recordkeeping accuracy or data security.

How Often Should You Conduct an HR Audit?

Most organizations benefit from a full HR audit on an annual basis. That said, certain events may signal that it’s time for an HR assessment: rapid headcount growth, expansion into new states, a leadership transition, or a legal complaint.

Where BPM Can Help

BPM’s human resource services help organizations across all stages of the HR audit process, whether you’re conducting your first compliance check, a more formal HR assessment, or addressing specific compliance risks previously identified. The firm’s HR audit and assessment services are designed to provide the outside perspective that internal teams often need to move from identifying problems to correcting them.

If your HR audit has surfaced areas that need attention, or if you’re not sure where the gaps in your HR function are, BPM can help you find out.