When should I file the report?

File as soon as credible evidence arises, balancing prompt preservation of evidence with privacy and investigative fairness. Immediate filing helps preserve CCTV, access logs, and witness memory; follow company policies and consult HR or legal counsel before employee-facing disclosures.

What information is essential to document?

Include employee full name, job title, dates and times, precise description of alleged theft, items or hours impacted, witness statements, supporting documents, and initial investigator notes. Missing or vague entries weaken internal findings and may affect legal or law enforcement referrals.

Can I use electronic signatures?

Yes—electronic signatures are generally valid under ESIGN and UETA when intent, consent, attribution, and record retention are met. For sensitive employee records, follow company consent procedures and preserve the audit trail. Consult legal counsel for documents with statutory exceptions.

Who should receive copies of the report?

Distribute copies to HR and the immediate supervisor, retain a personnel file copy, and provide access to legal or security teams as required. Avoid sharing details beyond need-to-know to protect privacy and avoid defamation risks while the investigation proceeds.

Are notarization or witnesses required?

Not typically for internal theft reports. Notarization is uncommon unless the report is converted into a sworn affidavit for court or law enforcement. If witness attestations are needed, collect signed statements or recorded interviews following legal and privacy policies.

How long must records be kept?

Retention depends on document type and industry: keep personnel and investigation files per company policy and legal minimums. Refer to IRS, HIPAA, and employment law guidelines; typical retention ranges from three to seven years, longer when litigation or regulatory holds apply.

Electronic Signature
Templates
HR
Employee Work Theft Report

Employee Work Theft Report

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

EMPLOYEE WORK THEFT REPORT

Report Header

Report Date: Report Number (if assigned):

Reporter — Personal Information

Full Legal Name Address

Phone

Email

Accused Employee — Employment & Identification

Accused Employee Name

Job Title

Department

Supervisor / Reporting Manager: Employee Start Date: Current Salary / Rate:

Employment History (Accused) — At least two prior employers

Employer 1 — Company Name

Title

Dates Employed

Primary Responsibilities Reason for Leaving Employer 2 — Company Name

Title

Dates Employed

Primary Responsibilities Reason for Leaving

Education & References

Highest Degree Earned Institution Graduation Date

Professional References (3)

Reference 1 — Name

Reference 2 — Name

Reference 3 — Name

Incident Details

Location of Incident: Date of Incident: Time (approx.):

Type of Theft (check all that apply)

Cash Inventory/Stock Equipment Time/Theft of Labor Fraud/Unauthorized Transactions

Description of Incident Items Allegedly Stolen or Misappropriated (list each item)

Estimated Total Value: $

Witnesses

Witness 1 — Name & Contact Witness 1 Statement Witness 2 — Name & Contact Witness 2 Statement

Evidence & Attachments

Evidence Collected (photographs, video, access logs, receipts, inventory records, etc.):

Additional Notes Regarding Evidence

Prior Related Incidents

Are there prior reported incidents involving the accused? Yes No

If yes, summarize prior incidents, dates, and outcomes

Recommended Action & Administrative Notes

Immediate Recommended Action (e.g., suspension, secure evidence, notify security) Investigating Official / Department

Legal & Administrative Disclosures

At-Will Statement: Employment with the company is at-will, unless otherwise set forth by a written agreement signed by an authorized company representative. This report and any subsequent investigation do not modify the at-will employment relationship.

Equal Opportunity: The company prohibits discrimination and retaliation. Reports of alleged theft will be investigated impartially. Retaliation against any person for making a good-faith report or participating in an investigation is strictly prohibited and may result in disciplinary action.

Authorization to Investigate

By signing below, the reporter certifies that the statements contained herein are true to the best of their knowledge and authorizes the company and its agents to investigate this matter, to access relevant employment, financial and security records, and to contact witnesses and prior employers as necessary for the investigation.

Reporter Certification

I certify that all information provided in this Employee Work Theft Report is true, complete, and based on my direct knowledge or diligent investigation. I understand that knowingly providing false information in connection with an investigation may result in disciplinary action, up to and including termination.

