Before you make an offer, you can ask a candidate to confirm that they are who they say they are. The candidate gets an email in your company's name, verifies on their own phone with their ID, and the result appears on the candidate in aironauts® hire. Checks are run by an external identity verification provider. An identity check confirms identity only: criminal records, credit and employment history are not checked.
What a check includes
Every identity check includes:
- ID document check: the candidate photographs their ID document.
- Liveness check: a short selfie video, which shows a real person is taking part.
- Face match with the ID photo: the selfie is compared with the photo on the ID.
When your company turns it on, a check also includes sanctions and PEP screening: the candidate is screened against sanctions lists, lists of politically exposed persons (PEP) and adverse media watchlists.
One check is one unit of your monthly package, with or without sanctions screening. The packages and their prices are on the pricing page.
Turn on identity checks
Go to SettingsIdentity checks, or select Turn on on the Identity checks row under Verification on the Integrations page, which opens the same page. The row shows whether checks are Off, On or On · sanctions screening for the company picked at the top. The settings are per company. See Integrations.
- Identity checks lets your team ask candidates to verify. It is off until you turn it on. Turning it off stops new checks for that company only: the monthly package belongs to the whole workspace and stays active until you end it.
- Add sanctions screening adds the screening to every new check for this company. It uses no extra units of the package.
- Monthly package is a slider through the package sizes. Moving it shows the monthly price, the price per check and the saving per check against the smallest package, in the currency your workspace is billed in. Under it, Every check includes lists what a check covers, with sanctions and PEP screening listed when the company has it on and offered when it is off. Workspaces that aren't billed, such as internal ones, see Included at no charge for this workspace instead and need no package.
Choosing, changing and ending the package
Nothing about the package changes, and nothing is charged, until you confirm it in a dialog. The dialog shows the package size, the monthly price, the price per check, what every check includes, and when billing starts:
- A first package, or a bigger one, starts the same day. A prorated share for the rest of the current period is added to your next invoice; for a bigger package, that is the difference to the package you had. After that, the package's price is billed every month.
- A smaller package takes effect at the end of the package's current monthly period, on the date the dialog names. Nothing is charged until then, and your current package keeps running.
- Every package renews each month until you end it.
If your workspace has no package yet, turning on Identity checks opens the same dialog with its own slider, so you pick a size and see its price first. Checks turn on once the package has started; if you cancel, they stay off. Someone without permission to manage billing sees that a package is needed and who can choose one, and the switch stays off.
End the package asks you to confirm too. The dialog names the date the package ends, the end of its current monthly period, and how many of this month's checks you can still use until then. After that date no new checks can be requested in the workspace. Checks used beyond the package this month are still billed on the month-end invoice. While the end is scheduled, the page shows the date and the checks left, and Keep package cancels the end. Keep does the same for a smaller package that is waiting.
Under the slider, a line shows the package as it stands: active, its size, how many of this month's checks are used and how many are left, and the date it renews or ends, plus any change that is waiting. When your whole subscription is set to end, the package ends with it and can't be changed until you resume the subscription in SettingsUsage & billing.
Checks you don't use in a month don't carry over. Checks beyond your package are never refused: they are billed at your package's price per check on the month-end invoice. Each check counts against the package you held when it was made, so a package you change during the month covers only the checks made after the change. SettingsUsage & billing shows how many of this month's checks are used, and warns you as you near and pass the package. See Usage and projected charges.
Changing the switches needs permission to change company settings; choosing the package needs permission to manage billing.
Ask a candidate to verify
Step 1: Open the candidate
Choose Verify identity with the decisions at the top of the candidate, next to Schedule interview and Make offer.
Step 2: Check the request
The dialog shows what will happen, the email address the request goes to, what the check includes and its price. Select Send request.
Step 3: The candidate verifies
They get an email in your company's name that says who is asking and why, what they need (an ID and a phone with a camera), that an identity verification provider runs the check, and that they can reply with questions. The link opens the provider's page, where they see its own consent screen; there is nothing to install. If they haven't started after two days, they get one reminder.
