Recruiterflow

Recruiterflow is an ATS and CRM for recruiting agencies and executive search firms. Its AIRA AI layer ranks candidates already in a firm's database against each job with an explainable 0–100 Criteria Score (AIRA Matchmaker, shown as the 'AI Matches' card), and adds natural-language candidate search, external profile sourcing and an AI call notetaker that fills in interview scorecards.

HireAIScore rates Recruiterflow 36 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed September 25, 2026. Recruiterflow ranks 71 of 77 vendors rated in ATS-integrated AI, against a category average of 47. That score is drawn from 31 evidence items across 7 rubric criteria for Recruiterflow — 25 with a cited source, 6 recording that nothing was located.

Score breakdown

Recruiterflow, criterion by criterion

Each rubric criterion is scored out of 100 on the cited evidence, then weighted into the total.

Weighted contribution shown to the right of each bar.

  1. Article 11 Technical Documentation

    Weight 20% · avg 51

    33

    +6.6

  2. Bias Audit Transparency

    Weight 18% · avg 41

    18

    +3.2

  3. FRIA Support

    Weight 15% · avg 32

    30

    +4.5

  4. Data Governance Disclosure

    Weight 15% · avg 54

    44

    +6.6

  5. Human Oversight Design

    Weight 12% · avg 57

    58

    +7.0

  6. Post-Market Monitoring

    Weight 12% · avg 42

    33

    +4.0

  7. Customer Documentation

    Weight 8% · avg 59

    56

    +4.5

Total weighted score

36.3(rounded to 36 for display)

Category avg is the mean raw score on that criterion across the 77 ATS-integrated AI vendors in scope of this rubric, this one included.

Strongest criterion

Human Oversight Design

58raw / 100

Contributes 7.0 to the total. 58 against a 57 category average.

Weakest criterion

Bias Audit Transparency

18raw / 100

Contributes 3.2 to the total. 18 against a 41 category average.

Cited evidence

The evidence behind the score

Every score is backed by at least one cited piece of evidence. Open a criterion to see what was found, when, and where.

Download diligence record

Evidence ledger

Items
31
Documentation
20
Public statement
5
Absence
6
With a source URL
25 of 31
Source hostnames
2
Fewest items
3
FRIA Support

These figures measure how thoroughly Recruiterflow was reviewed, not how Recruiterflow performed — an absence row, recording that nothing was located, is counted like any other item.

Article 11 Technical Documentation

4 items
33
  • DocumentationCaptured Sep 25, 2026

    The AIRA Search glossary (June 2026) explains the ranking pipeline. Structured filters run first without the LLM, AI-derived fields such as Career Stage, Promotion Velocity and Median Tenure act as hard filters, and qualitative signals are scored 0–100 against an AI-generated 'Talent Graph'.

    https://help.recruiterflow.com/en/articles/15597002-glossary-aira-search-key-terms

  • DocumentationCaptured Sep 25, 2026

    The Matchmaker guide says each database candidate gets a Criteria Score (e.g. 78/100) with a per-criterion breakdown. Its FAQ calls the score explainable and says the model does not consider demographic attributes.

    https://help.recruiterflow.com/en/articles/9546214-how-to-use-aira-matchmaker-to-find-the-best-candidates-for-a-job

  • Public statementCaptured Sep 25, 2026

    A March 2026 blog post says the AI behind the 'AI Matches' card is 'trained on half a billion data points' and ranks candidates from most to least relevant, but gives no methodology, training-data description or validation results.

    https://recruiterflow.com/blog/candidate-matching/

  • AbsenceCaptured Sep 25, 2026

    No AI policy, model or system card, instructions for use, ISO 42001 certificate or named model provider was found. Checked: recruiterflow.com (/ai-policy, /responsible-ai, /security and /trust return 404, and the footer 'Trust Center' link points to '#'), the MSA, DPA and privacy policy, and the help center's AIRA and Compliance & Legal collections.

