Post mortem meeting template (blameless, free)
Last updated
This post mortem meeting template covers what a review needs after an incident or at the end of a project: a timeline agreed from the evidence, the impact in numbers, the root causes and contributing factors described as conditions rather than people, what went well, what went wrong, where the team got lucky, and the actions that follow. It is written for a blameless review, where the question is never who was at fault but what made the outcome possible.
Download the Word file, copy the plain text, or read the example: a three-hour checkout outage at an online retailer, reviewed three days later.
Word file (.docx), free and without signing up. Opens in Google Docs and Pages too.
What’s in the template
The minutes open with these details:
- Incident or project name
- Reference (incident ID or project code)
- Date of incident (or project end date)
- Date of this meeting
- Facilitator
- Scribe
- Present (name, team)
- Severity (per your organisation's scale)
- Report status (draft / reviewed / final)
- Audience (internal only / shareable with customers)
Then the body follows the meeting in this order:
- 1. Ground rules — Read the blameless statement aloud: the purpose is to learn; everyone acted reasonably on what they knew at the time; we describe systems and conditions, not people.
- 2. Summary — Two or three sentences a senior manager could read on their own.What happened: · Duration (first impact to full recovery): · Detected by: · Resolved by:
- 3. Impact — Numbers wherever possible. Estimates are fine if marked as estimates.Customers or users affected: · Orders, revenue or transactions affected: · Internal effort (people-hours): · Contractual or SLA effect: · Public communication sent (when, where):
- 4. Timeline — Timestamped, in one timezone, from the first contributing change to full recovery. Mark detection, escalation, mitigation and resolution. Build it from logs, alerts and chat before the meeting; agree it in the meeting.Time: · Event: · Source (alert, log, person):
- 5. Root causes and contributing factors — There is rarely one cause. For each, say how it contributed and why it was not caught earlier. Ask why until the answer is a process or a design, not a person.Cause: · How it contributed: · Why it was not caught earlier:
- 6. What went well — Things that limited the damage: alerts that fired, a runbook that worked, a quick decision.
- 7. What went wrong — Things that made it worse or slower: a missing test, a rollback that failed, a page that reached the wrong person.
- 8. Where we got lucky — Things that would have made it worse and did not, by chance. These are live risks and need actions too.
- 9. Action items — Each with an owner and a date. Label each as preventing recurrence, detecting faster or reducing impact. Fewer actions that will be done beat many that will not.Action: · Type (prevent / detect / mitigate): · Owner: · Due:
- 10. Review and distributionReviewed by: · Date: · Shared with:
At the end: timeline and action items, as tables you can keep across meetings.
The template
Download it as a Word file, or copy the text version into your own document.
Post Mortem Report Incident or project name: Reference (incident ID or project code): Date of incident (or project end date): Date of this meeting: Facilitator: Scribe: Present (name, team): Severity (per your organisation's scale): Report status (draft / reviewed / final): Audience (internal only / shareable with customers): 1. Ground rules [Read the blameless statement aloud: the purpose is to learn; everyone acted reasonably on what they knew at the time; we describe systems and conditions, not people.] 2. Summary [Two or three sentences a senior manager could read on their own.] What happened: Duration (first impact to full recovery): Detected by: Resolved by: 3. Impact [Numbers wherever possible. Estimates are fine if marked as estimates.] Customers or users affected: Orders, revenue or transactions affected: Internal effort (people-hours): Contractual or SLA effect: Public communication sent (when, where): 4. Timeline [Timestamped, in one timezone, from the first contributing change to full recovery. Mark detection, escalation, mitigation and resolution. Build it from logs, alerts and chat before the meeting; agree it in the meeting.] Time: Event: Source (alert, log, person): 5. Root causes and contributing factors [There is rarely one cause. For each, say how it contributed and why it was not caught earlier. Ask why until the answer is a process or a design, not a person.] Cause: How it contributed: Why it was not caught earlier: 6. What went well [Things that limited the damage: alerts that fired, a runbook that worked, a quick decision.] 7. What went wrong [Things that made it worse or slower: a missing test, a rollback that failed, a page that reached the wrong person.] 8. Where we got lucky [Things that would have made it worse and did not, by chance. These are live risks and need actions too.] 9. Action items [Each with an owner and a date. Label each as preventing recurrence, detecting faster or reducing impact. Fewer actions that will be done beat many that will not.] Action: Type (prevent / detect / mitigate): Owner: Due: 10. Review and distribution Reviewed by: Date: Shared with: Timeline Time | Event | Source Action items No. | Action | Type | Owner | Due | Status
What a post mortem is for
A post mortem turns one bad day into a set of changes that make the next one less likely or less bad. The written report is the product; the meeting is how the team agrees on it. Incident post mortems look at an outage, a data loss, a security event or a serious near-miss. Project post mortems, sometimes called lessons learned, look at a finished project and ask the same questions about schedule, budget and quality.
