TL;DR
A background check RFP template standardizes how you evaluate and compare consumer reporting agencies (CRAs) before signing a vendor contract. This guide walks through every section you need — from FCRA compliance attestations to turnaround-time benchmarks and pricing structures — so your procurement process protects your organization legally and operationally. Use it when sourcing a new screening vendor, re-bidding an existing contract, or building a multi-vendor panel for global operations.
—
When You Need This Template
You need a formal RFP process any time you’re selecting or replacing a background screening vendor — not just when price shopping. Specific triggers include:
- Contract renewal cycles. Most CRA contracts run 12–36 months. Before auto-renewal, benchmark your incumbent against current market pricing and compliance capabilities.
- M&A or PEO transitions. When you inherit a workforce or spin off a business unit, your screening program needs a fresh vendor evaluation to align with your compliance posture.
- Compliance gaps surfaced in audit. If your legal team flags inconsistent adverse action documentation or missing state-specific disclosures, an RFP forces vendors to demonstrate remediation capability.
- Scaling hiring volume. A vendor built for 200 hires/year may not have the infrastructure for 5,000. Turnaround time and account management structure become critical differentiators at scale.
- Industry-specific requirements. If you’re newly subject to FINRA, DOT, or CMS screening mandates, you need a vendor that already supports those specialized checks.
Who should own this process: Talent acquisition leadership typically initiates the RFP, but your legal/compliance team must review the FCRA and state-law sections before distribution. Procurement should own vendor scoring and contract negotiation. For organizations without a dedicated compliance function, your VP of HR or CHRO should sign off before the RFP goes out.
This template addresses your obligations under the Fair Credit Reporting Act (FCRA), EEOC guidance on the use of criminal history in employment decisions, and state fair-chance laws — all of which require your CRA to support specific disclosure, consent, and adverse action workflows.
—
What to Include
1. Company Background & Screening Volume Profile
State your organization’s size, industry, hiring volume, and geographic footprint. Vendors need this to price accurately and to flag jurisdictional complexities.
Sample language:
> [Company Name] is a [industry] employer with [X] employees across [X] states, hiring approximately [X] new employees annually. We are seeking a background screening partner to support pre-employment, volunteer, and contractor screening across the following categories: [criminal history, employment verification, education verification, motor vehicle records, drug screening, etc.].
2. Scope of Services Required
List every check type you need, not just criminal records. This section prevents scope creep and change orders mid-contract.
| Check Type | Required? | Notes |
|---|---|---|
| County/state criminal records | Yes | Specify lookback period per state law |
| Federal criminal records | Yes/No | |
| National criminal database (with primary source verification) | Yes | Required for FCRA compliance |
| Sex offender registry | Yes/No | |
| Employment verification | Yes/No | Number of years back |
| Education verification | Yes/No | |
| Professional license verification | Yes/No | Relevant for healthcare, finance, transportation |
| MVR / driving records | Yes/No | Required for DOT-regulated roles |
| Drug/health screening coordination | Yes/No | |
| Credit reports | Yes/No | Note state restrictions (see below) |
| I-9/E-Verify support | Yes/No | |
| International screening | Yes/No | Specify countries |
Flag as required, not optional: confirmation that all criminal records are verified against primary source documentation, not solely database hits — this is a common FCRA compliance gap.
3. Compliance & Legal Capabilities
This is the section your legal team should draft or heavily edit. Ask vendors to attest to:
- FCRA compliance certification and how they document permissible purpose.
- Adverse action workflow automation — pre-adverse action notice, waiting period tracking (typically 5 business days minimum, longer in some states), and final adverse action notice generation.
- State-specific ban-the-box and fair-chance law support (e.g., California’s FCA, New York City’s Fair Chance Act, Illinois’s Human Rights Act amendments).
- Data security certifications (SOC 2 Type II, encryption standards, breach notification protocols).
- Dispute resolution process for candidates who contest report accuracy.
Sample RFP question:
> Describe your process for generating FCRA-compliant pre-adverse and adverse action notices, including how your platform tracks state-mandated waiting periods and jurisdiction-specific disclosure requirements.
4. Technology & Integration Requirements
Specify your ATS/HRIS platform(s) and require vendors to confirm native or API-based integration. Ask about:
- Candidate self-service portals for consent and status tracking.
- Real-time status dashboards for recruiters.
- Bulk ordering capability for high-volume hiring events.
- Mobile-friendly candidate experience (a growing factor in candidate drop-off rates).
5. Turnaround Time & Service Level Agreements (SLAs)
Require vendors to provide average and 90th-percentile turnaround times, broken out by check type. A vendor quoting “24-48 hours” without percentile data is giving you marketing language, not a service commitment.
Sample RFP question:
> Provide average and 90th-percentile completion times for county criminal, national criminal, and employment/education verification checks over the trailing 12 months.
6. Pricing Structure
Require itemized, per-check pricing — not bundled packages — so you can model costs against your actual hiring mix. Ask about:
- Base package pricing vs. à la carte add-ons.
- Rush/expedite fees.
- International or federal court search surcharges.
- Volume discount tiers.
- Contract minimums or termination fees.
7. Account Management & Support Structure
Ask whether you’ll receive a dedicated account manager or a shared support queue. For organizations with complex, multi-state hiring, dedicated account management materially reduces resolution time on disputes and escalations.
