The six-layer HR compliance methodology for health and human services. Published openly, because the file is the defense and everyone deserves to know what a defensible file looks like.
Compliance Confidence™ is TWF's HR compliance methodology for behavioral health, IDD, and community health organizations. Its premise is simple and unforgiving: the file is the defense. Regulators, payers, accreditors, and plaintiff attorneys do not audit what your organization did; they audit what it can prove. The framework organizes everything an HHS employer must be able to prove into six layers, then runs them on a maintenance cadence instead of an annual panic.
We publish the framework openly. The layers below are the same structure behind our free 38-item HR compliance checklist and chart audit tool. What TWF sells is the build and the discipline: the audit, the remediation, the calendars, and the systems that keep it all current.
FLSA classification, FMLA, ADA process records, I-9 discipline, OSHA logs. The layer every employer carries, audited by the agencies with the least sector context.
HIPAA privacy and security, 42 CFR Part 2 for substance use records, business associate coverage, same-day access termination. In this sector, privacy compliance is workforce compliance.
CARF and Joint Commission personnel requirements, credentialing and re-credentialing cycles, Medicaid provider agreement obligations. The strictest applicable standard governs the file.
Monthly exclusion screening, primary-source license verification, supervision documentation, background and transport files per program type. The files that protect the license to operate.
Role-based training calendars with individual completion tracking: de-escalation, mandated reporting, documentation practice, supervisor training within 90 days of promotion.
State handbook addenda, background and registry regimes, Medicaid manual requirements, and multi-state obligations for every state where anyone works or lives.
Monthly: exclusion screening (OIG-LEIE and SAM) for all staff and contractors, logged. New-hire file completion verified within 30 days.
Quarterly: random personnel file sample audited against the six layers. Five charts per clinician through the chart audit rubric. Training completion variance reviewed by individual, not by course.
Annually: full compliance file audit ahead of any survey window. Handbook re-issued. State addenda reviewed against each state's regulatory changes. Every audit produces a written result, because an audit without documentation did not happen.
Always: contemporaneous documentation and consistent process. The same performance issue produces the same paper trail for every employee, every time. Inconsistency is what converts one manager's mistake into an organizational pattern.
Compliance risk concentrates where turnover is highest, because every departure creates an incomplete file, a missed training, a lapsed verification. That is why this framework and the turnover cost calculator are two views of the same problem, and why a Compliance Confidence engagement usually begins with a Workforce Workup™.
Score yourself first
Run the free interactive checklist against your own files. Check only what you can prove with documentation today.
Open the compliance checklist