💡 Still using the classic Drata experience? Refer to Manually link proof of a background check for your employee for the original UI.
If you don’t use a background check provider integrated with Drata, you can manually upload or link evidence showing that a background check was completed for an employee.
Prerequisites
You must be an Administrator or Information Security Lead in Drata
Upload background check evidence for an employee
You can store background check documentation in a secure file system (such as Google Drive, Dropbox, or an internal repository) and link directly to it from Drata.
Log in to Drata.
Go to Governance → Personnel.
Select the employee you want to update.
Locate Background check and select the ellipse and then Upload evidence.
In the Add background check modal, complete the following:
Background check URL: Enter a URL to the evidence or upload the file directly. The link must be accessible to Drata administrators and, where required by law, the employee.
Completion Date: Enter the date the background check was completed.
Select Save.
Once saved, the evidence is associated with the employee for compliance monitoring and audit review.
What you can link as proof
The Location of the background check field should point to documentation that demonstrates a background check was completed. Common options include the following.
Reports, certificates, or screenshots from a background screening provider
Evidence showing:
Completion status
Completion date
Provider name or method used
Employee lists with completion details
You may link to a spreadsheet or report listing employees who completed background checks. Include only necessary information, such as:
Employee ID or initials (avoid full names when possible)
Role or department
Background check completion date
Provider used
These lists are often used alongside other supporting evidence.
Policy or process documentation
You may link to documentation that explains how background checks are performed, such as:
A Background Check or Employment Screening Policy
An Employee Handbook
A Hiring or Onboarding Policy
Policies describe your process, but auditors typically expect individual-level evidence in addition to policy documentation.
Attestation forms (manual processes)
If your organization uses manual background check processes, you may link to a signed attestation confirming the check was completed.
Attestations are commonly used when third-party reports are unavailable.
Compliance guidelines and best practices
Ensure appropriate access
Links must be accessible to Drata administrators
Employee access is required only where mandated by law
Protect sensitive data
Do not link to documents containing unnecessary personal information, such as:
Social Security numbers
Dates of birth
Full legal names when not required
Auditors typically look for evidence that shows:
The type of background check performed
The date it was completed
The provider or method used