How to Background Checks Work: A Founder’s Real Guide

Most advice about background checks starts in the wrong place. It tells founders to pick a vendor, enter a candidate's details, and wait for a green or red result. That's how you turn a hiring safeguard into a compliance scare with a dashboard.

The better question is how do background checks work inside the hiring workflow? The answer involves timing, source quality, candidate rights, jurisdiction rules, and a human review process. A fast report can still be wrong. A complete report can still be used illegally. And a cheap vendor can become expensive the moment someone disputes an identity match.

For a remote SaaS team hiring SDRs across state lines, background screening isn't a fraud-detection feature bolted onto the end of recruiting. It's an operating system decision. Get the sequence right, and checks protect the company without wrecking candidate experience. Get it wrong, and you'll spend your afternoons untangling reports, notices, and angry emails instead of building pipeline.

Why Background Checks Are Really a Workflow Problem

Background screening has become standard in US hiring. Industry summaries report that about 93% to 96% of US employers conduct at least one background screen, with criminal-history checks used by roughly 93% of screening employers, according to employment screening industry statistics. That scale makes screening infrastructure, not an unusual defensive tactic.

The advice to “run the check early” is too blunt. Launching a criminal-history search before a serious shortlist can violate fair-chance rules and waste money on candidates who never reach a hiring-manager interview. The decision is where the screen belongs in the funnel.

Founders usually create trouble in three places:

  • Triggering checks before a serious shortlist: You pay for reports on candidates who may never receive an interview.
  • Treating the vendor report as gospel: Aggregated records can be incomplete, duplicated, outdated, or linked to the wrong person.
  • Combining every compliance step in one Slack thread: Disclosure, authorization, report review, and adjudication need separate controls, not a casual “looks good” message.

Founder rule: A background check should be a controlled decision gate, not a search box someone opens whenever they feel nervous.

That workflow matters for distributed SDR teams. Recruiting may begin on LinkedIn, continue through an asynchronous phone screen and role-play, and end with decision-makers working across states and time zones. A fast report that skips required notice can create more exposure than a slower check launched at the correct stage.

The underlying record pool is broad. Estimates place the number of adults with some kind of criminal record at 70 million to 100 million, meaning roughly one in three people may trigger a record-based result during a check. A record-based result is not a hiring decision. It requires identity verification, disposition review, the applicable rule, and a meaningful chance for the candidate to respond.

A repeatable pipeline should separate recruiting judgment from screening adjudication. If you Hire BDRs, keep that separation explicit. The goal is not to outsource thinking. It is to stop a rushed hiring manager from collapsing legally distinct steps into one improvised decision.

The Five Building Blocks Every Check Combines

A background check is a bundle of separate investigations. Each component uses different records, fails in different ways, and answers a different hiring question. Treating the bundle as one magical “clear” result is how teams miss obvious gaps.

Check Type Primary Data Source Typical Turnaround Common Failure Mode
Criminal history County, state, and federal repositories Varies by source Missing disposition, duplicate record, incomplete jurisdiction
Identity SSN trace, address history, identity documents Usually early in the workflow Common-name mismatch or stale address data
Employment Former employers or payroll records Depends on human confirmation Closed company or outdated HR contact
Education School registrar or verification service Depends on institution Institution can't verify the record
References Named professional contacts Depends on response speed Friendly but uninformative or fabricated reference

Criminal history

Criminal screening can include county, state, and federal searches, plus sex-offender registries and global watchlists. County records often provide the detail needed to understand a charge, filing, disposition, or dismissal. State and national databases help identify where a deeper search may be needed, but they don't eliminate jurisdiction gaps, particularly for remote workers who've lived in several places.

Identity verification

Identity checks commonly examine an SSN trace, address history, and documents. Some workflows now add selfie matching and biometric liveness checks. Those tools can reduce impersonation risk, but they don't make a criminal record match accurate by themselves. The screener still has to determine whether the record belongs to the candidate.

Employment and education

Employment verification often depends on a former employer, payroll provider, or HR contact answering the phone. Education verification can fail because a school closed, a registrar changed systems, or an international institution uses a process unfamiliar to the vendor. “Unable to verify” isn't the same thing as “false.” Build a manual escalation path before treating it as a negative finding.

References

References are qualitative and easy to manipulate, but they can be highly useful for SDR hiring. A reference can speak to coachability, activity discipline, follow-through, and how the candidate handles rejection. A provider may collect the call, but your hiring team still needs a consistent question set and a way to distinguish polite praise from useful evidence.

