AI-native playbook · Staffing and recruiting

How to make a staffing firm AI-native: a playbook

Most staffing firms are taking on AI one tool at a time. Getting an agent to search, draft or schedule is now fairly easy. The hard part is deciding what it may do, what needs a person's approval, which data it can see, and proving afterwards what happened. That is what an AI-native operating model has to solve, and this playbook lays out a staged path to one, with sources for every figure.

Last reviewed
October 2026
Written for
Owners and operations leaders of firms with 50 to 500 internal staff
Reading time
About 30 minutes
On this page
01

What AI-native means for a staffing firm

"AI-native" is used loosely. The useful line is between a firm that uses AI and a firm built around it:

AI-enabled

AI tools are bolted onto the old workflow. Each helps with a task; people still run the desk the old way.

AI-native

The workflow is redesigned around agents and people: who does each step, under which rules and systems, with whose approval, and what evidence it leaves.

In an AI-native firm the work splits like this:

AI does
  • Search
  • Rank
  • Summarize
  • Draft
  • Schedule
  • Remind
  • Reconcile
People decide
  • Reject
  • Hire
  • Negotiate
  • Approve
  • Accommodate
  • Override
  • Handle disputes
AI prepares the work. Anything with legal or economic weight is a person's call, and the log shows whose.

Every AI action is also recorded well enough to support a bias audit, an explanation to a rejected candidate and a client dispute. A firm where nobody can reconstruct why a candidate was screened out is not AI-native; it is exposed. Few firms are there yet: in Bullhorn's 2026 survey (vendor data), 10% said AI is embedded throughout their workflow[29].

02

The missing layer

Firms will not replace their ATS, VMS, payroll or CRM to become AI-native. They will add agents around them. Those agents need permissions, approvals, data boundaries and an audit trail, and no one of those systems covers agents working across all of them. OrchKernel is built to be that layer, detailed in the OrchKernel blueprint.

Asks to act
An AI agent

Working for a named recruiter, with no more access than that person has.

Checks each action sent through it
OrchKernel
  • Rules
  • Permissions
  • Approvals
  • Data access
  • Audit log

Allows the action, holds it for a person, or denies it, and records which.

Systems of record
Your systems
  • ATS
  • VMS
  • Payroll
  • Background checks
Agents inside a vendor's own product follow that vendor's controls. Where a VMS has no API, a person does that step.
03

Why the economics make it urgent

Gross margin is set mostly by segment and by the client. Public firms show the range for fiscal 2025[1]:

  • ManpowerGroupCommercial and light industrial16.7%
  • Kelly ServicesStaffing across several segments20.1%
  • TrueBlueLight industrial22.8%
  • AMN HealthcareHealthcare. Was 33.0% in 202328.3%
  • ASGN (now Everforth)Professional and IT28.9%
  • Robert HalfProfessional. Includes perm fees and Protiviti consulting37.2%

Net margin can be very thin. The American Staffing Association's worked example takes a $17.00 pay rate, marks it up 51.5% to a $25.76 bill rate, and leaves $0.85 an hour of net profit: 3.3%[23]. It is an illustration on 2019 national averages, not an industry benchmark, but it shows how little room there is.

One billed hour$25.76
Pay to the worker
$17.00 · 66.0%
Payroll taxes and workers' comp
$2.42 · 9.4%
The firm's own overhead (G&A)
$5.49 · 21.3%
Net profit
$0.85 · 3.3%
ASA's example: a $17.00 pay rate marked up 51.5%. Statutory costs are FICA, FUTA, SUTA and workers' compensation at ASA's assumed rates.

Internal labor per placement is the largest profit lever the firm controls. The firm's own overhead is the biggest line it controls, and ASA lists corporate employee payroll first in it: recruiters, account managers, onboarding and payroll staff[23]. Every placement carries the hours spent searching, screening, formatting, scheduling and chasing timesheets. If the same team makes more placements, overhead per billed hour falls and almost all of the difference is profit.

ASA gives average G&A as 18.7% without stating the base; in its dollar figures it is about 21% of the bill rate, which the illustration below uses. Run the same arithmetic with your own numbers.

04

Where the industry is in 2026

US staffing firms employ about 2.2 million temporary and contract workers in an average week, 36% of them in industrial jobs[24]. In September 2026 the SIA and Bullhorn indicator showed hours up 10% on a year earlier, industrial up 15%[25], while government figures show temporary help up about 0.6%[2]. The indicator samples Bullhorn customers, which explains part of the gap.

Adoption

Bullhorn surveyed about 2,300 staffing firms worldwide at the end of 2025. 46% said AI had cut screening time by half or more[29]. Firms using AI at any stage were 3.5 to 4.5 times more likely to report higher revenue[30].

Two cautions: the survey comes from a company that sells AI to staffing firms, and the revenue link is a correlation, since growing firms may simply buy more tools. Healthcare staffing lags, with 7% of firms reporting AI embedded end to end[31].

