Transparency For applicants & screened persons

You have been informed about a check by Indicium. Here is what that means — and what it does not.

Being checked can feel uncomfortable at first. We understand that. So we lay out exactly what happens: a client — for example a prospective employer, a bank or an investor — commissions a structured, GDPR-compliant risk assessment before making a decision. Based on publicly or lawfully available sources. Documented so it can be traced. With human final review. This page explains the process in full — not because we have to, but because fairness is part of the check.

What is checked — and on what basis.

We check what is relevant and legally permissible for the client's specific decision — nothing more. Depending on the screening depth, this includes:

Identity

Matching the details you provided against what can be found.

Sanctions and PEP lists

Whether you appear on relevant official lists.

Adverse media coverage

Publicly accessible, relevant reporting.

Qualifications and ownership structures

Only at the corresponding screening depth and where relevant — for example in leadership or shareholding roles.

The basis is publicly or lawfully available sources. Every finding is dated to the reference date and traceably documented.

What expressly does not happen.

Trust is built at the boundaries. So we also tell you what we do not do:

We do not contact you covertly

And we conduct no covert investigations in your private environment.

We do not evaluate special categories of data for profiling

Health, religion, sexual orientation, trade-union membership.

We make no decision about you

Indicium delivers an assessment; the decision rests solely with the client.

We do not sell your data

And we train no models on the queries or results relating to you.

How the check works — in four steps.

Commission

A legitimate client commissions the check in the context of a specific decision — hiring, mandate, investment, business relationship.

Research

Indicium reviews the relevant, lawfully available sources and screens against the applicable lists.

Human final review

In sensitive or unclear cases, a qualified reviewer assesses the result under the four-eyes principle. There is no solely automated decision with legal effect (Art. 22 GDPR).

Report

The client receives an audit-proof risk report with dated sources and an audit trail — as the basis for their own decision.

Your rights.

As a screened person you hold the rights under the GDPR and — in Switzerland — under the revised Data Protection Act (revFADP):

Access (Art. 15 GDPR)

Which data concerning you was processed.

Rectification (Art. 16)

Having inaccurate details corrected.

Erasure (Art. 17)

Within the statutory framework.

Objection (Art. 21)

To the processing, within the statutory framework.

Information when data is collected from third parties (Art. 14)

About origin and purpose.

Request access to your data.

Want to know whether and which data concerning you was processed? Contact us — we answer your request within the statutory framework.

Data protection contact: datenschutz@indicium.ag — not a sales contact.

Questions screened persons often ask.

Will my (future) employer learn everything about me?+

No. The report contains only what is relevant to the specific decision, drawn from lawfully available sources — not a comprehensive review of your life.

Will I be informed beforehand?+

Information duties follow the GDPR/revFADP; as a rule, the client informs you about the check.

What if something is wrong?+

You have a right to rectification. Dated sources and the audit trail make every finding verifiable.

Does an AI decide about me?+

No. There is no solely automated decision with legal effect; in sensitive cases a human decides.