The right design keeps these checks separate. Identity matching validates the person. Criminal research validates a record. Employment and education verify claims. References test how the person operated in context. One report can't do all five jobs.

Where the Data Actually Comes From

Fast results can create slow problems. Vendor dashboards reward founders for watching turnaround time, but the first result is often only a screening signal, not enough evidence for a hiring decision.

Criminal database searches can return in roughly 24 to 72 hours, while county courthouse searches often take 3 to 10 business days because courthouse research depends on manual or jurisdiction-specific retrieval, according to background check timing guidance. Use the fast layer for triage. Escalate anything that could change the decision to a source that can verify the record.

Database searches are a signal, not a verdict

National and multi-jurisdictional databases pull from digitized repositories. They provide broad coverage quickly, but they may omit a disposition, miss a sealing or expungement, duplicate one matter, or contain incomplete coverage for a smaller county.

“No record found” therefore has a narrow meaning. The selected data sources returned no match under their search logic. It does not confirm that every relevant courthouse record was checked.

Courthouse records add context

County courthouse searches take longer because someone may need to retrieve and inspect the jurisdiction's actual record. That work can expose charge-level detail and disposition information that an aggregator does not display clearly. It also consumes operational time, so ordering it for every candidate at the first stage wastes capacity.

Use this workflow:

  1. Run identity validation and an initial database search after the legally permitted trigger.
  2. Review the candidate identifiers and the exact record returned.
  3. Order courthouse-level verification for a potentially relevant hit.
  4. Pause the hiring decision while the candidate receives the required report and response opportunity.
  5. Record the final reasoning, rather than relying on the vendor's status label.

The CFPB's market snapshot illustrates why digitization now supports large-scale screening. State criminal-history systems across all 50 states, Guam, and Puerto Rico held 110,235,200 records, including 105,927,700 automated records and 4,307,500 manual records, according to the CFPB background screening market snapshot. Automated records make checks scalable. They do not solve missing context or weak source quality.

The same report describes a 22% increase in criminal-history records used for non-criminal-justice purposes between 2010 and 2014, with 30 million records provided during that period. Treat that growth as a workflow warning. More searchable data does not automatically produce better hiring. Your process needs an explicit escalation rule whenever a broad database result lacks the context required for a defensible decision.

The FCRA Sequence as an Operating Manual

The Fair Credit Reporting Act sequence isn't paperwork to dump on HR after the hiring decision. It's the spine of the workflow.

The employer must give a standalone disclosure, obtain written authorization, document a permissible purpose, use a qualified consumer reporting agency, review the report with reasonable procedures, and follow the adverse-action process when negative information may affect the decision. The FTC employer guidance explains the disclosure, authorization, report delivery, and notice requirements.

A six-step infographic detailing the FCRA sequence as an operating manual for conducting legal background checks.

Put each action in the system

A workable operating sequence looks like this:

  1. Standalone disclosure: Give the candidate a clear disclosure that a consumer report may be obtained for employment purposes. Don't bury it in an application full of unrelated legal language.
  2. Written authorization: Obtain the candidate's written permission before ordering the report.
  3. Permissible-purpose record: Keep the role, hiring purpose, and authorization connected in your ATS or HRIS.
  4. Certified vendor selection: Use a consumer reporting agency that supports employment screening obligations and can explain its data sources.
  5. Report review: Apply reasonable procedures to match the report to the correct person and inspect potentially adverse items.
  6. Adverse action: If the report may influence a negative decision, send the pre-adverse-action notice with the report and the CFPB Summary of Rights. Allow the candidate to dispute the information before sending the final notice.

The pre-adverse step creates a dispute window. The reporting agency can reinvestigate contested information and update the report before the employer makes a final decision. Skipping that stage because a hiring manager wants an answer by lunch is not efficiency. It's a shortcut around the candidate's rights.

Keep the disclosure, authorization, vendor order, report, review notes, notices, dispute correspondence, and final decision record together. Retention practices should go through employment counsel and match your applicable obligations. Don't rely on a vendor dashboard as your only evidence. Vendors change interfaces. Your audit trail shouldn't disappear with a product redesign.

State Fair-Chance Laws and the Sequencing Trap

Federal compliance is only one layer. State, city, and county fair-chance rules can change when your team may ask about criminal history, when it may order a report, and how it must evaluate a record.

As of 2026, more than 37 states, D.C., and over 150 cities and counties have some form of ban-the-box or fair-chance hiring policy, according to this background check laws by state summary. The details vary, which is precisely why a single national workflow is a bad idea for distributed hiring.

