Scope
Define which positions are subject to screening and which checks (criminal, employment, education, credit, drug testing) are permitted for each role and why.
A clear policy reduces legal risk by standardizing checks, documenting consent, and ensuring consistent decision criteria across hiring teams.
Human resources teams, hiring managers, and compliance officers are the primary users of the policy when designing and executing preemployment screens.
Use the policy as a living reference: update it for new laws, job categories, or changes in vendor capabilities and ensure all stakeholders receive updated copies.
Define which positions are subject to screening and which checks (criminal, employment, education, credit, drug testing) are permitted for each role and why.
Describe applicable federal and state laws (FCRA, ESIGN/UETA for e-consent, HIPAA where health data is involved) and how the employer meets each requirement.
Specify how candidate consent is obtained and documented (written, electronic per ESIGN/UETA), and include required FCRA disclosures and adverse-action procedures.
Set minimum criteria for background-check vendors: FCRA compliance, data security controls, dispute resolution, and documented identity-verification methods.
Establish uniform criteria for weighing findings, distinguishing relevance by job duties, and documenting decisions to reduce disparate impact risk.
Detail storage, access control, retention schedules, deletion processes, and breach notification responsibilities to protect candidate privacy.
| Field | Configuration |
|---|---|
| Consent Capture | ESIGN-compliant disclosure and signature field |
| Data Input | Secure form with required validation |
| Vendor Trigger | Automatic API call to approved vendor |
| Audit Trail | Timestamped log stored with report |
Choose delivery and storage methods that protect candidate privacy and allow auditable trails.
Integrations with systems such as ATS, HRIS, and secure cloud storage should be configured to preserve audit trails and limit access to authorized personnel.
Obtain written or electronic consent prior to running consumer reports
Complete within three business days of hire (if applicable)
Standard criminal checks complete in 3–5 business days
Results typically available in 24–72 hours
Provide pre-adverse notice and give candidate time to respond per FCRA
Hire decision and scope set
Candidate signs disclosure
Checks run and results returned
Adjudicate and send any required notices
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Yes (Business Premium) | Varies | Varies | Varies | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA required) | Varies | Varies | Varies | Varies |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies | Varies | Varies |
Optica standardized digital consent and vendor selection to reduce manual checks.
The organization required secure handling of sensitive candidate health information.