Internal investigations are one of the most powerful tools companies have to detect, address, and remediate potential misconduct. But they also come with legal risks—especially when it comes to protecting privileged communications.