Scope
Which roles and locations are covered and which checks are allowed for each position.
A documented policy reduces legal risk, ensures consistent hiring decisions, and protects applicant privacy by defining notice, consent, and adverse action steps under federal and state law.
The policy also guides third-party screening vendors and internal auditors to ensure procedures and records meet legal and operational expectations.
Which roles and locations are covered and which checks are allowed for each position.
Criminal history, identity verification, employment and education verification, motor vehicle records, and credit checks where legally allowed.
How written consent is obtained, including required disclosures under the Fair Credit Reporting Act (FCRA) and state analogs.
Pre-adverse and adverse action steps, timing, and required notices when a report influences hiring.
Who can view reports, role-based permissions, and confidentiality controls for sensitive data.
Recordkeeping periods for reports, supporting documents, and how destruction is handled securely.
| Field | Configuration |
|---|---|
| Consent Capture | Require signed consent field and timestamp before API call to vendor |
| Conditional Checks | Show credit check field only for finance roles where permitted |
| Result Routing | Route reports to HR reviewer with restricted view permissions |
| Audit Logging | Enable immutable audit trail with signer identity and timestamps |
Use a platform that provides an audit trail, role-based access, and HIPAA or FCRA-friendly controls where applicable.
Obtain written consent before requesting any consumer report
Provide a copy of the report and summary of rights before final adverse action
Send final notice promptly after decision, including CRA contact details
Keep I-9 for required period (see retention policy)
Respond to subject access or dispute requests within legally required timelines
Order placed with consumer reporting agency and logged.
Agency delivers report; timestamp and reviewer assigned.
Pre-adverse action documents shared if adverse factors are found.
Decision recorded and adverse action notice sent if applicable.
Optica implemented a structured consent and review flow to reduce discrepancies in hiring decisions.
The organization standardized role-based checks and data access rules to protect patient-facing staff.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |