Compliance Without Compromise
Turn applies FCRA, EEOC, SOC 2, and PBSA standards to every domestic check, and meets GDPR, PIPEDA, and local privacy laws across 200+ countries. No guesswork. No gaps.
Continuous FCRA Compliance
- 9 years
- Countries & Territories: 200+
- Dispute Rate: <1%
- Regulatory Coverage: 50 states
- Global Coverage
Built-In US Regulatory Compliance
Turn is a registered Consumer Reporting Agency (CRA). Every check processed through Turn includes full federal and state compliance, automated end to end.
FCRA (Fair Credit Reporting Act)
Every check includes proper disclosure, candidate authorization, adverse action workflows, dispute resolution, and reinvestigation procedures. Turn has maintained full FCRA compliance across millions of checks over nine years of operations.
EEOC Guidance
Screening practices designed to support individualized assessments and align with EEOC enforcement guidance on the use of criminal records in employment decisions.
State & Local Laws
Turn's platform accounts for state-specific requirements including ban-the-box laws, salary history restrictions, and state CRA registration obligations across all 50 states.
CCPA & US State Privacy
Candidate rights to know, delete, and opt out supported under the California Consumer Privacy Act and expanding state-level privacy frameworks.
Process Automation
Automated Adverse Action Management
Turn automates the pre-adverse and adverse action notice process required under FCRA, keeping your hiring decisions compliant at every step.
- Pre-adverse action notice with report and Summary of Rights
- Configurable waiting periods by state and jurisdiction
- Final adverse action notice delivery and documentation
- Full audit trail for every step of the process
International Compliance
Global Compliance, Built Into Every Check
Turn supports international background screening in 200+ countries and territories. Every check complies with the privacy and employment laws of the candidate's jurisdiction.
GDPR (EU & UK)
Full compliance including Standard Contractual Clauses, candidate consent management, right to access, and right to erasure for all data subjects.
PIPEDA (Canada)
Canadian privacy compliance with jurisdiction-specific consent collection, secure data handling practices, and adherence to national regulatory standards.
LGPD (Brazil)
Adherence to Brazil’s General Data Protection Law, ensuring compliant screening processes, consent handling, and protection of candidate information.
Australian Privacy Act
Compliance with Australian data protection requirements, including AFP checks, employment screening standards, and proper handling of personal data.
Country-Specific DPA
Consent flows, data handling, and result delivery are configured per country, ensuring compliance across all jurisdictions in our coverage network.
Important: The FCRA applies to employment screening decisions made by US-based employers, regardless of whether the candidate or the check is domestic or international. Turn's platform includes FCRA-compliant workflows for all screening.
Security & AI Governance
How Turn Protects Data
Compliance does not stop at which laws you follow. It extends to how you secure candidate data and govern the AI systems that process it. At Turn, security infrastructure and AI governance operate under one framework, because in modern screening, they are inseparable.
- End-to-end encryption (AES-256) for data at rest and in transit.
- Hosted on AWS and GCP with enterprise-grade security controls.
- Configurable data residency: US, Canada, UK, and Australia.
- 99.99% platform uptime for reliable performance.
- Multi-factor authentication and continuous monitoring.
- Data residency aligned with contractual and regulatory needs.
SOC 2 Type II
Independently audited certification covering security, availability, and confidentiality, with continuous auditing rather than a single point-in-time review.
SOC 3
Publicly available report summarizing Turn’s security controls, providing transparency into compliance practices and overall system reliability.
ISO 27001
Aligned information security management workflows ensuring structured risk management, data protection controls, and continuous security improvement processes.
PBSA Member
Member of the Professional Background Screening Association, demonstrating commitment to rigorous industry standards and enterprise-grade security practices.
What Platforms Get With TurnOS
- SOC 2 Type II: Independently audited
- ISO 27001: Aligned workflows
- SOC 3: Publicly available
- GDPR: EU & UK compliant
The same standards apply to our AI. Turn uses AI to make screening faster and more accurate, but every AI system operates within the same security perimeter, the same audit scope, and the same compliance controls described above. AI governance is not a separate initiative at Turn; it is an extension of how we already protect data and maintain compliance.
Ethical AI Practices
Responsible AI at Turn, Designed For Fairness
Every AI feature we deploy is guided by Turn’s Responsible AI Principles: Human oversight, transparency, fairness, and continuous improvement. These principles ensure our technology supports informed decision-making, minimizes bias, and evolves responsibly alongside changing regulatory and ethical standards.
| Feature | What it does | Human role |
|---|---|---|
| Turn AI Assistant | Provides contextual FCRA guidance within the platform | Informational only; no report modification |
| ClarifAI | Translates criminal/MVR record language into plain summaries | Human review of all summaries before delivery |
| AI Record Matcher | Matches records to candidates across multiple data sources | Human validation prior to report finalization |
| Document Intelligence | Authenticates identity and detects fraud in submitted documents | Human review of all flagged items |
| Operational AI | Automates internal quality control workflows | Augments, does not replace, compliance staff |
Human Oversight, Always
No Turn AI system makes independent employment decisions. Every AI-influenced output is reviewed by qualified personnel before impacting candidate reports or compliance workflows. This is enforced as a technical control, not just a policy.
Data We Use, and What We Don’t
Your candidates’ data remains yours. Turn processes Customer Data only to deliver contracted services. We never use identifiable or partner-specific data to train AI. Improvements rely on aggregated, anonymized, and synthetic data.
Fairness & Bias Testing
Turn conducts regular bias audits across protected characteristics, including race, sex, national origin, and age, aligned with EEOC guidance. When risks are identified, we apply corrective actions such as rebalancing data, adjusting models, or increasing human review.
AI-Specific Regulatory Compliance
Turn’s AI governance framework meets or exceeds requirements under the EU AI Act, Colorado SB 24-205, California FEHA, Illinois Human Rights Act, and other laws governing high-risk AI and automated decision-making systems.
Questions about AI at Turn? Contact our compliance team at compliance@turn.ai. Partners may request a summary of Turn's AI governance documentation under the terms of their agreement.
Quick Reference
Why Teams Choose Turn
From faster turnarounds to built-in compliance, see how Turn outperforms legacy solutions.
| Area | Standard | Status |
|---|---|---|
| US Employment Screening | FCRA | Full compliance, 9 years continuous |
| US Equal Employment | EEOC Guidance | Aligned |
| US State Privacy | CCPA + state laws | Supported across all 50 states |
| Data Security | SOC 2 Type II | Independently audited (continuous) |
| Data Security | SOC 3 | Publicly available |
| Information Security | ISO 27001 | Aligned workflows |
| Industry Membership | PBSA | Active member |
| EU/UK Privacy | GDPR | Full compliance including SCCs |
| Canadian Privacy | PIPEDA | Full compliance |
| Brazilian Privacy | LGPD | Compliant |
| Australian Privacy | Privacy Act | Compliant |
What Platforms Get With TurnOS
- SOC 2 Type II: Independently audited
- ISO 27001: Aligned workflows
- SOC 3: Publicly available
- GDPR: EU & UK compliant
Ready to See Our Compliance in Action?
Schedule a compliance consultation, or get a free demo.