Can this form be signed electronically?

Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. §7001) and state UETA laws where adopted, provided intent, consent, attribution, and retention requirements are met.

Is notarization required?

Not usually for a standard internal concern form, but certain attestations or sworn affidavits attached to the case may require notarization depending on state law or specific regulatory needs.

What authentication level is recommended?

Use email or SMS code for routine intake; require stronger identity proofing (KBA, ID analysis) for high-risk or legally sensitive matters and when evidence will be used externally.

How long should records be kept?

Retain files for the investigation lifecycle plus any legal or regulatory minimums; follow IRS, HIPAA, or sector-specific rules — for example, HIPAA requires six years (45 CFR §164.530(j)).

Who can revoke or amend a submission?

Amendments should follow the organization’s change-control process; revocation of a signed form generally requires a new signed record or written retraction with appropriate approvals.

How do I submit large attachments?

Compress files, provide secure shared storage links, or use platform-supported large-file upload features; maintain original metadata and file names when possible.

Business Concern Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS CONCERN FORM / AGREEMENT

Parties and Recitals

This Business Concern Form and Agreement is entered into by and between Reporting Party: and Responding Party: (collectively, the "Parties").

WHEREAS, Reporting Party has identified a business concern involving certain operations, services, or contractual performance described below; and

WHEREAS, the Parties desire to document the concern, define a scope of remedial work if applicable, and agree to terms for addressing, investigating, and resolving the concern in accordance with the terms set forth in this Agreement; and

WHEREAS, the Parties acknowledge that timely reporting and mutually agreed remediation may be required to mitigate risk, preserve business relationships, and ensure compliance with contractual and legal obligations.

Business Information

Reporting Party — Legal Name Reporting Party — Address

Primary Contact Name

Contact Phone

Contact Email

Responding Party — Legal Name Responding Party — Address

Concern Details

Date of Occurrence Location / System Affected Description of Concern Severity (select all that apply)

Minor — operational impact only Major — partial service degradation Critical — material loss or compliance risk

Requested Remedy or Outcome

Scope of Work

The Parties agree that, if remediation or investigative work is required, the Responding Party shall perform the following scope of work as mutually agreed below. The scope shall include reasonable investigation, documentation of findings, and implementation of corrective measures where applicable.

Detailed Scope of Work

Payment Terms

Compensation for any agreed remedial services shall be governed by the terms below. Unless otherwise expressly agreed in writing, Reporting Party shall pay Responding Party in accordance with this section.

Total Amount Payable Payment Schedule / Milestones Late Payment Fee

Term and Termination

This Agreement becomes effective as of the Effective Date and remains in effect until the completion of the Scope of Work or termination in accordance with this section.

Effective Date

Termination Date / Expected Completion

Notice Period for Termination

Either Party may terminate this Agreement for material breach by the other Party if the breaching Party fails to cure the breach within the notice period specified above. Termination shall not relieve either Party of obligations accrued prior to termination, including payment for work performed.

Confidentiality

Each Party acknowledges that in connection with this Agreement it may receive Confidential Information of the other Party. "Confidential Information" includes non-public technical, business and financial information, trade secrets, customer data, and third-party confidential information disclosed pursuant to this Agreement. Each Party shall:

(a) use the Confidential Information solely for the purposes of investigating and remediating the reported concern and performing obligations under this Agreement; (b) restrict disclosure to employees, agents, or contractors who have a need to know and who are bound by confidentiality obligations no less protective than those herein; and (c) take commercially reasonable measures to protect Confidential Information from unauthorized disclosure. Confidential Information shall not include information that: (i) is or becomes public through no fault of the receiving Party; (ii) was rightfully known by the receiving Party prior to disclosure; or (iii) is required to be disclosed by law, provided the disclosing Party receives prior notice and opportunity to seek protective measures.

Indemnification and Liability

Each Party shall indemnify, defend and hold harmless the other Party from any third-party claims to the extent arising from the indemnifying Party's negligent acts or willful misconduct in connection with the matters addressed by this Agreement. Except for liability arising from a Party's gross negligence, willful misconduct, or breach of confidentiality, neither Party shall be liable to the other for consequential, incidental, or punitive damages.

