Aipedia: Recruitment agencies

AI-summarised references and background checks

Aipedia, by the Apex broking team · Last reviewed 2026-10-27

An agency can use AI to chase and summarise references, but it must still read and act on what referees actually say. A summary that drops one adverse comment can lead to a placement that harms the hirer or vulnerable people.

Part of: AI in recruitment agencies

In short

AI tools can send reference requests, chase referees and summarise the replies into a short score or paragraph. Summaries can smooth over hedged wording, omit a single concern or merge two referees' views. Under Conduct Regulations reg 20, an agency must take all reasonably practicable steps so a placement is not detrimental, and must act on information that a worker is unsuitable. Reg 22 requires two references for roles with vulnerable people. If an AI summary hides a warning and the placement causes harm, the hirer may claim against the agency. PI usually responds to negligence claims, subject to the wording.

How agencies use AI for references

Automated referencing tools email referees, send reminders, collect answers through a form and produce a summary for the consultant. Some score the reference or flag "risk" words. Others use a generative AI chatbot to condense long free-text references. Background check workflows may also summarise employment history, gaps and online information. The consultant often sees only the summary.

The duties that apply

The Conduct Regulations 2003, enforced by the Fair Work Agency since 7 April 2026, include:

reg 19: confirm the work-seeker's experience, training and qualifications, and keep evidence.
reg 20: take all reasonably practicable steps so the placement is not detrimental to the work-seeker or the hirer, and act on information that a worker is unsuitable. That includes information buried in a reference.
reg 21: pass the information to the hirer, confirmed in writing within 3 business days.
reg 22: for roles involving vulnerable people, obtain two references, check qualifications and obtain DBS checks.
reg 28 and 29: keep work-seeker information confidential and keep records for at least 12 months.

References often contain sensitive personal data. REC Code principle 10(b) requires a documented consent or legal basis before disclosing or transferring personal information, which applies when references are sent to an external AI service.

Why summaries miss things

Referees in the UK often write cautiously. A concern may appear as "would not re-employ in a client-facing role" or a pointed silence about a question. A summarising tool trained to be concise and positive can drop that nuance, or average two references into a bland result. It may also confuse referees, dates or roles. None of this is visible unless someone reads the source.

Automated chasing creates its own gaps. A tool may accept a reply from a personal email address as a genuine employer reference, or mark the reference step complete when one of two referees has answered. For reg 22 roles, that can mean a placement goes ahead with half the required evidence.

What can go wrong

Illustrative: an agency places a support worker with a care provider. One of two references, received through an automated tool, says the worker left after a safeguarding concern was raised. The AI summary reports "good timekeeping, reliable, would consider re-employing". The consultant relies on the summary. An incident follows at the client's home, and the care provider claims against the agency, arguing that reg 20 and reg 22 required it to read and act on both references.

How PI usually responds

There is no statutory PI requirement for agencies. A hirer's claim that the agency negligently failed to identify or pass on adverse reference information is the type of claim a recruiter's PI commonly responds to, subject to the wording, limits and any exclusions. Claims involving injury or abuse may raise questions about bodily injury exclusions and whether a public liability or abuse cover is needed; check how your policies fit together. See bad hire and vetting claim examples.

Practical controls

Require a person to read every full reference for regulated or vulnerable roles.
Configure tools to flag, not resolve, any negative or hedged comment.
Check referee identity rather than relying on an email address alone.
Record what you passed to the hirer under reg 21 and when.
Keep full references, not only summaries, for at least 12 months.
Use AI services with contractual data protection terms.

How Apex helps

Apex arranges PI for recruitment agencies; a broker can check how your PI and liability policies respond to a harmful placement. See the AI in recruitment agencies hub, AI checks and reg 19, AI rewriting CVs and our recruitment PI guide.

Sources

Frequently asked

Can an AI summary replace reading the reference?

Not safely. Reg 20 requires the agency to act on information that a worker is unsuitable, and that information may be in a single hedged sentence a summary drops. For vulnerable roles, reg 22 requires two references, which a person should read in full.

Who is liable if an AI reference tool misses a warning?

The agency, as far as the hirer and the Conduct Regulations are concerned. It may have a contractual claim against the tool supplier, but supplier contracts often cap liability. Keep evidence that you read the source references.

Does PI cover a claim from a harmful placement?

A hirer's negligence claim against the agency is commonly within a recruiter's PI, subject to the wording. Claims involving injury or abuse can engage exclusions, so check how PI and liability policies work together.

Can we put references into a generative AI chatbot to summarise them?

Only with care. References contain personal and often sensitive data, reg 28 protects work-seeker confidentiality, and REC Code principle 10(b) requires a documented legal basis before transferring personal information. The REC advises keeping sensitive or confidential data out of free AI tools.

Check your PI covers how you use AI

Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.

Start a PI quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.