If you hire across state lines, the biggest thing to check before picking a background check provider isn't price. It's whether they actually track ban-the-box timing, lookback limits, and credit-check rules state by state, or whether they just run one national process everywhere and leave you to catch the differences yourself.
I ran background checks for one company for almost 30 years, and we only ever hired in Ohio. Even that felt like enough to keep track of. I've talked to enough HR people at multi-state companies since to know how much worse it gets once you're hiring in ten states, or fifty. A vendor that treats every state the same isn't saving you work. It's just moving the work onto you, quietly, until something goes wrong.
There's no single federal rulebook that covers all of this. Ban-the-box timing, the rule about when you're allowed to ask about criminal history, comes from a patchwork of state and city laws, not one national standard. Some states say you can't ask until after a conditional offer. Others don't regulate it at all. Cities sometimes go further than their own state.
Lookback limits work the same way. Some states cap how far back a criminal record can be reported. Others don't cap it. And credit checks are their own seperate mess. Roughly a dozen states now restrict when an employer can even run one, and the list of exceptions changes depending on the job.
A vendor running one generic process for every candidate, no matter where they live, is going to get at least one of these wrong eventually. Not because they're bad at their job. Because a single national workflow physically can't hold three different sets of state rules at once.
Here's the part that separates a real compliance-capable provider from one that just says the word "compliance" on their homepage. A good system adjusts automatically based on where the candidate actually lives and works, not where your company is headquartered.
| What varies | What it controls | Why a generic process misses it |
|---|---|---|
| Ban-the-box timing | When you're allowed to ask about criminal history | No federal standard, state and city rules differ |
| Lookback limits | How far back a criminal record can be reported | Some states cap it, others don't |
| Credit-check restrictions | Whether you can run a credit check at all, and for which roles | Roughly a dozen states restrict it, each with different exemptions |
A provider that's actually built for this flags the restriction before you order the wrong check, not after. It adjusts the timing of when a criminal search result gets released to you based on the candidate's state, so you're not accidentally seeing something before you're legally allowed to ask about it. That's the whole difference between a vendor that manages compliance and one that just processes orders.
Don't take "we're compliant" as an answer. That's marketing, not a fact. Ask something specific enough that they have to show you, not just say it.
If a sales rep gets vague or starts talking about their platform's "robust compliance framework" instead of answering the actual question, that's your answer. I've sat through that pitch. It's usually a sign the system doesn't really do this, it just has a compliance page on the website.
Here's the part that gets glossed over in every vendor demo. If your provider doesn't handle state-by-state variation automatically, you don't get to blame them later when it goes wrong. The employer is the one who ordered the check, made the hiring decision, and is on the hook for how it was used. A vendor that quietly pushes that tracking work onto you isn't a partner. It's a liability with a login screen.
No vendor, however good, replaces a lawyer for the specific rules in your state. Laws like this change alot, sometimes more than once a year in the same state. A provider with real compliance tooling narrows your risk. It doesn't erase it. Ask your provider, or a lawyer, before you build a multi-state policy and assume it's settled.
If you're comparing providers right now, don't just ask about price and turnaround. Ask the five questions above and watch how confidently they answer. A vendor that's actually built for multi-state hiring will walk you through a real example without blinking. One that isn't will change the subject.