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the state of without regard to conflict of law principles. The Parties consent to the exclusive jurisdiction of the state and federal courts located in that state for the resolution of disputes arising under this Agreement.

Entire Agreement; Amendment

This Agreement, together with any written attachments or amendments signed by both Parties, constitutes the entire agreement between the Parties with respect to the subject matter hereof and supersedes all prior or contemporaneous understandings and agreements, whether written or oral. Any modification or amendment must be made in writing and signed by authorized representatives of both Parties.

Certifications and Acknowledgments

The undersigned representatives certify that they are authorized to execute this Agreement on behalf of the entity identified, that the information provided in this form is true and complete to the best of their knowledge, and that they understand the obligations and remedies set forth herein.

Reporting Party — Printed Name:

By:

Date:

Responding Party — Printed Name:

By:

Date:

What the Business Concern Form Is and when to use it

A Business Concern Form is a structured record used to document and escalate formal concerns about a company's operations, compliance, vendor performance, or suspected misconduct. Organizations use it to capture parties involved, factual chronology, evidence, and requested remedies. Properly completed forms create an auditable record for internal review, regulatory reporting, or legal proceedings and may be submitted electronically under U.S. e-signature law when the format and consent requirements are met.

Why a standardized Business Concern Form matters

Using a consistent form reduces errors, speeds case intake, and preserves an evidentiary record with timestamps and signer attribution. When completed electronically with clear consent it meets ESIGN (15 U.S.C. §7001) and state UETA requirements for enforceability.

Who typically completes and reviews this form

A Business Concern Form is used by a range of internal and external stakeholders to report, evaluate, and resolve issues.

Employees and contractors who observe potential compliance or safety issues and must document facts promptly.
Compliance, HR, legal, or procurement teams that intake reports and coordinate investigations or remediation.
External parties such as vendors, clients, or auditors submitting concerns that affect contractual or regulatory obligations.

Use role clarity to route the form correctly and to ensure the appropriate level of review and record retention.

Step-by-step: Complete and submit the form

Follow these sequential steps to prepare a clear, verifiable submission.

01

1. Gather evidence: Collect emails, photos, and documents relevant to the concern.
02

2. Describe events: Write a factual timeline without legal conclusions.
03

3. Attach files: Upload supporting documents with descriptive filenames.
04

4. Sign and route: Sign electronically or physically, then send to the correct reviewer.

Typical digital workflow settings for online completion

Configure these workflow settings to ensure secure intake, authentication, and routing of submissions.

Field	Configuration
Signers	Reporter signs; optional manager or legal countersignature
Authentication	Email link or SMS code; use stronger ID verification where required
Routing	Auto-forward to compliance or HR based on concern type
Notifications	Email alerts on submission, review, and closure

Technical requirements and common integrations

Choose a platform that supports secure uploads, audit trails, and the authentication level your organization needs.

File formats: Accept PDF, DOCX, JPG, PNG for attachments
Integrations: Link to systems like Salesforce, NetSuite, or Google Workspace for case tracking
Security: TLS in transit and AES-256 at rest for data protection

How electronic submission typically flows

A concise overview of the online submission lifecycle for a Business Concern Form.

Upload: Reporter uploads form and attachments
Verification: Platform logs IP, timestamp, and signer authentication
Review: Assigned reviewer evaluates facts and evidence
Resolution: Investigation outcome and any remedial steps recorded

Core components every professional Business Concern Form should include

Include these sections to support investigation, preserve evidence, and enable defensible decisions.

Reporter Details

Contact information, role, and confidentiality preferences so investigators can follow up and protect sources while documenting chain of custody for communications.

Subject Entity

Full legal name, location, and relationship to reporter to ensure the right contracts or policies are considered during review.

Detailed Timeline

A clear, dated sequence of events that identifies witnesses, actions, and outcomes to reduce ambiguity in investigative findings.