What AI already does at each step

The tools fall into a few categories. We list categories only; the sources name example vendors, which are not recommendations, and their performance figures are their own.

Job order intake
What AI does today
Read VMS requisitions, check rate caps and deadlines
Sellers and evidence
Mostly vendor positioning; no independent adoption data
Sourcing and matching
What AI does today
Search the firm's own database, rank matches, search public profiles
Sellers and evidence
ATS platforms with their own AI agents; AI sourcing tools[39,40]
Screening and interviews
What AI does today
AI phone, voice and chat screens, scoring
Sellers and evidence
AI interviewers and voice recruiters built for staffing[40]
Submittal
What AI does today
Format resumes and VMS submission packets
Sellers and evidence
ATS platforms with their own AI agents[37,39]
Scheduling and engagement
What AI does today
Text and chat, interview scheduling, after-hours replies
Sellers and evidence
Engagement and conversational hiring tools[40]
Onboarding and identity
What AI does today
ID and selfie checks, flags for fraudulent candidates
Sellers and evidence
AI interview tools with ID checks; ATS identity-check agents[39,40]
Time, pay and bill
What AI does today
Catch pay, bill and compliance errors
Sellers and evidence
ATS audit agents; no independent data on results[39]
Redeployment
What AI does today
Check in before an assignment ends, match to the next order
Sellers and evidence
Engagement tools[40]

Where the AI money went

The best-funded companies did not build AI versions of commercial agencies. Paraform runs a marketplace of more than 10,000 independent recruiters, with AI doing sourcing and scheduling[41]. Mercor places experts with AI labs, contract labor at a markup, and was valued at $10 billion in October 2025[42]. We found no AI-first agency at meaningful scale in commercial or light-industrial staffing. For an established firm, the practical route is to change how its own desks work.

What candidates think

Candidates who already work with staffing firms are fairly positive: 92% of those interviewed by an AI voice agent rated it as good as or better than a live interview (vendor survey)[33]. The wider public is more doubtful: two in three US adults would not want to apply where AI helps decide[27], and 49% of employed job seekers think AI recruiting tools are more biased than people[26]. Tell candidates when AI is used and how to reach a person.

05

Five shifts in how the firm runs

  1. 1

    Search your own database before the internet

    In a Bullhorn vendor analysis of 7.8 million placement records, 66% of candidates a firm sourced from outside were already in its own database[35]. It is one vendor's data, not an industry benchmark, but the point holds: the cheapest early win is finding the people you already know, and it carries little legal exposure because a recruiter still decides.

  2. 2

    The recruiter manages AI-assisted pipelines

    The recruiter's day moves from doing each step to reviewing drafts: a ranked shortlist, a formatted submittal, a screening summary. The judgment stays; most of the typing goes. Split desks already separate client work from candidate work, so the change usually lands on the recruiter side first.

  3. 3

    Candidates get a response at any hour

    At one firm, 42% of automated screens happened outside business hours (vendor claim)[36]. 71% of candidates want weekly contact and 56% get it (vendor survey)[32], and 19% of light-industrial workers have abandoned a recruiter because the process was too complicated (vendor survey)[34].

  4. 4

    Three new roles

    Recruiting operations owns how the agents are set up. A data steward keeps the ATS clean. An AI compliance owner runs audits, notices, adverse action and retention. This is our recommendation, not a survey finding; in a 50-person firm they may be parts of existing jobs.

  5. 5

    Identity verification becomes something you deliver

    The FBI tells employers to audit their staffing firms' recruiting because of deepfaked interviewees[18], and ATS and interview vendors now ship identity checks[39,40]. Clients will expect you to show who you verified, how and when.

06

The staged path

Six stages, in the order vendors themselves recommend (your database, then ranking, then drafting, then acting on its own)[35], adjusted for where the law applies. Stages 0 and 1 come first. Stages 2, 3 and 4 are then separate tracks, each started when its own controls are in place. Stage 3, AI screening, is optional. Different branches can be at different stages.

  1. 0

    Stage 0: Foundations

    Clean data, map the rules, write the policies.

    About 1 to 3 months

    What to do

    • Clean the ATS: merge duplicates, parse resumes, normalize skills and job orders.
    • List every AI feature already switched on in your ATS, job boards and VMS. Some are on by default.
    • Map where your candidates are (New York City, Illinois, Colorado, California, the EU) and which rules apply to each.
    • Write three policies: acceptable AI use (no candidate data in public chatbots), outreach consent, and a retention schedule by type of record.
    • Collect outreach consent at application, with the channel and the date.
    • Read your client MSAs and VMS terms for clauses on AI.
    • Name the owners: who runs the AI tools, who keeps the data clean, who owns compliance.

    Why now

    Matching is only as good as the records it searches[35]. Notice and record-keeping duties start with the first automated decision, not with the first audit.

