Stepstone
Stepstone is a German job marketplace whose Stepstone Recruit employer platform includes an AI Screening Agent, which rates each application against requirements taken from the job ad, and a Talent Finder, which recommends candidates from a CV database of more than 4 million profiles.
HireAIScore rates Stepstone 49 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed September 25, 2026. Stepstone ranks 52 of 160 vendors rated in Screening AI, against a category average of 46. That score is drawn from 33 evidence items across 7 rubric criteria for Stepstone — 29 with a cited source, 4 recording that nothing was located.
§ 01 - Company facts
- Legal name
- The Stepstone Group Deutschland GmbH
- Founded
- 1996
- Headquarters
- Germany · DE
- Pricing tier
- Mid
- Market side
- Employer-side (AEDT)
- Categories
- ScreeningSourcing
- Website
- stepstone.de
These are company details, not findings. They are editable by a verified representative and carry no weight in the score, which is built only from the cited evidence below.
§ 02 - Score breakdown
§ Score breakdown
Category scoring
Weighted contribution shown to the right of each bar.
- 01
Article 11 Technical Documentation
Weight 20%55
+11.0 · category avg 49
- 02
Bias Audit Transparency
Weight 18%50
+9.0 · category avg 41
- 03
FRIA Support
Weight 15%30
+4.5 · category avg 31
- 04
Data Governance Disclosure
Weight 15%55
+8.3 · category avg 53
- 05
Human Oversight Design
Weight 12%58
+7.0 · category avg 56
- 06
Post-Market Monitoring
Weight 12%38
+4.6 · category avg 40
- 07
Customer Documentation
Weight 8%58
+4.6 · category avg 58
Category avg is the mean raw score on that criterion across the 160 Screening AI vendors in scope of this rubric, this one included.
§ 03 - Strongest · weakest
Strongest category
Customer Documentation
Raw score 58 · contributes 4.6 to total.
58 against a 58 category average
Weakest category
FRIA Support
Raw score 30 · contributes 4.5 to total.
30 against a 31 category average
§ 04 - Cited evidence
Download diligence record→§ Evidence
Cited per category
Every score is backed by at least one cited piece of evidence.
Evidence ledger
- Items
- 33
- Documentation
- 21
- Audit report
- 1
- Public statement
- 7
- Absence
- 4
- With a source URL
- 29 of 33
- Source hostnames
- 6
- Fewest items
- 3
- FRIA Support
These figures measure how thoroughly Stepstone was reviewed, not how Stepstone performed — an absence row, recording that nothing was located, is counted like any other item.
Article 11 Technical Documentation
6 items55
- DocumentationCaptured Sep 25, 2026
A 60-page white paper co-written with QuantPi and TÜV AI.Lab (reflecting July 2025) documents a Stepstone LLM-powered candidate recommender, covering its fine-tuned bi-encoder embedding architecture, training and test data and its high-risk classification under AI Act Annex III 4(a), and says it is not a full conformity assessment.
- DocumentationCaptured Sep 25, 2026
The public data processing agreement (Stand 21.07.2026) describes the Screening Agent ('Talent Assessor') as an AI service that classifies job-ad requirements as must-have or nice-to-have, rates CVs and screening answers per requirement, can generate follow-up 'gap questions', and keeps the data the AI Act requires to document explainability and robustness.
https://www.stepstone.de/wp-content/uploads/2025/11/The-Stepstone-Group-DE-DE-AVV-19.01.2026.pdf
- DocumentationCaptured Sep 25, 2026
A 2023 Q&A document on AI in Stepstone products says LLMs, including third-party ones, are used, claims rigorous testing and audits, and lists privacy, fairness, transparency, autonomy and accountability as principles, with no system-specific detail.
https://www.stepstone.de/wp-content/uploads/2023/09/FAQ-KI.pdf
- Public statementCaptured Sep 25, 2026
The corporate responsible-technology page says Stepstone has an ethical AI framework built on autonomy, fairness, explainability and prevention of harm, and that it partners with academics and policymakers on ethical AI.
