Eighteen months ago, the risk was what an employer said about diversity in public. Today, some of the most important risk may be sitting in documents an employee can forward from the intranet. The remedy is simple but radically different than it was three years ago. The audit has to move from the website to the file drawer. 

When federal enforcement priorities shifted at the start of 2025, beginning with Executive Order 14173 and followed by EEOC and DOJ  guidance on “illegal DEI,” the first wave of scrutiny landed heavily on public statements and DEI programs. Companies that had published diversity commitments, demographic targets, or supplier programs on their websites began reassessing that language. Pages came down. Language softened. Annual reports dropped whole sections.

That reaction solved a visibility problem. It did not necessarily solve the underlying exposure. The more consequential questions often live in internal documents: the leadership competency model that scores “commitment to inclusion,” the succession-planning template with a demographic column, the affinity group charter that limits membership, or the interview guide that asks a candidate how they would “diversify” a team. Each one can be read as evidence that a protected characteristic factored into a hiring, promotion, or access decision.Any one of those can travel from an employee’s inbox to an agency intake form in an afternoon. At that point, the question is no longer what the company said. It is what the company did.

Why the internal record carries the weight now

Two developments changed the math.

First, the EEOC and Department of Justice issued technical assistance in 2025 explaining that DEI initiatives, policies, programs, or practices may violate Title VII when an employment action is motivated in whole or in part by an employee’s or applicant’s race, sex, or another protected characteristic. A protected characteristic does not have to be the deciding factor. It only has to be a factor. The EEOC has since reiterated that position. The technical-assistance materials are non-binding, but they provide a clear indication of the agency’s enforcement position.

Second, the Supreme Court unanimously held in Ames v. Ohio Department of Youth Services in June 2025 that Title VII does not impose a heightened “background circumstances” requirement on majority-group plaintiffs. Before Ames, five federal circuits required majority group plaintiffs to show “background circumstances,” such as a minority decisionmaker or a pattern of discrimination against the majority, just to establish a prima facie case. The Supreme Court eliminated that requirement for all Title VII claims.  A plaintiff alleging discrimination does not face a different prima facie standard simply because that person belongs to a majority group.

The EEOC has said what it will look for, and Ames made it easier for more employees to bring that claim. Put those together and the practical result is that a single internal complaint from a passed-over candidate can raise questions about how the scoring criteria were designed, who designed them, and whether the organization measured anyone against a demographic yardstick. The website may have little to do with that inquiry. The rubric could have everything to do with it.

What a document request looks like at scale

Anyone who has responded to an EEOC charge knows the pattern. The initial request may look manageable. Then the follow-up arrives: applicants for the position, selection criteria, interview notes, comparator information, compensation data, and communications among decision-makers.

That is one charge, at one facility.

For a large employer, a broader agency inquiry can create a significant production burden, particularly when the challenged practice spans multiple facilities, departments, or years. Hiring and promotion records, interview notes, emails, applicant-tracking data, policies, and communications can turn what looked like one employment decision into a much larger document exercise. And once a charge is filed, federal regulations require the employer to preserve every relevant record until the matter is fully resolved. There is no cleaning up after the fact. 

Employers with 500 or more employees should plan their internal review with that possibility in mind. They also face the highest tier of Title VII compensatory and punitive damages, capped at $300,000 per claimant. Waiting until the request arrives is an expensive time to discover that different departments use different forms, keep different records, and cannot explain why. To an investigator, unexplained inconsistency can look like pretext.

The employers keeping programs are doing more work, not less

Some organizations concluded the safest course for them was to end certain inclusion programming altogether. Others, particularly those with a global footprint or a workforce that expects these programs to exist, chose to keep programs and restructure them.

A more carefully structured program in 2026 may look very different from its 2021 version.

