Workstream

Workstream is a mobile-first HR, payroll and hiring platform for hourly, multi-location employers such as QSR franchisees. Its hiring suite pairs a text-to-apply applicant tracking system with VoiceAI phone screens and VideoAI asynchronous video interviews, which return transcripts, AI summaries, pass/fail results for each question and match scores.

HireAIScore rates Workstream 39 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed September 25, 2026. Workstream ranks 132 of 160 vendors rated in Screening AI, against a category average of 46. That score is drawn from 34 evidence items across 7 rubric criteria for Workstream — 28 with a cited source, 6 recording that nothing was located.

Score breakdown

Workstream, criterion by criterion

Each rubric criterion is scored out of 100 on the cited evidence, then weighted into the total.

Weighted contribution shown to the right of each bar.

  1. Article 11 Technical Documentation

    Weight 20% · avg 49

    40

    +8.0

  2. Bias Audit Transparency

    Weight 18% · avg 41

    20

    +3.6

  3. FRIA Support

    Weight 15% · avg 31

    27

    +4.0

  4. Data Governance Disclosure

    Weight 15% · avg 53

    47

    +7.0

  5. Human Oversight Design

    Weight 12% · avg 56

    61

    +7.3

  6. Post-Market Monitoring

    Weight 12% · avg 40

    35

    +4.2

  7. Customer Documentation

    Weight 8% · avg 58

    56

    +4.5

Total weighted score

38.7(rounded to 39 for display)

Category avg is the mean raw score on that criterion across the 160 Screening AI vendors in scope of this rubric, this one included.

Strongest criterion

Human Oversight Design

61raw / 100

Contributes 7.3 to the total. 61 against a 56 category average.

Weakest criterion

Bias Audit Transparency

20raw / 100

Contributes 3.6 to the total. 20 against a 41 category average.

Cited evidence

The evidence behind the score

Every score is backed by at least one cited piece of evidence. Open a criterion to see what was found, when, and where.

Download diligence record

Evidence ledger

Items
34
Documentation
24
Public statement
4
Absence
6
With a source URL
28 of 34
Source hostnames
3
Fewest items
3
FRIA Support

These figures measure how thoroughly Workstream was reviewed, not how Workstream performed — an absence row, recording that nothing was located, is counted like any other item.

Article 11 Technical Documentation

4 items
40
  • DocumentationCaptured Sep 25, 2026

    The public VoiceAI admin article (updated 14 July 2026) is the closest thing to instructions for use: the AI compares each answer with the employer's 'expected response' and marks it Matched or Unmatched. The article reports the share matched as the score (3 of 4 = 75%), shows 'Low confidence' or 'Insufficient evidence' flags, and lists English, Spanish, Mandarin and French support.

    https://help.workstream.us/en/articles/12663091-set-up-and-use-voiceai

  • DocumentationCaptured Sep 25, 2026

    Workstream's public VoiceAI/VideoAI interactive demo shows the VideoAI results panel stating that the 'Score is calculated equally across all questions, based on the ratio of passed questions to total questions', and that only questions with expected responses are scored.

    https://www.workstream.us/explore-voiceai-videoai

  • DocumentationCaptured Sep 25, 2026

    The AI Functionality Terms (last updated 21 June 2024) cover generative AI, LLM and other ML features and disclose that some run on third-party models, pointing to Microsoft Azure's terms. They warn that outputs are 'not tested, verified, endorsed or guaranteed to be accurate', which makes them a liability document rather than technical documentation.

    https://www.workstream.us/aiterms

  • AbsenceCaptured Sep 25, 2026

    No model or system card, AI principles or responsible-AI page, explainability statement, accuracy or limitation metrics, or ISO/IEC 42001 certification was found. Places checked: the 2,141-URL workstream.us sitemap (/responsible-ai and /ai-principles return 404), the help center, the security page and the legal terms.

    Have a URL that disputes this?

Bias Audit Transparency

6 items
20
  • AbsenceCaptured Sep 25, 2026

    No NYC Local Law 144 bias-audit summary, independent audit (Warden AI, Holistic AI, BABL AI, DCI, ORCAA, Credo AI, ConductorAI) or adverse-impact/selection-rate disclosure was found for VoiceAI, VideoAI or resume match scores. trust.warden-ai.com/workstream returns 404, help-center searches for 'bias', 'discrimination', 'EEO' and 'Illinois' return no articles, and the product, pricing, security, franchise and legal pages say nothing on the subject.

    Have a URL that disputes this?

