An HR audit is a file review with interviews attached, and it goes wrong when it is treated as a culture survey. The reviewer works through record sets in a fixed order, and each set answers a question that can be answered yes or no from the paperwork: does every current employee have a signed contract, is every personnel file missing the same three documents, does the pay data match the classifications, and can you produce the training and eligibility records for a named person within a few minutes. This page is the checklist as a working sequence, with the questions each section is really asking underneath it.
Employment records and the files themselves
Start with a list of every current worker from payroll rather than from the HR system, because the two disagree more often than anyone expects and the difference is the finding. For each one: a signed offer or contract with the current terms, evidence of work authorisation completed and retained correctly, the current job description, and the acknowledgement of the handbook version in force. Then check what is filed where. Medical information, immigration verification and background check results are normally kept separate from the general personnel file, and finding them mixed in is one of the most common results of a first HR audit.
Pay, hours and classification
This is the section with real financial exposure, so it deserves the deepest sampling. Take a handful of workers across different roles and check that the classification matches what they actually do rather than what the title suggests, that hours records exist and are retained for the required period, that overtime was calculated on the correct base, and that any deductions are authorised. Independent contractors get their own pass: the question is not whether there is a contract saying contractor, it is whether the working relationship looks like the contract says it does.
Policies, training and the acknowledgements that prove them
A policy nobody signed for is a policy you cannot rely on. Check that the handbook in circulation is the current version, that starters acknowledged it, and that changes since were re-issued rather than quietly swapped. Then the mandatory training: whatever your jurisdiction and industry require, with completion dates and a way to see who is overdue. The recurring finding here is not missing policies, it is a set of policies written years ago that describe procedures the business no longer follows, which is worse than having none because it documents a standard you are visibly failing.
The questions to ask people, and who to ask
File review tells you what was recorded; interviews tell you what happens. Ask a recent joiner what their first week actually involved and compare it to the induction checklist. Ask a manager how they would handle a grievance and see whether the answer resembles the policy. Ask whoever runs payroll what happens when someone works an unscheduled extra hour. These are not gotcha questions, and the useful ones are always about a specific recent event rather than about policy in the abstract, because people describe the policy accurately and the practice honestly.
Questions people ask about hr audit checklist
Who should run an HR audit?
Someone who does not own the records being reviewed. In a small business that usually means an external reviewer or a manager from another function, because the person who maintains the files cannot independently test whether they are complete.
How long does an HR audit take?
Size it from headcount and the number of record types per employee rather than from a day rate. The preparation checklist on this site converts requirements, evidence items per requirement and time per item into hours, and HR audits are unusually evidence-heavy per requirement.
What is usually the biggest finding?
Incomplete personnel files, followed closely by policies that no longer describe practice. Neither is dramatic on its own; both matter because they are what a claim or an agency request will be answered from months later.
Should the audit cover former employees too?
Yes, at least for retention. Records for leavers have their own retention periods and are the ones most likely to have been deleted early or kept forever, and both are findings.
Sources
- US Department of Labor, Fact Sheet 21: recordkeeping requirements under the Fair Labor Standards Act
- US Equal Employment Opportunity Commission, recordkeeping requirements for employers
- US Citizenship and Immigration Services, I-9 Central: completion, retention and storage of employment eligibility verification