One Ban-the-Box Process That Works in Every State (2026)

If you hire across more than two or three states you do not have the luxury of a per-jurisdiction workflow. Recruiters will mis-route requisitions, ATS forms will get out of sync, and one bad NYC requisition will not pay for the legal review that prevented twelve clean ones.

The defensible answer is to build to the strictest jurisdiction you hire in and apply that process to every requisition. Done correctly, that single workflow satisfies the federal Fair Chance Act, the 37 state laws, and the 150+ city ordinances simultaneously.

The four design rules

1. No criminal-history question on any application — anywhere — regardless of whether the state requires it.
2. Do not pull criminal history until after a conditional offer of employment.
3. Run the individualized assessment in writing for every adverse decision involving criminal history.
4. Keep the position open the longest statutory window of any state you hire in (NYC is 3 business days from notice; California is 5; treat 5 business days as your global floor).

The forms package every requisition should carry

• Federal FCRA disclosure and authorization, standalone document.
• State-specific Summary of Rights inserts (California, New York, Washington, Maine, Massachusetts).
• Individualized assessment worksheet with the EEOC's six Green-factor prompts.
• Pre-adverse and final adverse action templates with state-mandated waiting periods baked in.

The audit posture

If a plaintiff's firm sends a litigation hold, the package they will ask for is the same package in every state: the disclosure, the authorization, the conditional offer, the individualized assessment, the pre-adverse packet with timestamp, the candidate's response window, and the final notice. A unified workflow produces that package as a byproduct of normal operation. A per-state workflow produces it only if someone remembered to.

How SafestHires runs this for clients

Every SafestHires hiring file gets the highest-standard packet automatically — there is no 'lite' state version. The platform timestamps the conditional offer, holds the report from hiring-manager view until the offer is logged, and enforces a 5-business-day adverse-action window with extensions for the four states that require longer. The result is one process, one audit trail, and no requisition that quietly violates the worst-case jurisdiction.