https://www.thestepstonegroup.com/english/sustainability/responsible-product-and-technology/
- Public statementCaptured Sep 25, 2026
A September 2022 Stepstone tech-blog post adopts the EU Trustworthy AI principles and sets a goal of 'ethics by design' across all products.
https://medium.com/stepstone-tech/ai-ethics-at-stepstone-2bc6b64b7bb3
- AbsenceCaptured Sep 25, 2026
No model card, instructions for use or ISO/IEC 42001 certification for the Screening Agent or Talent Finder was found on stepstone.de's product and legal pages, on thestepstonegroup.com, or in the SafeBase trust center, whose AI section is hidden.
Bias Audit Transparency
4 items50
- Audit reportCaptured Sep 25, 2026
The joint QuantPi / TÜV AI.Lab / Stepstone assessment tested a candidate recommender on 3,193 CV-listing pairs across nine inferred ethnic groups and found significant false-negative-rate gaps (West European 0.134 vs Iranian/Central Asian 0.024 and South Asian 0.045), no significant differences in counterfactual individual-level tests, and only preliminary age and gender testing.
- Public statementCaptured Sep 25, 2026
Stepstone's 25 September 2025 announcement presents the white paper as a blueprint for non-discrimination testing under the AGG and the AI Act and says it is not a complete conformity assessment.
- Public statementCaptured Sep 25, 2026
Stepstone's bio for its General Counsel and Group Data Protection Officer says he leads a cross-functional Digital Governance Team responsible for data ethics, fairness testing and GDPR compliance, but no fairness-test results for the Screening Agent are published.
https://www.stepstone.de/e-recruiting/hr-wissen/autor-in/heiner-tent
- AbsenceCaptured Sep 25, 2026
No NYC LL 144 bias audit summary or independent audit of the Screening Agent was found on stepstone.de, thestepstonegroup.com or trust.stepstone.com, and there is no public Warden AI page (trust.warden-ai.com/stepstone returns 404) or Holistic AI dashboard.
FRIA Support
3 items30
- AbsenceCaptured Sep 25, 2026
No Fundamental Rights Impact Assessment template or AI Act Article 26/27 deployer guidance for the Screening Agent or Talent Finder was found on stepstone.de's product, Rechtliches (legal) or KI-Akademie pages or in the SafeBase trust center.
- DocumentationCaptured Sep 25, 2026
The data processing agreement commits Stepstone to support customers' GDPR Article 35 data protection impact assessments to the extent necessary, which is GDPR support rather than an AI Act FRIA.
https://www.stepstone.de/wp-content/uploads/2025/11/The-Stepstone-Group-DE-DE-AVV-19.01.2026.pdf
- DocumentationCaptured Sep 25, 2026
A free recorded webinar by Stepstone's General Counsel explains that the AI Act classifies recruiting systems as high-risk and what that means for AI-assisted application processes, but offers no product-specific deployer materials.
Data Governance Disclosure
6 items55
- DocumentationCaptured Sep 25, 2026
The German privacy policy (Stand 21.07.2026) discloses an automated analysis that matches CV data against job-ad criteria and shows employers a score or category, kept for six months under Art. 6(1)(b) GDPR; it also says candidate profiles are visible to employers by default and may be proposed to them.
https://www.stepstone.de/wp-content/uploads/2022/10/StepStone-Datenschutzerkla%CC%88rung_DE.pdf
- DocumentationCaptured Sep 25, 2026
The white paper discloses the recommender's training data (CV work experience, education and skills excluding soft skills, job listings, positive recruiter decisions only, and synthetic CVs) and states that protected attributes are absent from the data and were inferred only for testing.
- DocumentationCaptured Sep 25, 2026
The SafeBase trust center says data is hosted in AWS data centres in Germany and Ireland and customers are told of breaches within 72 hours, and its FAQ says Stepstone is not ISO 27001 certified, 'with no plans to certify'.
