XOR

XOR is a text-first conversational-AI recruiting platform that pre-screens and scores high-volume and hourly candidates with recruiter-defined knockout/scoring questions over SMS, WhatsApp, and Messenger, then auto-schedules interviews on the recruiter's calendar.

HireAIScore rates XOR 30 out of 100 (grade F, Substantial gaps) under rubric v1.0, last reviewed July 17, 2026. XOR ranks 159 of 160 vendors rated in Screening AI, against a category average of 46. That score is drawn from 18 evidence items across 7 rubric criteria for XOR — 11 with a cited source, 7 recording that nothing was located.

Score breakdown

XOR, criterion by criterion

Each rubric criterion is scored out of 100 on the cited evidence, then weighted into the total.

Weighted contribution shown to the right of each bar.

  1. Article 11 Technical Documentation

    Weight 20% · avg 49

    20

    +4.0

  2. Bias Audit Transparency

    Weight 18% · avg 41

    18

    +3.2

  3. FRIA Support

    Weight 15% · avg 31

    25

    +3.8

  4. Data Governance Disclosure

    Weight 15% · avg 53

    42

    +6.3

  5. Human Oversight Design

    Weight 12% · avg 56

    40

    +4.8

  6. Post-Market Monitoring

    Weight 12% · avg 40

    33

    +4.0

  7. Customer Documentation

    Weight 8% · avg 58

    48

    +3.8

Total weighted score

29.9(rounded to 30 for display)

Category avg is the mean raw score on that criterion across the 160 Screening AI vendors in scope of this rubric, this one included.

Strongest criterion

Customer Documentation

48raw / 100

Contributes 3.8 to the total. 48 against a 58 category average.

Weakest criterion

Bias Audit Transparency

18raw / 100

Contributes 3.2 to the total. 18 against a 41 category average.

Cited evidence

The evidence behind the score

Every score is backed by at least one cited piece of evidence. Open a criterion to see what was found, when, and where.

Download diligence record

Evidence ledger

Items
18
Documentation
8
Public statement
3
Absence
7
With a source URL
11 of 18
Source hostnames
1
Fewest items
2
Bias Audit Transparency

These figures measure how thoroughly XOR was reviewed, not how XOR performed — an absence row, recording that nothing was located, is counted like any other item.

Article 11 Technical Documentation

3 items
20
  • AbsenceCaptured Jul 17, 2026

    No AI model card, technical documentation pack, explainability statement, AI policy, or ISO 42001 was found across xor.ai product pages, /privacy, /terms-and-conditions, /who-we-are, or web search.

    Have a URL that disputes this?

  • DocumentationCaptured Jul 17, 2026

    Screening page describes recruiters choosing questions and assigning scores so candidates 'qualify themselves' but gives no scoring methodology, model documentation, or explainability.

    https://xor.ai/candidate-screening-software

  • Public statementCaptured Jul 17, 2026

    Company page shows ISO 27001, Veracode, and GDPR badges (information-security/privacy, not AI technical documentation) and no responsible-AI framework.

    https://xor.ai/who-we-are

Bias Audit Transparency

2 items
18
  • AbsenceCaptured Jul 17, 2026

    No bias audit or LL 144 AEDT audit summary was found on xor.ai or via web search; XOR does not reference or link any independent fairness/bias audit.

    Have a URL that disputes this?

  • DocumentationCaptured Jul 17, 2026

    Privacy policy contains no mention of algorithmic bias testing, adverse-impact analysis, or fairness auditing.

    https://xor.ai/privacy

FRIA Support

2 items
25
  • AbsenceCaptured Jul 17, 2026

    No Fundamental Rights Impact Assessment template, EU AI Act deployer guidance, or high-risk-system obligation material found on xor.ai or in search.

    Have a URL that disputes this?

  • DocumentationCaptured Jul 17, 2026

    Privacy policy covers GDPR and Standard Contractual Clauses for data transfers but contains no EU AI Act or fundamental-rights impact content.

    https://xor.ai/privacy

Data Governance Disclosure

3 items
42
  • DocumentationCaptured Jul 17, 2026

    Privacy policy names sub-processors (Elucru Inc., Microsoft Azure, Twilio) and describes Standard Contractual Clauses, GDPR data-subject rights, and breach handling; retention 'may store Data indefinitely' at client direction.

    https://xor.ai/privacy

  • Public statementCaptured Jul 17, 2026

    Site footer displays ISO 27001, Veracode, and GDPR compliance badges (self-asserted, with no downloadable certificate or trust portal).

    https://xor.ai/ai-chatbots/

  • AbsenceCaptured Jul 17, 2026

    No dedicated security page (xor.ai/security returns HTTP 404), no SOC 2, no ISO 42001, and no statement of what data is used or excluded for training AI models.

    Have a URL that disputes this?

