The Indemnification Illusion: When AI Hiring Vendors Cannot Cover Their Customers' Liabilities

 Employment Testing: Failing to Make the Grade — Ten Years Later, Part 6

Imagine a large corporation that uses a third-party automated screening system to evaluate 500,000 job applicants over two years.

The system is later found to have unlawfully discriminated against qualified applicants with mental health disabilities. The employer faces substantial financial liability.

Management responds that the company is protected because its screening vendor agreed to indemnify it against claims arising from the product.

But what happens if the vendor cannot—or is not contractually obligated to—pay the full amount?

That question becomes especially important when hundreds or thousands of employers rely on substantially the same screening technology.

Indemnification Is Not Immunity

An indemnification agreement may require a technology vendor to defend its customers against specified claims or reimburse certain settlements, judgments, and legal expenses.

Such agreements can provide meaningful financial protection.

But they generally do not eliminate an employer's independent legal obligations under the Americans with Disabilities Act (ADA), Title VII, or the Age Discrimination in Employment Act (ADEA).

The applicant's discrimination claim and the employer's contractual right to reimbursement are separate legal matters.

Even when the vendor promises indemnification, the employer may remain responsible to applicants if the screening practice violates applicable law.

Moreover, indemnification agreements frequently contain limitations.

A vendor might cap its liability at the fees paid under the contract or a specified multiple of those fees. Coverage might exclude certain damages or claims arising from the employer's configuration or use of the software.

The parties may also disagree about who was responsible for the challenged screening criteria or whether the employer complied with contractual notice and defense requirements.

An employer should not confuse a promise of indemnification with a guarantee that every resulting loss will be paid.

When One Screening Product Creates Claims Against Many Employers

Consider the hypothetical from Post 5.

An employer uses a screening system to evaluate 500,000 distinct applicants. If 5%–10% could establish compensable discrimination claims, illustrative aggregate recoveries of $5,000–$10,000 per claimant would range from $125 million to $500 million.

These are hypothetical calculations, not predictions of liability or estimates concerning any particular employer or vendor.

Suppose the employer faces $250 million in legally established liabilities arising from the screening system.

Its vendor has promised indemnification, subject to the terms of their agreement.

Now suppose hundreds of other employers used the same product.

If a common screening feature is found unlawful, those employers may also assert indemnification claims.

The vendor could face substantial obligations to multiple customers arising from the same underlying technology.

Its insurance might be subject to aggregate coverage limits, exclusions, deductibles, or disputes over whether the claims are covered. Contractual indemnification caps could impose additional restrictions.

Even a financially substantial vendor has finite resources.

For illustration, suppose the employer incurs $250 million in losses but ultimately recovers only $50 million from the vendor and available insurance.

The remaining $200 million could become the employer's responsibility, depending on the applicable legal and contractual arrangements.

The same technology that permits an assessment to be used across thousands of employers can also concentrate potentially enormous reimbursement obligations on a single vendor.

This is not a prediction about Workday's financial condition, insurance coverage, or customer contracts. Those matters would require examination of actual agreements and financial information.

Rather, it illustrates the systemic risk discussed in this blog's 2013 post, When the First Domino Falls.

Insurance May Not Solve the Problem

Insurance provides another possible source of financial protection, but it should not be assumed to cover every claim.

A vendor's insurance may exclude certain conduct, limit coverage for employment-related discrimination, or impose aggregate limits shared across multiple claims.

An employer's own insurance may contain similar restrictions.

Coverage can also depend on when claims were made, whether notice requirements were satisfied, which entities qualify as insured parties, and whether defense expenses reduce available coverage.

If numerous employers assert claims involving the same screening product, aggregate insurance limits may be particularly important.

The relevant question is not merely whether insurance exists, but how much protection remains available after considering all applicable claims, exclusions, and limits.

What Must Employers Disclose to Shareholders?

For publicly traded companies, potential litigation and limitations on indemnification raise important accounting and disclosure questions.

Under Accounting Standards Codification (ASC) 450, an employer generally must recognize a loss contingency when a loss has been incurred and is both probable and reasonably estimable.

A material loss that is reasonably possible may require disclosure even if the conditions for recognizing a financial reserve are not satisfied.

Public companies may also have applicable securities-law obligations concerning material legal proceedings, risks, and uncertainties.

The existence of litigation against a screening vendor does not automatically require every customer to record a reserve or make a disclosure.

But credible evidence that a company's own use of a screening system may create material liability requires an appropriate evaluation under the applicable standards.

Importantly, potential losses and expected indemnification recoveries must be assessed separately.

An employer cannot simply assume that a vendor's contractual promise eliminates its financial exposure. Recognition of a recovery depends on the applicable accounting requirements, including whether collection is sufficiently probable.

Uncertainty about the vendor's legal obligation or financial ability to pay may affect that assessment.

A company may therefore face a reportable loss even though management expects to pursue reimbursement from the vendor.

A Question of Corporate Risk Management

For employers processing hundreds of thousands of applications, these risks deserve attention from corporate management and, where sufficiently material, audit committees and boards of directors.

Relevant questions include whether the employer has independently evaluated its screening procedures, understands the vendor's indemnification obligations, and knows what insurance or other financial resources are available.

Management should also consider whether the same technology is used by other large employers, whether common litigation risks could produce competing claims, and whether the company's potential liabilities have been appropriately evaluated for financial reporting purposes.

The consequences may extend beyond settlements and judgments.

An employer may incur expenses associated with defending litigation, replacing screening technology, conducting additional validation studies, reviewing prior hiring decisions, and modifying its recruitment procedures.

These costs may affect corporate profitability even when some direct legal expenses are reimbursed.

For shareholders, the central concern is whether management understands the company's actual financial exposure rather than relying on the apparent protection of a vendor agreement.

The Second Domino

The first post in this three-part discussion examined how a potentially unlawful automated screening system could expose an employer to substantial applicant claims.

This post addresses the next question: Whether the employer has adequate financial protection against those claims.

A vendor's promise of indemnification may be valuable, but its effectiveness depends on the contract, available insurance, and the vendor's financial capacity.

When many employers rely on the same screening product, they may also find themselves relying on the same limited source of financial protection.

And if corporate management or directors fail to recognize, evaluate, or appropriately address significant legal and financial risks, another question arises.

Could shareholders seek legal remedies against the company's leadership?

Next: The Next Domino—Could Shareholders Sue Over AI Hiring Discrimination?