  • DocumentationCaptured Sep 25, 2026

    The AI terms admit outputs 'may contain biases' and bar customers from discriminatory uses, but they make checking outputs solely the customer's job and disclose no fairness testing by Workstream.

    https://www.workstream.us/aiterms

  • Public statementCaptured Sep 25, 2026

    Workstream markets VoiceAI as knowing 'what questions it can and can't ask applicants' and so keeping employers 'compliant with hiring laws', an unaudited claim about question content rather than outcome testing.

    https://www.workstream.us/artificialintelligence

  • Public statementCaptured Sep 25, 2026

    The VoiceAI product page quotes a customer who credits automated phone screening with 'filtering out' lukewarm candidates, which shows the tool works as a hiring gate and not just a scheduler.

    https://www.workstream.us/product/hiring/voiceai

  • Public statementCaptured Sep 25, 2026

    Workstream's own June 2026 buyer's guide credits competitor HeyMilo with 'Third-party bias auditing through Warden AI' but lists no audit or fairness testing for Workstream.

    https://www.workstream.us/blog/conversational-ai-recruiting-software-qsr

  • Public statementCaptured Sep 25, 2026

    A 2023 Workstream blog post claims automated systems can 'reduce and eliminate bias by treating every candidate equally', citing an unlinked University of Chicago study rather than any test of Workstream's own tools.

    https://www.workstream.us/blog/automated-hiring

FRIA Support

3 items
27
  • AbsenceCaptured Sep 25, 2026

    No EU AI Act reference, Article 27 FRIA template, deployer guide or AI-law compliance kit was found on workstream.us, the help center or the franchise page. The legal documents checked (Subscription Services Agreement of 23 September 2026, AI Functionality Terms, privacy policy of 5 May 2026) contain none either.

    Have a URL that disputes this?

  • DocumentationCaptured Sep 25, 2026

    Section 7 of the AI terms bars customers from using AI for 'automated decision-making that has legal or similarly significant effects' without adequate human review, and from exploiting group vulnerabilities based on age or physical or mental characteristics. The wording echoes EU AI Act Article 5 without naming the Act.

    https://www.workstream.us/aiterms

  • DocumentationCaptured Sep 25, 2026

    The Subscription Services Agreement makes the customer responsible for complying with Title VII, the ADEA, the ADA and any applicable employment, data-protection or privacy law, which hands deployer duties to the customer without supporting materials.

    https://www.workstream.us/terms

Data Governance Disclosure

5 items
47
  • DocumentationCaptured Sep 25, 2026

    The security page claims SOC 2 Type II with annual independent audits, AES-256 encryption at rest and TLS 1.2+ in transit, AWS hosting mainly in us-west-2 with multi-AZ backups, tenant isolation, and audit logs of 'every read, write, and administrative action'. It also says Workstream does not train shared AI models on customer data without explicit opt-in approval.

    https://www.workstream.us/product/platform/security

  • DocumentationCaptured Sep 25, 2026

    The AI terms bar training on AI inputs and outputs except for the customer's benefit, but they allow de-identified inputs and outputs to be used to train AI 'or for any other lawful purpose'. They also let third-party model providers use the data as needed to run the features.

    https://www.workstream.us/aiterms

  • DocumentationCaptured Sep 25, 2026

    The privacy policy (updated 5 May 2026) discloses sharing with 'AI technology providers and voice processing services' for AI phone tools but excludes data processed for employer customers. Its body says nothing about how long call or video recordings are kept, voiceprints or other biometric identifiers, BIPA, or automated decisions about applicants.

    https://www.workstream.us/privacy

  • DocumentationCaptured Sep 25, 2026

    Section 5.6 of the Subscription Services Agreement commits Workstream to processing Customer Data only on the customer's instructions, but no standalone DPA or subprocessor list is published.

    https://www.workstream.us/terms

  • AbsenceCaptured Sep 25, 2026

    No data-exclusion list (for example, protected attributes kept out of match scoring), no description of VoiceAI or VideoAI training data, no subprocessor list or DPA (workstream.us/subprocessors and /dpa return 404), and no public trust center were found.

    Have a URL that disputes this?

Human Oversight Design

7 items
61

Post-Market Monitoring

4 items
35
  • DocumentationCaptured Sep 25, 2026

    Workstream's public Atlassian Statuspage, linked from its help-center footer, lists 19 components with email, Slack and RSS subscriptions but no VoiceAI or VideoAI component. The components include Hiring, Career Page, Onboarding, Payroll, Twilio SMS/MMS, SendGrid and the ADP, UKG, Paylocity and QuickBooks integrations.

    https://workstream-status.statuspage.io/

  • DocumentationCaptured Sep 25, 2026

    The incident feed lists 12 incidents from April 2022 to 5 July 2024, two of them with postmortems (a June 2023 jobs-site outage and December 2023 onboarding latency), and none in the roughly 26 months since.

    https://workstream-status.statuspage.io/api/v2/incidents.json

  • AbsenceCaptured Sep 25, 2026

    No security.txt (workstream.us/.well-known/security.txt returns 404), vulnerability-disclosure policy, bug bounty or dedicated security contact was found; the only contacts are privacy@workstream.us and help@workstream.is. There is also no AI model-update changelog and no fairness or drift monitoring.

    Have a URL that disputes this?