Human Oversight Design

3 items
40
  • DocumentationCaptured Jul 17, 2026

    Recruiters choose the screening questions and assign the scores that candidates qualify against, and then 'focus on Applicants that make it through XORbot's selection process'- control over criteria but no stated human review of outcomes.

    https://xor.ai/candidate-screening-software

  • DocumentationCaptured Jul 17, 2026

    Scheduling is candidate self-serve within recruiter-defined availability; page markets a 'fully automated recruiting process' with no mention of override, audit logs, or human checkpoints.

    https://xor.ai/interview-scheduling-software

  • AbsenceCaptured Jul 17, 2026

    No documented human-in-the-loop requirement, override/appeal mechanism, audit-trail, in-interface explainability, or per-jurisdiction control was found.

    Have a URL that disputes this?

Post-Market Monitoring

3 items
33
  • DocumentationCaptured Jul 17, 2026

    Privacy policy provides a privacy@xor.ai contact and a data-breach notification procedure (within 7 business days, or 72 hours under GDPR).

    https://xor.ai/privacy

  • Public statementCaptured Jul 17, 2026

    Footer references Veracode security scanning, implying periodic vulnerability testing, but no continuous public monitoring surface.

    https://xor.ai/ai-chatbots/

  • AbsenceCaptured Jul 17, 2026

    No public status page, model-update changelog, incident-disclosure channel, or continuous-monitoring dashboard found on xor.ai.

    Have a URL that disputes this?

Customer Documentation

2 items
48
  • DocumentationCaptured Jul 17, 2026

    Public Terms and Conditions and Privacy Policy cover GDPR, data-subject rights, and sub-processors, but reference no separate Data Processing Agreement, LL 144 notice, or compliance guidance.

    https://xor.ai/terms-and-conditions

  • AbsenceCaptured Jul 17, 2026

    No deployer/compliance guidance, published DPA, NYC Local Law 144 candidate-notice template, or EU AI Act customer guidance found on xor.ai.

    Have a URL that disputes this?

Editorial notes

Company overview

XOR (XOR Inc.) is a US recruiting-automation vendor founded in 2016 by Aida Fazylova and Nikolay Manolov and headquartered in San Jose, California. Its XORbot chatbot engages applicants over SMS, WhatsApp, and Messenger to pre-screen, score, and self-schedule them, and is aimed squarely at high-volume hourly and blue-collar hiring in sectors such as healthcare, retail, and staffing. Recruiters configure the screening questions and assign scores so candidates 'qualify themselves,' and the platform integrates with 20+ ATS/HRIS systems including Bullhorn, Greenhouse, Lever, and SAP SuccessFactors while marketing a low cost-per-hire, text-first hiring funnel.

Regulatory exposure

XOR's chatbot scores and filters applicants against recruiter-defined thresholds, which makes it an Automated Employment Decision Tool under NYC Local Law 144 and a high-risk employment system under the EU AI Act. Despite this, XOR publishes no bias audit, no model/system card, no AI policy or explainability statement, and no NYC- or EU-specific deployer guidance. Its footer displays self-asserted ISO 27001, Veracode, and GDPR badges, and the privacy policy names sub-processors (Elucru Inc., Microsoft Azure, Twilio) and Standard Contractual Clauses, but there is no ISO 42001, SOC 2, dedicated security/trust page (xor.ai/security returns 404), or Fundamental Rights Impact Assessment material. Deployers therefore carry direct LL 144 and EU AI Act obligations with very little vendor-supplied evidence to rely on.

Path to a higher score

XOR could raise its score fastest by commissioning and publicly posting an independent NYC LL 144 bias audit (e.g., BABL AI, Warden AI, or Holistic AI) and publishing an AI/system model card with an explainability statement describing how scores are produced. Standing up a dedicated security/trust page (SOC 2 or ISO 42001 plus a training-data / data-exclusion statement), documenting concrete human-in-the-loop, override, and audit-log controls, adding EU AI Act deployer guidance and a FRIA template, and opening a public status/changelog and security-disclosure channel would move XOR from a marketing-only posture to defensible, citable compliance documentation.

Regulatory frame

What applies to screening AI.

Treated as high-risk under Annex III §4 when the screening output is decisive. EU AI Act Article 13 transparency obligations apply; deployers must give candidates a way to contest.

Ranking

Others rated in Screening AI

Ranked 159 of 160 by weighted total under rubric v1.0. The ordering is arithmetic on the rubric and carries no view on which tool suits a given hiring process.

  1. #156Moonhub30F
  2. #157HeroHunt.ai30F
  3. #158Cognisess30F
  4. #159XORThis profile30F
  5. #160Mercor23F
All screening vendors

Conflicts of interest

No vendor pays for placement, scoring, or removal. Casework - the consulting firm that operates this directory - provides paid services to some vendors. Any active or recent (within 24 months) commercial relationship is disclosed on the affected vendor profile and the review is reassigned to an independent reviewer. See the full policy on About.

Casework has no commercial relationship with this vendor.