Glass high-rise under a blue sky, representing an organization reviewing its policies

Specialized investigations · Audits

Compliance Audits in Idaho

A compliance audit tells an Idaho organization whether what it actually does matches what its policies, contracts and state law require. Delator Group tests employment practices, data handling, monitoring, reporting duties and records procedures through documents, interviews and observation, then reports the gaps in writing before a regulator, plaintiff or reporter finds them.

  • Practice tested against policy and law
  • Findings ranked by risk
  • Audits from $1,200
5.0 on Google · 18 reviews
  • $1,200+Audit engagements
  • $100/hrStandard investigative rate
  • WrittenScope and price before work starts
  • 75+Designated investigative specialties

Quick answer

What does a compliance audit cover in Idaho?

It tests whether daily practice matches written policy and Idaho law in the areas that carry the most risk for your organization: employment decisions, data handling, workplace monitoring, mandatory reporting, public records and financial controls. Audits start at $1,200 with a written scope, and our fraud risk audits go deeper on the money side.

01Purpose

Why Idaho Organizations Bring in Outside Auditors

Policies drift. A handbook written when a company had twenty employees may not describe how a two-hundred-person operation actually hires and disciplines. Growth in Idaho has been steep, with the state's estimated population up about 10 percent from 2020 to 2025 and Canyon County up about 19 percent, and many organizations have outgrown the procedures they started with. Our Caldwell investigators see that gap in fast-growing western Treasure Valley employers.

Internal reviews have limits. Managers who wrote a procedure are rarely the right people to test it, and employees may not speak freely to a supervisor. An outside auditor can interview staff confidentially, compare records with stated practice and report findings without office politics, which often surfaces problems staff have noticed for months. Our investigative consulting team helps leadership decide which areas deserve attention first.

Timing matters. The right time for a review is before a complaint, lawsuit, regulatory visit or news story, not after. Many clients schedule one after a near miss, a leadership change or an acquisition. When a review turns up possible misconduct rather than a process gap, our corporate malfeasance investigators take over that part of the work under a separate scope.

Calculator, glasses and pens on a white desk, tools used to test records against written policy
Photo: Cht Gsml / Unsplash

02Employment

Employment Practices Under Idaho and Federal Law

The Idaho Human Rights Act prohibits employment discrimination based on race, color, religion, sex, national origin, age and disability, and it covers employers with five or more employees under Idaho Code § 67-5902. A charge generally must be filed within one year. The Idaho Human Rights Commission enforces the act and handles charges deferred by the EEOC. We test hiring, promotion, discipline and termination records for consistency, and our workplace harassment investigations address specific complaints.

Idaho employment without a fixed term is generally presumed at will under case law, but courts have recognized exceptions for implied contracts created by handbooks, the implied covenant of good faith and public policy, according to secondary summaries of Idaho decisions. Handbook disclaimers often decide those cases. We review whether the handbook, offer letters and actual practice say the same thing, and our wrongful termination investigations show what happens when they do not.

Workers' compensation is another exposure. Idaho Code § 72-801 makes a false statement to obtain benefits a misdemeanor with forfeiture of compensation, and the same conduct is listed in the felony insurance fraud statute, § 41-293. Employers should have a fair, documented way to handle suspicious claims. Our workers' comp surveillance supports that process when a claim warrants it, and we review how those decisions are documented.

  • Idaho Human Rights Act: employers with five or more employees
  • Charges generally due within one year (§ 67-5907)
  • Handbooks and offer letters compared with practice
  • Claim handling tested against §§ 72-801 and 41-293

03Data and monitoring

Customer Data, Breach Readiness and Monitoring Policies

Idaho Code § 28-51-105 requires entities that own or license computerized personal information of Idaho residents to investigate a breach promptly and, if misuse has occurred or is reasonably likely, notify affected residents without unreasonable delay. Public agencies must notify the Attorney General within 24 hours. We review who can access personal data, how it is exported and whether staff know whom to tell. Our personal information cleanup service helps people affected by exposure.

Monitoring policies need to match the law. Idaho is generally a one-party consent state for recording under § 18-6702, but secretly intercepting other people's conversations can be a felony, and § 18-6605 bars imaging devices where people have a reasonable expectation of privacy for prohibited purposes. We check where cameras and recorders are placed and what the written policy tells employees, and our workplace surveillance specialists advise on lawful observation.

Device and vehicle tracking deserves its own review. Idaho has no statute naming GPS trackers, but § 18-7906 treats surveillance of a person by electronic means as stalking conduct. Company telematics on company vehicles, disclosed in policy, is a different matter from tracking an employee's personal car. We document what the organization tracks and recommend clear written disclosure that employees acknowledge.

