Skip to main content
Back to Home

Free HR Tool

HR Compliance Gap Finder: Spot Hidden Risks Before They Cost You

A fast scan to spot common HR compliance gaps, prioritize the biggest risks, and build a simple cleanup plan — in about 10 minutes.

Quick Start

  • 1.Fill in your HR footprint
  • 2.Complete the 10-minute gap scan
  • 3.Use the file audit checklist to gather missing items
  • 4.Use the 30-day plan to assign owners and due dates

Your HR Footprint

Employees: 1-9 / 10-49 / 50-500 / 501+

States with employees: 1 / 2-3 / 4+

Hourly employees: Yes / No

Use contractors (1099/subs): Yes / No

Industry risk level: Low / Medium / Higher

10-Minute Gap Scan

Check each box if the statement is true today.

Hiring and eligibility

  • We complete Form I-9 for every hire and can retrieve it quickly.
  • We follow the I-9 retention rule: 3 years after hire or 1 year after termination, whichever is later.
  • Offer letters and onboarding steps are consistent for new hires.

Pay, hours, and payroll evidence

  • We can produce accurate time and pay records for non-exempt employees.
  • We retain payroll records for at least 3 years and wage computation records for 2 years (FLSA).
  • Overtime practices are consistent with written rules.

Workplace conduct and reporting

  • We have an anti-harassment policy with more than one reporting path.
  • We have a documented process to receive, investigate, and resolve complaints.
  • Managers know the escalation path (not just "handle it yourself").

Safety recordkeeping (if applicable)

  • We know whether OSHA injury and illness recordkeeping applies to us.
  • If covered, we post OSHA Form 300A Feb 1 through Apr 30.
  • If covered, we retain OSHA 300, 300A, and 301 records for 5 years.

Offboarding and access control

  • We have an offboarding checklist that includes system access removal.
  • Separation documentation is consistent and stored correctly.
  • We follow a retention standard for key HR records.
Quick Risk Score: Count how many boxes you checked. 0–4: basic coverage • 5–9: meaningful gaps • 10+: time for a structured cleanup plan

HR File Audit Checklist

Use this to gather evidence quickly and assign an owner for each area.

Hiring and work authorization

  • I-9 process exists and is followed consistently Status: In place / Partial / Missing
  • I-9s can be retrieved quickly Status: In place / Partial / Missing
  • I-9 purge dates are tracked Status: In place / Partial / Missing
  • Offer letter template exists and is used consistently Status: In place / Partial / Missing
  • Job descriptions exist for core roles Status: In place / Partial / Missing

Pay and hour records

  • Time tracking method is consistent and documented Status: In place / Partial / Missing
  • Payroll records and wage computation records are retained using a clear standard Status: In place / Partial / Missing
  • Overtime rules are documented and communicated Status: In place / Partial / Missing
  • Pay changes are documented (rate changes, promotions, role changes) Status: In place / Partial / Missing
  • Deductions and reimbursements are documented Status: In place / Partial / Missing

Classification and role clarity

  • Exempt vs non-exempt status is documented with job duties Status: In place / Partial / Missing
  • Contractor usage has a consistent intake and documentation process Status: In place / Partial / Missing
  • Titles and job duties reflect reality Status: In place / Partial / Missing

Workplace conduct and complaint handling

  • Anti-harassment policy exists and includes how to report concerns Status: In place / Partial / Missing
  • Complaint intake and investigation steps are documented Status: In place / Partial / Missing
  • Anti-retaliation expectations are communicated Status: In place / Partial / Missing
  • Managers know what to do when a complaint is raised Status: In place / Partial / Missing

Safety and incident recordkeeping (if applicable)

  • Safety responsibilities are assigned Status: In place / Partial / Missing
  • OSHA recordkeeping process is defined (if covered) Status: In place / Partial / Missing
  • OSHA 300A posting and retention are handled consistently (if covered) Status: In place / Partial / Missing

Offboarding and access control

  • Offboarding checklist exists (final pay timing is state-specific) Status: In place / Partial / Missing
  • System access removal is documented Status: In place / Partial / Missing
  • Separation records are stored consistently Status: In place / Partial / Missing

Record Retention Cheat Sheet

Common retention rules. Confirm additional state and industry requirements.

