AI compliance for HR & hiring

HR AI you can prove is fair.

Whether you build HR AI or deploy it, Fairly AI tests it for bias, stops prohibited interview questions, monitors every AI hiring law where you operate, and keeps the evidence buyers, regulators and courts ask for.

Bias audit · Resume screener
Adverse-impact report, Q4
Illustrative data
Group A · 31% selected1.00 · Reference
Group B · 28% selected0.90 · Within threshold
Group C · 22% selected0.71 · Below 0.80 — review
Blocked
“What year did you graduate high school?”
AI-generated interview question stopped before the candidate saw it — an age proxy under the ADEA.
Approved by Talent Acquisition → reviewed by Legal → signed off by Internal Audit. Every step logged.
ISO/IEC 42001 certifiedISO/IEC 27001 certifiedSOC 2One of the first seven in the UK Portfolio of AI Assurance TechniquesFeatured in IDC ProductScape 2025

Who it’s for

Do you build HR AI, deploy it, or both?

AI hiring laws put different duties on the company that builds a tool and the company that uses it. Start with your side.

HR AI solution developers

Sell more with trust.

Enterprise buyers now ask for bias audits, EU AI Act documentation and regulatory disclosures before they sign. Fairly AI gives you independent, shareable evidence, so compliance closes deals instead of stalling them.

  • Independent bias and prohibited-question testing on every release
  • Ready answers for security and AI due-diligence reviews
  • Developer duties covered: Colorado disclosures, EU AI Act provider obligations, Texas and Connecticut
  • We monitor new AI regulations and keep your controls current, so you don’t have to
Sell more with trust →

HR AI solution deployers

Your vendor’s AI. Your liability. Your job on the line.

When a hiring tool discriminates, regulators and plaintiffs come to the employer, not the vendor. Vendor contracts often disclaim compliance, and laws in California and New Jersey reach tools you bought. Fairly AI lets you prove every AI-assisted decision was fair.

  • Independent testing of the AI tools you buy, against your candidates and your jurisdictions
  • NYC audits, notices, opt-outs, explanations and human-review records in one place
  • Up-to-date monitoring: we tell you when a law changes where you hire
  • Evidence ready the day a regulator, auditor or plaintiff asks
Protect your organization →

Both

One program for both sides of the table.

Build your own screening model and buy others? You carry developer and deployer duties at once, and Colorado voids contract terms that shift liability for a party’s own violations.

  • Every obligation tagged developer, deployer or both
  • One evidence record across in-house and vendor AI
  • Continuous regulatory monitoring across the U.S., EU, UK, Canada and APAC
Cover both roles →
Always up to date

AI hiring rules change month by month. Our research team tracks new laws, regulations and court decisions in every jurisdiction you operate in, and updates your controls and evidence requirements, so your program never goes stale.

The U.S. and beyond

One program for every place you hire.

Only New York City requires an independent bias audit. Everywhere else, bias testing is your evidence in a discrimination claim or something the regulator expects — and anti-discrimination law reaches AI outcomes in every market. What really changes by region is notices, human review, and whether you may collect demographic data to test at all.

United States

No federal AI hiring statute — but Title VII, ADEA and ADA apply to AI selection tools like any other test, and in Mobley v. Workday a court let claims proceed against a vendor as the employer’s agent. The new rules are state and local.

NYC Local Law 144In force

Independent bias audit within 12 months of use, a public summary, and notice to candidates 10 business days ahead.

California FEHA rulesIn force

Discriminatory automated-decision outcomes are unlawful; anti-bias testing counts as evidence; keep decision data four years.

California CCPA ADMT rulesJan 1, 2027

Pre-use notice, opt-out, access rights and a written risk assessment before using automated decisions in hiring.

Colorado SB 26-189Jan 1, 2027 · stayed

Developer disclosures; deployer notice, adverse-outcome explanation within 30 days, three-year records. Enforcement currently stayed by court order.

Illinois HB 3773In force

No AI with discriminatory effect, no zip codes as a proxy for protected classes, notice of AI use.

Connecticut · New Jersey · TexasIn force

“AI is not a defense” (CT); disparate impact unlawful even when the tool is vendor-supplied (NJ); intentional AI discrimination banned (TX).

Rest of the world

Outside the EU, few countries have AI-specific hiring laws. The duties come through data protection — automated-decision rights, notices and limits on collecting the very attributes a bias test needs.

EU AI ActDec 2, 2027

Recruitment and promotion AI is high-risk. Providers and deployers each carry their own duties, and it reaches any tool sold into the EU.

United KingdomIn force

UK GDPR Arts. 22A–22D: tell candidates, let them contest, provide meaningful human review. The ICO expects bias monitoring.