    In place first

    • Nothing. Every firm starts here, including firms that already bought AI tools.

    What to measure

    Share of candidate records that are complete and parseable; duplicate rate; share of candidates with recorded consent, channel and date.

    Common mistakes

    • Recruiters pasting candidate data into public chatbots because no approved tool exists yet[35].
    • Assuming no AI is in use because nobody bought any. Check what your ATS and job boards already do.
  2. 1

    Stage 1: Assist

    AI drafts, recruiters decide. Nothing goes to candidates on its own.

    Starts when the records for one desk are clean

    What to do

    • Search your own database for every new job order before sourcing outside it.
    • Rank and summarize matching candidates for the recruiter.
    • Format submittals and VMS packets.
    • Transcribe and summarize interview notes.
    • Draft job descriptions.

    Why now

    The time saved is large and the legal exposure is low, because a recruiter still chooses who is submitted. A submittal formatted by hand takes 20 to 30 minutes; one vendor says AI brings it to about two (vendor claim)[37]. And it goes after the candidates you already have, the 66% overlap described above.

    In place first

    • Stage 0 clean-up done for the records in scope.
    • The acceptable-use policy in force.
    • A recruiter approves every submittal.
    • A short check of any tool you buy: does it search and rank your own database, and where does candidate data go[35]?
    • For New York City roles, ranking can count as an automated employment decision tool under Local Law 144. Check with counsel before it goes live[6].

    What to measure

    Share of submittals sourced from your own database (one firm went from 7% to 52% in a year, vendor claim[38]); submittals per recruiter per week; time from job order to first submittal.

    Common mistakes

    • Buying AI that writes text but does not rank or search your database[35].
    • Workflows with no clear point where the recruiter decides[35].
  3. 2

    Stage 2: Engage

    Messages, scheduling and check-ins, with consent first.

    After Stage 1. Starts when consent and opt-out handling work

    What to do

    • Two-way text or chat for common candidate questions.
    • Interview scheduling and status updates.
    • Shift confirmations and reminders for light-industrial assignments.
    • Check-ins before an assignment ends, to redeploy the worker.
    • Intake outside business hours.

    Why now

    Automation handles scheduling, status updates and after-hours questions. That frees recruiters for the weekly personal contact candidates say they want, which many do not get today (see the five shifts above).

    In place first

    • Consent and opt-out handling for calls and texts. AI-generated voices count as artificial voices under the TCPA, so its consent rules apply to AI voice calls[15].
    • A script that tells candidates they are talking to AI.
    • A hand-off to a person whenever the candidate asks.
    • A path for accommodation requests.

    What to measure

    Response time; weekly-contact coverage: the share of active candidates contacted each week; redeployment rate: workers coming off assignment who are placed again by your firm; opt-out and complaint rate.

    Common mistakes

    • Switching on automated outreach before consent is recorded.
    • AI voice calls to mobiles without prior express consent.
  4. 3

    Stage 3: Screen

    Regulated, optional

    The regulated step: AI screening and interviews.

    Optional. Starts when the evidence trail and human review are in place

    What to do

    • AI phone, voice and chat screening.
    • AI ranking that decides who moves forward.

    Why now

    Screening is where most of the hiring laws bite. It should run on the clean data, consent records and controls built in Stages 0 to 2, not ahead of them.

    In place first

    • The rules for where your candidates are (see the jurisdiction map below): a bias audit and 10-business-day notice in New York City[5,6]; consent before AI analyzes a recorded video interview in Illinois[7,8]; notice, explanation and human review in Colorado from 1 January 2027[9]; four-year records in California[10].
    • A review under the Fair Credit Reporting Act if any third-party data feeds a score[12,14].
    • A person reviews every AI "no". Or AI only advances candidates, and a person works through everyone it did not advance. Measure impact ratios either way.

    What to measure

    Impact ratios by sex and by race or ethnicity at each AI step, even outside New York City; human override rate; screen completion rate and time to screen; candidate satisfaction; accommodation requests, and how fast they are handled.

    Common mistakes

    • Treating the vendor's bias audit as your own. Local Law 144 applies to each employer or agency that uses the tool.
    • Letting AI reject candidates silently.
    • Training on a client's past accept and reject decisions. "The client asked for it" is no defense for a staffing firm[3].
  5. 4

    Stage 4: Back office

    Timesheets, pay and bill, credentials. Money moves.

    After Stage 1. Starts when approvals for money are set

    What to do

    • Flag timesheet exceptions.
    • Audit pay and bill for errors.
    • Track credentials and expiry dates (healthcare).
    • Take in VMS requisitions and check them against rate cards.
    • Onboarding paperwork: I-9 and E-Verify steps, documents, background-check orders.

    Why now

    These workflows cross systems (VMS, payroll, credentialing) and change money, so they need stronger approvals than anything before. Healthcare firms may want credential tracking sooner: 37% of healthcare recruiters spend three or more hours a day on credentialing (vendor survey)[31].

