An HR audit is a structured review of your employment practices against what the law requires and what your own policies promise: classification, pay practices, files, postings, policies, and the paper trail behind past decisions.

Its job is to find the gaps while they are cheap, before a Colorado Department of Labor and Employment complaint, an EEOC charge, or a plaintiff's attorney finds them for you. This article walks the checklist a real audit covers, the Colorado items most small businesses fail, and what an audit costs.

Classification: the most expensive category

Two questions carry most of the money. First, exempt versus non-exempt: are salaried employees actually exempt under Colorado's COMPS Order tests, which require both a salary threshold and duties that genuinely qualify? Titles do not create exemptions, duties do, and a misclassified "manager" accrues unpaid overtime liability every week the error persists.

Second, employee versus contractor: Colorado applies a strict test, and a contractor who works your hours, uses your tools, and serves only you is usually an employee wearing the wrong paperwork, with payroll taxes, workers' comp, and penalties accruing behind the label.

Wage and hour practices

The audit checks timekeeping accuracy for non-exempt staff, overtime calculation (Colorado adds daily overtime after 12 hours, not just the federal weekly 40), rest and meal period practices, and final-pay procedures.

Colorado requires immediate payment of final wages on involuntary termination, including earned vacation, which cannot be forfeited. The audit also checks pay stub compliance and whether any deductions being taken are ones Colorado actually permits.

The Colorado-specific layer

This is where out-of-state templates and national payroll defaults quietly fail. The audit verifies: HFWA sick leave accrual and notice (one hour per 30 worked, 48-hour annual cap); FAMLI registration, premium remittance at the 2026 rate of 0.88% of wages, and required employee notices; and Equal Pay for Equal Work compliance in job postings (compensation ranges, benefits descriptions) and promotion notices.

It also covers POWR Act complaint recordkeeping, required workplace postings, and Job Application Fairness Act compliance (no age-identifying information requested on applications). Each one is checkable in minutes and fineable in thousands.

Files, records, and the paper trail

Personnel files get sampled: are I-9s complete, stored separately, and current (a surprisingly common failure with real federal penalties)? Are medical records segregated from personnel files as required? Do discipline records support past terminations, and are complaint records kept in the designated repository the POWR Act expects?

Retention schedules get checked against both federal and Colorado requirements, because keeping too little is a violation and keeping everything forever is its own liability.

Policies versus practice

The subtlest audit finding is the gap between what your handbook says and what your managers do. A handbook that promises a discipline process nobody follows, or a complaint procedure that routes to a manager who left two years ago, is worse than silence, it is documented inconsistency.

The audit reads the paper, then interviews a manager or two, and reports where the two diverge.

Common mistakes owners make

Waiting for a trigger, an audit after the demand letter arrives is called discovery, and it is not yours. Auditing only what feels risky is second; the expensive findings are usually in the category the owner assumed was fine.

Fixing findings without dating the fix is third, a documented remediation date is what shows good faith later. And treating the audit as a one-time event: Colorado has changed employment law every year since 2020, and an annual half-day review is what keeps a clean audit clean.

What this means for your business

A full HR audit for a company between 15 and 75 employees typically runs 25 to 40 consulting hours, commonly $4,500 to $9,000, with a written findings report ranked by exposure. The comparison is not zero: a single misclassification claim or FAMLI remittance failure routinely exceeds the audit cost before any penalties.

The natural next reads are Colorado's pay transparency requirements, the audit item most businesses are currently failing, and the policy set a small business actually needs. When you want the audit done rather than described, that is the audits and compliance work we do most.