Reporter Name:

Signature:

Date:

What an Employee Work Theft Report Is

An Employee Work Theft Report documents allegations that an employee unlawfully removed, misused, or stole employer property, time, proprietary information, or work product. Employers use it to record factual details, identify witnesses, preserve evidence, and create an administrative record for internal investigation or potential criminal or civil referral. The report typically summarizes dates, times, locations, items or services affected, steps taken to verify facts, and recommended next actions. Properly completed reports support consistency, protect legal rights, and form the basis for disciplinary decisions, restitution claims, or law enforcement outreach.

Why a Clear Report Matters

A clear Employee Work Theft Report creates a consistent record for investigations, preserves time-sensitive evidence, supports fair disciplinary processes, and strengthens employer positions for restitution or criminal referral. Accurate reports reduce legal exposure and improve auditability.

Who Prepares and Uses These Reports

HR, security, and supervisors typically prepare and review these reports; legal and finance teams consult when recovery or prosecution is considered.

Human Resources — documents incidents, manages personnel actions, and keeps the official personnel file.
Supervisors/Managers — identify incidents, collect initial facts, and implement immediate workplace controls.
Security/IT — secures digital evidence, preserves logs, and supports chain-of-custody documentation.

External parties such as law enforcement and company counsel may later receive reports for investigation or prosecution.

Key Sections That Make the Report Actionable

Core sections that make an Employee Work Theft Report actionable and legally defensible during internal reviews or external proceedings processes.

Incident Summary

Concise incident narrative including who, what, when, where, and how; focus on observable facts and immediate impacts. This snapshot guides triage and determines investigative priorities and preservation steps.

Evidence List

Itemized inventory of physical and electronic evidence, custodians, and storage locations. Include file names, serial numbers, timestamps, and any access credentials recovered during initial collection.

Witness Statements

Summaries or full statements from witnesses with contact details and dates. Note whether statements were written, recorded, or transcribed and who took the statement and method.

Financial Impact

Quantify losses, shortages, or unauthorized payments with supporting calculations. Attach payroll reports, transaction logs, and cost estimates to substantiate restitution claims and projected recovery timelines.

Investigative Actions

Document interviews, systems accessed, audits run, and security measures implemented. Record dates, personnel involved, and next investigative steps to maintain a clear chain of events.

Recommended Resolution

Specify disciplinary recommendations, restitution amounts, or referral to law enforcement. Include rationale, applicable policy violations, reasonable timelines for remedial actions, and appeal procedures where applicable.

Step-by-Step: Completing the Report

Follow these steps to complete an Employee Work Theft Report accurately and preserve evidence for internal or external review.

01

Gather Details: Record dates, times, locations, and items involved.
02

Identify Witnesses: List names, contact info, and what each observed.
03

Preserve Evidence: Secure devices, documents, logs, and CCTV before alteration.
04

Describe Action: Summarize investigation steps and recommended administrative actions.

Configuring the Online Report Workflow

Configure online form behavior and integrations to collect evidence, route approvals, and preserve audit trails for the Employee Work Theft Report.

Field	Configuration
Required Fields	Full name, ID, date/time required
Evidence Upload	Allow multiple file types, max 50MB
Authentication	Email + optional SMS code for signer verification
Routing	Route to HR, security, and legal in sequence

Where Completed Reports Should Be Sent

Routing and submission options for completed Employee Work Theft Reports, internal workflows, and external notification pathways.

Submit to HR: Deliver report to HR case manager and attach supporting files.
Notify Security: Provide security with evidence and incident summary for technical review.
Share with Legal: Send redacted copy to counsel when legal action is anticipated.
Law Enforcement: Coordinate with local police for criminal referral when warranted.

Technical Considerations for eSubmission

Typical delivery channels and technical integrations supported for electronic Employee Work Theft Reports within enterprise environments.