    Have a URL that disputes this?

Bias Audit Transparency

4 items
18

FRIA Support

3 items
30
  • AbsenceCaptured Sep 25, 2026

    No EU AI Act Article 27 FRIA template, deployer checklist or guidance on AI Act obligations was found. Checked: recruiterflow.com, its legal pages (MSA, DPA, privacy, breach and retention policies) and the help center's Compliance & Legal collection, which holds only two GDPR articles.

    Have a URL that disputes this?

  • DocumentationCaptured Sep 25, 2026

    The DPA (last updated 6 March 2026) includes the EU Standard Contractual Clauses 2021/914 and the UK International Data Transfer Addendum. It covers data protection only, and the published page omits the annexes and sub-processor exhibit it lists.

    https://recruiterflow.com/data-processing-agreement

  • DocumentationCaptured Sep 25, 2026

    A GDPR guide (June 2026) shows agencies how to add consent text to careers pages and set anonymise, re-opt-in or auto-delete retention rules, with no AI-specific content.

    https://help.recruiterflow.com/en/articles/5358846-gdpr-compliance-guidelines

Data Governance Disclosure

5 items
44
  • DocumentationCaptured Sep 25, 2026

    The AIRA Search FAQ says ranking reads structured fields plus an AI-generated Talent Graph, built from notes, Notetaker call transcripts, resumes, Crunchbase data, LinkedIn data and other enrichment sources, and that search is read-only.

    https://help.recruiterflow.com/en/articles/15596978-aira-search-faq

  • Public statementCaptured Sep 25, 2026

    The homepage claims 'SOC 2 ISO 27001 GDPR compliant' in text and badges. No report type, auditor, scope, certificate number or working trust center is published, and the footer 'Trust Center' link points to '#'.

    https://recruiterflow.com/

  • DocumentationCaptured Sep 25, 2026

    The privacy policy names 'Amazon storage' among otherwise unnamed third-party providers and promises secure deletion, including backups, within 14 business days. It publishes no sub-processor list or hosting region.

    https://recruiterflow.com/privacy-policy

  • DocumentationCaptured Sep 25, 2026

    The MSA of Recruiterflow Inc. (Delaware law) lets Recruiterflow use Customer Data for aggregate, anonymised statistics and to 'improve and enhance' its services (clause 6.5), without addressing AI model training.

    https://recruiterflow.com/user-agreement

  • AbsenceCaptured Sep 25, 2026

    No sub-processor list (the DPA's Exhibit 3 is referenced but not published), named AI model provider, statement on training with customer data or data-residency disclosure was found. The blog footer's 'Security' link (recruiterflow.com/data-security) returns 404.

    Have a URL that disputes this?

Human Oversight Design

7 items
58

Post-Market Monitoring

4 items
33
  • AbsenceCaptured Sep 25, 2026

    No public status page was found. status.recruiterflow.com serves the marketing homepage and its Statuspage API path returns 404, recruiterflow.statuspage.io redirects to Atlassian's site, and there is no security.txt, vulnerability-disclosure policy or changelog for AI model changes.

    Have a URL that disputes this?

  • DocumentationCaptured Sep 25, 2026

    The published Data Breach Policy commits to notifying the supervisory authority within 72 hours. It reads as a generic template ('Our Organisation') and gives a placeholder reporting address, 'security@[companydomain. com]'.

    https://recruiterflow.com/data-breach-policy

  • DocumentationCaptured Sep 25, 2026

    The privacy policy sends breach reports and data-rights requests to dataprivacy@recruiterflow.com.

    https://recruiterflow.com/privacy-policy

  • DocumentationCaptured Sep 25, 2026

    Monthly product-update posts, the latest dated July 2025, announce AI features but give no information on model changes, accuracy or known issues.