    In place first

    • Payroll or billing approves every correction before money moves.
    • Rate changes above a margin floor go to finance.
    • Connections to the VMS, payroll and credentialing systems.

    What to measure

    Pay and bill error rate; days sales outstanding; credential lapses; onboarding hours per placement.

    Common mistakes

    • Letting an audit tool post corrections straight to payroll or invoices.
  6. 5

    Stage 5: AI-native operating model

    Desks, roles and client reporting built around the pipelines.

    When Stages 1 to 4 run with evidence

    What to do

    • Redesign desks around AI-assisted pipelines.
    • Make recruiting operations (AI operations) a function with an owner and a budget.
    • Review vendors and audits every year.
    • Report to clients on where you use AI and how you disclose it.
    • Revisit recruiter targets and commission plans so they reward placements and quality, not activity.
    • Use AI for client prospecting research, with account managers deciding who to approach.

    Why now

    By now most desk work has a first draft from AI. The gains only stick if roles, targets and client reporting change with it.

    In place first

    • Named owners for AI operations, data and compliance.
    • A year of evidence from the earlier stages.

    What to measure

    Placements and gross profit per internal employee; gross margin trend; fill rate, perm and temp; audit findings closed.

    Common mistakes

    • Keeping recruiter targets and desk structure from before, so saved time turns into slack instead of placements.
    • Leaving client rules on AI in emails instead of in the controls.
07

Your first 90 days

Stage 0, plus one Stage 1 workflow: searching your own database for every open order. It is the lowest-risk place to start, and the baseline you record early shows within the quarter whether it works. We do it with you as a design partner.

  1. Weeks 1 to 4

    Inventory the AI already switched on. Map where your candidates are and which rules apply. Write the acceptable-use, consent and retention policies. Start collecting consent at application. Name the owners. Record the baseline: share of submittals from your own database, time to first submittal, record completeness.

  2. Weeks 3 to 8

    Clean the records for one desk or branch. Connect OrchKernel to your ATS. Set the first controls: the recruiter approves every submittal, agents act with that recruiter's access, and every step is logged.

  3. Weeks 6 to 12

    For each new job order on that desk, an agent searches your database, ranks the matches and drafts the submittal. The recruiter decides. Compare the numbers with the baseline and decide whether to widen it. For New York City roles, ask counsel first whether ranking needs a bias audit.

08

The rules to build in from the start

A staffing firm carries its clients' risk. The EEOC's guidance on contingent workers says a client's request does not make a discriminatory practice lawful, and both can be jointly liable[3]. An AI tool trained on a client's past decisions can import that client's bias into your liability.

Federal enforcement is lighter. Liability is not. Executive Order 14281 tells federal agencies to stop pursuing disparate-impact cases, but Title VII is unchanged and private lawsuits continue[44]. Executive Order 14365 directs federal challenges to some state AI laws, which stay in force unless a court or Congress acts[45]. State rules now set the bar.

