TL;DR: This guide walks UK HR Directors through the 7 core HR processes every growing business needs — from recruitment to offboarding — with the legal checkpoints and practical audit questions to ensure your HR function is built on solid foundations.
Introduction: When 'We Just Figure It Out' Stops Working
There's usually a moment — a missed right-to-work check that surfaces during an audit, a performance dismissal that unravels because nothing was documented, an offboarding that leaves a former employee chasing their P45 for six weeks — when an HR Director at a growing business realises the informal approach has quietly become a liability.
It happens to the best teams. When you're managing 80 people, you can hold a lot in your head. At 150, the cracks start to show. At 250, the gaps become grievances.
If you're leading HR at a 50–500 employee UK business, you're managing complexity that rivals organisations three times your size — often with a fraction of the headcount. The challenge isn't that your team doesn't know what good looks like. It's that there aren't enough hours to build, document, and maintain every process properly while also running the day-to-day.
This guide is a practical audit tool, not a theory lecture. By the time you've read it, you'll know which of your seven core HR processes are solid, which are held together with good intentions, and where to focus first. Because solid processes aren't bureaucracy — they're what lets your team scale without chaos.
What Are the 7 Core HR Processes? (A Quick Framework)
Before diving in, it's worth being precise about what we mean by "processes" — because the terminology in HR can get muddled quickly.
The 7 core HR processes are the operational workflows that cover the full employee lifecycle, from the moment you decide to hire someone to the moment they leave. They are: 1) Recruitment & Selection, 2) Onboarding, 3) Performance Management, 4) Learning & Development, 5) Employee Relations, 6) HR Compliance & Administration, and 7) Offboarding.
You may have come across other frameworks — the 4 pillars of HRM (acquisition, development, motivation, and maintenance), or the 5 C's (Competence, Commitment, Congruence, Cost-effectiveness, and Culture). These are strategic lenses, not competing models. The 4 pillars tell you what HR is trying to achieve; the 7 processes tell you how to deliver it operationally. Similarly, questions about the "4 core HRM systems" or the "Big 4 of HR" typically refer to variations of these same strategic groupings — useful for framing HR's purpose, but less useful when you're trying to audit whether your disciplinary process would survive tribunal scrutiny.
For a deeper look at what the 7 HR basics actually mean in practice, that's worth reading alongside this guide. Here, we're focused on the operational audit: do your processes exist, are they followed, and do they cover the UK legal touchpoints that matter?
1. Recruitment & Selection: More Than Just Posting a Job Ad
A mature recruitment process isn't defined by whether you use an ATS or how polished your job adverts are. It's defined by whether you can demonstrate, if challenged, that every hiring decision was fair, consistent, and free from discrimination.
That means a defined job brief before you start, a structured interview scoring matrix applied consistently across all candidates, and documented rationale for every shortlisting and selection decision. Not because you expect to be challenged — but because the discipline of documenting decisions forces better decisions in the first place.
The UK legal touchpoints here are specific. Right-to-work checks are mandatory under the Immigration, Asylum and Nationality Act 2006, and the consequences of getting them wrong — or not doing them at all — are significant. The Equality Act 2010 requires that your shortlisting and interview process doesn't directly or indirectly discriminate on the basis of any protected characteristic. And GDPR applies to candidate data: unsuccessful applicants' CVs and interview notes shouldn't be sitting in a recruiter's inbox indefinitely — most organisations apply a six-month retention period.
Audit question: Do you have a documented scoring matrix for every role, and has your interview panel received unconscious bias training in the last 12 months?
The most common gap in SMEs isn't malicious — it's informal. Hiring decisions made over coffee, with no paper trail, leave the business exposed if a rejected candidate believes they were passed over unfairly. Even a one-page interview scorecard, used consistently, transforms your defensibility overnight.
2. Onboarding: The Process That Sets the Tone for Everything Else
Onboarding is the process most likely to be described as "we have something, but it varies by manager." That variability is both a legal risk and an engagement risk — and the two are more connected than they might appear.
A mature onboarding process has structure before Day 1 (offer confirmation, equipment, system access, buddy assignment), a clear Day 1 experience, and structured check-ins at 30, 60, and 90 days. The goal isn't to overwhelm new starters with information — it's to make them feel expected, supported, and clear on what success looks like.
