Sterling vs Certn vs HireRight: The Best AI Right-to-Work & Compliance Verification Tools for Recruitment Agencies in 2026

TL;DR

Right-to-work checks, background screening and reference verification stopped being back-office admin the moment regulators started attaching real numbers to getting them wrong. UK employers face civil penalties up to £60,000 per illegal worker from 1 October 2026, with the definition of "employer" widened to catch agencies and labour supply chains that previously assumed the liability sat elsewhere [1]. The EU AI Act classifies almost all screening and ranking AI as high-risk, with deployer obligations - not just vendor obligations - now enforceable from 2 December 2027 [2]. On tooling: Sterling (now part of First Advantage) and HireRight are the enterprise-grade global screening names most agencies already know [3][4]; Certn and Checkr are the API-first, faster-to-deploy alternatives [5][6]; TrustID is a UK-specific certified identity service provider built specifically around digital right-to-work checks [7]; Xref and Konfir automate reference and employment verification respectively [8][9]. None of these tools generate the client relationship that makes compliance worth talking about in the first place - that is the gap a Company Brain that already holds a client's verified requirements is built to close.

Why Compliance Verification Is Suddenly a BD Conversation

For most of the last decade, right-to-work checks and background screening were a cost centre: something the compliance or ops team handled after the placement was agreed, invisible to the client relationship. Three things changed that in 2026.

• The penalty math got serious - a first breach of UK right-to-work rules now carries a civil penalty of up to £45,000 per illegal worker, rising to £60,000 for a repeat breach, and from 1 October 2026 the definition of "employer" expands to cover worker contracts, subcontractors and online matching platforms, not just direct hires [1].
• Agencies can no longer point at the client - under the widened rules, parties across a contractual chain, including recruitment agencies placing contractors, can face civil penalties if they cannot demonstrate their own compliance checks, even when the end client is the one directing the work [1].
• The Employment Rights Act 2025 pulls umbrella companies into scope - the definition of "employment business" is being amended to capture umbrella companies handling worker pay, and from 6 April 2026 agencies can be held jointly and severally liable for unpaid PAYE and National Insurance if an umbrella company in the chain fails to remit it [10].
• The EU AI Act adds a second compliance layer on top - any AI system used to screen, rank or select candidates is classified high-risk, and from 2 December 2027 deployers (the agency, not just the vendor) must maintain activity logs, human oversight and candidate transparency - deployers cannot outsource this obligation to the tool they bought [2].
• Deepfake and AI-fabricated candidates raised the stakes on the hiring side too - verification is becoming a core recruiting skill in its own right, separate from but adjacent to compliance verification, and agencies that can show they check both are visibly ahead of ones that check neither.

Put together, this is why agency owners are increasingly volunteering their compliance stack in new-business conversations rather than burying it in a service-level agreement appendix. "We run right-to-work and background checks through a certified provider with a full audit trail" is now a genuine answer to "why should we trust you with our contractor supply," not just a box-ticking line item.

What "AI Compliance Verification" Actually Covers

The category is wider than one product type. Agencies buying into this space are usually solving one or more of four distinct problems, and vendors specialise unevenly across them.

The four layers of compliance verification

• Right-to-work / identity verification (IDVT) - confirming a candidate is who they say they are and legally entitled to work, using certified Identity Document Validation Technology against biometric passports, eVisas and share codes.
• Background screening - criminal record checks, sanctions and watchlist screening, credential and qualification verification, and (in regulated sectors) drug and health screening.
• Employment and reference verification - confirming employment history, dates, job titles and references, either through manual outreach or automated data-source verification.
• AI governance documentation - the audit trail, human-oversight log and candidate-notification record that the EU AI Act and similar frameworks now require when AI is used anywhere in the screening or ranking process.

Most vendors below are strongest in one or two of these layers. A few, like Sterling and HireRight, span all four through acquisitions and partnerships; others, like TrustID and Konfir, are deliberately narrow and very good at one specific job.

