Distro
AI Compliance

AI that works fairly.
And transparently.

Distro uses AI to make hiring faster and more consistent — not to remove human judgment from decisions that affect people's livelihoods. Here's exactly how we do it.

Our Approach

AI should reduce bias, not automate it.

Automated hiring tools have been criticized — sometimes fairly — for encoding existing biases, making opaque decisions, and reducing hiring to pattern-matching. We've designed Distro specifically to avoid those failure modes.

Our AI is a tool that helps human recruiters and hiring managers make better decisions — faster. It handles the high-volume work: reading resumes, conducting initial screens, and organizing information. It doesn't decide who gets hired.

Below is a plain-language summary of how Distro's AI works, what data it uses, and the protections we've built in for candidates and employers.

Fairness Principles

How we approach bias reduction

Criteria-based, not characteristic-based

Distro's AI evaluates candidates against job-specific criteria — skills, experience, communication quality, and role fit. It does not evaluate candidates based on name, gender, nationality, age, or other protected characteristics. Candidate demographics are never used as scoring inputs.

Consistent scoring at scale

Every candidate for a given role is evaluated against the same rubric. Human reviewers are subject to fatigue, recency bias, and implicit associations — particularly at high volume. Distro's AI applies the same criteria to candidate #1 and candidate #200.

Human judgment remains in the loop

Distro's AI builds shortlists and generates summaries — but it never makes final hiring decisions. Every hire requires a human decision-maker to review, approve, and act. AI provides signal; humans make calls.

Transparency in scoring

When Distro's AI scores a candidate, the rationale is visible. Employers can see which criteria drove a score, identify patterns across their pipeline, and flag any shortlist that doesn't reflect their expectations.

Data & Privacy

How we handle candidate data

Data minimization

Distro collects only the data necessary for hiring — skills, experience, and screening responses. We don't build persistent behavioral profiles on candidates beyond what's needed for matching.

Candidate consent

Candidates are informed when AI screening tools are used in their evaluation. They consent before recording video responses, and can request access to their data or its deletion at any time.

SOC 2 Type II certification

Distro's data handling, access controls, and security practices are independently audited and certified under SOC 2 Type II — the highest level of continuous security assurance. We take our responsibility to protect candidate and employer data seriously.

GDPR-aware practices

For candidates and employers in the EU and EEA, Distro operates with GDPR-compliant data handling, including lawful basis documentation, data subject rights, and cross-border transfer protections.

SOC 2 Type II Certified by Thoropass

Independently Audited

SOC 2 Type II Certified

SOC 2 Type II is the most rigorous independent security certification available — it requires not just a point-in-time review, but a continuous audit over an extended period. Our certification, issued by Thoropass, confirms that Distro's security controls, access management, and data handling practices meet the highest industry standards.

For enterprise customers and compliance teams who need documentation, contact us and we can provide the full audit report under NDA.

What Distro's AI does — and doesn't do

What the AI does

  • Reads and scores resumes against job-specific criteria
  • Conducts structured async video interviews
  • Generates candidate summaries and match explanations
  • Ranks candidates by skills and experience fit
  • Automates outreach, scheduling, and follow-up communications
  • Provides consistency across high-volume candidate pools

What the AI doesn't do

  • Make final hiring or rejection decisions
  • Score based on protected characteristics
  • Build persistent profiles using behavioral tracking
  • Access candidate social media or public profiles without consent
  • Remove human review from any stage of the hiring process
  • Share candidate data with third parties without explicit authorization

Questions about our AI practices?

We're happy to discuss our approach in detail — for compliance reviews, enterprise procurement, or general curiosity.