All templates
HR & PeopleSOPUS edition

Reference Request & Provision Procedure template

A reference request and provision procedure is the written routine for both directions of the reference call: how {{org.name}} responds when another employer asks about a current or former employee, and how it collects references on the candidates it wants to hire — who is authorized to speak, what gets said, what consent is needed, and what gets logged.

Free to use
US-focused
Updated 13 July 2026
UK version →

References are a small task with outsized legal exposure. A negative remark on a phone call can become a defamation claim; a glowing reference for someone dismissed for misconduct can become a misrepresentation claim from the next employer; and a manager freelancing "off the record" creates all of that risk with none of the records. The fix is not silence — it is a procedure: a neutral-reference standard, a short list of authorized responders, and a log.

This procedure covers the neutral-reference standard, authorized responders, handling incoming requests, shutting down backdoor requests, and the mirror-image process for checking references on your own candidates. It is general information for building an internal process, not legal advice.

The template

Full text, ready to adapt.

Highlighted fields are placeholders — replace them with your organisation's specifics. A starting point, not legal advice.

Reference Request & Provision Procedure

SOP · HR & People

1. Purpose and scope

This procedure sets out how {{org.name}} provides references about current and former employees and how it collects references on candidates. It applies to all employees — especially managers, who receive most informal reference requests — and is owned by [HR/name/role].

The core rule is simple: all reference requests go to [HR/named role], and the standard response is a neutral reference. Anything beyond neutral requires the subject's written consent and [HR] approval.

2. Authorized responders

  • Only [HR/named roles] provide references on behalf of {{org.name}} — in any form: phone, email, letter, reference-check platforms, and employment-verification services.
  • Managers and colleagues do not give company references. A manager asked for one redirects the request to [HR contact] — warmly, and without commentary that becomes the reference by accident.
  • [If {{org.name}} permits personal references: an employee may give one in a personal capacity only — off company letterhead and email, stated explicitly as personal, and never covering matters known only from company records.]
  • LinkedIn recommendations and similar public endorsements by managers about current or former reports [are discouraged / require HR guidance] — they are discoverable statements that can contradict the file.

3. The neutral reference standard

Unless the subject has consented in writing to more and [HR] has approved it, {{org.name}} confirms only factual information from the employment record:

  • Dates of employment and job title(s) held.
  • [Location worked and full-time/part-time status.]
  • Compensation — only [with the employee's written consent / where your state's rules permit the disclosure requested]; several states restrict salary-history inquiries, so check your state before answering pay questions.
  • [Optional, decide once and apply always: eligibility for rehire, as a yes/no from the record.] Answering it for some former employees and refusing for others is itself a signal — pick one practice.
  • What the neutral standard excludes: performance opinions, reasons for leaving, disciplinary history, health or leave information, and speculation of any kind.

4. Handling incoming reference requests

  1. 1Route every request — written, phone, or platform — to [HR contact]. No one else answers, however friendly the caller.
  2. 2Verify the requester: for phone requests, take the caller's name and organization and call back through the organization's published main number, not a number the caller supplies.
  3. 3Check for the subject's [written consent / signed release]; where none is on file, [obtain it / provide only dates and title per the neutral standard].
  4. 4Answer strictly from the employment record using the neutral standard — read the facts, decline the rest: "Our policy is to confirm dates and title." Repeated identically, that sentence protects everyone.
  5. 5Decline "off the record" conversations entirely — there is no off the record; every statement is attributable to {{org.name}}.
  6. 6Log the request in [system]: date, requester, organization, subject, what was asked, what was provided, and who responded.

5. Special situations

  1. 1Requests involving threatened or actual litigation, subpoenas, or government investigators go to [counsel/HR director] before any response — acknowledge receipt, promise nothing, escalate the same day.
  2. 2Requests about an employee who left under a [separation agreement with an agreed reference] are answered exactly per the agreed wording on file, by [HR] only.
  3. 3Where {{org.name}} knows of serious misconduct that a glowing reference would conceal, [HR] involves counsel before responding — the safe path is usually the neutral reference, accurately given; the dangerous paths are embellishment in either direction.

