Workplace Harassment Prevention for Small Companies
Small companies often assume harassment prevention is for big corporations. "We're a close team, we all know each other, nothing bad happens here." That assumption is exactly how the worst situations develop, unnoticed until they explode into a legal claim, a departure, or a public scandal.
Harassment prevention is not a legal checkbox. It is a culture commitment. Here is how small companies actually build it.
What counts as harassment
Harassment is any unwelcome conduct, based on a protected characteristic, that creates a hostile, intimidating, or offensive work environment, OR where putting up with it becomes a condition of employment.
Protected characteristics vary by jurisdiction but generally include: race, color, religion, sex (including gender identity and sexual orientation), national origin, age (40+ in the US), disability, pregnancy, and genetic information.
Harassment can be verbal, written, visual, or physical. It does not have to be sexual in nature. It does not have to be by a manager. It does not have to come from inside the company, vendors, clients, and contractors count.
The 4 pillars of a real prevention program
1. A clear written policy
Your employee handbook needs a harassment section that is explicit, not vague. Include:
- Definition of harassment with concrete examples
- Who it applies to (everyone, including contractors and vendors)
- How to report (multiple channels, not just "tell your manager")
- What the investigation process looks like
- Anti-retaliation guarantee
- Consequences for violators
Have a local employment lawyer review this section before publishing. It is one of the few places where legal precision matters more than plain language.
2. Training that isn't a check-the-box video
Generic online harassment training does almost nothing. A 45-minute interactive session with real scenarios specific to your industry does a lot.
What training should cover:
- Specific examples of borderline behavior (this is where most harassment actually lives)
- Bystander intervention, what to do if you see something happen to someone else
- How to report, and what happens after
- The anti-retaliation guarantee in practice
Run training within 30 days of every new hire (see onboarding checklist) and refresher sessions annually. Train managers on a separate track, they have additional legal obligations.
3. Multiple reporting channels
The biggest mistake small companies make is having only one reporting channel: "tell your manager." What if the manager is the problem? What if the HR person is friends with the alleged harasser?
A good setup has at least three channels:
- Direct manager
- HR (or the founder at very small companies)
- An anonymous third-party reporting tool
At under 50 employees you can use a simple anonymous form that routes to a designated external party, a board member, outside counsel, or a paid service like Ethena or Vault Platform.
4. A clear investigation process
When a report comes in, you have a legal obligation to investigate. The process should:
- Acknowledge the complaint within 24 hours in writing
- Separate the parties if needed (work from different locations, different teams temporarily)
- Interview the complainant with detailed, factual questions
- Interview the accused (they have a right to respond)
- Interview witnesses if any exist
- Document everything: dates, times, exact quotes, witness lists
- Make a decision: substantiated, unsubstantiated, or inconclusive
- Communicate the outcome to both parties (without sharing confidential details inappropriately)
- Implement consequences proportional to the finding
- Follow up with the complainant at 2 weeks and 2 months to check for retaliation
This is one area where you should absolutely work with an employment lawyer from day one. Mishandled investigations create more legal exposure than the original incident.
Anti-retaliation is non-negotiable
Most harassment claims that lead to lawsuits are not about the original incident, they are about retaliation after the report was made. Subtle retaliation (a missed promotion, a cold shoulder, sudden performance criticism) is the most common form and the most legally dangerous.
Make it crystal clear in writing and in practice: retaliation against anyone who reports in good faith is itself grounds for termination.
What small companies tend to get wrong
- Treating reports informally. "Let's just have a chat about it." No. Formal process matters.
- Letting high performers off. "He's our best salesperson." That is exactly the worst kind of signal to the team.
- Handling it internally when it should be escalated. If leadership is involved, outside counsel investigates. Not negotiable.
- Failing to document. No documentation = no defense later.
- Assuming small teams are safe. Size is not a safeguard.
Reaction vs culture
The best harassment prevention is a culture where people feel safe speaking up early, before a situation escalates. This is why regular 1-on-1s and genuine recognition matter, they build the trust required for early reporting.
Keep the policy alive
Review the policy every 12 months. Update it whenever laws change, when your company crosses a new size threshold, or when an incident reveals a gap. Document every review.
TracefyHR stores policy versions, training completion records, and incident documentation in one secure place, all the things you need to defend your program if it is ever audited or challenged. See how it works →