Compliance approach
MyFairCheck is workflow infrastructure: consent, report-first review, disputes, adverse-action workflow support, and audit logs — designed for defensible operations, not legal certification claims.
Trust Center
Compliance and trust documentation
Serious workflow infrastructure for consent, review, disputes, adverse-action support, and audit trails — with clear boundaries on what MyFairCheck does not claim.
Consent-first workflow
Versioned worker disclosures and consent ledger entries before background-check ordering. Each acceptance is auditable with actor and timestamp.
Worker report-first review
Workers review records in a mandatory window before sharing a MyFairPass credential. Platforms verify trust state afterward.
Dispute and evidence process
Structured dispute submission, evidence upload support, reviewer assignment, and SLA deadlines — with outcomes logged for audit review.
Adverse-action workflow support
State machine for pre-adverse notice, waiting period, and final delivery. FCRA workflow support — not FCRA legal compliance.
Clean Slate review-support engine
Deterministic, versioned rules with plain-English suppression reasons for MVP jurisdictions. Review-support engine — not Clean Slate certification.
Audit logs and exports
Sensitive actions append to audit logs. Compliance auditors can request scoped exports without raw provider payloads.
Data minimization
Verification API designed to return credential trust metadata — not raw offense labels or provider webhook payloads.
Security controls in development
Field encryption, RBAC, signed document URLs, and structured log redaction. SOC 2-ready controls in development — not SOC 2 Type II certification.
What we do not claim yet
MyFairCheck does not currently claim SOC 2 Type II certification, Clean Slate certification, or final legal compliance certification. These controls and workflows require legal and security review before real-data production use.
Pilot partners receive audit-ready workflow support and credential verification design — not a substitute for counsel, CRA agreements, or state-specific legal analysis.
Related
Explore trust topics
FCRA workflow support
Consent, report-first review, and adverse-action workflow support — documented, not certified.
Audit-ready exports
Scoped audit packages for compliance auditors without raw provider payloads.
Pilot constraints
Real-data production requires configured compliance, security, and provider review.
Discuss pilot compliance requirements
Walk through consent, audit, and verification design with your compliance and security stakeholders.