A candidate has one open check at a time. While they haven't finished, Cancel check takes it back and the link stops working. Rejecting the candidate does the same for a check they haven't finished. A check that already needs a look was already counted: it stays for you to decide, but a rejected or withdrawn candidate never gets a reminder or another email about it, and you can approve or decline it but not ask them to redo it. Hiring a candidate leaves their check as it is, since a check before they start is normal. Once a check has ended you can request a new one, which counts as a new check. The exception is a candidate who was verified in the last 90 days: Verify identity doesn't show for them, and ari won't offer a new check, because the result is already on the candidate. A candidate without a real email address, for example one imported without one, can't be asked.
Requesting and canceling checks needs permission to hire and reject.
Request checks automatically
A hiring process can request a check on its own. In SettingsHiring process, add an automation to a step with the trigger A candidate enters this step and the action Request an identity check. It isn't offered on the first step. The automation skips a candidate who already has a check open or was verified recently, and does nothing while the company has identity checks turned off. See Hiring process: steps, people and rules.
Ask ari
Ask ari, for example "Ask Marco Silva to verify his identity". ari shows a card with the candidate, the role, the email address, what the check includes and the price, and sends the request only when you select Confirm. ari never starts a check on its own. See ari as a guide and helper.
Read the result
The candidate's header shows where the check stands.
The Identity check section on the candidate, beside the offer, has the details: who asked and when, when it was sent, started and decided, and the result in plain words.
Identity check
Identity: verifiedThe check includes
- ID document check
- Liveness check (a short selfie video)
- Face match with the ID photo
- Sanctions and PEP screening
- Requested by Sarah Chen2 Nov, 10:00 am
- Sent to the candidate2 Nov, 10:00 am
- Candidate started2 Nov, 01:10 pm
- Result received2 Nov, 01:14 pm
Results
- Document checked: Identity card, Singapore
- ID document: passed
- Liveness: passed
- Face matches the document photo: yes
- Name matches the application: yes
Sanctions screening
No matches
When a line needs attention, such as a name that doesn't match the application, it is highlighted. Sanctions screening shows No matches, or the number of matches with their categories and the lists they came from.
Needs a look
When the provider's automated checks raise warnings, the check needs a person to decide, and that person is on your team. The section shows Needs a look with three choices, each confirmed first:
- Approve marks the check as verified.
- Decline marks it as not verified.
- Ask to redo emails the candidate the same link again, so they can redo the steps that need a look.
Identity check
Identity: needs a lookNeeds a look
The verification provider's automated checks raised warnings. Look at the results, and the full report if you need it, then decide.
The check includes
- ID document check
- Liveness check (a short selfie video)
- Face match with the ID photo
- Requested by a hiring flow2 Nov, 10:00 am
- Sent to the candidate2 Nov, 10:00 am
- Candidate started3 Nov, 05:40 pm
- Result received3 Nov, 05:46 pm
Results
- Document checked: Passport, Portugal
- ID document: passed
- Liveness: passed
- Face matches the document photo: unclear, check this
- Name matches the application: no, check this
Deciding a check needs permission to review applications. Who decided, and when, is recorded in the activity log.
Everyone who can review the company's candidates gets a notification when a check has its result and when one needs a look, under the Identity checks notification category. Sending, results and decisions also appear in the activity log. See Email notifications.
The full report
View full report fetches the provider's report fresh, with the document images and the selfie. Their links expire after a short time; open the report again for fresh ones. Nothing in it is stored in aironauts hire, and every opening is recorded in the activity log with who opened it. Anyone who can review applications can open it, until the provider deletes the session 90 days after the decision. After that the section says when the report was deleted.
What is kept, and what counts
aironauts hire keeps a summary of the result only: the decision, whether each part passed, the document type and issuing country, whether the name matches, and any sanctions matches. It never stores the ID images, the selfie, the document number or the date of birth. Erasing a candidate also deletes their session at the provider. Whenever a session is deleted (a canceled check, 90 days after the decision, or an erasure), the record the provider keeps of the candidate's name and date of birth for that check is deleted with it. See How your data is protected.
A check counts against your package once the provider has run it: when it is verified, not verified or needs a look. A check the candidate never finishes, one you cancel before they finish, and one that could not be sent don't count, and asking a candidate to redo flagged steps doesn't count again.