Rippling

Rippling Recruiting is an applicant tracking system within Rippling's all-in-one HR/IT/finance platform that uses AI to review and screen job applications, summarize interviewer feedback, transcribe video interviews, flag application fraud, and automate interview scheduling.

HireAIScore rates Rippling 56 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed July 17, 2026. Rippling ranks 10 of 77 vendors rated in ATS-integrated AI, against a category average of 47. That score is drawn from 13 evidence items across 7 rubric criteria for Rippling — 12 with a cited source, 1 recording that nothing was located.

Score breakdown

Rippling, criterion by criterion

Each rubric criterion is scored out of 100 on the cited evidence, then weighted into the total.

Weighted contribution shown to the right of each bar.

  1. Article 11 Technical Documentation

    Weight 20% · avg 51

    73

    +14.6

  2. Bias Audit Transparency

    Weight 18% · avg 41

    42

    +7.6

  3. FRIA Support

    Weight 15% · avg 32

    45

    +6.8

  4. Data Governance Disclosure

    Weight 15% · avg 54

    64

    +9.6

  5. Human Oversight Design

    Weight 12% · avg 57

    60

    +7.2

  6. Post-Market Monitoring

    Weight 12% · avg 42

    47

    +5.6

  7. Customer Documentation

    Weight 8% · avg 59

    64

    +5.1

Total weighted score

56.5(rounded to 56 for display)

Category avg is the mean raw score on that criterion across the 77 ATS-integrated AI vendors in scope of this rubric, this one included.

Strongest criterion

Article 11 Technical Documentation

73raw / 100

Contributes 14.6 to the total. 73 against a 51 category average.

Weakest criterion

Bias Audit Transparency

42raw / 100

Contributes 7.6 to the total. 42 against a 41 category average.

Cited evidence

The evidence behind the score

Every score is backed by at least one cited piece of evidence. Open a criterion to see what was found, when, and where.

Download diligence record

Evidence ledger

Items
13
Documentation
7
Audit report
3
Public statement
2
Absence
1
With a source URL
12 of 13
Source hostnames
3
Fewest items
1
Human Oversight Design

These figures measure how thoroughly Rippling was reviewed, not how Rippling performed — an absence row, recording that nothing was located, is counted like any other item.

Article 11 Technical Documentation

2 items
73
  • Audit reportCaptured Jul 17, 2026

    Rippling's Trust Center lists an ISO/IEC 42001 AI management system certification alongside SOC 1/2/3, ISO 27001, and ISO 27018, though the certificate PDFs are viewable only after Whistic registration.

    https://trust.rippling.com/

  • DocumentationCaptured Jul 17, 2026

    The public 'Use of AI at Rippling' document explains how AI Services produce outputs, names foundation-model providers (OpenAI, Anthropic), states AI output is clearly labeled as AI-generated in the UI, and describes governance aligned to ISO 42001, the NIST AI Risk Management Framework, and EU AI Act principles with structured pre-release risk assessment.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

Bias Audit Transparency

2 items
42
  • Audit reportCaptured Jul 17, 2026

    A 'Rippling Recruiting Bias Audit.pdf' is listed in the Trust Center's Additional Documents, but clicking it triggers a Whistic registration/login wall and the file shows a lock icon, so no auditor, date, or adverse-impact results are publicly downloadable.

    https://trust.rippling.com/

  • Public statementCaptured Jul 17, 2026

    'Use of AI at Rippling' states Rippling 'conducts robust testing to ensure AI accuracy, consistency, and bias mitigation,' but publishes no test methodology or results.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

FRIA Support

2 items
45
  • DocumentationCaptured Jul 17, 2026

    'Use of AI at Rippling' explicitly assigns EU AI Act roles (Rippling as provider, customers as deployers) and includes a dedicated Q&A on customer/deployer responsibilities under the EU AI Act in regulated employment contexts, pointing deployers to transparency and human-oversight controls in Recruiting.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

  • AbsenceCaptured Jul 17, 2026

    No Fundamental Rights Impact Assessment (Art. 27) template, checklist, or deployer worksheet is provided; guidance is narrative only. Searched the Trust Center, the full 'Use of AI at Rippling' document, and rippling.com legal/DPA pages.

    Have a URL that disputes this?

Data Governance Disclosure

2 items
64
  • DocumentationCaptured Jul 17, 2026

    Public AI document states Rippling does not use customer data to train or fine-tune any AI models, contractually prohibits its providers from training on inputs/outputs, enables zero-data-retention configurations, scopes AI output to the user's existing permissions, and never shares data across customers.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

  • Audit reportCaptured Jul 17, 2026

    Trust Center evidences ISO 27001, ISO 27018 (PII protection), ISO 42001, SOC 1/2/3, and CSA STAR Level 2, plus a dated sub-processors list (April 30, 2026) and a Transfer Impact Assessment, all gated behind Whistic registration.

    https://trust.rippling.com/

Human Oversight Design

1 item
60
  • DocumentationCaptured Jul 17, 2026

    AI is designed to 'support human decision-making, not replace it'; Rippling 'never uses AI to automatically take action or make decisions,' users can review, edit, or correct AI output before acting, and AI Services 'do not independently make employment, compensation, or other consequential decisions.'

