👤 Background Checks and Pre-Employment Screening

1. Purpose

This document describes Nemu Inc.’s approach to human resource security and background investigation for employees and contractors with access to scoped data and production systems.

2. Scope

Applies to:

Full-time and part-time employees.
Long-term contractors and consultants with access to Confidential or Internal data.

3. Pre-Employment Screening

Where legally permitted and appropriate to role, Nemu Inc. may perform:

Identity verification (e.g., government ID or equivalent).
Employment or reference checks.
Additional screenings as required by specific customer or regulatory obligations.

For roles with access to production data or critical systems, Nemu Inc. ensures:

Verification is completed before access is granted.
Any issues identified are assessed for risk and documented.

4. Ongoing HR Security Measures

Employment agreements include confidentiality clauses.
Employees are required to comply with security, privacy, and acceptable use policies.
Access is periodically reviewed to ensure appropriateness.

5. Audit Evidence

Template or example of employment agreement with confidentiality language.
HR or onboarding checklist indicating pre-employment checks.
Internal policies describing screening practices.

6. Background Screening & Third-Party Contract Requirements

6.1 Background Screening for Employees

Nemu Inc.’s HR policies require appropriate pre-employment background screening for employees and long-term contractors, which may include:

Identity verification
Criminal background checks (as legally permissible)
Employment and education verification (role-dependent)

6.2 Screening Expectations for Third Parties

When engaging third-party contractors or service partners, Nemu Inc.:

Requires contractual assurance that the vendor has equivalent background screening procedures
Ensures that personnel with access to Nemu systems or customer data meet Nemu’s screening standards
Retains the right to request evidence or certification of the vendor’s HR controls

7. Compliance Mapping

SOC 2: CC1.2, CC2.1
ISO 27001:2013: A.7.1.1, A.7.1.2