The jurisdiction map

New York CityLocal Law 144[5,6]
Applies to
Employers and employment agencies using an automated tool that substantially assists hiring decisions for New York City candidates
What it asks for
An independent bias audit within a year before use, repeated every year, with impact ratios by sex and race or ethnicity; a public summary; notice to candidates at least 10 business days before use, naming what the tool assesses and how to ask for an alternative process
Status
Enforced since 5 July 2023. Fines up to $500 for a first violation and up to $1,500 for each later one; each day of use counts separately
IllinoisHuman Rights Act, as amended by HB 3773[7]
Applies to
Employers using AI in recruiting, hiring, promotion, discharge or terms of employment
What it asks for
As reported: no use of AI that has a discriminatory effect; no ZIP codes as a stand-in for protected traits; notice to applicants and employees when AI is used. We found no adopted state rule yet on how notice must be given
Status
Reported in force since 1 January 2026To be confirmed: the Act's text and effective date
IllinoisArtificial Intelligence Video Interview Act[8]
Applies to
Recorded video interviews analyzed by AI
What it asks for
Notice, an explanation of what the AI evaluates, and consent before the interview; sharing only with people who need to evaluate it; deletion within 30 days of a request; yearly demographic reporting if AI alone decides who gets an in-person interview
Status
In forceTo be confirmed: start date (reported as 1 January 2020)
ColoradoSB26-189, on automated decision-making technology[9]
Applies to
Automated decision-making technology used in consequential decisions, including employment
What it asks for
Clear notice before use; a plain-language explanation of the decision and the technology's role within 30 days; on request after an adverse outcome, meaningful human review and a way to correct data; records kept at least three years
Status
Applies to decisions from 1 January 2027. Enforced by the Attorney General only, with a 60-day cure period until 2030. Replaces the 2024 Colorado AI Act
CaliforniaCivil Rights Council rules on automated-decision systems under FEHA[10]
Applies to
Employers and their agents, which can include staffing firms, using automated-decision systems
What it asks for
No automated system that discriminates on protected traits; care with assessments that elicit disability information; employment records, including automated-decision data, kept at least four years
Status
In force since 1 October 2025
CaliforniaCCPA rules on automated decision-making technology[11]
Applies to
Businesses covered by the CCPA, for applicants and employees as well as customers
What it asks for
Notice, access and opt-out rights where automated decision-making technology is used for significant decisions, including hiring
Status
Rules approved September 2025 and effective 1 January 2026. The automated-decision requirements apply from 1 January 2027, including to tools already in use
United StatesTitle VII, ADA and ADEA record-keeping, 29 CFR 1602.14[4]
Applies to
Employers and employment agencies
What it asks for
Keep application and other hiring records for one year, and all relevant records until a charge is finally resolved. AI rankings and screening logs are plausibly hiring records
Status
In force
United StatesFair Credit Reporting Act[12,13,14]
Applies to
Background reports, and possibly third-party data compiled into candidate scores
What it asks for
A standalone disclosure and written authorization before the report; a copy of the report and a summary of rights before rejecting; an adverse-action notice after
Status
In force. The CFPB's 2024 view that third-party algorithmic scores are often consumer reports was withdrawn in May 2025; the statute itself is unchanged
United StatesTelephone Consumer Protection Act[15]
Applies to
Calls and texts to candidates, including AI voice calls
What it asks for
Prior express consent for automated or artificial-voice calls to mobiles; written consent for anything like telemarketing
Status
In force. AI voices ruled "artificial" in February 2024
European UnionAI Act[19,20,21,22]
Applies to
AI used to recruit or select people, filter applications, evaluate candidates, or allocate tasks to and monitor workers. Matters to firms placing workers in the EU
What it asks for
Human oversight by people with the competence and authority to act; logs kept at least six months; workers and their representatives informed; people told they are subject to the system; a right to a clear explanation
Status
Emotion recognition at work banned since 2 February 2025. Duties for high-risk employment uses apply from 2 December 2027, moved from August 2026 by a 2026 amendment

What they have in common

Across the jurisdictions reviewed, four control requirements keep recurring. The exact obligation differs by jurisdiction and by use case, so check each one, but a firm that builds these four for every candidate has the base the others extend:

Notice
Tell candidates when AI is used, what it assesses, and how to ask for another route.
Explanation
Be able to say, in plain language, what role AI played in a decision about a person.
Human review
A person can review and change any AI outcome, and does so for every rejection.
Records
Keep per-decision evidence long enough for audits and lawsuits, by type of record.

Keeping and deleting pull in opposite directions. You must keep AI decision records long enough for audits and lawsuits: one year under federal rules[4], three years in Colorado from 2027[9], four years in California[10], and longer while a charge is open. You must also delete recorded video on request in Illinois. One retention setting cannot do both; you need a schedule by type of record.

09

What not to automate

These decisions stay with a named person however good the AI gets. AI can prepare each one; it should not make it.

Final rejection
Why it stays with a person
From 2027, Colorado lets a candidate ask for human review after an adverse outcome[9], so a person has to be ready to own it. 71% of US adults (Pew, late 2022) oppose AI making the final hiring decision[27]. AI recommends; a named person decides.
Offer approval
Why it stays with a person
The offer commits the firm's money and the client's name, so a person with authority signs it off. Where the EU AI Act applies, oversight must also come from people with the competence and authority to act[20].
Rate negotiation
Why it stays with a person
In ASA's worked example, net profit is 3.3% of the bill rate[23], so a small concession can take much of it. AI prepares the numbers; the account manager makes the trade.
Accommodation requests
Why it stays with a person
Requests for an accommodation or an alternative process[6] need judgment and a deadline. The agent hands them over.
Adverse action
Why it stays with a person
Rejecting someone on a background report has set steps: a copy of the report and a summary of rights, then a notice[12]. A person runs them.
Client relationship
Why it stays with a person
Reading a client, choosing which orders to work and handling a complaint rest on trust built by the account manager. AI can brief them; it should not speak for them.
Exception handling
Why it stays with a person
A disputed timesheet, a complaint, a request the policy does not cover, an AI result that looks wrong: these go to a named owner, not an agent's best guess.
10

What failure looks like

Real cases and one experiment, with what each teaches a staffing firm.

  1. AI models ranking resumes preferred white-associated names

    In a University of Washington experiment with three AI models and over three million resume comparisons, white-associated names were preferred 85% of the time, Black-associated names 9%[28].

    The lesson: Measure impact ratios at every AI step, not only where the law requires an audit.

  2. Software that rejected older applicants

    iTutorGroup's software automatically rejected women aged 55 and over and men aged 60 and over. It settled with the EEOC for $365,000 and five years of monitoring[16].

    The lesson: Knock-out rules are decisions. Review them like decisions.