California, New York City, Illinois, Philadelphia, and Seattle are among the markets where employers need to pay close attention to timing and individualized review. The precise rule can depend on the employer, role, candidate location, and stage of hiring. Don't let a vendor's generic “nationwide compliant” label replace jurisdiction-specific review.

The offer-first pattern

For many remote roles, the safer design is a two-stage process:

  1. Evaluate the candidate through interviews, role-play, and references without using criminal history as an early filter.
  2. Make a conditional offer that clearly states employment depends on completion of required checks.
  3. Obtain the required disclosure and authorization at the legally appropriate point.
  4. Review any potentially relevant record through an individualized assessment.
  5. Give the candidate a meaningful opportunity to explain or dispute the information.
  6. Send the required notices before withdrawing the offer.

That sequencing changes the recruiting experience. The background check becomes a condition of a conditional offer, not a silent pre-interview elimination tool.

Jurisdiction When Records Can Be Reviewed Waiting Period Before Adverse Action Key Requirement
California Follow applicable state and local fair-chance timing rules Apply the jurisdiction's required process Individualized review and candidate response opportunity
New York City Follow applicable city timing rules Use the prescribed notice and review sequence Fair-chance assessment before withdrawal
Illinois Follow applicable state requirements Follow the required response period Disclosure, review, and documented assessment
Philadelphia Follow applicable city requirements Use the applicable notice process Delay criminal-history consideration until permitted
Seattle Follow applicable local requirements Follow the local adverse-action sequence Document the assessment and candidate response

The table is a workflow map, not legal advice. Rules change, and roles with special licensing or safety requirements can follow different standards. Ask counsel to map your actual candidate locations and job categories.

Practical rule: If your company hires across state lines, design the workflow around the strictest applicable timing rule, then confirm exceptions with counsel.

Wiring Checks Into a Remote SDR Hiring Flow

A remote SDR hiring process should feel quick to the candidate and routine to the operator. That routine is a control, not a convenience. The trigger, consent packet, report review, and notices need defined owners before the first candidate reaches the funnel.

Source through LinkedIn or a marketplace, then use an asynchronous phone screen, a hiring-manager interview, and a role-play. Reference calls test claims interviews cannot fully verify. Make the offer conditional before initiating identity, employment, education, criminal, and reference verification.

A funnel diagram illustrating a remote SDR hiring process with six numbered steps including background checks.

A clean funnel beats a heroic recruiter

Here is the flow I would install:

  • Sourcing: Collect only the information needed to assess fit and location.
  • Async phone screen: Test communication, motivation, and basic role alignment.
  • Hiring-manager interview: Probe sales judgment, ownership, and working habits.
  • Role-play: Observe discovery, objection handling, and whether the candidate earns a clear next step.
  • Reference calls: Ask consistent questions about activity, coaching, reliability, and results.
  • Conditional offer: Start the authorized screening process only after the permitted hiring stage.

Remote SDR candidates can live across many states, so location changes the workflow. Do not build one universal form and hope it works everywhere. Configure the ATS to record candidate jurisdiction, job jurisdiction, disclosure version, authorization status, report status, reviewer, and notice dates.

Use offer-letter automation to send the correct vendor invitation after the conditional offer. Keep the hiring manager away from the report unless that person is trained and authorized to review it. Integrations remove handoffs, but they cannot decide whether a record relates to the role or whether the candidate's explanation changes the decision.

If you want to Hire SDRs, apply the same controls when a recruiting partner supplies the shortlist. Outsourcing sourcing does not transfer responsibility for the hiring decision, required notices, or documentation.

The right process does not run every check at every stage. It places each check where it adds useful information, preserves fair evaluation, and follows the required sequence. Shortcuts usually create manual rework precisely when a candidate is waiting for an answer.

Vendor Options for US SaaS Founders

Vendor choice determines how much of the screening workflow your team must own. The cheapest tool can become expensive after a missed disclosure, mishandled report, or poorly documented adverse-action decision.

Vendor Path Typical Cost per Check FCRA Burden on Founder Best Fit Main Risk
DIY tools such as Checkr, Sterling, or Accurate Usually lower High Occasional hiring with an internal owner Founder mishandles disclosure or adverse action
US-focused firms such as HireRight or national court researchers Usually higher Shared, with more operational support Recurring US hiring across jurisdictions Paying for support without defining decision ownership
Talent marketplaces with embedded vetting, such as CloudTask, Near, or Baires Varies by engagement More of the loop handled by the partner Speed and distributed talent access Less control over check depth and candidate coverage

DIY tools

Checkr, Sterling, and Accurate simplify the ordering step. Choose this path only if one person owns the disclosure packet, authorization record, report review, dispute handling, and adverse-action notices. The software organizes tasks. It does not correct an incomplete process or decide whether a record belongs to the candidate.

