High-risk classification for hiring AI.
Hiring AI is explicitly listed as high-risk under the AI Act, requiring transparency, traceability, human oversight, and bias risk management. Compliance is not optional in EU markets.
The EU AI Act, NYC Local Law 144 (AEDT), and Colorado SB 24-205 all raise the bar on opaque hiring AI. ShortlistTable is designed around the principles those laws codify: every AI verdict is traceable to a screening criterion, a source sentence, and a recruiter override decision — with a per-cell audit trail you can export for your own compliance review. Customers remain responsible for compliance in their own jurisdictions.
“Built and operated Kafka streaming pipelines at Ledger from 2022-present. Owned primary on-call.”
In the last 24 months, three of the largest hiring markets on earth introduced binding regulation on AI-assisted hiring: the EU AI Act classifies hiring AI as high-risk and requires explainability, bias audits, and human oversight; New York City Local Law 144 (AEDT) requires bias audits and candidate disclosure for any automated employment decision tool; Colorado SB 24-205 imposes similar requirements at state level. More are in flight in California, Illinois, and the UK.
All of these regulations have one technical implication in common: if your AI screener is a black box that produces a single score and silently rejects candidates below threshold, you have to either disclose extensively, run periodic bias audits, or both. We took the simpler route: design the product so this regulation isn’t a retrofit.
Hiring AI is explicitly listed as high-risk under the AI Act, requiring transparency, traceability, human oversight, and bias risk management. Compliance is not optional in EU markets.
Any “automated employment decision tool” substantially used to screen NYC candidates requires an annual bias audit and disclosure to candidates. Tools that don’t expose their inputs cannot produce a meaningful audit.
Colorado mirrors much of the EU AI Act for high-risk algorithmic systems including hiring. Vendors and deployers both carry obligations.
Every AI verdict targets exactly one screening criterion. There is no composite mystery score to reverse-engineer — the unit of explanation is the cell.
Every AI verdict cites the exact sentence in the resume that produced it. Auditable to the page, line, and section.
When a recruiter overrides a verdict, the original AI value, the override, the actor, the timestamp, and the optional note are all retained. The decision is the recruiter’s; the trail proves it.
There is no path in the system that removes a candidate from consideration without a recruiter action. The bottom of the list is a hold queue, not an auto-rejection. Under AEDT this means we are not, on our own, an AEDT.
Per-workspace audit logs export to CSV / XLSX for periodic bias audits, candidate disclosure requirements, or internal compliance review. Timestamps, actors, and rationale included.
Per-workspace data retention policies — auto-archive after N days, hard-delete after M days — to meet jurisdiction-specific candidate-data rules.
| Property | Black-box AI screener | ATS rank column | Manual screening | ShortlistTable |
|---|---|---|---|---|
| Per-criterion reasoning | ✕Composite only | ✕Single rank | ✓Manual notes | ✓Per cell |
| Source citation | ✕Rare | ✕No | –Manual | ✓Every verdict |
| Override logged | ✕Edit-only | –Limited | ✓Manual log | ✓Per-cell trail |
| No automated decision | ✕Often auto-reject | ✕Auto-rank cut | ✓By definition | ✓Hold queue only |
| Exportable audit log | ✕Rare | –ATS-shaped | ✕None | ✓CSV / XLSX |
| Per-workspace retention | –Global | –ATS-bound | ✕Manual | ✓Per-workspace policy |
Our position is no — AEDT applies to tools that substantially assist or replace discretionary decision-making, and ShortlistTable does not auto-reject, does not produce ranked output as the final decision, and requires recruiter action for every screen-out. The recruiter is the decision-maker; we are evidence-gathering with a paper trail. That said, AEDT compliance is the deployer’s responsibility, not the vendor’s. If you use ShortlistTable in NYC, you should still run your own annual bias audit per the law and consult counsel on whether your specific configuration triggers AEDT — we provide the per-workspace audit logs that audit needs.
Compliance with the AI Act is a property of how a customer deploys an AI system, not of the vendor alone. ShortlistTable is designed around the Act’s requirements for high-risk hiring AI — per-cell traceability, exportable audit logs, mandatory human override, no automated decision-making — but we do not claim certification (no certification scheme exists yet for hiring AI under the Act). We will publish a conformity-assessment summary as the Act phases in through 2026-27 and update this section accordingly.
No. Candidate data from your workspace is never used to train any model. We use evaluation-driven model selection on synthetic and licensed datasets, not customer data.
Per-cell: criterion, AI verdict, confidence, source citation, recruiter override (if any), actor, timestamp, and free-text override note. Per-workspace: column edit history, re-run history, candidate access log. Exportable as CSV or XLSX for compliance review.
Yes — the per-cell audit log can be filtered to a single candidate and exported, producing a record of every verdict, source citation, and recruiter action. This supports candidate disclosure requirements under AEDT and similar laws.
Two layers: (1) at the product level, every verdict surfaces its source sentence, which makes systematic mismatches visible to the recruiter; (2) per-workspace, the override log lets you analyse where the AI verdict and the recruiter disagree systematically — that disagreement is the strongest signal of where bias is hiding, and we surface it explicitly.
Per-workspace, encrypted at rest, with configurable retention (auto-archive after N days, hard-delete after M days). Choice of US or EU region. SOC 2 Type 2 in progress.
Try ShortlistTable on a 25-resume pile. Every verdict has a source citation, every override has an audit trail, no candidate is silently rejected. Your compliance team gets a paper trail; you stay the decision-maker.