AiOS→HR / People→Professional Services→Operate & Support→HR07

Background Checks & Hiring Risk Review

Extract and classify background-check findings into candidate risk profiles and a summary table for final hiring decisions.

Documented risk separation prevents unverified findings from blocking or rushing hiring decisions, keeping compliance evidence traceable.

GenAI Impact

51%

Faster

4.6

Hours saved

9.1

Hours without AI

Based on: 3 candidates with background check reports and compliance requirements

Enforces consistent separation of confirmed issues from unresolved follow-up items with verbatim source citations across all candidate risk profiles, preventing the ad-hoc conflation of verified and unverified findings that occurs in manual reviews.

Prevents exposure of sensitive candidate PII—criminal records, credit history, and government identifiers—to unapproved AI tools by enforcing redaction before prompting and restricting background check data to approved systems.

Before You Start

This workflow processes sensitive personal information (criminal records, credit history, employment verification results). Do not paste background check data into public or unapproved GenAI tools.

GenAI may misclassify findings or conflate unrelated records. Verify every AI-generated risk classification and finding citation against the source background check reports before sharing with decision-makers.

Who's Involved

HR Specialist

Runs the background check risk review and produces candidate risk profiles

Hiring Manager

Reviews the risk summary and decides on next steps for each candidate

Legal Advisor

Reviews compliance-related findings and confirms regulatory classification

Execution Steps

HumanGenAIHybrid

Before you start

Confirm the selected candidate list is finalized and approved for background checks
Confirm all background check reports have been received from the approved provider
Confirm role-specific compliance requirements are documented and current
Confirm the organisational risk tolerance policy is accessible and approved
Confirm you are using an approved GenAI tool for this workflow

Inputs

Selected Candidate ListdownloadBackground Check ReportsdownloadRole-Specific Compliance RequirementsdownloadOrganisational Risk Tolerance Policydownload

Prompt

Define structured template for risk classification

CONTEXT
You will be provided with the following source documents:
1. Selected Candidate List
2. Background Check Reports
3. Role-Specific Compliance Requirements
4. Organisational Risk Tolerance Policy

TASK
Define a strict markdown template for classifying background check findings per candidate. The template must separate confirmed issues from items requiring follow-up, and include fields for finding type, severity, evidence citation, and recommended action.

OUTPUT FORMAT
Produce a template in this exact structure:

## [Candidate Name]
### Confirmed Issues
| Finding Type | Description | Severity | Source Reference | Recommended Action |
|---|---|---|---|---|

### Follow-Up Items
| Finding Type | Description | Reason for Follow-Up | Source Reference | Deadline |
|---|---|---|---|---|

### Clear Checks
- [List checks completed with no findings]

### Overall Risk Rating
- **Rating:** [High / Medium / Low / Clear]
- **Basis:** [One-sentence justification referencing the confirmed issues and follow-up items]

CONSTRAINTS
Do not add fields beyond those specified. Do not define severity levels outside the organisational risk tolerance policy. Do not include scoring weights or automated decision thresholds.

Outputs

Risk Classification Template
AI-drafted · you verify·passed to next step

Verification: Confirm the template severity levels match your organisational risk tolerance policy exactly before proceeding

Before you start

Confirm sensitive identifiers have been redacted from reports before prompting

Data Handling: Do not paste full background check reports containing financial account numbers or government identifiers into the prompt; redact these fields first

Inputs

Background Check Reportsdownload
Risk Classification Templatefrom prev step

Prompt

Extract factual findings from background check reports

CONTEXT
You will be provided with a candidate’s background check reports and a risk classification template defining how findings should be structured.

TASK
For each background check report, extract every factual finding with its source reference. Categorise each finding by check type: criminal record, employment verification, education verification, credit history, reference check, or other. Quote the exact finding from the report.

