Loxo
HireAIScore rates Loxo 37 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed July 17, 2026. Loxo ranks 70 of 86 vendors rated in Candidate sourcing AI, against a category average of 46. That score is drawn from 19 evidence items across 7 rubric criteria for Loxo — 12 with a cited source, 7 recording that nothing was located.
Score breakdown
Loxo, criterion by criterion
Each rubric criterion is scored out of 100 on the cited evidence, then weighted into the total.
Weighted contribution shown to the right of each bar.
Article 11 Technical Documentation
Weight 20% · category avg 48
30
+6.0
Bias Audit Transparency
Weight 18% · category avg 40
20
+3.6
FRIA Support
Weight 15% · category avg 31
30
+4.5
Data Governance Disclosure
Weight 15% · category avg 53
50
+7.5
Human Oversight Design
Weight 12% · category avg 56
50
+6.0
Post-Market Monitoring
Weight 12% · category avg 40
40
+4.8
Customer Documentation
Weight 8% · category avg 57
58
+4.6
Total weighted score
37.0(rounded to 37 for display)
Category avg is the mean raw score on that criterion across the 86 Candidate sourcing AI vendors in scope of this rubric, this one included.
Strongest criterion
Customer Documentation
58raw / 100
Contributes 4.6 to the total. 58 against a 57 category average.
Weakest criterion
Bias Audit Transparency
20raw / 100
Contributes 3.6 to the total. 20 against a 40 category average.
Cited evidence
The evidence behind the score
Every score is backed by at least one cited piece of evidence. Open a criterion to see what was found, when, and where.
Download diligence recordEvidence ledger
- Items
- 19
- Documentation
- 9
- Audit report
- 1
- Public statement
- 2
- Absence
- 7
- With a source URL
- 12 of 19
- Source hostnames
- 1
- Fewest items
- 2
- Bias Audit Transparency
These figures measure how thoroughly Loxo was reviewed, not how Loxo performed — an absence row, recording that nothing was located, is counted like any other item.
Article 11 Technical Documentation
3 items30
- DocumentationCaptured Jul 17, 2026
The AI product page describes proprietary ranking algorithms, semantic matching and a 1.2B-person knowledge graph but gives no methodology, feature weights, performance metrics, or model documentation.
- DocumentationCaptured Jul 17, 2026
The founder's note references 'proprietary deep-learning models and a knowledge graph now in its seventh generation' as marketing, not as a technical/model card or explainability document.
- AbsenceCaptured Jul 17, 2026
No model cards, technical pack, explainability statement, AI policy, or ISO 42001 could be found across Loxo's product, legal (/legal/*), and security-and-privacy pages.
Bias Audit Transparency
2 items20
- AbsenceCaptured Jul 17, 2026
No NYC Local Law 144 bias audit or independent/academic bias audit of Loxo's ranking models was found on loxo.co or via public search; Loxo does not publish an AEDT bias-audit summary.
- Public statementCaptured Jul 17, 2026
Loxo claims its AI 'eliminates the potential for human bias as the algorithm's recommendations are driven by data instead of personal preference,' an unsubstantiated assertion with no supporting audit.
FRIA Support
2 items30
- AbsenceCaptured Jul 17, 2026
No EU AI Act Article 27 Fundamental Rights Impact Assessment template, deployer checklist, or AI-Act obligation guidance found anywhere on loxo.co.
- DocumentationCaptured Jul 17, 2026
Loxo offers a GDPR Data Processing Addendum with Standard Contractual Clauses (Modules 2 and 3) and a 72-hour breach-notification term - data-protection deployer support, but nothing FRIA- or AI-Act-specific.
Data Governance Disclosure
4 items50
- DocumentationCaptured Jul 17, 2026
Security page documents AES-256 encryption at rest, TLS 1.2+ in transit, AWS KMS/HSM key management, quarterly and annual penetration tests, and SAST/DAST/dependency scanning.
- Audit reportCaptured Jul 17, 2026
Loxo states it holds a SOC 2 Type II attestation (blog identifies the auditor as Johanson Group LLP), though the report itself is not publicly downloadable.
- DocumentationCaptured Jul 17, 2026
A published subprocessor list names data providers (People Data Labs, Clearbit, Sovren) and cloud hosts (AWS, Azure, Google, Microsoft) supporting its data enrichment and processing.
- AbsenceCaptured Jul 17, 2026
No disclosure of what candidate data is or is not used to train Loxo's ranking models, no data-exclusion list, and no ISO/IEC 27001 or 42001 certification.