The Shortlist at a Glance

Eight tools recruitment agencies and staffing firms mention most often when this category comes up in 2026, judged on the layer they are strongest at.

Tool	Strongest layer	Best for	Pricing signal	Main watch-out
Sterling (First Advantage)	Global background screening + UK RTW	Enterprise and mid-market agencies needing broad, regulated-industry coverage	Package plus add-on pricing; volume discounts from ~100 checks/year [3][11]	Now operating post-acquisition under First Advantage; product consolidation ongoing
HireRight	Global screening + digital UK RTW	Agencies placing across multiple countries with one screening partner	Custom quote, package-based [4]	Enterprise-oriented account structure; less suited to very small desks
Certn	AI-driven ID verification + fast global screening	Agencies hiring across 195+ countries who want speed and API access	Pay-per-check from ~$13.99; base + pass-through fees stack [5]	Third-party database pass-through fees can add up fast
Checkr	API-first background checks	US-focused agencies wanting developer-friendly integration	Tiered from ~$29.99-$89.99, custom quote above 300 checks/year [6]	Jurisdiction pass-through fees can run 40-70% above base price
TrustID	UK right-to-work IDVT specifically	UK agencies wanting a certified DVSP purely for RTW/DBS	Pay-per-check, no set-up or licence fee [7]	UK-only; not a fit for agencies placing internationally
Xref	Automated reference checking	High-volume desks tired of chasing referees by phone	Custom quote, no public pricing [8]	Reference checking only - not a screening or RTW replacement
Onfido (Entrust)	AI document + biometric identity verification	Agencies wanting fintech-grade fraud detection on ID documents	Custom quote [12]	Built for KYC/onboarding broadly, not recruitment-specific by default
Konfir	Instant employment/income verification	UK agencies wanting to replace slow manual reference calls with payroll data	Custom quote; sold direct or bundled via Sterling/Veremark [9]	UK-focused; coverage depends on candidate's employer data-sharing consent

boilr is deliberately not on that table as a competing row. It does not run right-to-work checks, screen a candidate's criminal record or verify employment history, and it is not trying to. What it does is make sure the compliance requirements a client has already shared with the agency actually reach the desk working the mandate. More on that honestly, further down.

Sterling (First Advantage) - The Enterprise Default

Sterling was acquired by First Advantage in a $2.2 billion deal that completed in October 2024, and now operates as "Sterling, a First Advantage company" [11]. For agencies, that history matters less than the product: a UK Right to Work Verification service built on an "identity-first" workflow, where a candidate's identity is verified via smartphone document capture and a selfie before the right-to-work check itself runs, using technology aligned with the UK Digital Identity Trust Framework [3].

What Sterling does well

• Breadth across the whole screening stack - criminal checks, identity verification, credential verification, and drug/health screening under one contract, useful for regulated placements in healthcare, financial services and transport.
• Identity-first sequencing - verifying who the candidate is before running the right-to-work check reduces fraud and speeds up results, according to the vendor's own workflow description [3].
• Reusable digital identity - candidates can carry a verified digital identity forward for future checks, reducing repeat friction across multiple client placements.
• Global reach - a genuine multi-country screening footprint for agencies placing across borders, not just a UK point solution.
• Employment verification partnerships - the broader First Advantage/Sterling group has integrated instant employment verification data sources into standard fulfilment for UK checks [9].

Where Sterling is not the right fit

• Post-merger transition - agencies evaluating Sterling in 2026 are buying into a company still consolidating two large screening platforms; ask directly which legacy platform your account will run on.
• Enterprise account structure - built for large staffing groups and enterprise employers; a two- or three-person desk may find the onboarding process heavier than needed.
• It does not touch the client relationship - Sterling verifies candidates. It has no view of which clients are asking for tighter compliance in the first place, or which mandates carry the highest right-to-work risk.

