Loxo
Loxo is an AI-native talent-intelligence platform that combines candidate sourcing, a recruiting CRM, and an applicant tracking system, using proprietary ranking models and a self-built talent graph of 800M+ people to source, rank, and match candidates for recruiting and staffing firms.
HireAIScore rates Loxo 37 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed July 17, 2026. Loxo ranks 42 of 49 vendors rated in Candidate sourcing AI, against a category average of 48. That score is drawn from 19 evidence items across 7 rubric criteria for Loxo — 12 with a cited source, 7 recording that nothing was located.
§ 01 - Company facts
- Founded
- 2012
- Headquarters
- United States · US
- Pricing tier
- Mid
- Market side
- Employer-side (AEDT)
- Categories
- SourcingATS-integrated
- Website
- loxo.co
These are company details, not findings. They are editable by a verified representative and carry no weight in the score, which is built only from the cited evidence below.
§ 02 - Score breakdown
§ Score breakdown
Category scoring
Weighted contribution shown to the right of each bar.
- 01
Article 11 Technical Documentation
Weight 20%30
+6.0 · category avg 51
- 02
Bias Audit Transparency
Weight 18%20
+3.6 · category avg 47
- 03
FRIA Support
Weight 15%30
+4.5 · category avg 32
- 04
Data Governance Disclosure
Weight 15%50
+7.5 · category avg 54
- 05
Human Oversight Design
Weight 12%50
+6.0 · category avg 56
- 06
Post-Market Monitoring
Weight 12%40
+4.8 · category avg 41
- 07
Customer Documentation
Weight 8%58
+4.6 · category avg 57
Category avg is the mean raw score on that criterion across the 49 Candidate sourcing AI vendors in scope of this rubric, this one included.
§ 03 - Strongest · weakest
Strongest category
Customer Documentation
Raw score 58 · contributes 4.6 to total.
58 against a 57 category average
Weakest category
Bias Audit Transparency
Raw score 20 · contributes 3.6 to total.
20 against a 47 category average
§ 04 - Cited evidence
Download diligence record→§ Evidence
Cited per category
Every score is backed by at least one cited piece of evidence.
Evidence ledger
- Items
- 19
- Documentation
- 9
- Audit report
- 1
- Public statement
- 2
- Absence
- 7
- With a source URL
- 12 of 19
- Source hostnames
- 1
- Fewest items
- 2
- Bias Audit Transparency
These figures measure how thoroughly Loxo was reviewed, not how Loxo performed — an absence row, recording that nothing was located, is counted like any other item.
Article 11 Technical Documentation
3 items30
- DocumentationCaptured Jul 17, 2026
The AI product page describes proprietary ranking algorithms, semantic matching and a 1.2B-person knowledge graph but gives no methodology, feature weights, performance metrics, or model documentation.
- DocumentationCaptured Jul 17, 2026
The founder's note references 'proprietary deep-learning models and a knowledge graph now in its seventh generation' as marketing, not as a technical/model card or explainability document.
- AbsenceCaptured Jul 17, 2026
No model cards, technical pack, explainability statement, AI policy, or ISO 42001 could be found across Loxo's product, legal (/legal/*), and security-and-privacy pages.
Bias Audit Transparency
2 items20
- AbsenceCaptured Jul 17, 2026
No NYC Local Law 144 bias audit or independent/academic bias audit of Loxo's ranking models was found on loxo.co or via public search; Loxo does not publish an AEDT bias-audit summary.
- Public statementCaptured Jul 17, 2026
Loxo claims its AI 'eliminates the potential for human bias as the algorithm's recommendations are driven by data instead of personal preference,' an unsubstantiated assertion with no supporting audit.
FRIA Support
2 items30
- AbsenceCaptured Jul 17, 2026
No EU AI Act Article 27 Fundamental Rights Impact Assessment template, deployer checklist, or AI-Act obligation guidance found anywhere on loxo.co.
- DocumentationCaptured Jul 17, 2026
Loxo offers a GDPR Data Processing Addendum with Standard Contractual Clauses (Modules 2 and 3) and a 72-hour breach-notification term - data-protection deployer support, but nothing FRIA- or AI-Act-specific.
Data Governance Disclosure
4 items50
- DocumentationCaptured Jul 17, 2026
Security page documents AES-256 encryption at rest, TLS 1.2+ in transit, AWS KMS/HSM key management, quarterly and annual penetration tests, and SAST/DAST/dependency scanning.
- Audit reportCaptured Jul 17, 2026
Loxo states it holds a SOC 2 Type II attestation (blog identifies the auditor as Johanson Group LLP), though the report itself is not publicly downloadable.