- DocumentationCaptured Sep 25, 2026
The corporate cybersecurity page says security policies are aligned with ISO/IEC 27001:2013 and SOC 2, without claiming certification.
https://www.thestepstonegroup.com/english/cybersecurity/our-approach-to-cybersecurity/
- DocumentationCaptured Sep 25, 2026
The data processing agreement lists the Screening Agent's data categories (application and profile data, screening answers, result and technical log data) and EU/EEA processing, but its sub-processor annex names only group companies and Appcast, not the cloud or model providers.
https://www.stepstone.de/wp-content/uploads/2025/11/The-Stepstone-Group-DE-DE-AVV-19.01.2026.pdf
- Public statementCaptured Sep 25, 2026
An October 2024 release says Stepstone's CV-matching AI is continuously trained on anonymised insights from hiring processes on stepstone.de.
Human Oversight Design
5 items58
- DocumentationCaptured Sep 25, 2026
The Screening Agent page says every CV is checked per requirement as fully, partially or not met and the agent explains how well and why an applicant fits, framing this as decision support ('Sie entscheiden – nicht die KI') while also saying applications are automatically rated and prioritised.
https://www.stepstone.de/e-recruiting/produkte/screening-agent/
- DocumentationCaptured Sep 25, 2026
The privacy policy states there is no solely automated decision under Article 22 GDPR and that a human always makes the final decision on whether an application is considered.
https://www.stepstone.de/wp-content/uploads/2022/10/StepStone-Datenschutzerkla%CC%88rung_DE.pdf
- DocumentationCaptured Sep 25, 2026
A July 2026 Talent Finder guide shows the interface explaining why a profile was displayed (for example, three years of relevant experience), and recruiters choose which profiles to unlock and contact.
https://www.stepstone.de/e-recruiting/hr-wissen/recruiting/active-sourcing/
- DocumentationCaptured Sep 25, 2026
A separate Quality Check option automatically filters out non-EU applications before a recruiter sees them, which falls outside the Screening Agent's decision-support framing.
https://www.stepstone.de/e-recruiting/produkte/quality-check/
- Public statementCaptured Sep 25, 2026
In a March 2026 essay, CEO Sebastian Dettmers wrote that Stepstone built AI to screen, prioritise and shortlist applications before recruiters review each one manually.
Post-Market Monitoring
4 items38
- DocumentationCaptured Sep 25, 2026
The cybersecurity page gives a vulnerability-disclosure address (vulnerability.disclosure@stepstone.com) and describes incident response, but states that incident history is confidential and not shared externally.
https://www.thestepstonegroup.com/english/cybersecurity/our-approach-to-cybersecurity/
- DocumentationCaptured Sep 25, 2026
The trust center describes a security operations centre, SIEM-based monitoring, an incident response team and a bug bounty for critical applications, while pentest reports and policies are available only on request.
- Public statementCaptured Sep 25, 2026
The white paper says group-level disparities are subject to ongoing mitigation and that the Digital Governance team is building a larger dataset for intersectional testing, but no follow-up results have been published.
- AbsenceCaptured Sep 25, 2026
No public status page or AI model changelog was found: status.stepstone.de and status.stepstone.com do not resolve, status.thestepstonegroup.com is a blank wildcard-DNS page, the stepstone and thestepstonegroup statuspage.io subdomains redirect to Atlassian's marketing site, and no security.txt is published.
Customer Documentation
5 items58
- DocumentationCaptured Sep 25, 2026
The Stepstone Recruit page describes AI job-ad creation, the Screening Agent, and talent recommendations that compare the job ad with more than 4 million database profiles.