The differences are structural. Membership in employee resource groups may be open to anyone, and the charter says so in plain language. The same goes for the benefits that come with membership: leadership roles, mentoring slots, and sponsored events are open on the same terms. Program descriptions explain purpose in terms of perspective and business outcomes rather than reserving opportunities based on protected characteristics. Managers receive actual training, not a policy acknowledgment and a town hall link, and the training treats this subject the way the organization treats other compliance disciplines: with documented expectations. Someone also checks, ideally under privilege, that selections for mentoring, sponsorship, and leadership programs follow the criteria as written.  Multinational employers may also need to account for the fact that programs operating in different countries are subject to different legal frameworks. A practice required abroad, such as gender pay gap reporting in the UK, may raise different questions when carried over to a US workforce.

The honest summary is that keeping inclusion programming may now require more policy drafting, training, and monitoring than many organizations originally budgeted. Employers choosing to maintain those programs should understand that maintaining the 2021 version without reviewing eligibility, charters, decision criteria, and manager training carries its own risk. The exposure is rarely the program itself; it is the gap between what the charter says and what actually happens.

Hiring is now one of the most heavily documented processes in the company

The volume of documentation around hiring and promotion has increased sharply, and the pressure is not limited to employers with inclusion programs. Organizations increasingly want to be able to show who asked what, who answered how, and who decided on what basis.

Investigators reconstructing a hiring decision may have to interview multiple levels of the organization when the person who conducted the interview took no contemporaneous notes and the applicant-tracking system shows only a disposition code. Without notes, the explanation comes from memory, months after the fact, and memory is easy to challenge.

Applicant-screening software adds another layer. If an employer uses automated screening, it should understand how the tool affects candidate selection and what role human review plays in the process.  Buying the tool from a vendor does not shift responsibility for the outcome away from the employer. Some jurisdictions now regulate these tools directly, including New York City (which requires bias audits) and Illinois (which amended its Human Rights Act to cover AI in employment decisions). A tool the employer cannot meaningfully explain can make a challenged hiring decision hardernot easier)to reconstruct.

A caution belongs here. Documentation is protective only when it is consistent, tied to job-related criteria, and produced in the ordinary course. Notes written after a complaint arrives tend to read as advocacy not evidence.A department that generates ten pages of interview notes for one candidate and a disposition code for the next has not necessarily created evidence of a fair process.

More paper is not the goal.

Uniform paper is.

Six things to do before an agency does them for you

Pull every evaluation, promotion, nomination, and succession template in use across the organization and read each criterion as a plaintiff’s lawyer would. Any field that rewards or penalizes an employee based on a protected characteristic, or that may cause decision-makers to do so indirectly, deserves legal review. Vague criteria such as “culture fit” or “executive presence” are common examples of the indirect kind.

Make performance expectations visible before scores are assigned. An employee who has heard the same five assessment areas in every quarterly check-in is less likely to be surprised when a low score in one of them affects a promotion decision. The check-ins should be documented. So should the coaching offered in response.

Standardize interview documentation. Every interviewer, for every candidate, on the same form, retained according to the same applicable retention policy. A reviewer who approves every ranking without reading it is not a meaningful review. If the applicant-tracking system cannot preserve the information the organization needs to explain its decisions later, fix the system.

Audit any AI or algorithmic screening tool for explainability, potential adverse impact, and meaningful human review. If the vendor cannot provide a plain-language account of what the tool does and how it affects candidate rankings, the employer should understand that risk before putting the tool between an applicant and a human decision-maker.

Decide deliberately about inclusion programs. Employers choosing to maintain them should review charters, eligibility requirements, employment opportunities associated with the programs, manager training, and the role protected characteristics play in employment decisions.

Consider a legally structured internal review of hiring and promotion practices before someone else reviews them. When appropriate, counsel can help determine the scope and structure of the review, including whether and to what extent attorney-client privilege or work-product protection may apply. Privilege generally depends on counsel directing the review for the purpose of legal advice, so the structure has to be set from the start, not added later. The goal is to identify the problem template, the outlier department, or the unexplained pattern while there is still an opportunity to address it internally.

Treaty Oak Employers’ Law Group works with employers in Texas, Colorado, Wyoming, and North Carolina on workplace investigations and employment-policy issues. If your organization has not looked closely at its promotion criteria, hiring documentation, or inclusion programming since the enforcement landscape changed, it may be worth taking a closer look.