Stabilize, Preserve, Protect: A Triage Protocol for the First Two Days of a Harassment Complaint

Most employers can point to a harassment policy. Fewer can describe, with confidence, what happens in the two days after an employee says the policy has been violated. That gap matters. In harassment matters, the earliest choices often determine whether the employer can later show a prompt, thorough, and impartial response. A delayed or improvised process can turn a manageable complaint into a costly liability—and can leave the complainant exposed to further harm.

The first 48 hours are not an investigation. They are a controlled response: intake, protection, preservation, and documentation. The goal is to stabilize the situation, reduce risk, and set up a fair process for everyone involved. The following protocol is designed for HR teams, supervisors, and business owners who need a repeatable method rather than a memorized speech.

The clock starts when a supervisor learns, not when HR receives a form

Harassment complaints rarely arrive through the front door of the HR department. They surface in a hallway conversation, a resignation interview, a late-night email, or a comment to a team lead. For compliance purposes, the employer's response clock generally begins when a person with supervisory authority learns of the conduct—not when a formal complaint is filed or when legal counsel is notified.

That makes supervisor training a front-line control. Managers should know three things: how to receive a complaint without arguing or investigating, how to route it immediately to the designated intake contact, and why they must not discuss it with the accused or with colleagues. A supervisor who says, 'Let me see what I can find out,' has begun an unauthorized investigation and created a record that may later be used against the company.

Designate a primary and backup intake contact. Give supervisors a short script: 'Thank you for telling me. I take this seriously. I am not the person who will investigate, but I will connect you with the right person today.' Then make the connection. Same-day routing is the standard; next-business-day routing is the fallback, not the plan.

Intake: gather facts without negotiating the outcome

Intake is a fact-gathering conversation, not a mediation session. Hold it in a private setting, allow the complainant to bring a support person if policy or law provides for one, and use open questions. Ask what happened, when and where it happened, who was involved, who may have witnessed it, and whether there are documents, messages, or other records. Do not ask the complainant to confront the accused, to 'work it out,' or to decide whether the conduct was serious enough to report.

Avoid promising absolute confidentiality. Explain that the information will be shared only with those who need it to review and resolve the complaint, and that the employer will take steps to protect against retaliation. Avoid promising a particular outcome. Avoid expressing a conclusion about credibility. A statement such as 'This sounds like a misunderstanding' may feel efficient in the moment, but it can undermine the process and become evidence of bias.

Document the intake in a factual summary. Use the complainant's words where possible, distinguish direct observations from hearsay, and note any immediate safety concerns. Provide the complainant with a copy of the anti-retaliation policy and explain how to report any subsequent retaliation. If the complainant requests anonymity, explain the limits: the employer may need to act on the information, but it may not be able to pursue discipline without identifying witnesses or sources.

Interim measures: protect without punishing

Interim measures are temporary steps that reduce the risk of further harm while the matter is reviewed. They are not discipline and should not be framed as a finding. Common measures include schedule adjustments, a temporary change in reporting lines, relocation within the worksite, remote work where the role permits, or paid administrative leave for the accused.

Use care when changing the complainant's schedule, shift, or location. If the complainant is moved to a less desirable assignment or loses pay while the accused remains in place, the action may look like retaliation. Consider the burden on each party and document the rationale. If the accused is placed on leave, follow company policy and applicable law on pay and benefits. If the parties must continue working together, set clear expectations about professional conduct and reporting any further incidents.

For threats of violence, stalking, or immediate safety concerns, do not wait for the standard review process. Contact legal counsel and, where appropriate, law enforcement. If the complaint involves a senior leader, board member, or someone in the complainant's chain of command, escalate immediately to avoid conflicts of interest.

Preserve evidence before memories and messages fade

Evidence preservation should begin in the first 48 hours. Issue a written litigation hold to custodians who may hold relevant records, including email, chat messages, text messages, calendar entries, access logs, security video, personnel files, and prior complaints. Suspend routine deletion for relevant accounts and devices in coordination with IT. Do not review privileged communications without counsel's direction.

Maintain a central case file. Include the intake summary, interim measures and their rationale, evidence preservation steps, communications with the parties, and a chronology of events. Keep the file factual. Avoid editorial comments such as 'complainant seems unreliable' or 'accused is a good employee.' Those phrases may be discoverable, and they can undermine the appearance of impartiality.

Anti-retaliation safeguards start on day one

Retaliation is the most common way a defensible complaint becomes an indefensible lawsuit. Remind the complainant, witnesses, and accused—in writing—that retaliation is prohibited. Explain what retaliation can look like: schedule changes, exclusion from meetings, sudden performance criticism, social isolation, or reduced opportunities. Set a check-in schedule with the complainant during the review and for a reasonable period after it concludes.

Train supervisors who are not part of the investigation to keep their interactions professional and to report concerns. Do not share information broadly. Use a need-to-know approach, and document who received what information and why. If the complainant reports retaliation during the review, treat it as a separate concern and escalate it immediately.

The 48-hour checkpoint

By the end of the second business day, the employer should be able to answer yes to a short list of questions: Was the complaint routed to a trained intake contact? Was intake documented? Were interim measures considered and, if used, documented? Was a litigation hold issued? Were the parties reminded of anti-retaliation protections? Is there a clear next step and an assigned owner?

If the answer to any of these is no, close the gap before the week ends. The first 48 hours are not about finishing the investigation. They are about proving, through a disciplined record, that the employer took the report seriously and acted promptly. BHI ERC advises employers to build this triage protocol into their compliance calendar and test it with tabletop exercises before a real complaint arrives. The policy on the wall matters less than the process that starts when someone says, 'I need to report something.'