- DocumentationCaptured Sep 25, 2026
A dedicated Screening Agent page explains in three steps how requirements are detected, CVs are compared per requirement and an individual assessment is produced.
https://www.stepstone.de/e-recruiting/produkte/screening-agent/
- DocumentationCaptured Sep 25, 2026
The public German data processing agreement has sections on the Screening Agent and the Talent Finder dashboard covering purposes, data categories and retention.
https://www.stepstone.de/wp-content/uploads/2025/11/The-Stepstone-Group-DE-DE-AVV-19.01.2026.pdf
- DocumentationCaptured Sep 25, 2026
The KI-Akademie hub collects articles, webinars (including one on the EU AI Act) and studies on using AI in recruiting, avoiding algorithmic bias and data protection.
- DocumentationCaptured Sep 25, 2026
A public 'Q&A Document on AI Usage in Stepstone Products', also published in German, explains how Stepstone uses AI and LLMs in its products and the risks involved.
https://www.stepstone.de/wp-content/uploads/2023/09/QA-AI.pdf
§ 05 - Editorial notes
Company overview
The Stepstone Group started in 1996 in Norway as Jobshop.no. It is headquartered in Düsseldorf and has been majority-owned by KKR and CPP Investments since 2025. It runs Stepstone.de, Totaljobs and other job boards, plus Appcast (US programmatic job ads, out of scope here). Its employer-side AI sits in Stepstone Recruit. The Screening Agent, called 'Talent Assessor' in the data processing agreement, sorts a job ad's requirements into must-have and nice-to-have. It then checks each CV and screening answer against every requirement as fully, partially or not met, and gives recruiters a score or category with the reasons. Talent Finder recommends profiles from a CV database of more than 4 million. Stepstone bought Mya, a US conversational screener, in May 2021 and folded it into jobseeker-side job matching. mya.com now redirects to the corporate homepage and Mya is not among the group's core brands, so there is no sign it is still sold as an employer screener.
Regulatory exposure
EU exposure is maximal. Rating and prioritising applications (Screening Agent) and recommending candidates (Talent Finder) are high-risk uses under EU AI Act Annex III point 4, with Stepstone as provider and its employer customers as deployers. Stepstone's own white paper classifies its candidate recommender as high-risk. The Digital AI Omnibus moved the high-risk obligations from 2 August 2026 to 2 December 2027 without changing them. GDPR Article 22 and Germany's General Equal Treatment Act (AGG) already apply. Stepstone says a human always makes the final decision, although an optional Quality Check automatically filters out non-EU applications. Stepstone says it does not analyse video-interview content, and no emotion-recognition use (banned since February 2025) was found. Both tools are marketed on stepstone.de to employers in Germany. NYC LL 144, Illinois HB 3773, Colorado SB 26-189 and California's FEHA rules on automated-decision systems therefore matter only where the tools are used for US roles or candidates, and no LL 144 bias audit is published.
Path to a higher score
Publish documentation for the Screening Agent: instructions for use, the underlying model and its provider, how requirements are extracted and weighted, and accuracy and known limitations. Extend the QuantPi / TÜV AI.Lab non-discrimination testing to the live Screening Agent and Talent Finder, cover gender, age, ethnicity and their intersections, and repeat it on a published schedule. Publish deployer guidance for AI Act Articles 26 and 27, including a FRIA template, candidate-notice text and human-oversight procedures, and document the recruiter override controls. Publish the AI section of the trust center, which is currently hidden, name the model and cloud sub-processors, and add a public status page and a model changelog. Pursue ISO/IEC 42001; the trust center says ISO 27001 certification is not planned.
§ Regulatory frame
What applies to screening ai.
Treated as high-risk under Annex III §4 when the screening output is decisive. EU AI Act Article 13 transparency obligations apply; deployers must give candidates a way to contest.
§ Compare
Build any comparison→Stepstone against its nearest-scoring peers.
In Screening AI.
§ Others rated in Screening AI
All screening vendors→Ranked 52 of 160 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.
- 49Versant by Pearson49F
- 50Jobma49F
- 51Infor Talent Science49F
- 52StepstoneThis profile49F
- 53Lever49F
- 54Oracle Recruiting49F
Conflicts of interest
No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.
Casework has no commercial relationship with this vendor.