File Formats: PDF and DOCX supported
Integrations: Connectors: HRIS, SIEM, and storage
Authentication: Supports SSO, MFA, and audit trail

Required Information Summary

Full Legal Name: Exact legal name on personnel records

Employee ID: Company HR identifier or badge number

Incident Date/Time: MM/DD/YYYY and HH:MM format

Location: Specific site, system, or account name

Alleged Conduct: Clear factual description of theft or misuse

Supporting Documents: Attach logs, receipts, images, and statements

Common Preparation Mistakes

Vague or opinion-based descriptions that lack dates, times, and specific item details make it difficult to corroborate allegations or justify disciplinary action.
Failure to secure digital evidence such as access logs and CCTV immediately can result in altered or overwritten records and weaken investigative findings.
Collecting witness statements informally, without signatures or dates, reduces their evidentiary value and complicates later verification during HR or legal proceedings.
Over-sharing report details beyond need-to-know risks defamation, privacy breaches, and retaliation claims; limit disclosure and follow company policies.

Consequences of an Incorrect or Incomplete Report

Disciplinary Risk: Inaccurate reports undermine disciplinary actions

Legal Exposure: Defamation and wrongful termination claims

Evidence Loss: Delayed reporting risks lost records

Tax Implications: Payroll adjustments and withholding errors

I-9 Compliance: Employment verification issues if mishandled

Criminal Referral: Insufficient documentation hinders prosecution

Timing: Preservation, Notification, and Interviews

Key timing considerations for filing, preserving evidence, and notifying parties after an alleged workplace theft.

Immediate Preservation:

Secure evidence and log access within 24–72 hours.

Internal Notification:

Notify HR and security within 48 hours of discovery.

Employee Interview:

Conduct interviews within seven business days following initial report.

Law Enforcement Referral:

Refer promptly if criminal activity is suspected; preserve chain-of-custody.

Record Retention:

Retain investigative files per policy and legal minimums.

Milestones from Intake to Closure

Milestone timeline showing stages from report intake to final disposition of an Employee Work Theft Report.

01

Intake and Triage

Initial report recorded, evidence flagged, and immediate safeguards implemented to prevent further loss.

02

Investigation

Interviews conducted, forensic data collected, and discrepancies analyzed for substantiation.

03

Decision

Disciplinary action, restitution, or criminal referral decision made based on findings.

04

Closure and Retention

Final report filed, stakeholders notified, and records retained following retention policy and legal requirements.

How This Report Differs from a Police Report

Compare the Employee Work Theft Report to related documents to clarify purpose, audience, and legal weight.

Document	Employee Work Theft Report	Police Report
Primary Purpose	internal investigation	criminal prosecution
Typical Audience	hr, security	law enforcement
Evidence Standard	preponderance for discipline	probable cause for arrest
Confidentiality	usually internal	public record when filed

Pricing and Feature Snapshot for eSignature Platforms

High-level vendor comparison focused on pricing and core features relevant to e-signing Employee Work Theft Reports.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Frequently Asked Questions

Answers to common questions about preparing, submitting, and maintaining an Employee Work Theft Report, including legal risks and electronic submission options.

Need help? Contact support

When should I file the report?
File as soon as credible evidence arises, balancing prompt preservation of evidence with privacy and investigative fairness. Immediate filing helps preserve CCTV, access logs, and witness memory; follow company policies and consult HR or legal counsel before employee-facing disclosures.
What information is essential to document?
Include employee full name, job title, dates and times, precise description of alleged theft, items or hours impacted, witness statements, supporting documents, and initial investigator notes. Missing or vague entries weaken internal findings and may affect legal or law enforcement referrals.
Can I use electronic signatures?
Yes—electronic signatures are generally valid under ESIGN and UETA when intent, consent, attribution, and record retention are met. For sensitive employee records, follow company consent procedures and preserve the audit trail. Consult legal counsel for documents with statutory exceptions.
Who should receive copies of the report?
Distribute copies to HR and the immediate supervisor, retain a personnel file copy, and provide access to legal or security teams as required. Avoid sharing details beyond need-to-know to protect privacy and avoid defamation risks while the investigation proceeds.
Are notarization or witnesses required?
Not typically for internal theft reports. Notarization is uncommon unless the report is converted into a sworn affidavit for court or law enforcement. If witness attestations are needed, collect signed statements or recorded interviews following legal and privacy policies.
How long must records be kept?
Retention depends on document type and industry: keep personnel and investigation files per company policy and legal minimums. Refer to IRS, HIPAA, and employment law guidelines; typical retention ranges from three to seven years, longer when litigation or regulatory holds apply.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now