- DocumentationCaptured Jul 17, 2026
A published subprocessor list names data providers (People Data Labs, Clearbit, Sovren) and cloud hosts (AWS, Azure, Google, Microsoft) supporting its data enrichment and processing.
- AbsenceCaptured Jul 17, 2026
No disclosure of what candidate data is or is not used to train Loxo's ranking models, no data-exclusion list, and no ISO/IEC 27001 or 42001 certification.
Human Oversight Design
2 items50
- Public statementCaptured Jul 17, 2026
Loxo frames AI as assistive ('AI could never replace a good recruiter'), with recruiters reviewing an AI-produced ranked candidate list - a decision-support rather than autonomous model.
- AbsenceCaptured Jul 17, 2026
No documented override controls, audit logs, per-jurisdiction human-review toggles, or in-product explainability of ranking scores are published on Loxo's product or security pages.
Post-Market Monitoring
3 items40
- DocumentationCaptured Jul 17, 2026
Security page cites 24/7 endpoint monitoring for rapid response plus quarterly and annual penetration testing and continuous vulnerability scanning.
- DocumentationCaptured Jul 17, 2026
Provides a privacy/security contact (privacy@loxo.co) and a third-party dispute-resolution channel, but no dedicated security.txt or incident status page.
- AbsenceCaptured Jul 17, 2026
No public status page, no formal vulnerability-disclosure or bug-bounty program, and no AI model-update/monitoring changelog were found.
Customer Documentation
3 items58
- DocumentationCaptured Jul 17, 2026
Loxo maintains full public product pages for its AI, recruiting CRM, ATS and sourcing capabilities plus a resource/blog hub.
- DocumentationCaptured Jul 17, 2026
Published guidance describes GDPR/CCPA compliance workflows, consent vs. legitimate-interest handling, retention, and data-subject-rights tooling for deployers.
https://www.loxo.co/blog/loxos-ai-powered-recruiting-crm-automates-gdpr-and-data-privacy-compliance
- AbsenceCaptured Jul 17, 2026
No NYC Local Law 144 candidate-notice guidance and no EU AI Act deployer compliance documentation are provided for customers using Loxo's ranking AI.
§ 05 - Editorial notes
Company overview
Loxo is a Denver, Colorado-based talent-intelligence company founded in 2012 by Matt Chambers and Ilia Cheishvili. Its platform unifies AI sourcing, a recruiting CRM, an ATS, and outreach into a single system of record, powered by proprietary deep-learning ranking models (marketed as a seventh-generation algorithm) and a self-built talent graph of 800M+ people (cited up to ~1.2B on the AI product page). Loxo says it serves 13,000+ executive-search, RPO, professional-recruiting and staffing teams and has raised roughly $115M led by Tritium Partners.
Regulatory exposure
Loxo's AI ranks and shortlists candidates, placing it squarely within EU AI Act Annex III high-risk hiring use and within NYC Local Law 144's definition of an automated employment decision tool. Despite this, Loxo publishes no bias audit, no model or technical documentation, and no EU AI Act or LL 144 deployer guidance; instead its AI product page makes an unsubstantiated marketing claim that the algorithm 'eliminates the potential for human bias.' Loxo's public compliance surface is data-protection oriented (SOC 2 Type II, GDPR/CCPA tooling, a DPA with Standard Contractual Clauses, a subprocessor list) rather than AI-governance oriented, leaving a material gap between its regulatory exposure and its published evidence.
Path to a higher score
Loxo could raise its score by commissioning and publicly posting an independent NYC LL 144 bias audit and repeating it annually, releasing model/system cards and an explainability statement for its ranking models, adding EU AI Act Article 27 (FRIA) and LL 144 deployer guidance, and disclosing what candidate data is and is not used to train its models (an exclusion list). Standing up a public status page and a formal vulnerability-disclosure channel would strengthen post-market monitoring, and pursuing ISO/IEC 42001 would consolidate these into a recognized AI-management framework.
§ Regulatory frame
What applies to candidate sourcing ai.
Ranking outputs are inside Annex III §4 when they influence hiring decisions. GDPR Article 22 (automated decision-making) and the GDPR rights around profiling apply independently for EU candidates.
§ Compare
Build any comparison→Loxo against its nearest-scoring peers.
In Candidate sourcing AI.
§ Others rated in Candidate sourcing AI
All sourcing vendors→Ranked 42 of 49 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.
- 39Manatal41F
- 40Personio40F
- 41Fetcher37F
- 42LoxoThis profile37F
- 43AmazingHiring37F
- 44Turing36F
Conflicts of interest
No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.
Casework has no commercial relationship with this vendor.