The report is read by people who were not there, often months later, when a similar incident is being investigated. Write it so they can follow it without having been on the call.
Blameless means describing conditions, not people
- Write what the system allowed, not who did it: "the deploy process allowed a non-reversible migration to ship with application code", not "Jonas shipped a migration".
- Names in the timeline are fine for roles and sources: "on-call engineer paged", "payments lead decided to hotfix". Avoid names in the causes section.
- If someone made a mistake, the question for the report is what made that the reasonable thing to do at the time: the missing test, the ambiguous dashboard, the late hour.
- Blameless does not mean consequence-free. It means the report is the wrong place for consequences, and the right place for the changes that make the mistake harder to repeat.
Build the timeline first
The timeline is the one part of the report that should be finished before the meeting. The scribe or incident lead collects alert times, deploy logs, chat messages and ticket timestamps into a single list in one timezone. The meeting then starts by walking it and correcting it. Disagreements about causes are usually disagreements about the timeline, so agreeing it first shortens everything after.
What to leave out and common mistakes
- A single root cause. Most incidents need three or four conditions to line up; if the report names one, it has stopped asking why too early.
- Actions like "be more careful" or "improve communication". An action is a change to a system, a process or a test, with an owner and a date.
- Too many actions. Six that get done are worth more than twenty that sit open; the open ones undermine the next post mortem.
- Skipping "where we got lucky". It is the section most teams drop and the one that most often predicts the next incident.
- Opinions about individuals' performance, and any language that would make someone reluctant to report the next incident.
Project post mortems
For a finished project, the same template works with small changes. The timeline becomes the project's phases and the moments where the plan changed. Impact becomes the variance against the original schedule, budget and scope. Root causes are the reasons the variance happened: an estimate made without the right people, a dependency that was never confirmed, a scope change accepted without a date change. What went well and what went wrong are the same questions, and the actions feed the next project's kickoff.
Example: filled-in post mortem meeting
What the template looks like once it’s been used. The organisation and people are made up.
Post mortem report: checkout outage, Kestrel Outdoor Supply, incident INC-2026-031
Incident: Checkout unavailable on kestreloutdoor.com
Date of incident: Tuesday 17 March 2026, 2:07 pm to 5:12 pm
Date of meeting: Friday 20 March 2026
Facilitator: Simone Achterberg, SRE lead
Scribe: Dev Patel
Present: Simone Achterberg, Dev Patel, Jonas Weber (payments), Mei Lin (platform), Rory Finnegan (customer support), Ana Beltrán (head of engineering)
Severity: Sev 1
Report status: Final, reviewed 23 March 2026
Audience: Internal; customer summary published separately
2. Summary
For three hours and five minutes on 17 March, every checkout attempt failed with an error at the payment step. A release of the payments service included a new tax calculation library that returned no value for some postcodes, and the same release included a database migration that prevented a rollback. Detected by the checkout error-rate alert at 2:07 pm; resolved by a hotfix deployed at 4:45 pm, with the retry queue drained by 5:12 pm.
3. Impact
About 4,900 checkout attempts failed (from the payments log). Estimated $210,000 of orders not completed, of which roughly a third were placed the following day. 312 support tickets, 41 phone calls. Status page updated at 2:51 pm; apology email to affected customers sent 18 March. Internal effort about 38 people-hours including this review. No contractual penalties.
4. Timeline (all times local)
1:40 pm: payments service v4.12 deployed, including tax library upgrade and migration adding a tax_region column (deploy log).
2:07 pm: checkout error rate alert fires at 62% (monitoring). On-call engineer acknowledges at 2:11 pm.
2:15 pm: incident declared, channel opened (chat).
2:38 pm: rollback to v4.11 attempted and fails: v4.11 cannot start against the migrated schema (deploy log).
2:51 pm: status page updated; support macro issued (support lead).
3:01 pm: database engineer paged; reached at 3:24 pm (paging log).
3:20 pm: payments lead decides to hotfix forward rather than reverse the migration (chat).
4:45 pm: v4.12.1 deployed with a default tax region for null results (deploy log).
4:50 pm: error rate below 1%. 5:12 pm: retry queue drained; incident closed (monitoring).
5. Root causes and contributing factors
The upgraded tax library returns null rather than an error for postcodes it does not recognise, and the checkout code treated null as a failure. Contributed: every order in those postcodes failed. Not caught earlier: no test case for an unrecognised postcode; the staging dataset contains only ten postcodes.
The release bundled a schema migration with the application change, and the migration was not backward compatible. Contributed: the standard rollback failed, adding about two hours. Not caught earlier: the deploy checklist does not ask whether a migration is reversible.
The payments service deploys to all traffic at once with no canary stage. Contributed: the fault affected 100% of checkouts immediately. Not caught earlier: canary deploys were planned for Q2 and payments was not prioritised.