  3. Mobley v. Workday

    Age-discrimination claims against Workday's AI screening proceed as a collective action, with more than 14,000 opt-ins. As of October 2026 there is no ruling on the merits; class certification is due to be heard in March 2027[17].

    The lesson: The court let claims against the vendor proceed. Using a vendor's tool does not shield the employer.

  4. 64 million applicant records exposed

    McDonald's McHire hiring site, built on Paradox, exposed about 64 million applicant records through an admin login with the password "123456" and a flaw in how records were looked up[43].

    The lesson: Ask every AI vendor how access is controlled, and keep candidate data out of tools you have not reviewed.

Agent failures to design against (scenarios)

These are scenarios, not reported cases. Each is what an agent with too much access could do, and each maps to one of the control points.

An agent edits and sends a VMS submission it was only meant to draft
What stops it
Approval before any submittal leaves (control 4). The agent can prepare it; sending waits for the recruiter.
An agent sends candidate data to an AI model nobody approved
What stops it
Data classes decide which models may see which records (control 9), and a new model or tool needs approval before any agent can use it (control 13).
An agent changes a pay or bill rate
What stops it
Rate changes need a manager's approval, and finance's above a threshold; rates above the VMS cap are denied (control 5). Pay and bill corrections wait for payroll (control 14).
An agent texts or calls a candidate who has not consented
What stops it
Rules check consent for that candidate and channel before each message (controls 1 and 8).
11

The OrchKernel blueprint for a staffing firm

OrchKernel is the layer between AI agents and the systems your firm runs on, as drawn in the missing layer. Agents ask it before they act; it checks the rules, holds what needs a person, and records what happened.

What it is not. OrchKernel is not an ATS, it does not find candidates, and it is not a bias auditor. Your ATS stays the system of record and an independent auditor still does the audit. OrchKernel enforces the controls below and keeps the evidence that they held.

The mechanisms

Approvals
An action waits for the named person before it runs: a submittal for the recruiter, an offer or rate change for the account manager or finance, a pay or bill correction for payroll.
Rules
Checked before every action: consent for this channel, frequency caps, the client's rules on AI, VMS rate caps. A rule allows the action, holds it for approval or denies it with the reason.
Acting on a person's authority
Each AI agent acts for a named recruiter or manager and never has more access than that person. When the recruiter cannot see a client's candidates, neither can the agent working for them.
Data access by role and field
Who sees which candidates and fields: demographics kept for the bias audit but hidden from the screening agent, video only for those who need it, client-scoped views. Data classes decide which AI models may see which records.
Tamper-evident audit log
Every input, score, decision, approval and override, with the rule and tool version that applied, chained so an edited or deleted entry shows. This is the evidence a bias audit, a rejected candidate or a client dispute needs.
Human queue
Work that only a person may do lands in a queue with an owner and a deadline: accommodation requests, AI-recommended rejections, adverse-action steps.
Connections to your systems
OrchKernel connects to the systems you already run, such as your ATS, payroll, background-check and identity-verification providers, through their APIs, and the same rules and log apply to each. Where a VMS portal has no API, that step stays with a person and is logged as such.

Sixteen control points

Where a staffing firm needs a control whatever tools it uses, who owns it, and how OrchKernel enforces it.

Outreach, notices and requests

01
Outbound candidate outreach: text, voice, email campaigns
Owner or approver
Recruiter for one-to-one messages; recruiting operations and compliance for campaigns and templates
How OrchKernel enforces it
Rules check consent, channel, AI-voice disclosure and frequency caps before each message. New campaign templates need approval.
08
Candidate notices and consent ledger, by jurisdiction
Owner or approver
Compliance, enforced at intake
How OrchKernel enforces it
Rules check the notice and consent record for the candidate's location before an AI step runs.
12
Accommodation and alternative-process requests
Owner or approver
A named person, with a response deadline
How OrchKernel enforces it
Human queue with an owner and a deadline. The agent hands over; it does not answer these itself.

Screening and decisions

02
AI screening criteria and knock-out questions
Owner or approver
Recruiting operations and compliance; the client signs off on criteria that come from the client
How OrchKernel enforces it
Changes to criteria go through approval. The log records which version of the criteria applied to each candidate.
03
Rejections and other adverse decisions
Owner or approver
A person reviews every AI-recommended rejection
How OrchKernel enforces it
AI-recommended rejections go to the human queue; the agent cannot send them. The log keeps what the AI saw and recommended, for the explanation.
06
Background checks and algorithmic scores
Owner or approver
Compliance; disclosure and authorization before ordering
How OrchKernel enforces it
A rule blocks the order until the disclosure and authorization are on file. Adverse-action steps go to the human queue.
07
Bias-audit evidence: inputs, scores, outcomes, overrides, tool version
Owner or approver
Compliance owner; the independent auditor in New York City
How OrchKernel enforces it
The audit log holds it per decision and exports it for the auditor. OrchKernel does not run or sign off the audit.