  • DocumentationCaptured Sep 25, 2026

    The security page says Workstream regularly scans for vulnerabilities and logs and reviews access to production systems, but these are internal controls with no public reporting.

    https://www.workstream.us/product/platform/security

Customer Documentation

5 items
56
  • DocumentationCaptured Sep 25, 2026

    The public VoiceAI/VideoAI product page describes AI phone screens with 'pass/fail ratings' and recorded calls, transcripts and AI summaries. It also describes VideoAI's video replay, conversation summary and 'Candidate match score'.

    https://www.workstream.us/product/hiring/voiceai

  • DocumentationCaptured Sep 25, 2026

    The public Intercom help center has 173 product articles and 48 guides, including VoiceAI setup and scoring and hiring-stage automations and permissions, plus links to the API docs and the status page.

    https://help.workstream.us/en/

  • DocumentationCaptured Sep 25, 2026

    The quote-based Hiring plan lists 'VoiceAI screening', 'VideoAI screening', 'Automate applicant tracking and scoring', and 'Call transcripts, recordings, and AI summaries and match scores'.

    https://www.workstream.us/pricing

  • DocumentationCaptured Sep 25, 2026

    The franchise page documents role- and entity-based permissions and franchisee-franchisor visibility controls for multi-location operators, but gives no AI compliance guidance.

    https://www.workstream.us/franchise

  • AbsenceCaptured Sep 25, 2026

    None of the following was found: an NYC LL 144 candidate-notice template, Illinois AI Video Interview Act notice, consent or deletion guidance, BIPA guidance for recorded calls and videos, Colorado or EU AI Act deployer guidance, a VideoAI help article, a public DPA or a subprocessor list.

    Have a URL that disputes this?

Editorial notes

Company overview

Workstream (Workstream Technologies, Inc., 521 7th St, San Francisco) is a mobile-first HR, payroll and hiring platform for hourly, multi-location employers, mostly QSR and restaurant franchisees but also retail, healthcare and hospitality. It was founded in 2017 and is led by co-founders Desmond Lim (CEO) and Lei Xu (CSO), and it reports 5,000+ customers across 35,000+ locations. Its hiring suite pairs a text-to-apply applicant tracking system (application-form knockouts, quizzes, and a talent network with resume match scores) with two AI screeners. VoiceAI is a 24/7 phone agent that asks the employer's questions in English, Spanish, Mandarin or French. It returns recordings, transcripts, a pass/fail result for each question and a matching score. VideoAI runs asynchronous video interviews and returns a replay, a summary and a match score calculated the same way. Plans are priced by quote and also cover onboarding, full-service payroll, scheduling, benefits and an Ask AI assistant called Mira.

Regulatory exposure

VoiceAI and VideoAI give each candidate pass/fail verdicts and a percentage match score, and the ATS adds a resume match score. These outputs substantially assist screening, and more so when employers turn on auto-advance or knockout auto-reject. That means NYC employers using them owe the annual independent bias audit and candidate notices required by NYC Local Law 144. Workstream publishes no audit, no statement and no notice template, even though its own public demo shows the AI grading subjective criteria such as 'genuine interest in the role'. VideoAI also brings Illinois employers under the notice, explanation, consent and deletion-on-request rules of Illinois's AI Video Interview Act (820 ILCS 42). Recorded calls and videos raise Illinois BIPA questions about voiceprints and face geometry, which Workstream never addresses. Employers also carry the notice and anti-discrimination duties of Illinois HB 3773, and the developer-disclosure duties of Colorado SB 24-205 would reach Workstream as the developer. The EU AI Act matters little in practice, because Workstream hosts in the US and its privacy notices cover only the US and Canada. The contracts push the burden onto customers: the AI terms admit outputs 'may contain biases' and make the customer solely responsible for checking them and for complying with the law.

Path to a higher score

The biggest gain would come from commissioning an independent LL 144-style bias audit of the VoiceAI, VideoAI and resume match scoring and publishing the summary, with selection rates and impact ratios by sex, race/ethnicity and intersectional groups, on a stated refresh schedule. Workstream already explains its expected-response scoring better than most peers. Turning that help-center and demo material into a published system card for each tool would lift its Article 11 score cheaply. The card should cover the models used (the AI terms point to Microsoft Azure), the inputs, whether any audio or visual features feed the scores, known limitations and measured accuracy. Deployer kits would cover most of the remaining gaps: LL 144 notice templates, an Illinois AIVIA notice, consent and 30-day deletion workflow for VideoAI with a stated BIPA position, and per-jurisdiction toggles. Workstream should also publish a DPA and subprocessor list, adopt one consistent AI-training policy (the security page and the AI terms currently disagree), add VoiceAI and VideoAI components to its Statuspage, and publish a security.txt and a vulnerability-disclosure policy.

Regulatory frame

What applies to screening AI.

Treated as high-risk under Annex III §4 when the screening output is decisive. EU AI Act Article 13 transparency obligations apply; deployers must give candidates a way to contest.

Ranking

Others rated in Screening AI

Ranked 132 of 160 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.

  1. #129Paycor40F
  2. #130Adaface39F
  3. #131Canditech39F
  4. #132WorkstreamThis profile39F
  5. #133DevSkiller39F
  6. #134Alooba38F
All screening vendors

Conflicts of interest

No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.

Casework has no commercial relationship with this vendor.