CanadaIn force

Ontario job postings must disclose AI screening (25+ staff); Quebec Law 25 gives notice, explanation and human review of automated decisions.

AustraliaDec 10, 2026

Privacy policies must disclose decisions made solely or substantially by automated means.

IndiaMay 13, 2027

DPDP Act notice and consent duties — including a lawful basis before reusing candidate data for bias testing.

Singapore · Japan · UAEMostly soft law

Singapore’s Workplace Fairness Act targets end-2027; Japan sharply limits which candidate attributes can be collected; DIFC Regulation 10 governs autonomous systems in Dubai.

Duties follow where the job and the candidate are, not where you’re headquartered. Planning summary as of November 2026, not legal advice.

Beyond bias

Bias is half the risk. The other half is what your AI says.

Generative AI now writes job ads, asks interview questions and explains decisions. Each of those words is regulated somewhere. Fairly AI checks every stage of the hiring flow against every jurisdiction you hire in.

Stage 1
Job description

Ontario: disclose AI use and drop “Canadian experience” requirements. Japan: no age limits or indirect discriminatory criteria. Singapore: no age, race, gender or religion criteria unless job-related.

Stage 2
Sourcing & matching

NYC audit of scoring and ranking. Illinois bans zip codes as a proxy for protected classes. California and Colorado automated-decision rules apply. Candidate sourcing in Japan may need government notification.

Stage 3
AI interview
Prohibited questions

U.S.: ADA, GINA and state inquiry laws bar probing disability, genetic information, age and other protected traits. Japan: fair-selection guidance lists topics interviewers must avoid, from family origin and birthplace to religion and beliefs. Illinois and Maryland require consent for video and facial analysis; Connecticut requires notice when AI talks to applicants.

Stage 4
Evaluation

Transcription error rates by accent, dialect and speech disability. Impact ratios on scores. Explanation rights in the UK, Quebec and Colorado.

Stage 5
Final decision

Human review must be meaningful (UK), the decision must not be “exclusively automated” (Quebec), and candidates can ask for review (Colorado, California). In Australia, a human final step is not a safe harbour.

Before release: Asenion Verify

A red-team suite tries to make your interview AI ask prohibited questions, jurisdiction by jurisdiction, on every release.

In production: Asenion Witness

Generated questions are filtered in real time by the candidate’s jurisdiction — and every block is logged as evidence.

How it works

Assess. Verify. Witness.

Three stages turn each obligation into reusable control objectives — set by jurisdiction and by role, and enforced from design through production.

01 · Asenion Assess

Know which laws apply

  • Inventory every hiring-AI system and map it to jurisdictions
  • Run CCPA automated-decision risk assessments
  • Map conformance to NIST AI RMF or ISO/IEC 42001

02 · Asenion Verify

Test before every release

  • Independent NYC Local Law 144 bias audits
  • Adverse-impact and proxy-variable testing — ZIP codes, employment gaps, availability
  • Accessibility checks and a red-team suite for prohibited interview questions

03 · Asenion Witness

Control in production

  • Jurisdiction-aware filtering of AI-generated interview questions
  • Consent and explanation records for every candidate
  • Tamper-resistant evidence retention

Built for: resume screening · video interview analysis · performance appraisals · retention and turnover prediction

What we test and assure

Every part of an AI interview that a regulator, or a plaintiff, can question.

Five assurance tests, each built from the requirements of the jurisdictions you hire in, so every result maps to a control.

01 · Prohibited-question detection

A jurisdictional library that catches regulated topics automatically

Every AI-generated question is checked against a library of requirements by jurisdiction. It catches questions on topics a law restricts, and flags when one is asked too early in the process.

Criminal historyMarital & family statusAgePregnancyDisability & healthReligionNational originSalary history

02 · Speech-to-text bias

Is the transcript fair before the score is?

We measure transcription error rates by accent, dialect and speech disability. A candidate who is misheard is scored unfairly, even when the scoring model itself passes its bias test.

03 · Summary accuracy

Hallucination checks on interview summaries

AI summaries are checked against the source transcript for invented, omitted or distorted statements, before a recruiter relies on them to make a decision.

04 · Video interview transparency

Notice, explanation and consent, verified per jurisdiction

We test the candidate flow against each rule that applies: the Illinois AI Video Interview Act and BIPA, Maryland facial-recognition consent, Connecticut’s AI-interaction notice, and EU AI Act transparency duties.

05 · Bias testing, two ways

Is the model fair, and is it fair where you actually hire?

A single bias test answers only one of those questions. We run both and report both.

Normalized (controlled)

Equal population distributions, with matched profiles that vary one protected attribute at a time. This isolates what the model itself does.