No database engineer was on the primary on-call rota. Contributed: 23 minutes to reach one. Not caught earlier: the rota was last reviewed in 2025.
6. What went well
The error-rate alert fired within seven minutes of the deploy. The status page and support macro were out within 45 minutes, and support reported customers were calmer than in previous incidents. The decision to hotfix forward was made quickly once the rollback failed and was the right call.
7. What went wrong
The rollback did not work, which turned a 30-minute incident into a three-hour one. It took 23 minutes to reach someone who could assess the migration. The hotfix took 85 minutes to write and deploy, mostly waiting for the full test suite, which has no fast path for emergencies.
8. Where we got lucky
It was a Tuesday afternoon, not the spring sale weekend, when checkout volume is five times higher. The migration added a column rather than altering one; if it had, the data would have needed repair as well. The on-call engineer happened to have worked on the tax integration last year.
Action items
| No. | Action | Owner | Due |
|---|---|---|---|
| 1 | Add canary stage (5% of traffic for 15 minutes) to the payments service deploy pipeline | Mei Lin | 17 April 2026 |
| 2 | Separate schema migrations from application deploys and add a reversibility check to the deploy checklist | Jonas Weber | 10 April 2026 |
| 3 | Add test cases for unrecognised and null tax results; expand staging postcodes to the full set | Jonas Weber | 27 March 2026 |
| 4 | Add a database engineer to the primary on-call rota and review the rota quarterly | Simone Achterberg | 3 April 2026 |
Tips for post mortem meeting
- Hold the meeting within a week of the incident, after the timeline is drafted but before memories blur.
- Send the draft timeline to attendees the day before and ask them to correct it in writing. The meeting then starts from an agreed sequence.
- Have someone who was not involved in the incident facilitate. The people who fixed it should be free to talk.
- Label each action as prevent, detect or mitigate. If all your actions are prevent, you have not thought about the next incident, which will be different.
- Track post mortem actions in the same place as other work, with the incident reference, and review open ones at the next post mortem.
- Write the customer-facing summary from the final report, not before it; the two must not disagree.
Related templates
- Sprint retrospective template — What went well, what didn't, ideas, and the one to three actions the team actually commits to.
- Project meeting minutes template — The weekly status record: where each workstream stands, which milestones moved, what changed on the risk log and what was decided.
- Safety committee minutes template — The monthly safety committee record: incidents, near-misses, inspections, hazard reports and a corrective actions register that stays open until verified.
- Meeting notes with action items template — Notes built around a running action register, for recurring meetings where last week's actions are this week's first agenda item.
- All meeting minutes templates
Or let the notes write themselves
A template helps when you’re the one typing. If you’d rather not be, an AI note taker can draft the summary and action items for you. Most send a bot into the call; QuietNote captures from your own computer instead, so nothing joins the meeting and you decide when capture starts. It’s in private beta. Whatever you use, read the draft before you send it, and tell attendees you’re recording where the rules require it.
Questions
What is a post mortem meeting?
A structured review held after an incident, an outage or a finished project to establish what happened, why, and what should change. The output is a written report with a timeline, the impact, root causes and contributing factors, what went well and badly, and action items with owners and dates. It is held soon after the event, while the evidence is fresh.
What is a blameless post mortem?
A post mortem run on the principle that people acted reasonably with the information they had, so the review looks for the conditions that allowed the outcome rather than for someone to blame. Causes are written as systems, processes and gaps in testing or tooling. The practice is widely associated with site reliability engineering and is used because people report incidents honestly only when they are not punished for it.
When should a post mortem meeting be held?
Soon after the incident is fully resolved and the timeline can be assembled, typically within two to five working days. Earlier and the team is still tired and the evidence incomplete; later and details are forgotten. Many teams set a rule that any incident above a certain severity gets a post mortem within a week.
Who should attend a post mortem?
The people who responded to the incident, the owners of the systems involved, someone from any team that felt the impact such as customer support, and a facilitator who was not involved. Managers may attend to listen; the report is more honest when they do not lead it. Keep it under ten people where possible.
What is the difference between a post mortem and a retrospective?
A retrospective is a regular meeting about how a team works, held at the end of every sprint or cycle regardless of what happened. A post mortem is held once, about a specific event, and produces a written report with a timeline and root causes. A serious incident may be discussed in both, but the retrospective would not replace the post mortem.
Can an AI note taker be used for a post mortem?
It can capture the discussion of causes and draft the went-well and went-wrong lists, so the scribe can join the conversation. The timeline should still be built from logs and alerts rather than from recollection, and the report's wording of causes should be reviewed by the facilitator for anything that reads as blame before it is shared.
Sources
Checked on 5 October 2026. Vendors change their settings and prices often; follow the links for the current version.