Security & compliance
Background check security that protects the people you screen
Background checks hold the most sensitive data a person has. See exactly how Attestcare protects it and runs every FCRA step.
Powered by OffenderSearch
- Encrypted in transit
- Role-based access
- FCRA consent on file
- Disputes via the agency
01
Candidate data protection for every background check
Sensitive data, protected by default on every account.
Encrypted in transit
Website, dashboard, invitations and reports, all over HTTPS.
Passwords hashed with Argon2id
Stored only as Argon2id hashes, built to resist cracking.
Sessions that expire
Sessions end after 12 idle hours or 7 days, whichever comes first.
Hardened session cookies
HttpOnly and Secure. Only a hash of each session token is stored.
02
Access control for screening data
Exactly the access each job needs. Nothing crosses between organizations.
Role-based access
Owner, admin, recruiter and viewer control who orders, decides and configures.
Organization isolation
Every request is scoped to one organization. No customer sees another's records.
Protected owner role
Only owners grant or remove the owner role. No account loses its last owner.
Sign-in protection
Failed sign-ins are rate-limited. Cross-origin requests are refused.
03
Data minimization in every background check
Only what a healthcare screening needs. Nothing more.
No Social Security numbers
Order with a name, an email and an optional phone number. Never an SSN.
A focused set of checks
Criminal records, registries, exclusion lists and nurse-aide findings. No drug tests, fingerprints or SSN traces.
Permissions
Screening roles and permissions at a glance
Decisions with legal weight, like adverse action, stay with admins and owners. Everyone else gets what their work needs.
Team & roles
Invite teammate| Permission | Owner | Admin | Recruiter | Viewer |
|---|---|---|---|---|
| View screenings, reports and alerts | ||||
| Export a facility's survey file | ||||
| Order, resend or cancel screenings | ||||
| Upload roster and resolve alerts | ||||
| Start adverse action | ||||
| Add and edit facilities | ||||
| Invite teammates and set roles | ||||
| Grant or remove the owner role |
FCRA workflow
FCRA compliance steps, identical every time
Disclosure and authorization, hosted for you.
Candidates receive a standalone FCRA disclosure and sign their authorization on their own device. You never chase paper forms, and every signature is stored with the report.
Hosted FCRA consent
Reports are prepared by OffenderSearch LLC, a consumer reporting agency. Candidates request their file or dispute directly with OffenderSearch.
Background check security and compliance questions
Who prepares the background reports?
How do candidates give consent?
What happens if we decide not to hire because of a report?
Can we limit what each teammate can do?
Our security team has more questions. Who do we ask?
Walk your security team through Attestcare background screening
Consent, adverse action, roles and survey files, shown on a live account.
Core $39 per candidate · Monitoring $2.50 per employee per month