Clear Consent
Explicit FCRA disclosure and applicant authorization language that explains checks being ordered and how results will be used.
A well-designed vetting form ensures lawful consent, reduces onboarding delays, and centralizes verification data for HR and third-party screener use. It also documents compliance steps required by FCRA, state privacy laws, and specific industry rules.
Each stakeholder must follow applicable laws and internal retention schedules when handling completed forms and supporting records.
| Template Name | Employee Vetting Form — Candidate |
|---|---|
| Authentication Method | Email link, SMS code, or stronger KBA depending on risk |
| Conditional Fields | Show SSN or driver's license only when required |
| Reminder Schedule | Automatic reminders at 3 and 7 days for unsigned forms |
| Storage Destination | Secure HRIS or encrypted document store with access controls |
Integrations commonly used with vetting workflows include ATS/HRIS platforms and storage services; ensure encryption and role-based access control are enabled.
Explicit FCRA disclosure and applicant authorization language that explains checks being ordered and how results will be used.
Structured name, DOB, and government ID fields that support automated matching and reduce vendor false-positive matches.
Only request PII necessary for the specific checks to limit exposure and comply with data minimization principles.
Specify signer authentication level (email, SMS, KBA) appropriate for the role’s risk profile and compliance needs.
Include space to document pre-adverse and adverse notices and timing to support defensible hiring decisions.
Record where signed forms are stored, access roles, and retention timelines to satisfy audit and legal requests.
Retain for 3 years after hire or 1 year after termination, whichever is later (8 CFR §274a.2).
Healthcare-related vetting records retained 6 years from creation or last effective date (45 CFR §164.530(j)).
Retain employment-related financial records for at least 3 years per IRS guidance (IRC §6501(a)).
Typical screening returns in 2–5 business days, depending on scope and jurisdictions.
Allow reasonable time for candidate review before final adverse action per FCRA procedures.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day trial | Yes, limited | Yes, limited | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
HR automates candidate intake and consent capture using a centralized form
Hospital adds HIPAA-handling notes and identity proofing steps to the vetting form