Learn
What is an audit trail in hiring?
A hiring audit trail is the contemporaneous record of every decision in a selection process: what was decided, who decided it, what evidence it rested on, and when. "Contemporaneous" is the load-bearing word — a record written at the time is evidence, and one assembled afterwards is an account.
1.What a defensible record contains
The standard, as it existed before applications were read. If the rubric can be edited without leaving a trace, the trail proves nothing — it can always be made to justify whatever happened.
The decision, with the reason attached and the evidence it came from. For a screening rejection that means the requirement that was not met and the part of the CV that showed it was not met.
The person. Automated systems make suggestions; a named human accepts or overrides them. A trail that cannot tell those apart cannot answer the only question that matters under Article 22.
2.What UK GDPR actually asks for
Article 15 gives candidates a right of access — they can ask what personal data you hold and how it was used. Article 22 restricts decisions made solely by automated processing where those decisions significantly affect someone, and rejection from a job is generally accepted to qualify.
The practical consequence is not that AI screening is prohibited. It is that a human has to be genuinely in the loop, and you have to be able to show it. A human who rubber-stamps a ranking they cannot see the reasoning for is not meaningfully in the loop, whatever the process diagram says.
3.Why reconstruction fails
Reconstructed reasons are systematically better than real ones. Nobody writes down a weak reason six months later; they write the reason that makes sense now, which is a different reason.
This is obvious to a tribunal and to any client asking a pointed question, and it is why the record has to be a by-product of the work rather than a task that comes after it. If recording the reason is a separate step, it will not happen on the busy days — which are the days that generate the complaints.
Where this gets it wrong
- A trail nobody can query is not a trail. If answering "why was this candidate rejected" takes a developer, it will not be answered.
- This page describes how a screening process can be built to be defensible. It is not legal advice, and your DPO is the person to sign it off.
Common questions
Hiring audit trails, in short.
Read next
What is a screening rubric?
A screening rubric is the written standard a role is judged against, set before the first application is read. What goes in one, and why writing it first changes the outcome.
What is AI CV screening?
AI CV screening reads applications against a role's requirements and ranks them, with the evidence for each score. What it is, how it differs from keyword search, and where it fails.
The offer
See it on a role you are working today.
Twenty minutes, your own job description, your own CVs. You judge it on the shortlist it produces.
- 1Twenty minutesYou bring one live role. We look at it together — no deck, no discovery questionnaire.
- 2Set up on the callYour job description becomes a rubric while you watch, and your own CVs go through it.
- 3Then 7 days aloneYou run it on real work and judge it on the shortlist, not on anything we said.