Employee Candidate Security Info
What the Employee Candidate Security Info Records
Why centralize candidate security information
Centralizing Employee Candidate Security Info clarifies candidate permissions, documents consent for background checks, and creates an auditable record for hiring decisions. Properly executed electronic versions meet ESIGN and UETA standards for enforceability when they show intent, consent, attribution, and reliable record retention.
Teams that commonly manage this form
HR departments, hiring managers, and security teams use Employee Candidate Security Info to assess candidate suitability and manage access permissions.
- Human resources collects consent, stores records, and processes background-check requests.
- Security/IT determines required clearances and configures role-based access controls for candidate onboarding.
- Hiring managers review disclosures to inform offers and placement decisions.
Small employers, staffing agencies, and regulated-industry compliance officers also interact with this form to meet operational and legal requirements.
Step-by-step: complete and file the form
-
01Prepare: Gather IDs, authorization forms, and role requirements.
-
02Confirm Consent: Present ESIGN disclosure and obtain explicit consent.
-
03Run Checks: Initiate background and credential verification per policy.
-
04Record: Store signed form with audit trail and retention tag.
Typical digital workflow settings for this form
| Field | Configuration |
|---|---|
| Signature Type | Electronic signature; capture intent, timestamp, and audit trail. |
| Authentication | Email link, SMS code, or identity verification (KBA). |
| Conditional Fields | Show clearance fields only for relevant roles. |
| Storage Location | Encrypted cloud storage with role-based access controls. |
| Retention Policy | Auto-archive per retention timeline and export on request. |
How the electronic collection process typically flows
-
Upload: Add completed PDF or Word version to the system.
-
Place Fields: Insert name, SSN, DOB, consent, and signature fields.
-
Send: Email or generate signing link; include authentication level.
-
Store: Save signed record with audit trail and access controls.
Technical capabilities to check before eSubmission
For eSubmission, verify platform supports PDF/DOCX upload, secure TLS transport, and audit logs, and signer authentication options.
- Formats: PDF and DOCX supported.
- Authentication: Email, SMS, KBA options.
- Integrations: HRIS, storage, and SSO connectors.
Common pitfalls to avoid when preparing the form
- Submitting forms with mismatched names between candidate ID and application delays verification and may invalidate background-check results.
- Failing to obtain explicit written consent for criminal or credit checks can violate state and federal rules and obstruct background processing.
- Using unsecured channels to transmit Social Security Numbers increases breach risk and can trigger notification requirements under state law.
- Over-collecting unnecessary personal data increases privacy liabilities; collect only data required for legitimate hiring decisions and regulatory compliance.
Consequences of incorrect or incomplete information
eSignature pricing and feature snapshot for hiring forms
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
Real-world examples of digital candidate security workflows
Martin Properties
A regional property firm digitized candidate access forms to reduce onboarding delays.
- Mobile signing enabled quick turnaround.
- I can process and execute all of these documents online with 100% compliance and built-in security. Whether on mobile or working offline, I can get forms back to their necessary parties efficiently.
Fertility Centers of Illinois
A clinical provider used eSign for candidate screening forms tied to patient privacy obligations.
- HIPAA-aware workflows preserved confidentiality.
- The airSlate SignNow team has been exceptional, responsive, the API has been great, and we're extremely happy that we chose airSlate SignNow as a company.
Practical best practices for accuracy and compliance
Frequently asked questions and troubleshooting
-
Can this form be signed electronically?
Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. §7001) and UETA when the record shows intent to sign, the signer consents to electronic transactions, the signature can be attributed to the signer, and the record is retained in a reproducible format.
-
Is notarization required for employment forms?
Generally no for routine candidate security records. Notarization is only required for specific instruments (affidavits, powers of attorney, etc.). For any notarization needs, verify whether remote online notarization (RON) is authorized in your candidate's state and follow state notary rules.
-
How should sensitive candidate data be protected?
Protect SSNs, background reports, and PHI with encryption, access controls, and audit logs. Apply AES-256 at rest and TLS 1.2/1.3 in transit, restrict access to authorized personnel, and execute a BAA for any vendor handling HIPAA-regulated information.
-
What if a candidate refuses electronic delivery?
If a candidate declines electronic records, provide a paper alternative. For consumer-facing disclosures, you must present the ESIGN consumer disclosure and allow withdrawal of consent; retain proof of the offer of paper and the candidate's election.
-
How long must these records be kept?
Retention varies: IRS records three years from filing (IRC §6501(a)), I-9 records three years after hire or one year after termination, whichever is later (8 CFR §274a.2), and HIPAA-regulated healthcare records six years (45 CFR §164.530(j)).
-
Can third parties access candidate records?
Third-party access should be limited and governed by contracts. Execute appropriate data-processing agreements or BAAs, apply least-privilege access, and log disclosures. Governmental requests or FOIA may require disclosure for public employers.