8. References & Compliance Track Record
Request three client references of comparable size and industry, plus disclosure of any FCRA-related litigation, FTC consent decrees, or state regulatory actions within the past five years.
9. Implementation Timeline
Ask vendors to propose a realistic onboarding timeline, including data migration, ATS integration testing, and recruiter training. Vendors promising “same-week go-live” for enterprise accounts often underestimate integration complexity.
—
Customization Guide
Small organizations (under 500 employees): Simplify the technology integration section — you likely need standalone portal access rather than deep API integration. Focus your evaluation weight on pricing transparency and support responsiveness over enterprise features.
Mid-market and enterprise organizations: Expand the SLA and integration sections. Require API documentation and a technical discovery call before finalists are selected. Add a data security addendum reviewed by your IT security team.
Industry-specific modifications:
- Healthcare: Add OIG/SAM exclusion list monitoring and license verification cadence requirements (many states require monthly re-checks).
- Transportation/logistics: Require DOT-compliant MVR pulls and clearinghouse query support.
- Financial services: Add FINRA registration verification and require vendors to confirm experience with Form U4/U5 disclosure checks.
- Staffing agencies: Require multi-client account structuring and the ability to bill screening costs back to individual client accounts.
Legal review recommendation: Route the compliance and adverse action sections through employment counsel before distribution — not after vendor selection. Modifying compliance language after you’ve already scored proposals creates an unlevel comparison.
—
Implementation Tips
Rolling out within your team:
1. Assign a single RFP owner (typically a TA operations manager or HR compliance lead) to manage vendor communications and prevent conflicting answers to vendor questions.
2. Build a weighted scoring matrix before distributing the RFP — decide in advance how much weight compliance capability, pricing, and turnaround time each carry. Scoring after the fact invites bias.
3. Set a firm proposal deadline and a structured Q&A window (typically 5–10 business days) so all vendors respond to the same clarifying questions.
Training requirements: Once you select a vendor, train recruiters on the new consent and disclosure workflow before go-live — not during your first live requisition. Misapplied consent language is one of the most common sources of FCRA claims.
Version control: Store your RFP template in a shared compliance folder with version history. Update it at minimum every 18 months, or immediately after any material change to state fair-chance laws in states where you operate.
—
Compliance Checklist
Before distributing your RFP, confirm it addresses:
- [ ] FCRA permissible purpose and disclosure language requirements
- [ ] Standalone disclosure form compliance (disclosure must not be bundled with other application materials)
- [ ] Pre-adverse and adverse action notice automation
- [ ] State-specific waiting periods for adverse action (varies by state; some exceed the FCRA baseline)
- [ ] Ban-the-box/fair-chance law support in every state where you hire
- [ ] Data security certification (SOC 2 or equivalent)
- [ ] Primary source verification for all criminal records, not database-only reporting
Common errors that create legal exposure:
- Selecting a vendor based solely on price without verifying primary source verification practices.
- Failing to confirm the vendor supports every state where you have hiring managers — not just your headquarters state.
- Not requiring a sample adverse action letter during the RFP process, then discovering post-contract that the template doesn’t meet your state’s requirements.
—
FAQ
Do I need an RFP for a small hiring volume, or is a simple vendor comparison enough?
If you’re hiring fewer than 50 employees annually in a single state, a structured vendor comparison may suffice. Once you cross multiple states or hiring categories (contractors, volunteers, drivers), a formal RFP protects you by documenting your due diligence.
How long should the RFP process take from distribution to contract signature?
Budget 6–10 weeks for a mid-market process: 2 weeks for vendor response, 2–3 weeks for scoring and demos, and 2–4 weeks for legal and contract negotiation. Enterprise processes with security review often run longer.
Should legal counsel review the RFP before or after vendor responses come in?
Before. Compliance requirements should be baked into the RFP itself so every vendor is scored against the same legal standard, rather than retrofitting requirements after proposals arrive.
Can I use this template for a multi-vendor panel instead of a single vendor?
Yes. Add a section specifying which business units or geographies each vendor would cover, and require all panel vendors to meet the same compliance and SLA minimums to avoid inconsistent candidate experiences.
What’s the biggest mistake HR teams make when evaluating RFP responses?
Weighting price too heavily against compliance capability. A marginally cheaper vendor that lacks robust adverse action automation or primary source verification can expose your organization to far greater cost through litigation or regulatory penalties.
—
Conclusion
A well-built RFP does more than compare pricing — it documents your organization’s due diligence in selecting a compliant, capable screening partner, which matters if your program is ever scrutinized by the EEOC, FTC, or a plaintiff’s attorney. Use this template as your starting framework, but tailor the compliance and integration sections to your specific industry and hiring footprint before distribution.
If you’re evaluating vendors now, BackgroundChecker.com gives your team FCRA-compliant workflows, automated adverse action processing, dedicated account management, and integration with major ATS and HRIS platforms — built to scale whether you’re screening 10 hires or 10,000. Request a demo to see how our platform performs against your RFP criteria, or start screening today with transparent, per-check pricing.
—
This article is for informational purposes and does not constitute legal advice. Consult qualified legal counsel for compliance guidance specific to your organization.