Evidence Index

An itemized list of attachments with brief descriptions and file names so reviewers can quickly locate and verify supporting materials.

Preliminary Risk Assessment

A short section categorizing immediate operational, safety, legal, or reputational risk to drive priority handling and escalation.

Signature and Audit Trail

Named signer, date, and consent statement; for electronic submissions, capture audit metadata that shows intent and attribution.

Download options and supporting documents to attach

Provide multiple download formats and include typical supporting documents to make the record complete for review or outside reporting.

Export Formats

Offer PDF/A for archival, searchable PDF for review, and DOCX for internal editing to meet legal and records-retention needs.

Witness Statements

Attach signed witness accounts or written affidavits that corroborate the timeline; note who collected each statement.

Contractual Documents

Include relevant contracts, purchase orders, or service-level agreements that relate to the concern and establish contractual obligations.

Communications Evidence

Attach emails, chat logs, or call summaries with clear timestamps and participant names to support factual assertions.

Practical tips for accurate, defensible submissions

Apply these practices to improve clarity, protect confidentiality, and reduce downstream disputes.

Use concise, factual language

Document what happened in objective terms with dates and observable actions. Avoid character judgments and legal conclusions that should come from the investigator or counsel.

Attach raw evidence where possible

Submit original file types (emails, screenshots, documents) with clear filenames and metadata to preserve context for reviewers and auditors.

Document chain of custody

Record who received or transferred evidence and when; this helps maintain integrity and supports any future legal or regulatory review.

Respect privacy and privilege

Exclude unrelated personal data and flag privileged communications; consult legal counsel before sharing privileged materials with third parties.

Common timelines and internal deadlines tied to submissions

Organizations typically assign service-level targets for acknowledgement, investigation, and closure of concerns.

Acknowledgement timeframe:

Acknowledge receipt within 5 business days of submission

Initial assessment window:

Complete preliminary triage within 10 business days

Investigation period:

Target investigatory findings within 30 calendar days for standard cases

Escalation deadline:

Escalate high-risk matters to legal or executive leadership within 48 hours

Record retention note:

Retain case files per retention policy and applicable law

Key risks and possible penalties from incomplete or incorrect forms

Incomplete facts: Leads to flawed investigations and legal exposure

Privacy breach: Unauthorized data disclosure may trigger regulatory penalties

Missed escalation: Delayed action can increase operational and safety risk

Evidence loss: Poor file management undermines legal defensibility

False statements: May result in disciplinary or legal consequences

Regulatory noncompliance: Failure to report certain issues can incur fines

eSignature vendor comparison for completing and submitting Business Concern Forms

A vendor comparison highlights starting price, common features, and compliance considerations for platforms used to collect signatures and retain records.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium)	Yes	Yes	Yes	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Varies by plan	Varies by plan	Varies	Varies
Envelope Cap	No envelope cap	100 envelopes/user/year limit	Varies by plan	Varies by plan	Varies by plan

Frequently asked questions about the Business Concern Form

Practical answers to common questions about validity, signatures, notarization, retention, and online submission of the Business Concern Form.

Need help? Contact support

Can this form be signed electronically?
Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. §7001) and state UETA laws where adopted, provided intent, consent, attribution, and retention requirements are met.
Is notarization required?
Not usually for a standard internal concern form, but certain attestations or sworn affidavits attached to the case may require notarization depending on state law or specific regulatory needs.
What authentication level is recommended?
Use email or SMS code for routine intake; require stronger identity proofing (KBA, ID analysis) for high-risk or legally sensitive matters and when evidence will be used externally.
How long should records be kept?
Retain files for the investigation lifecycle plus any legal or regulatory minimums; follow IRS, HIPAA, or sector-specific rules — for example, HIPAA requires six years (45 CFR §164.530(j)).
Who can revoke or amend a submission?
Amendments should follow the organization’s change-control process; revocation of a signed form generally requires a new signed record or written retraction with appropriate approvals.
How do I submit large attachments?
Compress files, provide secure shared storage links, or use platform-supported large-file upload features; maintain original metadata and file names when possible.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now