Office building with many windows, representing a multi-department policy review
Photo: Michael / Unsplash

04Care settings

Compliance Reviews for Care Facilities and Health Employers

Organizations serving vulnerable adults carry specific duties. Under Idaho Code § 39-5303, medical professionals, facility employees, social workers and others must report suspected abuse, neglect or exploitation to Adult Protective Services within 24 hours, and to law enforcement within four hours if the maltreatment caused death or life-threatening injury. Failing to report is a misdemeanor. We test whether staff know these duties, and our retirement home abuse investigations address specific allegations.

Financial exploitation is a related risk. Idaho Code § 18-1505 makes exploitation of a vulnerable adult a crime, and a felony when the loss exceeds $1,000. Care organizations that handle resident funds or hold powers of attorney should have dual controls and regular reconciliation. We test those controls, and our elder scam investigations look at outside fraud aimed at residents and patients.

05Public sector

Reviews for Idaho Cities, Counties and Districts

Public bodies operate under the Idaho Public Records Act. Records are presumed open, agencies may not ask the purpose of a request except for listed reasons, and residents receive the first two hours of labor and first hundred pages free. Under § 74-103, residents generally receive answers within three working days and nonresidents within 21 days. We test how requests are logged, answered and tracked, and our Lewiston investigators support north-central Idaho entities.

Whistleblower handling is the other key area. Idaho Code § 6-2104 generally bars government employers from retaliating against employees who report waste or suspected violations of law in good faith, and from adopting policies that unreasonably limit employees' ability to document those concerns. We review reporting channels, investigation procedures and personnel actions that followed reports, and our corporate collusion investigators examine procurement where reports point.

06Other sectors

Cooperatives, Agriculture and Multi-Site Employers

Agricultural cooperatives, processors and farm businesses face compliance questions that office-based companies rarely see. Water right ownership changes must be reported to the Idaho Department of Water Resources within 120 days under Idaho Code § 42-248, seasonal crews create documentation gaps, and remote sites make policy hard to enforce. Our Twin Falls investigators and Idaho Falls team review operations in the Magic Valley and the upper Snake River Plain.

Multi-site employers face the two-Idaho problem. North Idaho counties keep Pacific Time and the south keeps Mountain Time, and some cities regulate specific businesses locally. Coeur d'Alene, for example, issues security agency and agent licenses, and Chubbuck licenses private investigators. A policy that works in Boise may not match local rules elsewhere. Our Post Falls investigators review Panhandle sites against those local requirements.

07Deliverables

What the Written Findings Contain and What They Cost

Every audit ends with a written report that lists each area tested, what we reviewed, what we found and how serious each gap is. Findings are ranked so leadership can address the highest risks first. Where a finding suggests possible misconduct rather than a process problem, we say so and recommend next steps. Our Idaho attorney support can route the report through counsel when privilege is a concern.

Audits start at $1,200, and broader or multi-site work is billed at $100 per hour. We confirm the areas, sites and deliverables in writing before starting. Many organizations schedule a follow-up review six to twelve months later, sometimes with an unannounced shock audit of cash or inventory. Our Idaho pricing page lists every published rate, and the estimate never changes without written approval.

Services

Policy and practice review services in Idaho

How it works

How an Idaho review engagement runs

  1. 01

    Choose the focus areas

    Leadership or counsel identifies the areas of greatest concern. We recommend what to test first based on the organization's size, sector, sites, recent complaints and history.

  2. 02

    Written scope and price

    We confirm the areas, sites, interviews and deliverables in writing, with audits starting at $1,200 and broader work billed at $100 per hour, before anything begins.

  3. 03

    Documents, interviews, observation

    We review policies and records, interview staff confidentially and observe practice at each site, comparing what happens with what the policy and the law require.

  4. 04

    Ranked written findings

    You receive a report ranking each gap by risk, with the evidence behind it and specific recommendations, plus a suggested owner for each fix and a date for follow-up testing.