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

Post-Market Monitoring

2 items
47
  • DocumentationCaptured Jul 17, 2026

    Rippling operates a public Vulnerability Reporting Program / bug bounty as a security-researcher intake channel, and its Trust Center references regular internal and external penetration tests (latest dated April 2026).

    https://www.rippling.com/vulnerability-reporting

  • Public statementCaptured Jul 17, 2026

    'Use of AI at Rippling' states all AI features 'undergo ongoing evaluation before and after deployment' and receive 'ongoing monitoring and evaluation to support performance oversight and risk management across the lifecycle,' but no public model-update changelog or continuous bias-monitoring dashboard is published.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

Customer Documentation

2 items
64
  • DocumentationCaptured Jul 17, 2026

    A full public Rippling Recruiting product page plus multiple recruiting topic-hub blog posts describe the ATS and its AI features (Application Review, Interview Assistant, Smart Scheduling).

    https://www.rippling.com/products/hr/recruiting

  • DocumentationCaptured Jul 17, 2026

    A 22-question public 'Use of AI at Rippling' FAQ, together with a public DPA (app.rippling.com/legal/dpa), AI Services Additional Terms, Privacy FAQs, and region-specific privacy notes, gives deployers detailed AI and data-protection compliance guidance.

    https://view.rippling.com/viewer/a68792238e4d5771fb67be631c31c81e#1

Editorial notes

Company overview

Rippling (legal entity People Center, Inc.), founded in 2016 and headquartered in San Francisco, is an all-in-one workforce management platform spanning HR, IT, and finance. Its Recruiting module is a native applicant tracking system that layers AI on top of a unified employee system of record: AI-powered Application Review screens resumes against recruiter-defined criteria, an LLM synthesizes interviewers' feedback into candidate pros/cons summaries, an Interview Assistant records and transcribes video interviews, applications receive a fraud-risk score, and Smart Scheduling automates interview booking. Sourcing and technical assessment are handled through Gem and HackerRank integrations. Rippling is one of the relatively few HR platforms holding an ISO/IEC 42001 AI management system certification.

Regulatory exposure

Rippling Recruiting's AI is used in employment decision-making, placing it squarely within scope of NYC Local Law 144, the EU AI Act (Annex III high-risk employment/recruitment use), and emerging US state AI-hiring laws in Illinois and Colorado. Notably, Rippling itself acknowledges this exposure in its public 'Use of AI at Rippling' document: it states that under the EU AI Act it acts as a 'provider' while customers are 'deployers,' and that features 'used in employment-related contexts - such as Recruiting - may fall within categories that are subject to additional regulatory requirements.' Rippling has commissioned a 'Rippling Recruiting Bias Audit,' but that document sits behind a Whistic registration wall in its Trust Center, so the auditor, date, and adverse-impact results are not publicly verifiable, and no public bias-audit results summary is posted.

Path to a higher score

The single highest-impact move is to publish the Rippling Recruiting Bias Audit ungated, with a public results summary (auditor, date, selection-rate and impact-ratio tables) and a commitment to annual re-audits - this alone would lift bias-audit transparency from the low-40s toward 75+. Rippling could further raise Article 11 and FRIA scores by publishing an ungated per-system model/instructions-for-use card and a concrete Fundamental Rights Impact Assessment (Art. 27) deployer template rather than narrative role guidance, and could strengthen post-market monitoring by exposing a public AI model-update changelog or a continuous bias-monitoring surface. Ungating the SOC 2 and ISO 42001 certificates would also convert already-strong governance claims into directly verifiable evidence.

Regulatory frame

What applies to ATS-integrated AI.

Ranking features are inside EU AI Act Annex III §4 (high-risk) and inside NYC Local Law 144 when they affect NYC-based candidates. Customers should treat the AI surface as a distinct deployer-FRIA scope from the rest of the ATS.

Ranking

Others rated in ATS-integrated AI

Ranked 10 of 77 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.

  1. #7Pinpoint57F
  2. #8Juicebox (PeopleGPT)57F
  3. #9Hireology57F
  4. #10RipplingThis profile56F
  5. #11Ashby56F
  6. #12Tribepad56F
All ATS-integrated vendors

Conflicts of interest

No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.

Casework has no commercial relationship with this vendor.