Validato AG implements risk-based background checks for GDPR compliance

Validato AG, a German provider of background checks and human risk management, utilizes a risk-based approach to employee screening designed to comply with European data protection laws. Unlike high-volume models common in the United States, Validato’s methodology focuses on proportionality and legal necessity as required by the GDPR and § 26 BDSG.

The company avoids mass automated testing in favor of depth and accuracy. By assessing factors such as financial responsibility, data access, and leadership roles, the platform determines the appropriate level of scrutiny for each position. This ensures that low-risk roles are not subjected to excessive data collection, which would violate the principle of necessity.

To maintain data sovereignty, Validato hosts all information on its own infrastructure within the EU, preventing the transfer of personal data to third countries. The process includes human evaluation and a four-eyes principle to ensure quality, offering a specialized service for medium-sized enterprises in the DACH region through a pay-per-use model.