Compare

Review areas in Idaho and the law behind them

AreaKey Idaho referenceWhat we test
Employment decisionsIdaho Human Rights Act, ch. 67-59Consistency of hiring, discipline and firing records
Data breach readinessIdaho Code § 28-51-105Access controls and staff response steps
Workplace monitoring§§ 18-6702, 18-6605, 18-7906Device placement and written disclosure
Vulnerable adult care§§ 39-5303, 18-1505Reporting knowledge and resident fund controls
Public recordsIdaho Code §§ 74-102, 74-103Request logging, timing and fees

Statewide coverage

Organizational reviews across Idaho

Delator assigns auditors and investigators to Idaho organizations statewide without a local office. Treasure Valley employers work with our Boise investigators and Meridian coverage, while Canyon County organizations use the Nampa team. Eastern Idaho clients rely on our Pocatello investigators and Rexburg coverage, and north Idaho organizations draw on the Coeur d'Alene team on Pacific Time. Because US 95 is the only road connecting the Panhandle with the rest of the state, multi-site audits are scheduled site by site, and the scope, sites and price are confirmed in writing before any work begins.

FAQ

Frequently asked questions

What is the difference between a compliance audit and an investigation?

An audit tests whether processes work as intended across an area, such as hiring or records requests. An investigation examines a specific allegation or incident. Audits sometimes uncover possible misconduct, and when that happens we recommend a separate investigation under its own scope. Our corporate investigations group handles those matters.

Does the Idaho Human Rights Act apply to small employers?

It covers employers with five or more employees for each working day in 20 or more calendar weeks in the current or preceding year, under Idaho Code § 67-5902. Federal laws have their own thresholds. Charges under the Idaho act generally must be filed within one year. Counsel can confirm which laws apply to your organization.

What does an audit like this cost?

Audits start at $1,200 for a defined scope, and broader or multi-site work is billed at $100 per hour. We confirm the areas tested, the sites visited and the deliverables in writing before starting, so leadership knows the cost in advance. Our Idaho investigations overview explains how assignments are staffed.

Can we record employees at work?

Video in open work areas is common with clear notice, but Idaho Code § 18-6605 bars imaging devices in places where people have a reasonable expectation of privacy for prohibited purposes. Audio raises separate questions under the eavesdropping statute, § 18-6702. We review your current practice and policy, and counsel should approve any change.

We had a data incident. Do we have to notify anyone?

Possibly. Idaho Code § 28-51-105 requires a prompt investigation and, if misuse has occurred or is reasonably likely, notice to affected Idaho residents without unreasonable delay. Public agencies must notify the Attorney General within 24 hours. Counsel decides; we document what was accessed and by whom so that decision rests on facts.

Are care facility staff required to report suspected abuse?

Many are. Under Idaho Code § 39-5303, medical professionals, facility employees, social workers and others must report suspected abuse, neglect or exploitation of a vulnerable adult to Adult Protective Services within 24 hours, and failing to report is a misdemeanor. We test whether staff understand these duties and know how to report.

How do public records rules affect our district?

Records are presumed open under the Idaho Public Records Act. Agencies generally must answer resident requests within three working days, extendable to ten, and nonresident requests within 21 days, extendable to 35, under § 74-103. Requests not answered in time are deemed denied. We test how your office logs and tracks requests.

Will the audit report be confidential?

We deliver it only to the people named in the engagement letter. When the findings could matter in litigation, counsel may engage us directly so privilege can be considered. Public bodies should assume reports may be subject to records requests and plan accordingly. Our Ammon investigators follow the same handling rules.

Does Delator need an Idaho license to audit?

Idaho does not issue a statewide private investigator license. Delator Group is a licensed Tennessee firm with no Idaho office, and it applies Tennessee's standard to Idaho work. Some cities, such as Chubbuck and Coeur d'Alene, regulate investigators or security agents locally, and we confirm those rules first. Our vetting guide explains what to ask.

How often should we repeat the audit?

Most organizations benefit from a follow-up six to twelve months after the first review to confirm fixes are in place, then periodic reviews when the organization grows, opens new sites or changes leadership. A single annual review of the highest-risk area is a reasonable baseline. Our risk audits handle the follow-up testing.

Every service

Investigations available in Idaho

Every service below is available in Idaho and across Idaho, run by the same Delator Group leadership that manages our Tennessee casework. Choose a service to read how it works in Idaho.

Service areas

Private investigators across Idaho

Delator Group is headquartered in Nashville, Tennessee. Work in Idaho is managed by Delator Group leadership; Photography: Joel Filipe / Unsplash · Cht Gsml / Unsplash · Michael / Unsplash. Last reviewed .

Delator Group Private Investigators seal

Delator Group Private Investigators

Find the gaps before someone else does

If your Idaho organization's practices have outgrown its policies, schedule a confidential conversation. We will recommend where to start and confirm the scope and price in writing.

Delator Group Private Investigators sealDelator Group Private Investigators · Nashville headquarters · Tennessee, Wyoming, South Dakota, Idaho, Alaska and Mississippi