A good background check protects your customers, team, and reputation. A poor one slows hiring, upsets good candidates, and creates legal risk. Much of the difference comes down to the provider you choose. This guide is for employers of any size, from startups to multinational enterprises. It covers what screening services do, compliance basics by region, how to compare providers, red flags, and a checklist for your next vendor review. Note: This article is general information based on official regulator and provider websites as of 12 November 2026. It is not legal advice. Screening laws vary by country, state, province, and city, and they change often, so speak to a qualified employment lawyer before you set or change your screening policy. We have not tested any of the providers mentioned, and none of them paid to be included.

What an employee background check service actually does

A screening provider gathers and checks information about a candidate, with their knowledge and usually their consent, and gives you a report. A package might include:

• Identity verification – confirming the person is who they say they are.
• Criminal record searches – national, regional, or court-level searches, where the law allows them.
• Employment and education verification – confirming past employers, job titles, dates, degrees, and certificates.
• Professional licence checks – for regulated roles such as healthcare, finance, or law.
• Right-to-work checks – confirming the person may legally work in the country.
• Driving records, drug or health screening, and credit checks – usually only for specific roles and only where permitted.

Order only what the job needs. A driver, a nurse, and a designer need very different checks, and regulators often expect you to justify each one.

Compliance basics by region (not legal advice)

Your provider should know local rules, but legal responsibility usually stays with you. Start with these official sources.

United States

When you use a third-party screening company, the Fair Credit Reporting Act (FCRA) applies. The joint FTC–EEOC guide Background Checks: What Employers Need to Know explains the key steps: tell the candidate in a stand-alone written notice, get their written permission, and certify your compliance to the screening company. Before you take adverse action based on a report, give the person a copy of the report and a summary of their rights, so they can point out errors. See also the CFPB’s FCRA resources and its Summary of Consumer Rights. Anti-discrimination law still governs how you use results. On 28 October 2026 the EEOC voted to rescind its 2012 enforcement guidance on arrest and conviction records. Its press release stresses that Title VII still prohibits race and national-origin discrimination. Many states and cities also have their own “ban-the-box,” fair-chance, and credit-check laws, so check local rules.

United Kingdom

Criminal record checks in England and Wales go through the Disclosure and Barring Service. DBS describes four levels of check: basic, standard, enhanced, and enhanced with barred lists. Which level you may request depends on the role, and GOV.UK offers a tool to find out which DBS check you can get. Scotland and Northern Ireland have separate services. Employers must also check a job applicant’s right to work before employing them. On data protection, the ICO’s guidance on pre-employment vetting says vetting should be proportionate to an identified risk. It also says you should not routinely vet every candidate unless the law requires it. (The ICO notes this guidance is under review after the Data (Use and Access) Act.)

European Union and EEA

Under the GDPR, criminal conviction data gets extra protection. Article 10 of the regulation limits processing to cases authorised by EU or member-state law, and national rules differ widely. Expect to justify each check, limit it to what the role needs, and be open with candidates. The European Commission’s data protection pages link to national authorities.

Canada and Australia

In Canada, the Office of the Privacy Commissioner’s guidance on privacy in the workplace covers collecting, using, and keeping employee information, and employees’ right to access and correct it. In Australia, the AFP explains National Police Certificates, which employers often request in recruitment. The OAIC has a page on privacy and employment. Hiring elsewhere? Ask providers about local consent, data transfers, and record access, and confirm with local counsel.

How to evaluate a background check provider

1. Coverage and countries

Confirm the provider can run the searches you need everywhere you hire. Some large providers say they cover 200+ countries and territories, but available searches vary with local law. Ask for a country-by-country list of searches, sources, and limits.

2. Turnaround times

Averages can hide delays. Ask for typical turnaround by search type and country, what causes delays, and how you and the candidate get updates.

3. Accuracy and the dispute process

Errors can cost a candidate a job and expose you to claims. Ask how records are matched to the right person and checked against original sources. Then ask who the candidate contacts to dispute a result, how quickly it is reinvestigated, and how corrected reports reach you.