Payroll records (FLSA)

  • Keep payroll records for at least 3 years.
  • Keep records used to compute wages (time cards, schedules, deductions) for 2 years.

Form I-9

  • Retain Form I-9 for 3 years after date of hire or 1 year after employment ends, whichever is later.

OSHA records (if covered)

  • Retain OSHA 300, 300A, and 301 for 5 years after the end of the calendar year covered.
  • Post OSHA Form 300A in the workplace from Feb 1 through Apr 30.

I-9 Purge Date Calculator

Purge date is the later of: hire date + 3 years OR termination date + 1 year.

Hire date: ____________ → Hire date + 3 years: ____________

Termination date: ____________ → Termination + 1 year: ____________

Purge date (later of the two): ____________

30-Day Compliance Cleanup Plan

Start with anything tied to hiring eligibility, pay and hours, complaint handling, and required safety logs.

GapRisk (H/M/L)OwnerDue DateStatus
     
     
     
     
     
     

Need help closing these gaps?

  • A PEO includes ongoing compliance support as part of their standard service — HR experts review your policies, update your handbook, manage regulatory filings, and keep you current with changing laws.
  • We'll match you with the right PEO at no cost to you. PEO providers compensate us directly.

Sources: U.S. DOL Fact Sheet 21 (FLSA recordkeeping), 8 CFR 274a.2 (I-9 retention), OSHA 29 CFR 1904.33 and OSHA 300A posting guidance.

Questions? Call us at +1 (469) 200-2939

How Do HR Compliance Gaps Lead to Government Investigations?

Government enforcement agencies don't typically discover HR compliance gaps through random audits — they find them through complaints. A current or former employee files a wage claim with the state labor board, files an EEOC charge, or files for unemployment compensation and identifies a discrepancy. From that single complaint, the investigation often expands to examine whether the violation is systemic — affecting other employees over multiple years. Use our onboarding assessment to verify your new-hire documentation is airtight before gaps appear.

The most common investigation triggers are wage complaints (unpaid overtime, misclassified exempt status, missed meal breaks), unemployment claims from workers misclassified as independent contractors, OSHA complaints from employees about unsafe conditions, I-9 audits targeting specific industries, and EEOC charges alleging discrimination in hiring or termination. Any of these can open the door to a comprehensive audit. Businesses with multi-state operations face layered exposure since each state adds its own enforcement layer. Our quick compliance quiz can identify your highest-risk category in under five minutes.

The best defense is a proactive compliance program. Our full HR Compliance Quiz gives you a domain-by-domain risk score across all major categories. Our Employee Classification Checker screens your contractor relationships. Our OSHA Assessment evaluates your workplace safety compliance. And this Gap Finder gives you a practical, printable audit checklist you can work through systematically.

What HR Records Does Every Business Need to Maintain?

Federal and state law require businesses to maintain specific employment records for defined retention periods. I-9 forms must be stored separately from personnel files and kept for 3 years from hire date or 1 year post-termination, whichever is longer. FLSA payroll records must be kept for 3 years. OSHA 300 logs must be retained for 5 years. Job applications and interview notes must be kept for 1–2 years depending on the law. Our HR self-audit tool includes a full recordkeeping checklist to measure your current retention compliance.

Beyond what's legally required, the most important records for litigation defense are: offer letters (proving employment terms), job descriptions (proving legitimate classification decisions), performance reviews (proving legitimate performance management), disciplinary records (proving consistent application of policies), and complaint investigation documentation (proving good-faith response to harassment or discrimination complaints). Businesses across Texas, California, and Florida face additional state-specific retention requirements layered on top of federal minimums — a PEO's HR platform typically manages these automatically.

One critical gap many small businesses have is storing these records inconsistently across emails, paper files, and manager computers. A PEO typically provides centralized document management as part of their HRIS platform — all employment records in one place, with role-based access controls and automatic retention management. This alone reduces litigation risk significantly. Schedule a consultation to discuss how a PEO can manage your HR documentation infrastructure. You can also explore our HR Resource Library for retention schedules and documentation templates.

Want Expert Help Closing Your HR Compliance Gaps?

Let's review your gap findings together and explore how a PEO can provide the infrastructure to maintain ongoing compliance — so you're always audit-ready.

Schedule a Free Consultation