Representative (regional)

Populations that mirror each jurisdiction’s regional demographics. This shows the adverse impact real candidates would see in that market.

U.S. obligations matrix

Eleven obligations. Who owns each one.

Every U.S. test and audit for hiring AI, labeled by owner and by how binding it is: mandated, effectively required, incentivized, or conditional.

Download the matrix (PDF)
LawWhat it takesOwnerTier
NYC Local Law 144Independent bias audit, public summary, 10-business-day noticeDeployer
Mandated
Title VII & Uniform GuidelinesAdverse-impact analysis and validation studyDeveloper + deployer
Effectively required
Illinois HB 3773 · NJ LAD · Connecticut SB 5Disparate-impact and proxy testing — no audit mandateDeployer
Incentivized
California FEHA ADS rulesAnti-bias testing; vendors liable as the employer’s agent; four-year recordsDeveloper + deployer
Incentivized
ADA · GINA · state inquiry lawsScreen interview questions for prohibited probesDeveloper + deployer
Effectively required
ADA screen-out & accommodationAccessibility testing, disability-proxy checks, accommodation pathwayDeveloper + deployer
Effectively required
Illinois AI Video Interview Act · BIPAConsent and explanation flows, demographic reporting, biometric consentDeployer (developer under BIPA)
Conditional
California CCPA ADMT rulesPre-use risk assessment; notice, opt-out and access by Jan 1, 2027Deployer
Mandated
Colorado · ConnecticutAdverse-decision explanations and correction rights (Jan 2027 / Oct 2027)Developer + deployer
Mandated
Texas TRAIGAMap governance to NIST AI RMF or ISO/IEC 42001 — an affirmative defense against penalties up to $200,000Developer + deployer
Incentivized
Fair Credit Reporting ActCheck whether third-party data enrichment creates “consumer reports”Developer + deployer
Conditional

Obligations in effect or with a confirmed effective date, as of September 2026. A planning reference, not legal advice.

Why Fairly AI

Built by a research team working on AI’s most human problem.

Hiring is one of the most ambiguous, highest-impact areas of AI: every decision changes someone’s livelihood. Our diverse, global team brings ethics, compliance and AI assurance research from leading institutions, and contributes to the bodies shaping how AI is tested.

Ethics, compliance and AI assurance research

Cornell University
UC Berkeley
University of Waterloo
Vector Institute
RISE Research Institutes of Sweden (EU)
AI Verify Foundation (Singapore)

Contributing member

Partnership on AI
MLCommons
OWASP

Case studies

Independent assurance for the HR AI builders themselves.

Mind Interview

AI interview scoring · Taiwan · Global AI Assurance Pilot, 2025

The question: is first-round candidate scoring biased, and does the process meet employment and privacy rules?

  • Synthetic candidate profiles varied sex and race while answers stayed identical
  • Impact ratios tested against the NYC LL144 four-fifths rule
  • Interview questions reviewed against U.S., UK and Canadian employment law
  • Personal-data scan and scoring quality stress-tested against a benchmark model
Read the case study →
impress.ai

SAVOS agentic hiring assistant · Global AI Assurance Sandbox, 2026

The question: what can go wrong when a recruiting agent acts on its own — and how do you prove it doesn’t?

  • Identified the risks specific to an autonomous recruitment agent
  • Designed and ran tests for each of them
  • Presented at the AI Verify Foundation (Jan 2026) and the AI Assurance Exchange at ATxSummit 2026
Read the case study →

Guides for HR and legal

All resources →

Questions we hear

If a recruiter makes the final call, are we out of scope?

Usually not. Colorado looks at whether AI materially influences the decision, and the EU AI Act classifies tools by their intended purpose. Human review is a required control, not an exemption.

Isn’t our vendor’s bias audit enough?

Not always. The obligation sits with the employer, and a generic audit may not cover your data or jurisdictions. Fairly AI shows where a vendor audit holds and where it doesn’t.

Does Fairly AI replace our employment counsel?

No. Fairly AI runs the program and holds the evidence; your counsel reviews it with far less chasing.

We hire globally. Which rules apply?

The rules of wherever the job and the candidate are — not where you’re headquartered. Fairly AI maps each tool to every jurisdiction it touches, including what demographic data you may lawfully use to test it there.

Know where you stand before the next deadline.

A 30-minute call to map your hiring AI against the laws that apply to you.

Schedule a discovery call

Fairly AI is part of Asenion

Need more than HR? Asenion covers all of your AI.

In 2025, Fairly AI joined with anch.AI to form Asenion. Fairly AI is Asenion’s solution for HR AI — built for the companies that develop hiring AI and the employers that deploy it. For AI governance, assurance and security beyond hiring, across 15 industries from banking to healthcare, visit Asenion.

Explore asenion.ai →