Submittals, rates and clients

04
Submittals to clients and VMS portals
Owner or approver
Recruiter approves each one; the account manager for strategic accounts
How OrchKernel enforces it
Approval before any submittal leaves. Data access rules decide which fields go to which client.
05
Offers, pay rates and bill-rate changes
Owner or approver
Account or branch manager within margin floors; finance above a threshold
How OrchKernel enforces it
Approval thresholds by margin and amount. Rules deny rates above the VMS cap.
11
Identity verification before submittal for remote roles
Owner or approver
Recruiter, with a step that cannot be skipped
How OrchKernel enforces it
A rule holds the submittal until a verification result is recorded. The check itself runs in your verification provider.
16
Client-specific AI rules: an MSA bans AI or requires disclosure; VMS submittal rules
Owner or approver
The account manager records the rule
How OrchKernel enforces it
Rules per client, checked on every action for that client's orders.

Data, records and tools

09
Candidate data access: recruiters, account managers, clients, vendors, AI agents
Owner or approver
Data owner; client-scoped access for client portals and VMS
How OrchKernel enforces it
Access by role and field. Agents act with their person's access. Data classes keep restricted fields away from models not cleared for them.
10
Retention and deletion by type of record, with litigation holds
Owner or approver
Compliance and legal
How OrchKernel enforces it
Partly. OrchKernel keeps its own evidence log under your schedule. Deleting records in your ATS, and litigation holds there, stay with the ATS and your counsel.
13
Onboarding a new AI tool or vendor
Owner or approver
Operations, compliance and IT security
How OrchKernel enforces it
A new connection needs approval before any agent can use it, and can be switched off at once.

Back office and workers on assignment

14
Pay, bill and timesheet corrections suggested by AI
Owner or approver
Payroll or billing, before money moves
How OrchKernel enforces it
Approval on every correction. The agent drafts; it cannot post.
15
Task allocation and monitoring of temps on assignment (EU)
Owner or approver
Operations; workers' representatives informed
How OrchKernel enforces it
Rules and approvals on allocation steps, with the log as the record. Informing workers' representatives stays with you.

OrchKernel is source-available under the Business Source License and runs on your own servers, so you can read the code that enforces these controls.

12

Scorecard

Measure your baseline before Stage 1, then track the same numbers at each stage. Public benchmarks are scarce; most sit behind SIA and ASA member benchmarking, and we have not quoted any we could not source.

Record completenessStage 0
How to count it
Share of active candidate records with a parsed resume, current contact details and normalized skills
Public benchmark
None public
Consent coverageStage 0
How to count it
Share of candidates with a recorded consent channel and date
Public benchmark
None public
Submittals from your own databaseStage 1
How to count it
Submittals where the candidate was already in your ATS, divided by all submittals
Public benchmark
One firm went from 7% to 52% in a year (vendor case study)[38]
Time to first submittalStage 1
How to count it
Hours from job order to the first submittal
Public benchmark
None public
Weekly-contact coverageStage 2
How to count it
Share of active candidates who had a real contact (not a broadcast) in the last seven days
Public benchmark
56% of candidates say they get weekly contact; 71% want it (vendor survey)[32]
Opt-out rateStage 2
How to count it
Opt-outs and complaints per thousand messages, by channel
Public benchmark
None public
Impact ratio at each AI stepStage 3
How to count it
Each group's selection rate divided by the rate of the most selected group, by sex and by race or ethnicity
Public benchmark
New York City requires reporting them but sets no pass mark[6]
Human override rateStage 3
How to count it
Share of AI recommendations a reviewer changed, and in which direction
Public benchmark
None public
Gross profit per internal employeeStage 4 and 5
How to count it
Gross profit divided by internal headcount (not temps on assignment)
Public benchmark
Member-only benchmarks (SIA, ASA)
Pay and bill error rateStage 4
How to count it
Corrections per hundred timesheets or invoices
Public benchmark
None public
13

Sources and further reading

Sources were read in October 2026; dates are publication or data dates. Numbers match the citations.

Primary sources

Government, regulators, courts and SEC filings. EU AI Act articles are read in an unofficial copy.