This option works well for occasional hiring when the internal owner has time to review each step and keep records consistent.

US-focused screening firms

HireRight and national court researchers become more useful when repeated hiring exposes gaps across jurisdictions. Their support may cover court research, adjudication workflows, and compliance updates, but your company still needs a written decision policy.

Assign responsibility before signing. Specify who reviews reports, who contacts candidates, who handles disputes, and who approves a final decision. A vendor can provide operational support. It cannot make your hiring standard defensible.

Embedded talent marketplaces

CloudTask, Near, and Baires can handle more of the pre-employment process as part of a broader talent service. That convenience reduces internal coordination, while also limiting your control over check depth, source selection, candidate coverage, and how screening results match your SDR requirements.

A marketplace such as hireSDR.com describes a process involving skills tests, English assessments, reference checks, cultural-fit screening, work-history confirmation, and a complete background check before candidates enter its talent pool. Treat that description as a starting point for diligence. Ask what “complete” covers for your role, which records are checked, who handles disputes, and what documentation your company receives.

My recommendation is direct. Start with a DIY tool if you need to learn and document the workflow. Move to a dedicated US screening firm when hiring volume creates repeated manual gaps. Use embedded vetting when speed and distributed talent access matter more than controlling every screening detail.

Choose based on ownership, jurisdictional coverage, and documentation. A polished dashboard is not a compliance process.

The Week-One Action Plan

You can build a defensible SDR screening workflow in one workweek, provided you stop trying to perfect the vendor selection before documenting the process.

A checklist chart titled Week-One Action Plan for establishing a defensible SDR background check workflow.

Monday and Tuesday

Pick one vendor and create the account. Don't trigger a check yet. Confirm who can access reports, who owns candidate communication, and where completed records will live.

On Tuesday, draft the standalone disclosure and written authorization in plain English. Keep each document focused, then send both through employment counsel before using them with candidates. A single page is a useful design target, not a legal guarantee.

Wednesday and Thursday

On Wednesday, build the ATS or HRIS checklist. Include consent, check launch, report review, pre-adverse-action notice, dispute handling, final notice, and a five-business-day clock between the pre-adverse notice and any withdrawal decision. That timing instruction is part of the operating plan described in the FCRA workflow guidance, but counsel should confirm the process for your jurisdictions.

Thursday is for jurisdiction mapping. Record where candidates live, identify ban-the-box requirements, and determine whether criminal-history review must wait until after a conditional offer. A spreadsheet saves you from mortgaging the office ping-pong table to pay for a preventable compliance cleanup.

Friday

Run two pilot checks on real candidates only after you've obtained valid authorization. Time each stage, inspect which data sources the vendor returns, and note where a human must intervene. Write a one-page runbook that a future operations hire can follow without calling you from the airport.

Use the checklist to Hire Appointment Setter without allowing speed to erase the review steps. The best process is the one your team can repeat when you're busy, distracted, or three vendors deep into buyer's remorse.


If you're building a remote SDR team, hireSDR.com combines candidate matching with human-led vetting, including skills assessments, reference checks, work-history confirmation, and background-check support. Visit hireSDR.com to explore a faster way to source pre-vetted sales talent while keeping the screening workflow visible and deliberate.

More Blogs

Hand stamping approved document with world map background.
Aug 16, 2026 15 minutes read

Compliance Documentation for Global Hiring That Works

You're three days into an audit. The payroll folder looks tidy, the contracts are somewhere in Drive, and Finance has a spreadsheet with a heroic...

Businesswoman pointing at sales funnel with icons for communication and growth.
Sep 09, 2026 14 minutes read

SDR Outbound Strategy That Actually Books Pipeline

It's 6:47 a.m. The CRM says your SDR team made 412 calls last week. The pipeline says those calls created exactly two opportunities. Someone is...

Business growth concept with puzzle pieces and lightbulb.
Sep 04, 2026 16 minutes read

Product Differentiation in Marketing That Actually Works

Most advice about product differentiation in marketing starts in the wrong place. It tells you to list your features, count your integrations, display your awards,...

...
Trusted by 500+ companies worldwide

Stop overpaying for SDRs. Start outselling your competition.

Tell us who you need. We'll have pre-vetted candidates in your inbox within 72 hours. No commitment until you hire.

...