The legal requirement that most UK SMEs still miss: under the Employment Rights Act 1996, as amended in 2020, employers must provide a written statement of employment particulars on or before the employee's first day of employment. Not within two months, as was previously the case — from Day 1. That means the contract or written statement needs to be ready before the person walks through the door. Right-to-work verification must also be completed before the start date, and pension auto-enrolment assessment needs to happen within six weeks of the employment start date.
Audit question: Does every new starter receive their written statement of employment particulars on or before Day 1 — without exception?
Poor onboarding is consistently cited as a leading driver of early attrition. For an SME where each hire represents months of recruitment effort and a meaningful salary investment, losing someone in the first 90 days because they felt unsupported is an expensive process failure.
3. Performance Management: Fair, Consistent, and Documented
Performance management is the process that HR Directors most often describe as "we do it, but informally." The problem is that "informal" is precisely the word that causes problems when a performance-related dismissal ends up at an employment tribunal.
A mature process includes regular 1:1s with documented notes, clear objectives set at the start of the year, mid-year and annual reviews with written records, and a defined pathway for managing underperformance — including a properly structured performance improvement plan (PIP) when needed.
The legal touchpoint here is the Acas Code of Practice on Disciplinary and Grievance Procedures. Failure to follow it doesn't automatically make a dismissal unfair, but it can result in employment tribunal awards being increased by up to 25% (Acas Code of Practice on Disciplinary and Grievance Procedures, UK). That's a meaningful financial exposure for an SME. PIPs must be reasonable in their targets and timescales, and every stage of the process must be documented.
Audit question: If a manager dismissed someone for underperformance today, could you demonstrate a fair, documented process that followed the Acas Code — including the investigation, the meetings, and the right of appeal?
The Equality Act also intersects heavily with performance management. If your data shows that employees from a particular protected group are disproportionately subject to PIPs or disciplinary action, that's a pattern worth examining before it becomes a claim.
4. Learning & Development: Building Capability Intentionally
L&D is the process most likely to be reactive rather than systematic in an SME. Someone asks for a course, it gets approved or declined, and that's the extent of the process. The problem is that reactive L&D misses the compliance training that nobody asked for — and that's where the legal exposure sits.
A mature L&D process starts with a training needs analysis, maintains a central tracker for mandatory compliance training (health and safety, data protection awareness, role-specific requirements), and links development plans to performance reviews so that capability-building is intentional rather than ad hoc.
The legal touchpoints are clear. The Health and Safety at Work Act 1974 requires employers to provide adequate training for the roles people perform. UK GDPR mandates data protection awareness training for anyone handling personal data. In regulated sectors — financial services, healthcare, education — the requirements go further still. The question isn't whether you've provided training; it's whether you can prove it.
Audit question: Do you have a central record of who has completed mandatory training, when they completed it, and when it expires — and does someone own the process of chasing renewals?
It's also worth being aware of the shadow AI risk in HR teams when employees start using AI tools for learning and development without any governance in place — a growing issue that your L&D process should address.
Modern HR teams are increasingly using AI to handle the volume of routine L&D queries that land in the HR inbox — "What training do I need before I move into this new role?" or "When does my data protection certification expire?" — freeing HR to focus on designing development pathways rather than fielding admin questions.
5. Employee Relations: Having a Process Before You Need One
The defining feature of a mature ER process is that it exists and is followed before a situation escalates — not assembled hastily once a grievance has already been raised.
That means documented grievance and disciplinary procedures that are accessible to all employees (not buried in a handbook nobody has read), a clear absence management policy with defined trigger points, and escalation paths that managers actually understand and follow.
The Acas Code of Practice is the benchmark for grievance and disciplinary processes in the UK. The Employment Rights Act 1996 governs unfair dismissal claims, and statutory sick pay rules apply to absence management. These aren't optional frameworks — they're the standard against which your processes will be measured if a case reaches tribunal.
Audit question: Are your grievance and disciplinary procedures written down, accessible to all employees, and — critically — followed consistently by every manager, not just the ones who've had HR training?
The most common gap isn't the absence of written procedures. It's that the procedures exist on paper but managers aren't trained to follow them, so the written policy provides false comfort. A brief annual manager briefing on ER procedures — covering what to do when a grievance is raised, how to conduct a disciplinary investigation, and when to escalate to HR — is one of the highest-ROI HR activities for a lean team.
6. HR Compliance & Administration: The Unglamorous Foundation
Nobody goes into HR because they love maintaining personnel files. But the compliance and administration process is the foundation everything else rests on — and it's the area where fragmented, manual approaches create the most risk for growing businesses.