6. Requesting references on candidates

  1. 1Obtain the candidate's consent before contacting referees, and time checks [after a conditional offer / at the final stage] per the hiring procedure — some states and localities regulate the timing and content of pre-hire inquiries; check yours.
  2. 2Ask the same job-related questions of every referee from the standard form at [location]: dates, role, responsibilities, performance against the job's requirements, and eligibility for rehire — never health, family plans, protected characteristics, or salary history where your state restricts asking.
  3. 3Record each referee's answers on the form, file them with the hiring record for [period], and weigh a refusal to comment as a neutral fact — many companies give only dates and title as policy, and that policy is not a red flag about the candidate. [If a third-party background-check service is used, follow the additional consent and adverse-action steps that federal rules require — see EEOC guidance and your provider's process.]

7. Records and review

The reference log, consent forms, agreed-reference wordings, and completed reference-check forms are retained at [system/location] for [period], with access limited to [HR/named roles]. The log matters twice: it evidences consistency if a reference is ever challenged, and it shows what was actually said, by whom — memory is not a defense.

This procedure is reviewed [frequency, e.g. annually], after any disputed reference, and when state law changes on references, immunity, or salary-history inquiries. Owner: [name/role]. Next review due: [date].

Make it yours

How to adapt this template.

1

Decide your neutral standard first — dates and title always; pay, and rehire eligibility, as deliberate yes/no policy choices applied to everyone.

2

Name the authorized responders and publish one internal route ("forward all reference requests to [contact]") — the procedure fails at the manager who just answers the phone.

3

Check your state's reference-immunity statute and salary-history rules, and shape the consent form and standard answers to fit them.

4

Put the standard reference-check question form into your hiring workflow so the requesting side is as consistent as the providing side.

5

Brief managers annually with the two sentences they need: "I'll pass you to HR for that" and "we don't do off the record."

A document is not a system

Turn this template into trained, proven behaviour

A policy in a drawer proves nothing. In TrainedTeam this template becomes assigned training with knowledge checks, e-signature acknowledgments, version history, and an audit-ready record of who completed what, when.

Reference Request & Provision Procedure template FAQs

Can we give a negative reference?

Truthful, factual, job-related statements are generally defensible, and many states have immunity statutes protecting good-faith references — but opinion, exaggeration, or unverifiable claims are where defamation exposure lives, and immunity conditions vary by state. This procedure defaults to neutral references precisely so the question rarely arises; where a case is contentious, involve counsel before saying anything beyond the record. This is general information, not legal advice.

Why give neutral references at all — why not just say more?

Because both directions carry risk: criticism invites defamation claims, and praise that conceals known serious problems invites negligent-referral claims from the next employer. A neutral reference — dates, title, facts from the record — is consistent, provable, and fair to everyone. Employees who want a fuller reference can consent in writing, and {{org.name}} can decide deliberately rather than on a phone call.

Who should be allowed to respond to reference requests?

A short, named list — typically [HR] — and nobody else, in any format. The riskiest reference is the unofficial one: a manager chatting to a counterpart, "off the record," with no log of what was said. Train managers to redirect warmly and completely; the redirect itself should carry no commentary.

Do we need the employee's consent before giving a reference?

For a bare confirmation of dates and title, many employers respond without specific consent; for anything more — pay, performance, rehire eligibility in some states — written consent is the safer practice, and some state immunity statutes work best when consent is on file. Collect a signed release during offboarding so the question is settled before requests arrive.

Are we required to respond to reference requests at all?

Generally no — no federal law obliges a private employer to provide references, though [verification requirements can apply in specific contexts, and a separation agreement can create an obligation]. If you adopt a policy of responding, apply it uniformly: refusing to answer only for certain former employees communicates plenty, and inconsistency is what turns a quiet practice into a claim.