4. Accreditation

The Professional Background Screening Association runs an accreditation programme overseen by its Background Screening Credentialing Council. Its accreditation FAQ describes independent desk and onsite/virtual audits, with full re-accreditation every five years. You can check claims in the accredited firms directory. It is not a guarantee, but it is verifiable.

5. Data security and certifications

Screening providers handle identity documents, criminal records, and sometimes health data. Ask for current evidence of security controls, such as ISO/IEC 27001 certification or an AICPA SOC 2 report, and check what they cover. Ask where data is stored, who can access it, how long it is kept, and how breaches are reported.

6. Candidate experience

Candidates see the provider as part of your brand. Look for clear consent screens, mobile-friendly and accessible forms, support in your candidates’ languages, and an easy way for candidates to view their results.

7. ATS and HRIS integrations

A native integration with your applicant tracking system saves time and reduces errors. Confirm it works with your system and plan, and who supports it. If you are still choosing an ATS, see our guide to applicant tracking systems for small businesses.

8. Pricing model transparency

Pricing may be per package, per search, or by subscription, and pass-through fees such as court or government charges can sit on top. Ask for a written, itemised quote covering international searches, re-runs, monitoring, and minimum volumes.

Well-known providers to research

These are examples to research, not a ranking. Each description comes from the company’s own website:

• First Advantage – global screening, identity verification, and monitoring for employers of all sizes. Sterling is now part of First Advantage, according to Sterling’s site.
• HireRight – employment screening with global coverage and ATS/HCM integrations.
• Checkr – a technology-led platform offering criminal, verification, driving record, continuous, and international checks.
• GoodHire – screening for small and larger organisations, with customisable packages and ATS/HRIS integrations.

Regional and specialist firms may suit you better for one country or industry. Judge every provider by the same criteria.

Red flags to watch for

• A vague answer to “Which searches are possible in this country, and from what source?”
• Promises of “instant” or “complete” checks everywhere, or claims that the provider makes you compliant on its own.
• No clear, candidate-friendly way to dispute results.
• Accreditation or security claims that you can’t verify in a directory or report.
• Pressure to order broad packages or monitoring the role doesn’t need.
• Quotes that leave out third-party, international, or re-run fees.

Step-by-step selection checklist

1. Map your roles and locations. List the checks each job family genuinely needs and the countries involved.
2. Write or update your screening policy with legal advice. Set out what you check, when, and how you assess results fairly.
3. Shortlist three to five providers with coverage in your hiring locations.
4. Send the same questions to each on coverage, sources, turnaround, disputes, accreditation, security, integrations, and itemised pricing.
5. Verify their claims by checking accreditation directories, reviewing security reports, and asking for references from employers like you.
6. Test the candidate journey on mobile and desktop.
7. Check the contract for data-processing terms, retention, subcontractors, service levels, and exit terms.
8. Pilot with one team or country, then review turnaround, disputes, and candidate feedback before rolling out.
9. Review the programme every year.

If you hire through an employer of record or agency, agree in writing who orders and pays for checks. Our comparison of an employer of record vs. a staffing agency explains how those relationships work.

FAQ

Do small businesses need a background check service?

Not always, but a reputable provider usually beats informal online searching, with proper consent workflows and sources. In some places, such as the US, using one also brings legal duties, including FCRA notices.

Can I run the same checks in every country?

Usually not. Record access, permitted checks, and consent rules differ by country. Build packages around each location.

When in the hiring process should checks happen?

Often at the conditional-offer stage, after you have chosen a candidate. The UK ICO, for example, advises collecting criminal offence information only from the successful candidate. Many US states and cities also restrict early criminal-history questions. You can read more on attracting candidates in our guide to recruiting candidates online.

What if a candidate says their report is wrong?

Pause the decision, follow the dispute and adverse-action steps that apply where you hire, and let the provider reinvestigate.

Bottom line

The right service fits your roles, countries, and legal duties, treats candidates fairly, and keeps their data safe. Define your needs, ask every provider the same questions, verify their claims, and pilot before you commit.