Every small business eventually hits the same awkward Monday. An employee calls in sick, comes back two days later, and you are not sure whether to ask for a doctor’s note, whether you are even allowed to, or what to do with one if it shows up. Get it wrong in one direction and you look like you do not trust your team. Get it wrong in the other and you have no process at all.
The good news is that a clear, fair documentation policy takes about an hour to set up and saves you from having that conversation ever again. Here is what actually matters.
Decide when you will ask, and write it down
The single biggest source of friction is inconsistency. Asking one employee for a note and not another, or asking only when you are annoyed, is how documentation policies turn into morale problems and occasionally into complaints.
The most common and most defensible standard is simple: require a note only for absences of three or more consecutive days, or for patterns that need addressing. One-day illnesses do not need paperwork. Requiring a doctor’s visit for a 24-hour stomach bug costs your employee a copay and half a day, and it costs you nothing to skip.
Put the threshold in your handbook, apply it to everyone, and you have solved most of the problem.
Know what the law lets you require
This is where many small businesses are out of date. A growing number of states and cities have paid-sick-leave laws that limit when an employer can demand documentation at all. Several only allow it after three consecutive days, and some prohibit requiring a note in a way that creates an unreasonable burden for the employee. Check your state and city rules before you write the policy, because a handbook that conflicts with local law is worse than no handbook.
Two other lines to keep straight:
- Job-protected leave is a separate track. If an employee’s situation may qualify under FMLA or a state family-leave law, that runs on its own certification forms and timelines. A sick note is not an FMLA certification, and you should not treat one as the other.
- Do not ask for the diagnosis. A note only needs to confirm that the employee was evaluated and was unable to work for the stated dates. Asking what was wrong with them invites privacy and disability-law problems you do not need. Train whoever handles notes to look at the dates and the signer, not the condition.
What a legitimate doctor’s note looks like
Managers often worry about forged notes and then have no idea what they are actually checking for. It comes down to four things.
- A named, licensed clinician. A real note names the physician, nurse practitioner, or physician assistant who signed it. If there is no identifiable person, that is the red flag, no matter how official the letterhead looks.
- Credentials you can look up. Physicians have a public National Provider Identifier (NPI) and a state license number. Both are searchable online in under a minute.
- A way to verify. Legitimate providers expect employers to check. A phone number, a verification portal, or a QR code on the note that confirms it was issued by that office is standard now.
- Dates that make sense. The visit date, the absence dates, and the return date should line up.
If a note has those four things, accept it. If it is missing the signer or any way to verify it, it is reasonable to ask the employee for something you can confirm.
Telehealth notes are legitimate, and you should accept them
A common mistake is treating a note from an online visit as second-class. It is not. Telehealth is legal in every state, and a note issued by a clinician licensed in your state is exactly as valid whether the visit happened in an exam room or on a phone. Large hospital systems now issue sick notes through their own telehealth portals for precisely this reason.
For your employees, this is a genuine improvement. Someone with the flu can now get legitimate online doctor’s notes the same day without dragging themselves to urgent care, which means less time off, less exposure for everyone else, and a note that shows up in your inbox before lunch. Your only job is to apply the same four-point check you would apply to any other note.
Handle the note like the private record it is
A doctor’s note is medical information, even when it contains no diagnosis. Keep it out of the general personnel file, limit who can see it, and do not discuss it with the rest of the team. A locked folder or a restricted HR drive is enough for a small business. The principle is simply that the person who needs to know an employee was out sick is the manager approving the absence, and nobody else.
The part most guides skip
Documentation policies exist to handle the rare problem, not to police the common one. The vast majority of sick days are exactly what they look like. If your policy makes an employee feel like a suspect every time they catch a cold, you will get two predictable outcomes: people coming in sick, and good people leaving.
The businesses that get this right treat rest as part of productivity, not an interruption of it. A clear threshold, a quick verification check, and genuine trust the rest of the time is the whole formula. It is also cheaper than the alternative.
A five-line policy you can adopt today
If you want something you can paste into a handbook this afternoon:
- Employees may take sick leave without documentation for absences of up to two consecutive days.
- For three or more consecutive days, a note from a licensed healthcare provider is required within three business days of return.
- Notes from telehealth providers are accepted on the same basis as in-person notes.
- Notes should confirm the dates of absence and the provider’s credentials. A diagnosis is not required and should not be requested.
- Medical documentation is stored confidentially and reviewed only by the approving manager and HR.
Adjust the thresholds to your local law, and you are done.