An HR audit reviews whether a company's people processes, from hiring to exit, follow its own policies and the labour laws that apply, and whether the records can prove it. It is not a performance review of staff. It tests the system that hires, pays, manages and releases them. This guide gives the scope, a checklist and the findings that show up most.
Last reviewed: 17 October 2026. Facts checked. We searched for HR audit scope and checklists in India and read the search summaries of HR software and compliance vendor pages. We did not open any statute, labour department page or the Labour Codes. Several vendors say the Labour Codes took effect on 21 November 2025, but we did not confirm this from an official source, so check which law and state rules apply to you. The "common findings" reflect what multiple vendors repeat, not a measured survey.
What an HR audit is
There are two kinds, and it helps to say which you want.
- HR compliance audit. Are statutory registers, returns, payments and policies in place? This is the most common request.
- HR function audit. Is the HR process well designed and fairly applied: recruitment, appraisal, promotion, exit?
Most engagements mix both. State the scope in writing.
Scope by employee life cycle
| Stage | Examples of what to test |
|---|---|
| Hiring | Approved headcount, job description, interview records, background checks, offer approval |
| Onboarding | Appointment letter, signed policies, identity and address proof, statutory nominations |
| Payroll | Salary structure, deductions, PF and ESI, tax deducted, approval of changes |
| Attendance and leave | Records, leave balances, overtime approval |
| Performance and pay | Appraisal completion, basis for increments and bonus |
| Conduct | Code of conduct, complaints, disciplinary files, sexual harassment committee |
| Exit | Resignation acceptance, full and final settlement, gratuity, clearance, access removal |
For the payroll stage, use our payroll internal audit checklist. For the full cycle, see the hire-to-retire internal audit checklist and the hire-to-retire audit workbook.
How to run it
- Agree scope and period. Include all locations and employee types, such as contract and trainees.
- Get a master employee list. Take it from payroll, then match it to HR records and system access. Differences are early findings.
- List the laws that apply. This depends on headcount, sector and state. Ask your legal or HR head for the compliance calendar.
- Sample employees. Pick across joiners, leavers, promotions and salary changes.
- Test each file. Trace a joiner from approval to first salary, and a leaver from resignation to final payment.
- Test the system. Check who can change salary or bank details and whether changes are approved.
- Report and rate. Separate legal breaches from policy gaps.
Checklist
Records
- Personnel file for every sampled employee, with a complete document set
- Appointment letter signed and dated before joining
- Statutory nominations on file
- Records kept in a secure place with limited access
Payroll and statutory
- Employee list reconciles between HR, payroll and bank payments
- Salary matches the approved structure and any change has authority
- Provident fund, state insurance, professional tax and tax deducted at source are calculated, paid and filed on time
- Bonus and gratuity calculated and provided for
- No ghost employees: each person on payroll exists and works
Policies and conduct
- Policies approved, current and acknowledged by staff
- Internal committee for sexual harassment set up, with an annual report where required
- Whistleblower channel known to staff (see vigil mechanism and whistleblower policy)
- Disciplinary actions documented and consistent
Leave and attendance
- Leave balances computed correctly
- Overtime approved before it is paid
Exit
- Settlement paid within the time the policy or law sets
- System access, assets and ID cards recovered on the last day
Data
- Personal data such as ID numbers and bank details protected and access limited. See our DPDP compliance checklist template.
Common findings
Vendor sources repeat the same patterns.
- Missing or incomplete personnel files. Documents absent or signed after the joining date.
- Registers not up to date. Wage and leave records kept in an old format.
- Late or missed filings. Returns not filed on time.
- Gratuity not provided for. The liability is not in the books.
- Salary changes without approval. Often by one person with system rights.
- Leavers still active. Employees who left but still have system access or even payroll lines.
- Policies not acknowledged. Handbook exists, but no signatures.
Frequently Asked Questions
What is an HR audit?
A review of HR processes, records and compliance, from recruitment to exit, against company policy and applicable law.
Is an HR audit mandatory?
Not as a standalone requirement in the sources we checked. Many statutory filings and records are mandatory, and an HR audit tests whether you meet them.
What documents are checked in an HR audit?
Personnel files, appointment letters, salary registers, PF and ESI challans, leave records, policies, appraisal records and exit files.
Who should conduct an HR audit?
Internal audit, an external firm or a labour law specialist. The reviewer should be independent of the HR team.
How often should an HR audit be done?
Many companies do it yearly. Do it sooner after rapid hiring, a merger or a change in labour law.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error