AI hiring compliance in Ontario, before a complaint or audit.
If you use AI to source, screen, or assess candidates, you own the outcome — not the vendor. 1205 runs an operational review of bias, transparency, and process, and hands you a remediation plan. This is an operational compliance review, not legal advice; where a matter needs a legal opinion, we escalate to employment counsel.
— Operational review · One business-day reply
To be clear: 1205 provides an operational compliance review and remediation plan — not legal advice, and not a legal opinion on your liability. Expectations for AI in hiring are emerging and evolving across Ontario and Canada; we map your process against current expectations and flag where you should confirm the legal position with employment counsel. Where a matter needs a legal opinion, we escalate rather than opine.
Four touchpoints. One accountable employer.
AI rarely enters hiring as one big decision. It enters in pieces — and each piece can shape who gets hired. The risk is the same everywhere: an outcome that could be biased, that candidates were not told about, or that no human meaningfully reviewed.
Sourcing & targeting
Tools that decide which candidates see your role, or rank who to reach first. If the targeting skews, your applicant pool is shaped before anyone reviews a resume.
The pool is shaped upstream.
Screening & ranking
Resume parsers and ranking models that filter or order applicants. A model trained on past hiring can quietly carry forward patterns you would never write into a policy.
Past patterns, repeated.
Assessments & interviews
Automated assessments, game-based screens, and video or voice analysis. These touch protected characteristics and accessibility directly — and are the hardest to explain after the fact.
Highest-exposure touchpoint.
Chatbots & pre-qualification
Conversational tools that pre-qualify or schedule. Convenient, but they make decisions about people — and candidates are often never told a machine was involved.
Decisions without disclosure.
A documented review. And a plan to fix the gaps.
We review your AI hiring process across five areas, then hand you a remediation plan. Operational throughout — we make the process well-documented and consistent; where a question is legal, we route it to employment counsel.
Bias & adverse impact
We examine where your AI touchpoints could produce biased or adverse outcomes across protected groups, and how that exposure is currently tested for — or not.
Transparency & candidate notice
Whether candidates are clearly told AI is involved, in plain language, at the right point — and whether your notice matches what the tools actually do.
Human-in-the-loop
Whether a person meaningfully reviews and owns every consequential decision, or whether the tool is effectively deciding on its own. Oversight has to be real, not nominal.
Vendor due diligence
What your third-party tools actually do, what they were tested for, and what they disclose — so accountability does not rest on assumptions about someone else’s software.
Documentation
The evidence that the process was governed: decision logs, oversight records, notices, and vendor assessments. If a complaint or audit lands, this is what you stand on.
Remediation plan
Each gap named, the fix specified, and an owner assigned — so you can see exactly what stands between today and a well-documented, consistent AI hiring process.
The Human-Attested standard
AI in the workflow. A person on the hook.
AI assists. It never decides.
We use AI to move faster on research, drafting, and pattern-finding. It is a tool in the workflow — not the analyst, not the judgment, and not the author of what we deliver.
A senior human reviews and owns the work.
Every deliverable is reviewed and stood behind by a senior 1205 practitioner. The findings, the recommendations, and the file are human work product — attributable to a named person, not a model.
We escalate when the matter needs it.
Where a question crosses into regulated territory, we say so and route it to employment counsel or a privacy professional. We would rather hand off than overreach.
We are clear about our boundaries.
1205 provides operational compliance review and remediation planning — not legal advice, and not a legal opinion on liability.
See how 1205 handles AI-assisted work, human review, regulated partner routing, and confidentiality in the Human-Attested Trust Pack.
The AI Hiring Compliance Check.
A focused operational review of where AI touches your hiring and whether the process holds up. You get a clear picture of your exposure across the five areas, and a remediation plan that names each gap, the fix, and an owner — so you can act before a complaint or audit forces the question.
Scope and fee are confirmed after a short intake, since it depends on how many AI touchpoints you run and how much governance already exists. Where remediation work is needed, we can scope it under a separate mandate. Where a question is legal, we escalate to employment counsel.
- —A mapped inventory of every AI touchpoint in your hiring
- —Findings across bias, transparency, oversight, vendor, and documentation
- —A remediation plan — each gap named, fixed, and owned
- —A clear line on what is operational vs. a question for counsel
The AI tools in your hiring also hold your data.
Every AI hiring tool ingests candidate and employee data, and your customers increasingly ask how it is protected. The Posture Check is an entry diagnostic that runs alongside the AI Hiring Compliance Check: a data-flow and access-control snapshot across your HR and AI tooling, plus a readiness read on the security questionnaires buyers send. It shows where your posture stands before someone else asks. It is a readiness review — not a security audit, penetration test, or certification.
