When a sensitive complaint arrives, the organization enters the most decisive window of the entire case: the first 48 hours. In that span the evidence still exists, the versions have not yet aligned, and the legal clocks are just starting to run. What is done or left undone there will condition everything else.
First: what to do, in order
- Acknowledge receipt. To the reporter, in writing, the same day. Without assessing the facts or promising outcomes: just confirm the report was received and is being processed.
- Preserve evidence. Emails, messages, video, access logs, records. The preservation instruction (to IT and to custodian areas) must be documented: in litigation, evidence that was allowed to vanish speaks against the company.
- Classify the conduct and its severity. Not every complaint warrants a formal investigation; every complaint warrants classification under written criteria: conduct type, gravity, legal urgency, people at risk.
- Assess retaliation risk. Does the reporter answer to the respondent? Are there vulnerable witnesses? Interim measures (reassignments, contact restrictions) are decided here, taking care not to punish the reporter de facto.
- Define the route and sign it. Formal investigation, intervention, mediation or documented closure, with written grounds and a named owner. That signature is the difference between a process and an improvisation.
Then: what never to do
- Confront the respondent immediately. The urge to "clear it up now" tips off the respondent before evidence is preserved and witnesses heard. Their moment will come, with due process, but it is not day one.
- Promise outcomes or sanctions. "We are going to fire him," said on day one, is a promise that compromises the impartiality of everything that follows.
- Assign the case to the manager of the implicated area. That is the recipe for judge-and-party, and for nullity later.
- Let the case "rest." In Chile the Karin Act deadlines are strict; in Peru the procedure has dates; in Mexico limitation periods run. Rest is the contingency.
The third-party test
A simple yardstick for self-assessment: if an inspector, a judge or the parent company’s committee reviewed tomorrow what was done in these 48 hours, would they find a documented process with criteria and owners, or a chain of improvised emails? IEC’s entire model is built around that window: every referred complaint is classified, assessed and given a route signed by an investigator within a maximum of 48 business hours. Not because speed looks good, but because those two days are where the case is won or lost.
← All insights