OUTPUT FORMAT
For each candidate, produce:

### [Candidate Name]
#### [Check Type]
- **Finding:** [Verbatim text from the report]
- **Source:** [Report name, section, and date]
- **Status:** [Confirmed / Pending Verification / Inconclusive]

Repeat for each check type with findings. If a check type returned no findings, state: "No findings reported."

CONSTRAINTS
Do not summarize or interpret findings. Extract text exactly as written in the source report. Do not add risk assessments at this stage. Do not include personal identifiers beyond what is necessary for candidate identification.

Outputs

Extracted Findings per Candidate
AI-generated·passed to next step

Verification: Verify every extracted finding exists verbatim in the source background check report

Inputs

Extracted Findings per Candidatefrom prev step
Role-Specific Compliance Requirementsdownload

Prompt

Prompt available with library accessGet Access →

Outputs

Classified Finding Sheets
AI-generated·passed to next step
Every classification cites the specific compliance requirement or risk threshold used
No inconclusive findings are classified as confirmed issues
Severity levels match the organisational risk tolerance policy definitions

Verification: Verify the AI has not conflated findings from different candidates or check types during classification

Inputs

Classified Finding Sheetsfrom prev step
Selected Candidate ListdownloadBackground Check ReportsdownloadRole-Specific Compliance RequirementsdownloadOrganisational Risk Tolerance Policydownload

Prompt

Prompt available with library accessGet Access →

Outputs

Candidate Risk Profilesdownload
AI-drafted · you verify
Every confirmed issue cites the source background check report
Follow-up items are clearly separated from confirmed issues
Overall risk rating reflects the aggregate severity of confirmed issues

Verification: Confirm no findings from other candidates have been mixed into this profile

Inputs

Candidate Risk Profilesfrom prev step

Prompt

Prompt available with library accessGet Access →

Outputs

Risk Summary Tabledownload
AI-drafted · you verify
Every candidate from the review scope appears in the table
Grouping reflects the overall risk rating from each candidate risk profile
Issue and follow-up counts match the detailed risk profiles exactly

Before you start

Data Handling: Confirm all sensitive personal data has been appropriately handled before distributing the final summary to stakeholders

Inputs

Candidate Risk Profilesfrom prev step
Risk Summary Tablefrom prev step

Prompt

Prompt available with library accessGet Access →

Outputs

Background Check Risk Summarydownload
AI-drafted · you verify
Executive overview accurately reflects the aggregate risk across all candidates
Every confirmed issue cites its source background check report
Follow-up items include specific verification actions and deadlines
No hiring recommendations appear — only risk evidence and required actions

Verification: Verify the summary does not contain hiring recommendations — it must present risk evidence only

Reference

Guardrails

  • Factual Findings Only — Only documented, verified findings from official background check reports should inform risk classification — never infer issues from incomplete data.
  • Separation of Issues — Confirmed issues and follow-up items must be clearly separated in every output; never merge unresolved items with confirmed findings.
  • Role-Relevant Assessment — Classify findings against role-specific requirements and compliance rules, not generic risk assumptions or unrelated precedents.

Pitfalls

  • Pasting full background check reports containing government identifiers or financial account numbers into a non-approved GenAI tool
  • Treating AI-classified risk levels as final determinations without legal or compliance review of the source findings
  • Merging confirmed issues with unresolved follow-up items in the summary, obscuring the true risk picture for decision-makers
  • Including background check findings from prior roles or jurisdictions not relevant to the current position requirements

Definition of Done

  • Every confirmed issue in the Background Check Risk Summary cites the specific background check report and finding
  • Follow-up items are separated from confirmed issues with clear recommended next steps and deadlines
  • The Background Check Risk Summary covers every candidate from the Selected Candidate List
  • No hallucinated findings appear in any AI-generated risk profile or summary entry

Unlock the Full Library

Get full access to all prompts, execution steps, and downloadable examples — for this playbook and the rest of our GenAI capability framework — AGASI AiOS.

We'll send a magic link — no password needed.

AGASI AiOS · HR07 v1.0 · Apr 7, 2026