HireRight - The Multi-Country Screening Partner

HireRight is one of the longest-established names in the space, and its 2026 Global Benchmark Report - based on more than 1,900 HR, risk and talent-acquisition professionals surveyed between February and March 2026 - found accuracy and quality of results remained the top priority when choosing a screening provider, alongside growing concern about identity fraud and AI-enabled hiring risk [4].

What HireRight does well

• Digital UK right-to-work verification - digitally verifies UK and Irish passports, and verifies non-UK/non-Irish citizens via Home Office share code [13].
• Genuinely global coverage - a track record built specifically on multi-jurisdiction employer screening, useful for agencies with international client books.
• Benchmark reporting agencies can cite - the annual Global Benchmark Report gives agencies real, sourced data to bring into client conversations about industry screening standards.
• Rising identity-verification adoption reflected in its own data - HireRight's benchmark shows growing employer adoption of identity checks and post-hire screening, a trend agencies can use to justify raising their own bar [4].

Where HireRight is not the right fit

• Pricing requires a sales conversation - no published self-serve tier for smaller agencies, so budgeting takes longer than an API-first competitor.
• Enterprise-first design - like Sterling, the account model assumes meaningful check volume.
• Screening, not BD - HireRight tells you whether a candidate cleared the check. It has no mechanism for surfacing which client relationships would benefit from leading with compliance as a differentiator.

The API-First Alternatives - Certn and Checkr

Not every agency wants an enterprise sales cycle to get a background check running. Certn and Checkr are built for faster self-serve deployment, at the cost of some of the account-management depth Sterling and HireRight offer.

Certn

• Coverage - screens across all 195 countries with checks completed in minutes rather than days for many report types [5].
• AI-driven identity verification - uses proprietary AI and computer-vision technology, combined with human ID experts, to validate over 13,500 identity document types [5].
• Pay-per-check model - no setup fees or minimum commitment, useful for agencies scaling checks up or down with placement volume [5].
• Watch-out - the headline base price is not the full cost. Third-party database pass-through fees, such as those for employment verification via The Work Number, stack on top and can exceed the base fee itself [5].

Checkr

• API-first design - built to be embedded directly into an agency's own hiring workflow rather than used as a standalone portal [6].
• Tiered self-serve pricing - published packages from roughly $29.99 to $89.99 per report for agencies under 300 checks a year, moving to a custom quote above that [6].
• Watch-out - jurisdiction-dependent pass-through fees can push the real total 40-70% above the advertised base price [6].
• Best fit - US-heavy agencies with developer resource to integrate an API, less established outside the US than Sterling or HireRight for international placements.

The UK Right-to-Work Specialist - TrustID

Where Sterling and HireRight bundle right-to-work checks into a wider screening suite, TrustID is built around a single job: certified digital right-to-work and DBS verification for UK employers, done well.

What TrustID does well

• Certified DVSP status - one of the earliest Digital Verification Service Providers certified against the UK Government's Digital Identity and Attributes Trust Framework, meeting GPG45 standards to the Medium and High Levels of Confidence required by the digital schemes [7].
• Full remote workflow - an eight-step process covering document validation, liveness detection, facial biometric matching, and address verification, deliverable entirely by email invitation [7].
• Statutory excuse focus - the product is explicitly framed around giving employers the statutory excuse against a civil penalty, which is the exact legal protection agencies now need given the widened October 2026 rules [1][7].
• ISO-certified operations - holds ISO27001, ISO27701, ISO22301 and ISO9001, relevant when a client asks an agency to prove its verification supplier meets recognised data-security standards.

Where TrustID is not the right fit

• UK-only - agencies placing candidates outside the UK need a separate solution for those jurisdictions.
• Right-to-work only - no built-in criminal background screening, reference checking or credential verification; it is one layer, not a full stack.
• No BD signal - like every tool in this category, TrustID tells you a candidate passed the check. It does not tell you which client to lead the conversation with.

