The HR compliance gaps small employers actually have (and how to find yours in an afternoon)

Compliance problems in small businesses are not usually judgment calls that went the wrong way. They are things that were correct once and were never revisited.

That is the whole mechanism, and it is worth understanding before you go looking, because it tells you what you are looking for. You are not auditing your own decisions. You are looking for the places where time passed and nobody was assigned to notice.

The good news that follows from it: these gaps cluster. They are not spread evenly across everything an employer does. They collect in a small number of predictable spots, and you can check all of them yourself in an afternoon.

This is general information, not legal advice.

The six places gaps cluster

1. Written policies that no longer match current requirements

The most common one, and the least dramatic.

A handbook or a policy set gets written. It is accurate. Then requirements move, and the file does not, because a document in a shared drive has no mechanism for telling you it has gone stale. There is no alert, no expiry, no moment where anything visibly breaks.

The failure only surfaces when somebody else reads your policies back to you, usually in a dispute, and the date on the document starts doing work you did not intend.

What to look at: the revision date, and whether the policies inside it describe how your business actually operates now.

2. Classification decisions made in a hurry

Whether someone is an employee or a contractor, and whether an employee is exempt or non-exempt, are determinations with real tests behind them. In practice they very often get made once, quickly, at the moment of hiring, based on what the arrangement felt like or what the last similar person was called.

Then the role changes and the classification does not. The contractor who now works set hours on your equipment is still filed as a contractor. The person who was hired into a role with real discretion and now does something else entirely is still exempt because that is what the offer letter said.

Nothing about that is deliberate. It is just that classification is decided at hiring and revisited never.

What to look at: every contractor you have used for more than a few months, and every exempt employee whose actual duties have drifted from the job they were hired into. These are the two that most reward a second look, and both are worth running past a credentialed advisor rather than deciding alone.

3. Requirements in states where your people work but your business is not registered

This is the fastest-growing gap in small-business HR and the one most owners have not thought about at all.

Your obligations to an employee are substantially driven by where that employee physically performs the work, not by where your business is incorporated or where your office is. Hire someone in another state and you have taken on that state’s employment law as of their start date.

The state layer is also the layer that moves most. Federal requirements are the ones everybody has heard of and the ones every template addresses. State requirements vary more, change more often, and follow the employee.

Remote hiring turned this from an enterprise problem into a twelve-person-company problem, without anybody announcing the change. There was no moment where an owner decided to become a multi-state employer. There was just a good candidate who lived somewhere else.

What to look at: a written list of every state where an employee physically works, compared against the states your policies actually address.

4. Required postings and notices

Unglamorous, genuinely checkable, and frequently wrong for a reason that is almost funny: the poster on the breakroom wall was correct when it was hung, and posters do not update themselves.

There is a second version of this that catches more people now. A workforce that is partly or entirely remote does not walk past your breakroom wall, which raises a question about how required notices actually reach those employees.

What to look at: when your postings were last refreshed, and how a remote employee would receive the same information.

5. Manager training that was never assigned, or never recorded

Ask an owner whether their supervisors know how to document a performance problem and the answer is usually yes. Ask what training is on record for those supervisors and the answer is usually nothing.

Both answers can be true. The manager may genuinely know, because you told them, in the truck, two years ago. But a conversation does not produce a record, and for every practical purpose that matters later, training you cannot evidence did not happen.

What to look at: the list of everyone who supervises another person, and what is recorded, dated and retrievable for each of them.

6. Documentation practice

The least visible of the six, and the one that determines how much the other five cost you.

Documentation practice means what gets written down when something happens, by whom, and where it goes. Most small businesses have no practice at all. They have a habit, which is that things get documented when somebody senses trouble coming, which is exactly the pattern that looks worst in retrospect.

A file that starts three weeks before a termination tells a story. A file that has been maintained consistently for everybody tells a different one.

What to look at: pick two employees, one you have had a problem with and one you have not, and compare what is in their files.

Why the state layer is where the misses are

Of the six, number three deserves a second pass, because it explains why an employer who is genuinely trying still ends up exposed.

Federal employment law is a single system with a single set of headlines. It is slow to change and well telegraphed when it does. It is also the layer that every downloaded template, every free checklist and every “HR 101” article covers, so it is the layer that tends to be handled.

State law is not one system. It is fifty of them, running independently, each on its own schedule, and none of them is going to send you a notice. And because obligations follow the employee, adding one person in one new state can change what you owe without changing anything about how you operate.

That is the structural reason the misses concentrate there. It is not that state requirements are harder to understand. It is that there is no single place a small employer would naturally look, and no event that prompts them to look.

How to actually check, in an afternoon

Run these four in order. It is genuinely an afternoon, and the hard part is the looking, not the fixing.

1. Pull the handbook and look at the date. Then read three policies at random and ask whether they describe your business as it operates today.

2. List where your employees physically work. State by state, name by name. Then open the handbook and see which of those states it mentions.

3. List everyone who manages people, and what training you can evidence for each. Not what they know. What is recorded and dated.

4. Check the postings, and check how a remote employee receives the same notices.

You will not finish with a legal opinion. You will finish with something better for the purpose, which is a specific list of things to go look at, in your business, with names attached.

Start for free. Free for 30 days. No credit card required. Cancel anytime. The HR Assessment scores where you stand, and a credentialed advisor will check your answers. Start for free.

What to do with what you find

A named gap is a budgetable gap. Unnamed, it is a risk you carry without pricing. That is the entire reason the afternoon is worth it.

Fix in this order:

1. Anything affecting a current employee. A live classification question, a policy being applied to someone right now, a manager handling something they are not equipped for. These are the ones with a person attached and they go first.
2. Anything with a filing or posting deadline. Dated obligations are cheap to satisfy and expensive to miss, which is a bad combination to leave sitting.
3. Policy language. Important, and almost never the emergency. Fix it properly rather than fast.

For the ones you are not sure about, the right move is not a search engine. Classification, accommodations, investigations and terminations are the categories where a credentialed advisor is worth their whole cost, and where the difference between a good answer and a plausible one is the entire outcome.

Where AllMyHR fits

AllMyHR is HR, not payroll. Compliance, policy, training and advisors. It sits alongside whatever you use to pay people.

It runs on the Mineral platform, which supports 1M+ companies and monitors 3,000+ federal and state regulations. Against the six gaps above, that means:

• Policies that stay current. The Smart Employee Handbook holds the compliance layer current, federal and state, without you tracking regulatory change. More on how that works.
• The state layer, monitored. All 50 states, built against where your employees actually work.
• Manager training that produces a record. 300+ courses on demand, each with a downloadable completion certificate. More on that.
• Answers on the day you ask. ARIES™ handles routine questions immediately: policy basics, leave requirements, hiring compliance. Terminations, investigations, accommodations and benefits route to a credentialed advisor holding PHR, SHRM-CP or SPHR in one click. ARIES™ supports the advisors, it does not replace them.
• A place to start. The HR Assessment runs the afternoon above as a structured scored exercise instead of a manual one.

All of it is free for 30 days at AllMyHR Business level, with no credit card. At day 30 nothing happens automatically: your account deactivates with the work saved, and if you buy later it is all still there.

Related reading: the compliance tools, what non-compliance costs, and if you are still deciding between a platform, a consultant and a hire, what to ask before you pick one.

Start for free. Free for 30 days. No credit card required. Cancel anytime.

Start for free or see what is included.

This article is general information, not legal advice.