A mature process means accurate, up-to-date employee records, GDPR-compliant data management with clear retention and deletion policies, payroll accuracy with HMRC PAYE reporting obligations met, right-to-work files maintained and accessible, and working time compliance tracked.
The legal framework here is dense but important. UK GDPR and the Data Protection Act 2018 govern how you hold and process employee data. The Working Time Regulations 1998 set requirements around the 48-hour week, rest breaks, and holiday entitlement. HMRC PAYE reporting has its own obligations and deadlines. National Minimum Wage record-keeping requirements mean you need to be able to demonstrate compliance on request.
Audit question: Could you produce an accurate, up-to-date personnel file for every employee within 24 hours if required by an employment tribunal or an HMRC inspection?
According to Cezanne HR (2026), manual HR admin — including employee record updates, absence tracking, payroll preparation, and expenses — remains prevalent in UK SMEs and is a primary driver of HR team inefficiency. And as BM Magazine's HRMS Buyer's Guide (2026) notes, fragmented HR tools or spreadsheets are "no longer viable" for scaling UK businesses with 50–500 employees due to the administrative burden that grows with headcount.
This is the process area where the gap between what's manageable at 80 people and what's sustainable at 200 is most stark. For more on how AI can support HR compliance without replacing your team, that's worth exploring as you think about where to invest.
7. Offboarding: The Process Most SMEs Underinvest In
Offboarding is consistently the most underdeveloped of the seven processes — often treated as an IT task (get the laptop back) with no real HR ownership. That's a mistake, both operationally and legally.
A mature offboarding process includes a structured checklist covering final pay calculation, system access revocation, equipment return, and exit interview. It includes a knowledge transfer plan for roles where institutional knowledge is at risk. And it includes a clear reference policy so that managers giving informal references don't inadvertently create defamation exposure.
The UK legal touchpoints are specific. Final pay must include all accrued but untaken holiday under the Working Time Regulations — a calculation that's frequently wrong when done manually. A P45 must be issued promptly after the employment ends. If the role transfers to another employer, TUPE obligations may apply. These aren't edge cases; they're the most common triggers for post-employment disputes.
Audit question: Do you have a written offboarding checklist that covers final pay, system access, equipment return, and exit interview — and is it followed every time, for every leaver, regardless of the circumstances of their departure?
AI tools like Aura can handle the routine offboarding queries that employees raise — "When will I receive my P45?" or "How is my final holiday pay calculated?" — so that HR can focus on the sensitive conversations, the knowledge transfer, and the exit interviews that actually require human judgment.
How to Audit Your HR Processes: A Practical Starting Point
The goal of a process audit isn't perfection. It's defensibility — being able to demonstrate a fair, consistent, documented approach if you're ever challenged. A simple RAG (Red/Amber/Green) self-assessment is the most practical starting point.
For each of the seven processes, ask yourself four questions: Is the process documented? Is it consistently followed by everyone, not just HR? Are the UK legal touchpoints covered? And do your managers know what to do without having to call HR first? Rate each process Red (significant gaps), Amber (partially in place), or Green (solid and consistently applied).
Prioritisation matters. Start with the processes that carry the highest legal and financial risk: employee relations, HR compliance and administration, and recruitment. These are the areas where gaps most commonly lead to employment tribunal claims or HMRC scrutiny. Once those foundations are solid, turn your attention to the processes that most affect employee experience and retention — onboarding, performance management, and learning and development.
The practical next step is deliberately modest: pick the one process with the most Red ratings and spend two hours this month creating a one-page process map. It doesn't need to be perfect. A documented process that's 80% right and consistently followed is worth far more than a comprehensive framework that lives in a consultant's slide deck.
Conclusion: Solid Foundations Enable Strategic HR
These seven processes aren't bureaucracy for its own sake. They're what allows your HR function to scale, stay compliant, and earn the credibility with the business that lets you do the strategic work — workforce planning, culture, leadership development — rather than firefighting the consequences of process gaps.
The honest reality is that building and maintaining these processes takes time that lean HR teams often don't have. But the most time-consuming parts — answering repetitive policy questions, tracking compliance training renewals, handling routine admin queries — are exactly where technology can carry the load, freeing your team to focus on the moments that genuinely require human judgment.
See how Aura helps HR teams handle the repetitive process questions so you can focus on the work that needs your expertise. Book a demo at aura-hr.tech.