Reference and Employment Verification - Xref and Konfir

Right-to-work checks and criminal screening get most of the compliance attention, but reference and employment verification is where the deepfake-candidate and AI-fabricated-resume problem bites hardest, and two tools have built specifically for that layer.

• Xref - automates reference collection with pre-built survey templates a recruiter can send in under 30 seconds, bulk requests to up to 100 candidates at once, and an average results turnaround of 18 hours, with a fraud-detection algorithm that flags unusual referee activity across multiple data touchpoints [8].
• Konfir - a UK Government-certified provider of instant employment and income verification, aggregating consent-driven payroll, HR and Open Banking data instead of relying on a manual reference call, and used by more than 4,000 organisations, with distribution partnerships including Sterling, Accurate and Veremark [9].

Together they solve a specific problem the big screening suites handle less elegantly: confirming a candidate's stated work history is actually true, fast enough that it does not stall an urgent placement.

The Adjacent Case - Skills Verification (Vervoe)

One category worth naming honestly, because it gets grouped with compliance verification in vendor marketing even though it solves a different problem: AI-driven skills assessment. Vervoe builds job-specific skills tests with AI-assisted auto-grading, ranking candidates by demonstrated ability using 300+ psychologist-built templates and an AI Assessment Builder that generates custom tests from a job description [14]. That is genuinely useful for reducing mis-hires, but it verifies competence, not legal eligibility to work or the accuracy of a CV's history. Do not buy a skills-assessment tool expecting it to cover a right-to-work or background-screening obligation - the two categories answer different questions.

Manual Compliance Checking vs an AI-Driven Stack: What Actually Changes

Agencies weighing whether to move off manual, phone-and-email compliance checking should look at where the real risk and the real hours sit, not the vendor demo.

Task	Manual process	With an AI-driven verification stack	What does not change
Right-to-work document check	Manual visual inspection, human error risk on forged documents	IDVT-certified digital check in minutes, with a documented statutory excuse	The employer still needs to run the check before the candidate starts
Reference checking	Phone tag with referees, days of delay	Automated survey sent and returned in as little as 18 hours [8]	A human still needs to read and act on a flagged or negative reference
Employment history verification	Manual reference call, easy to fabricate	Instant data-source verification via payroll/Open Banking [9]	Coverage still depends on the candidate's former employer sharing data
Proving compliance to a client	Ad hoc, undocumented, hard to produce on request	Audit trail generated automatically by the verification platform	The agency still has to actually run the checks consistently, on every placement

What Agencies Get Wrong When Buying Compliance Verification Tools

Mistake #1: Assuming the client's checks cover the agency's own liability

Under the widened October 2026 rules, agencies and other parties in a labour supply chain can face civil penalties even when the end client is directing the work, if they cannot demonstrate their own compliance checks [1]. "The client handles that" is no longer a safe assumption.

Mistake #2: Buying one tool for every jurisdiction

TrustID is excellent for UK right-to-work and largely irrelevant outside it. Sterling and HireRight offer broader international coverage but at enterprise pricing. Match the tool to the geography you actually place into, rather than paying for global coverage you do not use or under-buying for jurisdictions you do.

Mistake #3: Ignoring the pass-through fee structure

Certn and Checkr both publish attractive base prices that do not include third-party database pass-through fees, which can add 40-70% to the real cost depending on jurisdiction and check type [5][6]. Budget on the real total, not the headline number.

Mistake #4: Treating AI governance as a vendor problem

Under the EU AI Act, deployers - the agency using the tool, not just the vendor that built it - must maintain activity logs, human oversight and candidate transparency for any high-risk hiring AI. Buying a compliant vendor does not automatically make the agency's own use of that vendor compliant [2].

Mistake #5: Confusing skills verification with compliance verification

A strong assessment tool like Vervoe tells you a candidate can do the job. It says nothing about whether they are legally entitled to do it, or whether their stated employment history is accurate. Agencies need both categories, not one instead of the other.