  1. 1
    Company facts from fiscal 2025 annual reports (10-K): ManpowerGroup, Kelly Services, TrueBlue, AMN Healthcare, ASGN (now Everforth), Robert Half. US Securities and Exchange Commission, XBRL data, filed February 2026.
    Gross margin is gross profit divided by revenue, from each company's reported figures
  2. 2
    Employment Situation, Table B-1 (temporary help services). US Bureau of Labor Statistics, September 2026, preliminary.
  3. 3
  4. 4
    29 CFR 1602.14: preservation of records made or kept. Legal Information Institute, Cornell Law School.
    Copy of the regulation
  5. 5
    Automated employment decision tools (Local Law 144). NYC Department of Consumer and Worker Protection, enforced since 5 July 2023.
  6. 6
    Automated employment decision tools: final rule. NYC Rules, 2023.
    Penalties from NYC Administrative Code section 20-872
  7. 7
    HB 3773 (Public Act 103-0804), amending the Illinois Human Rights Act. Illinois General Assembly.
    Could not be opened in October 2026 (ilga.gov unreachable)
  8. 8
    Artificial Intelligence Video Interview Act (820 ILCS 42). Illinois General Assembly.
    Sections 5 to 20 checked in a FindLaw copy of the statute; ilga.gov was unreachable
  9. 9
    SB26-189: automated decision-making technology. Colorado General Assembly, signed 14 May 2026.
    Checked against the session law text (chapter 131)
  10. 10
  11. 11
    CCPA updates, cybersecurity audits, risk assessments and automated decision-making technology regulations. California Privacy Protection Agency, approved 22 September 2025.
    Start date from section 7200(b) of the approved text
  12. 12
  13. 13
    Consumer Financial Protection Circular 2024-06: background dossiers and algorithmic scores for hiring. Consumer Financial Protection Bureau, 24 October 2024.
    Withdrawn 12 May 2025
  14. 14
    Rescission of guidance documents (document 2025-08286), listing Circular 2024-06. Consumer Financial Protection Bureau, Federal Register, 12 May 2025.
  15. 15
    FCC makes AI-generated voices in robocalls illegal. Federal Communications Commission, 8 February 2024.
  16. 16
    iTutorGroup to pay $365,000 to settle EEOC discriminatory hiring suit. US Equal Employment Opportunity Commission, 11 September 2023.
  17. 17
    Mobley v. Workday, Inc., No. 3:23-cv-00770 (N.D. Cal.): docket. CourtListener (RECAP archive), read October 2026.
  18. 18
    North Korean IT workers conducting data extortion (PSA250123). FBI Internet Crime Complaint Center, 23 January 2025.
  19. 19
  20. 20
  21. 21
  22. 22

Industry bodies and independent research

ASA, SIA, Pew Research Center and university research.

  1. 23
    Understanding staffing profit. American Staffing Association (ASA), May 2019.
  2. 24
    Staffing industry statistics. American Staffing Association, 2024 data.
  3. 25
    SIA | Bullhorn Staffing Indicator. Staffing Industry Analysts and Bullhorn, week ending 19 September 2026.
    Samples Bullhorn customers
  4. 26
    ASA Workforce Monitor: AI in hiring. American Staffing Association and The Harris Poll, September 2023.
  5. 27
    AI in hiring and evaluating workers: what Americans think. Pew Research Center, 20 April 2023 (fielded December 2022, 11,004 adults).
  6. 28

Vendor sources

Published by companies that sell AI to staffing firms, such as Bullhorn, Sense and Paradox. Directional, not an industry benchmark.

  1. 29
    GRID 2026: staffing firms using AI see stronger growth and faster placements. Bullhorn press release, 25 February 2026.
    Vendor sourceSurvey of about 2,300 firms worldwide, November to December 2025
  2. 30
    GRID 2026 industry trends report. Bullhorn, 2026.
    Vendor source
  3. 31
    GRID 2026 industry trends report: healthcare spotlight. Bullhorn, 2026.
    Vendor sourceAbout 200 healthcare staffing respondents
  4. 32
    GRID talent trends report. Bullhorn, 2026.
    Vendor sourceAbout 2,300 candidates who work with staffing firms
  5. 33
  6. 34
  7. 35
    How to evaluate AI recruiting software for small agencies. Bullhorn blog, 17 September 2026.
    Vendor sourceSource of the 66% database-overlap figure (analysis of 7.8 million placement records)
  8. 36
    Recruiting automation. Bullhorn blog, 18 September 2026.
    Vendor source
  9. 37
    AI resume creation for staffing firms. Bullhorn blog, 2026.
    Vendor source
  10. 38
  11. 39
    Bullhorn unveils Amplify Digital Workers at Engage 2026. Bullhorn press release, 28 May 2026.
    Vendor source
  12. 40
    Product pages: Sense, Paradox, ConverzAI, Classet, Alex, Juicebox. Vendor websites, read October 2026.
    Vendor sourceUsed only to describe what each category of tool does

Company and press

Company websites, news coverage, security researchers and encyclopedia summaries.

  1. 41
    Paraform. Company website, read October 2026.
    The company's own description
  2. 42
    Mercor coverage (funding and valuation reports). TechCrunch, February 2025 to July 2026.
  3. 43
    McHire: 64 million applicant records exposed. Ian Carroll and Sam Curry, 30 June 2025.
  4. 44
  5. 45

Become a design partner

Run Stage 0 and one Stage 1 workflow on your own data with us. You get early access, help with setup, and a say in what we build next.

Or email support@prefero.ai