Notifications
Clear all
Topic starter
06/06/2026 2:25 am
TL;DR: Traditional background checks still rely on fragmented data sources, manual review, and inconsistent records, which slows hiring and increases error rates, according to WorkOS's interview with Certn's Andrew McLeod. The identity lesson is that trust infrastructure now has to move at API speed without turning compliance into a blind spot.
NHIMG editorial — based on content published by WorkOS: an interview with Certn's Andrew McLeod on AI-powered background checks and trust infrastructure
By the numbers:
- Only 5.7% of organisations have full visibility into their service accounts.
- 79% of organisations have experienced secrets leaks, with 77% of these incidents resulting in tangible damage.
- Organisations that describe themselves as confident in their AI deployment actually experience a 72% security incident rate, compared to 33% for those who remain cautious.
Questions worth separating out
Q: How should security teams handle identity verification when background checks are automated with AI?
A: Treat AI as a triage layer, not the final authority.
Q: Why do background checks create identity governance risk for onboarding programmes?
A: Because they sit between verification and access.
Q: What breaks when background screening relies too heavily on manual review?
A: Manual-heavy screening creates bottlenecks, inconsistent decisions, and poor scalability.
Practitioner guidance
- Map screening steps to decision classes Separate identity verification, compliance validation, and final approval into distinct decision classes so automation only accelerates the portions that are repeatable and auditable.
- Preserve evidence for every exception Capture the records, matching signals, and reviewer notes that justify a flagged or delayed result so audit teams can reconstruct the decision later.
- Integrate screening into onboarding workflows Pass screening outcomes into the same lifecycle process that provisions accounts and access, so a delayed check cannot silently trigger premature onboarding.
What's in the full article
WorkOS's full interview covers the operational detail this post intentionally leaves for the source:
- How Certn applies AI across record matching, identity verification, and risk assessment in the screening pipeline.
- Why faster turnaround changes the design of hiring and onboarding workflows for developers and IAM teams.
- What human reviewers still need to handle when screening results are ambiguous or jurisdictionally complex.
- How the conversation links background checks to broader trust infrastructure concerns such as SSO, directory sync, and audit logs.
👉 Read WorkOS's interview on AI-powered background checks and identity verification →
AI-powered background checks: what it means for identity teams?
Explore further
06/06/2026 4:05 am
AI background screening turns identity verification into a pipeline problem, not a point-in-time check. The article shows that the main constraint is not whether organisations can verify identity, but whether they can do it quickly enough without losing confidence in the result. That changes the governance model from static review to managed workflow, which is the same pattern that appears in modern IAM automation. Practitioners should treat screening latency as an identity operations issue, not an HR inconvenience.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
- 79% of organisations have experienced secrets leaks, with 77% of these incidents resulting in tangible damage.
A question worth separating out:
Q: How do organisations keep compliance intact when identity verification becomes API-driven?
A: By building policy, evidence capture, and jurisdiction handling into the workflow itself. API delivery should not mean opaque decisions. The screening system must retain enough context to prove what was checked, what was flagged, and why a human reviewer intervened.
👉 Read our full editorial: AI-powered background checks are reshaping identity verification