Data-flow snapshot
Where candidate and employee data moves through your AI hiring and HR tools — what each ingests, stores, and sends on. Exposure you have not traced is exposure you cannot govern.
Access-control read
Who and which systems can reach people data inside those tools, and whether that matches genuine need-to-know. We surface over-broad and orphaned access.
Questionnaire readiness
A read on the security questionnaires buyers and insurers send — which answers you can stand behind today, and where the evidence is missing.
Prioritized gap list
A short, ranked list of what to tighten first — each item framed as a fix you own or a place to bring in an accredited security or legal partner.
A fixed-scope data-flow and access-control snapshot with a questionnaire-readiness read — written fee before work begins. Deeper posture design and documentation is scoped and quoted separately after the check.
— Readiness review · Not a security audit
Where this stops: 1205 reviews your data-security posture and prepares the evidence buyers ask for. We do not secure your systems, audit them, run penetration tests, or issue any certification. Formal certification (such as ISO 27001) is issued by an accredited certification body, penetration testing by a registered security professional, and breach-notification advice by counsel — we prepare you for them and route you to them. For the people-data side of the picture, see HR Privacy & People-Data Governance.
Two ways to get oriented.
HR Compliance Scorecard
Score your broader HR posture across ESA, OHSA, AODA, pay equity, and human rights in about five minutes — and see where AI hiring sits among your priorities.
Run the scorecardHR Services
AI in hiring is one of several Ontario obligations we help employers govern. See how this review fits into the broader HR compliance work we run.
Explore HR ServicesStraight answers on AI in hiring.
Is the AI Hiring Compliance Check legal advice?
No. 1205 provides an operational compliance review and a remediation plan — not legal advice, and not a legal opinion on your liability. Where a matter needs a legal opinion, we say so and escalate to employment counsel or a privacy professional. The review makes your AI hiring process well-documented and consistent; counsel handles questions of law.
Where does AI actually create risk in hiring?
Anywhere AI touches a candidate decision: sourcing tools that target or rank audiences, resume screeners and rankers, automated assessments and video analysis, and chatbots that pre-qualify. The common exposure is the same — a process that can produce biased outcomes, that candidates were not clearly told about, or that no human meaningfully reviewed. The check looks at each touchpoint and how it is governed.
What are the rules in Ontario and Canada?
Expectations around AI in hiring are emerging and evolving across Ontario and Canada — covering disclosure to candidates, bias and accessibility, and how employee and applicant data is handled. Rather than quote a specific rule here, we map your process against current expectations and flag where confirmation with counsel is warranted. We keep our review operational and recommend you confirm any legal interpretation with employment counsel.
What does the check cover?
Five areas: bias and adverse-impact exposure across your AI touchpoints; transparency and candidate notice; human-in-the-loop oversight on every consequential decision; vendor due diligence on the AI tools you use; and documentation — the evidence that the process was governed, not just run. You receive findings plus a remediation plan that names each gap, the fix, and an owner.
We use a third-party hiring tool. Are we covered by the vendor?
Not on your own. A vendor can describe how their model was built, but the employer is the one deploying it on real candidates and is accountable for the outcome. The check includes vendor due diligence — what the tool does, what it was tested for, what it discloses, and what oversight you keep — so the responsibility does not sit on assumptions about someone else’s software.
What happens if the review finds problems?
That is the point of running it before a complaint or audit. We document each gap and a remediation plan — adjust a process, add candidate notice, restore human review, change or constrain a tool. Where the work needs doing, we can scope it under a separate mandate. Where a finding raises a question of legal exposure, we route it to employment counsel rather than opine on it ourselves.
What is the Posture Check, and is it a security audit?
The Posture Check is an entry-level readiness diagnostic for the data side of your AI tools — a data-flow and access-control snapshot across your AI hiring and HR tooling, plus a read on whether you can answer the security questionnaires buyers send. It is a fixed-scope diagnostic, quoted at intake with a written fee before work begins. It is a readiness review, not a security audit, penetration test, or certification. 1205 reviews your posture and prepares the evidence buyers ask for; formal certification is issued by an accredited certification body, penetration testing by a registered security professional, and breach-notification advice by counsel. We prepare you for those and route you to them.
Get ahead of it before someone else does.
Tell us where AI touches your hiring and we’ll scope an operational compliance review and remediation plan. We reply within one business day. Operational review — not legal advice; we escalate legal questions to counsel.
— One business-day reply