.png)
TL;DR
- “We do vetting” can mean very different things, even within the same sector.
- Inconsistent screening depth and method create safeguarding blind spots that may only become visible after something has gone wrong.
- Consistency is a safeguarding control.
- Structured, repeatable due diligence reduces variance, strengthens defensibility, and gives leaders a process they can actually audit.
- Digital Risk Screening provides a consistent layer that ad-hoc internet searches and informal checks generally cannot replicate.
What “we do vetting” means in practice
Ask ten organisations in safeguarding-sensitive sectors how they screen their workforce, and you will probably get ten different answers. Most of them will include some version of “we do vetting”.
A phrase like that hides a lot.
Some organisations treat the DBS check as the start of the process, and others treat it as the endpoint. Some add structured digital due diligence, while others rely on a hiring manager running a quick Google search, or nothing beyond the required checks.
The statutory requirements: criminal records checks, right-to-work verification, and barred list checks, where applicable, are essential. Nevertheless, they only surface risks that have already been formally detected, prosecuted, or recorded. They were never designed to catch everything.
Why inconsistency is a safeguarding risk
Inconsistency in vetting is more than an operational inconvenience as it creates risk.
When one school in a trust runs Digital Risk Screening on every new appointment, and another school in the same trust does not, that trust has a blind spot.
When one care provider conducts structured online due diligence and a neighbouring provider relies on informal searches, the sector has a blind spot.
When one hiring manager follows the full process and another skips steps because the role is urgent, the organisation has a blind spot.
These gaps may be invisible during normal operating conditions, but they usually burst into sight at the worst possible moment, when something has happened.
We start asking:
- Was the process followed?
- Was it applied consistently?
- Was it sufficient for the role and the risk?
The weakest process in an organisation often sets the real level of exposure. Someone who would have been flagged by one approach may pass through another unnoticed. There lies the inconsistency gap.
Consistency is a control
In financial governance, controls have to be applied consistently if they are going to mean anything. An audit trail that exists in one department but not another is a vulnerability.
Safeguarding due diligence should be treated with the same seriousness.
A consistent process can be documented, audited and improved. It produces comparable outputs regardless of who initiates it, which site it runs from, or how urgently the role needs filling.
It also gives leaders something concrete to refer to when they are asked: "What did you do, and did you apply the same standard last time?”
An inconsistent process might work most of the time and catch some risks, but it becomes difficult to defend when scrutinised, and scrutiny rarely arrives at a convenient moment.
A simple test:
Would the due diligence standard applied to a Monday hire in September be the same as the standard applied to a Friday hire in January, when the team is short-staffed and the role is urgent?
If the answer is “probably not”, there is a gap.
What ad-hoc processes tend to look like
Many organisations recognise that statutory checks don’t show everything, so they try to close the gap with manual internet searches.
Someone in HR, or the hiring manager, does a quick Google search, perhaps checks LinkedIn or a public social media profile, and may (or may not) document what they find.
The intention is usually reasonable, but the execution is the problem.
Manual searches tend to vary by person, time, confidence and platform. They depend on what the searcher thinks to look for, how much time they have, and what they understand as relevant. They often cover only a narrow slice of what is publicly accessible online. They can also expose protected characteristics that should not influence a hiring decision.
Two candidates going through the same “informal check” can therefore receive very different levels of scrutiny, not because of the role or the risk, but because of who happened to run the search that day.
That is very difficult to defend. Which isn’t great, given that defensibility is exactly what safeguarding leaders need when a decision is questioned.
What consistent digital due diligence looks like
Structured Digital Risk Screening reduces that variability by applying the same methodology to every search.
The process must be unambiguous: discover, validate, explain and enable. AI-scale technology can identify potential associations and risk signals across the surface, deep and dark web. A human analyst then reviews every finding to assess whether it is genuine, relevant and meaningful in the context of the role.
That human validation is an important part of the process. AI can support speed and coverage, but people still need to decide what is fair, proportionate and relevant.
The output should be a structured, evidence-led report that gives decision-makers the context they need to act. A dump of search results or an informal note helps no one. A report that can be reviewed, explained and defended does.
The same standard should apply regardless of the role’s urgency, the hiring manager’s preference, or whether the search starts on a Monday or a Friday. Every search should follow the same methodology, every finding should be validated, and every report should show the basis for the decision.
That is the practical value of consistency. It doesn’t add unnecessary complexity and helps make sure the process does the job it is there to do.
Safeguarding Awareness Week is a useful moment to ask the question
Safeguarding Awareness Week is useful if it makes organisations stop and look at what is actually happening, rather than what everyone assumes is happening.
For safeguarding-sensitive sectors, I would be asking:
What does “we do vetting” actually mean in your organisation?
Is the answer the same across every site, every department, and every hire?
And would it still hold up if it was compared with the organisation next door?
If the answer is “probably, most of the time”, there is likely a consistency gap. Those are the gaps that are easiest to miss, right up until they matter most.
If your organisation is reviewing the consistency of its vetting processes, Safehire.ai provides structured Digital Risk Screening that applies the same human-validated methodology to every search, giving you a defensible and repeatable layer of due diligence.
.png)
.png)
