Hiring AI bias audits, done independently — and signed.
NYC Local Law 144 requires an independent bias audit of any Automated Employment Decision Tool before use. ShadowIQ runs the audit, publishes the summary, and signs the evidence.
Summary
NYC Local Law 144 (effective July 5, 2023) requires an independent bias audit of any Automated Employment Decision Tool (AEDT) used to screen candidates for NYC jobs, annual re-audit, candidate notice 10 business days in advance, and publication of audit summary on employer's website. ShadowIQ provides the bias audit, evidence, and candidate notice templates.
The crosswalk: article → control → signed evidence.
You've heard this one before.
- Independent auditor requirement with no auditor on retainer.
- Audit methodology that varies across vendors.
- Missing candidate notice in applicant flow.
- Annual re-audit slipping because no one owns it.
Three moves.
- 1Audit methodology that aligns with the rules.
Selection rate + impact ratio by protected category, computed from actual AEDT outputs. DCWP-compliant summary format.
- 2Candidate notice, automated.
10-business-day prior-notice template integrated into your ATS (Greenhouse, Workday, Lever). Delivery log signed and retained.
- 3Annual re-audit scheduler.
Recurring audit calendar with 30-day warning. Your ATS never misses the window.
Numbers, not adjectives.
NYC Local Law 144 article → ShadowIQ control → signed evidence.
Asked, answered, sourced.
Under the DCWP rule, an independent auditor must not be involved in using, developing, or distributing the AEDT. ShadowIQ can act as independent auditor when we are not the AEDT developer; otherwise, we produce the evidence and a partner auditor (we have three pre-briefed) signs the report.
Similar laws are emerging (Colorado AI Act Part 6-1703, Illinois AIVIA, California ACR 230 forthcoming). ShadowIQ's audit engine supports all of these with a single data collection.
Yes, if the AEDT substantially assists or replaces discretionary decision making. Our legal-review template helps scope this; ask your GC early.
Keep going.
Your 30-minute demo. A signed audit trail by the end of it.
We'll wire ShadowIQ into one live workload, block a prompt injection in real time, and hand you a cryptographic receipt — before the meeting ends.