    https://recruiterflow.com/blog/recruiterflow-product-update-jul25/

Customer Documentation

4 items
56

Editorial notes

Company overview

Recruiterflow, Inc. sells an ATS and CRM to recruiting agencies and executive search firms. Manan Shah, Naresh Shenoy and Amritanshu Anand founded it in 2017. It is based in the San Francisco Bay Area, has an office in Bangalore, and has taken no outside funding (per Tracxn). It says more than 2,100 firms use it. The Platform Plan costs $149 per user per month. The AI layer, AIRA, comes only with the custom-priced AIRA Plan. The scored system is AIRA Matchmaker, the 'AI Matches' card on each job. It ranks candidates in the agency's own database from most to least relevant and gives each a 0–100 Criteria Score that breaks down criterion by criterion. Recruiters can re-rank by editing the criteria in plain English. Other features also score or evaluate candidates. AIRA Search ranks candidates against an AI-built 'Talent Graph' made from notes, call transcripts, resumes, and LinkedIn and Crunchbase data. AIRA Source searches external profiles. The Notetaker's Scorecard Agent fills in interview scorecards from call transcripts.

Regulatory exposure

Matchmaker, AIRA Search and the Scorecard Agent score, rank or evaluate candidates for specific jobs. Where agencies rely on them to decide who goes forward, they can count as automated employment decision tools under NYC Local Law 144, which covers employment agencies. That means an annual independent bias audit, a published summary and notice to candidates. Recruiterflow publishes no audit. DCWP has committed to tougher enforcement since the December 2025 State Comptroller audit found its enforcement ineffective. Under the EU AI Act, ranking and evaluating candidates is high-risk (Annex III point 4). Recruiterflow's DPA includes the EU SCCs and the UK transfer addendum for European customers. As the provider, it would therefore owe technical documentation, logging and human-oversight design from 2 December 2027, the date set by the Digital AI Omnibus deferral. Illinois HB 3773 has been in force since 1 January 2026. It requires notice when AI is used in employment decisions and bans discriminatory AI use. Two documented options need scrutiny under it and under California's FEHA automated-decision rules, which also require four years of records: AIRA Source's Year of Graduation filter (an age proxy) and a suggested Matchmaker criterion that de-emphasises short job tenures. Colorado's SB 26-189 disclosure duties start on 1 January 2027.

Path to a higher score

Six changes would lift the score most. First, commission an independent LL 144-style bias audit of Matchmaker, AIRA Search ranking and the Scorecard Agent. It should report impact ratios by sex, race/ethnicity and intersectional groups, publish a summary and repeat every year. It would also test the FAQ's claim that no demographic attributes are used. Second, publish an AI policy and a system card. The card should name the models behind AIRA, list the inputs and excluded attributes, and explain the claim that the matching AI is 'trained on half a billion data points'. Third, fix the dead Trust Center link and the 404 security page. Publish the SOC 2 report type and auditor, the ISO 27001 certificate details and the sub-processor list that the DPA refers to but does not include. Fourth, log Matchmaker runs, criteria edits and overrides, and keep those logs for California's four years. Fifth, add candidate-notice settings for each jurisdiction and deployer guidance for NYC, Illinois, Colorado and the EU AI Act, including an Article 27 FRIA template. Sixth, launch a public status page and a changelog for AI model changes.

Regulatory frame

What applies to ATS-integrated AI.

Ranking features are inside EU AI Act Annex III §4 (high-risk) and inside NYC Local Law 144 when they affect NYC-based candidates. Customers should treat the AI surface as a distinct deployer-FRIA scope from the rest of the ATS.

Ranking

Others rated in ATS-integrated AI

Ranked 71 of 77 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.

  1. #68Workstream39F
  2. #69Loxo37F
  3. #70Keka37F
  4. #71RecruiterflowThis profile36F
  5. #72Ceipal35F
  6. #73Zappyhire34F
All ATS-integrated vendors

Conflicts of interest

No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.

Casework has no commercial relationship with this vendor.