Strategy-Backed. People-First. — Statewide, Texas
Free Investigation Toolkit • Evidence Tracking

Investigation Evidence Log

One numbered index for every document, message, recording, and record an investigation touches — with chain of custody.

Ask an employer six months after an investigation where the evidence is, and the honest answer is usually 'in a few inboxes.' The findings cite text messages nobody can produce, the security footage was overwritten on day 30, and no one remembers who gave HR the schedule printout. None of that means the investigation was wrong — it means no one can prove it was right.

This log fixes the problem at the source: every item gets an ID, a source, a date received, a relevance note, and a storage location the day it's collected. A chain-of-custody table records every handoff, and a preservation checklist catches the evidence that deletes itself — email, chat, and video — before retention windows close.

Who should use this investigation toolkit

  • HR investigators managing document-heavy matters
  • Employers preparing files for counsel, auditors, or agencies
  • Municipal investigators whose files face public records requests
  • Anyone who has ever lost security footage to a 30-day retention loop

What it helps prevent

  • Evidence referenced in findings that no one can locate later
  • Video and messages lost to routine retention deletion
  • Chain-of-custody questions that undermine otherwise solid findings
  • Confidential medical or personal records mixed into general files
  • Reconstruction-from-memory when the matter resurfaces in litigation

What’s inside

  • How to Use This Log
  • Evidence Index
  • Chain of Custody
  • Preservation Actions
  • Reviewer Notes

Before you process payroll, terminate, classify, deduct, or respond to a claim, get the decision reviewed.

Faulkner HR Solutions helps Texas employers, nonprofits, municipalities, and growing businesses fix the people systems behind recurring workplace problems. If this resource raised a risk flag, do not guess your way through the next step.

Frequently asked questions

Why number the evidence?
IDs let findings cite evidence precisely ('E-07, timecard export') and let anyone reconstruct the file later. When a charge arrives eighteen months after closure, an indexed file is the difference between producing records in a day and reconstructing them from memory.
What's the first thing to preserve?
Whatever deletes itself: security video (often 14-30 day loops), chat platforms with retention policies, and email auto-deletion. The preservation checklist runs day one, before a single interview.
Do we really need chain of custody for an HR matter?
For most items, a simple handoff record is enough — and that's all the table asks for. It matters most for physical evidence, personal-device screenshots, and anything that could feed a termination, agency charge, or criminal referral, where 'who touched this and when' will be asked.
How long do we keep the log after the investigation closes?
Keep it with the investigation file under your retention schedule — and if litigation or a charge is reasonably anticipated, nothing gets deleted until counsel confirms the hold is lifted. The log itself notes retention status at closure.
Disclaimer. This resource is provided for general employer education and planning purposes. It is not legal advice and does not create an attorney-client relationship. Employment laws, agency guidance, and local requirements may change. Employers should review the facts of each situation before acting and consult appropriate HR or legal counsel when needed.