Human Oversight Design
2 items50
- Public statementCaptured Jul 17, 2026
Loxo frames AI as assistive ('AI could never replace a good recruiter'), with recruiters reviewing an AI-produced ranked candidate list - a decision-support rather than autonomous model.
- AbsenceCaptured Jul 17, 2026
No documented override controls, audit logs, per-jurisdiction human-review toggles, or in-product explainability of ranking scores are published on Loxo's product or security pages.
Post-Market Monitoring
3 items40
- DocumentationCaptured Jul 17, 2026
Security page cites 24/7 endpoint monitoring for rapid response plus quarterly and annual penetration testing and continuous vulnerability scanning.
- DocumentationCaptured Jul 17, 2026
Provides a privacy/security contact (privacy@loxo.co) and a third-party dispute-resolution channel, but no dedicated security.txt or incident status page.
- AbsenceCaptured Jul 17, 2026
No public status page, no formal vulnerability-disclosure or bug-bounty program, and no AI model-update/monitoring changelog were found.
Customer Documentation
3 items58
- DocumentationCaptured Jul 17, 2026
Loxo maintains full public product pages for its AI, recruiting CRM, ATS and sourcing capabilities plus a resource/blog hub.
- DocumentationCaptured Jul 17, 2026
Published guidance describes GDPR/CCPA compliance workflows, consent vs. legitimate-interest handling, retention, and data-subject-rights tooling for deployers.
https://www.loxo.co/blog/loxos-ai-powered-recruiting-crm-automates-gdpr-and-data-privacy-compliance
- AbsenceCaptured Jul 17, 2026
No NYC Local Law 144 candidate-notice guidance and no EU AI Act deployer compliance documentation are provided for customers using Loxo's ranking AI.
Editorial notes
Company overview
Loxo is a Denver, Colorado-based talent-intelligence company founded in 2012 by Matt Chambers and Ilia Cheishvili. Its platform unifies AI sourcing, a recruiting CRM, an ATS, and outreach into a single system of record, powered by proprietary deep-learning ranking models (marketed as a seventh-generation algorithm) and a self-built talent graph of 800M+ people (cited up to ~1.2B on the AI product page). Loxo says it serves 13,000+ executive-search, RPO, professional-recruiting and staffing teams and has raised roughly $115M led by Tritium Partners.
Regulatory exposure
Loxo's AI ranks and shortlists candidates, placing it squarely within EU AI Act Annex III high-risk hiring use and within NYC Local Law 144's definition of an automated employment decision tool. Despite this, Loxo publishes no bias audit, no model or technical documentation, and no EU AI Act or LL 144 deployer guidance; instead its AI product page makes an unsubstantiated marketing claim that the algorithm 'eliminates the potential for human bias.' Loxo's public compliance surface is data-protection oriented (SOC 2 Type II, GDPR/CCPA tooling, a DPA with Standard Contractual Clauses, a subprocessor list) rather than AI-governance oriented, leaving a material gap between its regulatory exposure and its published evidence.
Path to a higher score
Loxo could raise its score by commissioning and publicly posting an independent NYC LL 144 bias audit and repeating it annually, releasing model/system cards and an explainability statement for its ranking models, adding EU AI Act Article 27 (FRIA) and LL 144 deployer guidance, and disclosing what candidate data is and is not used to train its models (an exclusion list). Standing up a public status page and a formal vulnerability-disclosure channel would strengthen post-market monitoring, and pursuing ISO/IEC 42001 would consolidate these into a recognized AI-management framework.
Regulatory frame
What applies to candidate sourcing AI.
Ranking outputs are inside Annex III §4 when they influence hiring decisions. GDPR Article 22 (automated decision-making) and the GDPR rights around profiling apply independently for EU candidates.
Compare
Loxo against its nearest-scoring peers.
The closest scores in Candidate sourcing AI, side by side.
- Side-by-sideLoxo vs Arya by Leoforce38F
- Side-by-sideLoxo vs Fetcher37F
- Side-by-sideLoxo vs RecruitBot37F
- Side-by-sideLoxo vs AmazingHiring37F
Ranking
Others rated in Candidate sourcing AI
Ranked 70 of 86 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.
- #67Paycor40F
- #68Arya by Leoforce38F
- #69Fetcher37F
- #70LoxoThis profile37F
- #71RecruitBot37F
- #72AmazingHiring37F
Conflicts of interest
No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.
Casework has no commercial relationship with this vendor.