Where boilr Fits - Honestly

boilr is not a right-to-work checking tool, a background screening provider or a reference verification service, and it should not be judged against Sterling, Certn or TrustID on that axis. It does not run identity document validation, it does not screen criminal records, and it has no plans to. What boilr does is sit on the other side of the compliance conversation: helping a consultant know, at the point they are drafting outreach or building a submission, what a specific client has already told the agency about their compliance and verification requirements, because that information lives in the Company Brain rather than a single consultant's inbox or memory.

Concretely, the Company Brain pools winning messages, ICP patterns and the context that made a placement land, across every consultant in the agency, and keeps it even after the consultant who won that client leaves. If a client has previously specified that every contractor placement needs an enhanced DBS check, a specific IR35 determination process, or sector-specific right-to-work documentation, that requirement is exactly the kind of pattern the Company Brain is built to retain and resurface, so the next submission to that client does not accidentally skip a step the agency already agreed to. Combined with Signals, which flags when a target company is expanding into a regulated sector or a new jurisdiction, an agency can proactively flag its compliance credentials in outreach before a prospect even asks - turning "we're compliant, are you?" into a BD opener rather than a defensive answer to an RFP question.

That is a meaningfully different job to actually running the check. boilr does not replace Sterling, Certn, TrustID or any other name in this article, and any agency reading this should keep a certified verification provider in its stack regardless of what BD tooling it runs alongside it.

Question	Honest answer
Does boilr replace Sterling, Certn, HireRight or TrustID?	No. boilr does not run right-to-work checks, background screens or reference checks. Keep a certified verification provider regardless.
What does boilr actually do with compliance information?	It keeps a client's previously stated compliance and verification requirements in the Company Brain, so the next consultant working that account does not have to rediscover them.
Can boilr help win business on a compliance pitch?	Yes, indirectly. Signals can flag when a target is expanding into a regulated sector, and the drafted outreach can reference the agency's verification standards proactively.
Does boilr provide any AI Act or GDPR compliance documentation itself?	No. AI governance logging and candidate transparency obligations under the EU AI Act apply to hiring/screening AI specifically, and are the responsibility of the verification vendor and the agency, not boilr.

See how a Company Brain that remembers a client's compliance requirements fits alongside your verification stack: try boilr free or book a 20-minute demo to walk through your own client book.

A 30-Day Evaluation Plan

Whichever verification tool you are trialling, test it against your actual placement mix, not a generic vendor scenario.

1. Week 1 - Map your real exposure: list every jurisdiction you place into and every client contract clause that already specifies a verification standard. That map, not a feature list, should drive the shortlist.
2. Week 1 - Shortlist two vendors, not five: one broad, multi-layer provider (Sterling, HireRight or Certn) and one specialist for your highest-risk gap (TrustID for UK RTW, Xref or Konfir for reference/employment history).
3. Week 2 - Run five real candidates through each: not test data. Time the actual turnaround and note every manual step still required.
4. Week 2 - Ask for the full pricing breakdown in writing: base fee, every pass-through fee by check type and jurisdiction, and any minimum volume commitment.
5. Week 3 - Confirm the audit trail is client-shareable: ask each vendor to produce the exact report you would hand a client or a Fair Work Agency inspector on request.
6. Week 3 - Check the AI Act documentation gap: ask directly what logging and human-oversight documentation the vendor provides for its own AI-assisted decisions, and what remains the agency's responsibility.
7. Week 4 - Get a billing consultant, not just compliance, to review it: the consultant working the desk needs to know how fast a placement can start, not just whether the check is technically compliant.
8. Week 4 - Decide on total defensibility, not lowest price: the cheapest check that cannot produce a clean audit trail on demand is the expensive option once a penalty notice arrives.

Frequently Asked Questions

What is the best AI right-to-work verification tool for a UK recruitment agency in 2026?

For agencies placing exclusively in the UK, TrustID is a strong specialist choice because it is a certified Digital Verification Service Provider built specifically around right-to-work and DBS checks. Agencies placing internationally as well as in the UK often prefer Sterling or HireRight, which bundle UK right-to-work checks into a broader global screening suite under one contract.

Is Sterling the same company as First Advantage now?

First Advantage completed its $2.2 billion acquisition of Sterling Check Corp in October 2024, and Sterling now operates as "Sterling, a First Advantage company." The product and brand continue under the Sterling name, but agencies evaluating it in 2026 are buying into a business still consolidating two large screening platforms.

How much do AI background check and verification tools cost?

Entry-level, self-serve providers like Certn and Checkr publish base prices from roughly $13.99 to $89.99 per report depending on check type, but real costs run higher once jurisdiction-dependent third-party pass-through fees are added, which can push the total 40-70% above the base price. Enterprise providers like Sterling and HireRight require a custom quote and typically suit higher check volumes.

Does the EU AI Act apply to recruitment agencies that just use a background check tool?

Yes, if that tool uses AI to screen, rank or select candidates, which most modern background-screening and identity-verification platforms do to some degree. The EU AI Act classifies this as high-risk, and from 2 December 2027 the agency using the tool (the "deployer"), not just the vendor, must maintain human oversight, activity logs and candidate transparency. Buying a compliant vendor does not automatically make the agency's own use of it compliant.

What changes for UK recruitment agencies from 1 October 2026?

The definition of who counts as an "employer" for right-to-work purposes widens to cover worker contracts, individual subcontractors and online matching platforms, not just direct employees. This means agencies and other parties in a labour supply chain can face civil penalties of up to £60,000 per worker if they cannot demonstrate their own compliance checks, even where the end client directs the work.

Can a reference-checking tool replace a full background check?

No. Tools like Xref and Konfir verify specific claims, such as employment history, dates and referee feedback, fast and at scale. They do not run criminal record checks, verify legal right to work, or validate identity documents. Agencies typically need a reference/employment verification tool alongside, not instead of, a background-screening and right-to-work provider.

Is a skills assessment tool like Vervoe part of compliance verification?

No, and treating it as such is a common mistake. Vervoe and similar AI-driven skills-assessment tools verify whether a candidate can do the job. They say nothing about legal right to work, criminal history or the accuracy of a stated employment history. Agencies need both categories of tooling, and they answer entirely different questions.

Can boilr help an agency run right-to-work or background checks?

No. boilr is a signal-led BD platform, not a verification provider, and it does not run right-to-work checks, background screens or reference checks. What it can do is keep a client's already-agreed compliance requirements inside the agency's Company Brain, so consultants working that account do not have to rediscover them, and surface compliance as a proactive BD talking point via Signals. Agencies still need a certified verification provider such as those covered in this article.

Sources

Information sourced from public vendor pages, law firm compliance briefings and industry reports as of July 2026.

1. Lewis Silkin - Preventing Illegal Working and Right to Work Checks: What Changes from 1 October 2026
2. Warden AI - EU AI Act for Hiring: Risk Tiers and Compliance Steps
3. Sterling - UK Right to Work Verification
4. HireRight - 2026 Global Benchmark Report
5. Certn - AI-Powered Background Screening and Identity Verification
6. Checkr - Background Check API and Pricing
7. TrustID - Digital Right to Work Checks
8. Xref - Reference Checking Software
9. Konfir - Instant Employment and Income Verification
10. Blake Morgan - Employment Rights Act 2025: Umbrella Companies Consultations
11. First Advantage - First Advantage Completes Acquisition of Sterling Check for $2.2 Billion
12. GBG / Onfido (Entrust) - Identity Verification for Onboarding
13. HireRight - UK Right to Work Check and Identity Verification Service
14. Vervoe - AI-Powered Skills Assessments