EEO compliance in hiring has two distinct audiences in 2026. The first is any US employer with 100 or more employees, who has EEO-1 reporting obligations and Title VII prohibitions against discriminatory hiring. The second is federal contractors, who face the additional obligations of OFCCP's Affirmative Action Plan requirements, applicant flow log documentation, and the elevated scrutiny of regular compliance audits.
Both audiences are operating in a compliance environment that has become more complex in the past 18 months. Executive orders addressing DEI programs, legal challenges to affirmative action principles, and the emergence of state-level AEDT (Automated Employment Decision Tool) bias audit requirements have created a landscape where the right compliance posture requires ongoing attention, not a one-time configuration decision.
This guide covers what EEOC compliance requires in practical ATS terms, the specific requirements for federal contractors, and the DEI compliance complexity that every HR team needs to navigate carefully.
EEO data collection: the foundation of compliance
The first compliance requirement is voluntary self-identification. Under federal EEO guidelines, employers subject to EEO-1 reporting must collect demographic data — race, ethnicity, gender — from applicants and employees on a voluntary basis. The "voluntary" element is critical in two ways: the candidate must not be required to complete the section to submit their application, and the data must be segregated from the hiring evaluation process so that hiring managers cannot access it during candidate assessment.
In ATS terms, this means the voluntary EEO section on your application form must:
- Be clearly labeled as voluntary with a statement that non-completion will not affect the candidate's consideration.
- Be stored in a separate data layer that is not visible to hiring managers during the evaluation pipeline.
- Be accessible to HR administrators for aggregate reporting but not linked to individual candidate profiles in the hiring manager view.
- Use the standardised EEOC categories for race and ethnicity, not custom classifications.
The most common implementation failure is an ATS that collects EEO data on the application form and then makes it visible in the candidate profile that hiring managers access during screening. Even if the intent is good, demographic data visible to evaluators creates legal risk — it's the kind of factual detail that makes discrimination claims significantly more credible in litigation.
EEO-1 reporting requirements
The EEO-1 Report is an annual filing required for private employers with 100 or more employees, and for federal contractors with 50 or more employees and government contracts of $50,000 or more. The report collects workforce demographic data by race, ethnicity, sex, and job category (Component 1). Component 2 data (pay data by demographic group) has been subject to litigation and regulatory changes — its status should be verified with the EEOC before each filing cycle.
Your ATS supports EEO-1 compliance in two ways: collecting the voluntary demographic data from applicants that eventually flows into your workforce records, and (if integrated with your HRIS) providing the demographic workforce data needed for the annual report. Most ATS platforms are not the system of record for workforce demographic data after hire — that role typically falls to the HRIS. But the data quality of your workforce demographics depends on the quality of the voluntary self-identification collected during the hiring process.
Adverse impact analysis: the 80% rule
Adverse impact analysis is the statistical method used to assess whether a selection procedure — including resume screening criteria, skills assessments, interview question structures, or any other hiring decision point — disproportionately excludes candidates from a protected class.
The standard methodology is the four-fifths rule (also called the 80% rule): if the selection rate for a protected group is less than 80% of the selection rate for the group with the highest selection rate, there is a presumption of adverse impact that requires either business justification or process modification.
Running adverse impact analysis requires your ATS to track candidate demographics through each stage of the hiring pipeline — not just at application, but at each decision point: initial screening, assessment, interview invitation, offer, and hire. This stage-by-stage tracking is what allows you to identify at which point in the process a disparity is occurring and address it at the source.
Without this capability, you can file EEO-1 reports that show your workforce composition, but you cannot proactively identify whether your hiring process is producing disparate outcomes by protected class. This matters both for compliance purposes and because OFCCP audits for federal contractors specifically examine adverse impact at the selection stage.
OFCCP requirements for federal contractors
Federal contractors and subcontractors above the threshold (generally $50,000 in contract value and 50 or more employees) must comply with OFCCP requirements that go significantly beyond general EEO obligations.
Affirmative Action Plans (AAPs)
Covered federal contractors must develop written AAPs annually for women and minorities, individuals with disabilities (IWD), and protected veterans (VEVRAA). The AAPs include workforce analysis, utilisation analysis (comparing workforce demographics to relevant labor market availability), and placement goals where utilisation falls below availability. Executive orders issued in early 2025 have created uncertainty about the future of AAP requirements for federal contractors — HR teams should monitor OFCCP guidance closely and consult employment counsel about current obligations.
Applicant flow log
Federal contractors must maintain an applicant flow log for all employment openings: a record of each applicant, the position applied for, race, sex, and the disposition code (the reason they were not selected or the stage at which they were no longer considered). This log is the primary document OFCCP requests in a compliance review. Your ATS must support standardised disposition codes that map to OFCCP's required categories — this is more specific than a generic "rejected" or "declined" status, and the granularity of the disposition codes is important for audit defense.
Self-identification forms
Federal contractors must invite applicants and employees to self-identify disability status using the standard CC-305 form (for IWD) and veteran status using the VEVRAA form. These must be administered at specific points in the hiring process and re-administered at regular intervals for existing employees. Your ATS application form must include these standardised forms, and the data must be stored separately from hiring evaluation data.
The DEI scrutiny context: what it means for your ATS
The current legal environment around DEI programs in hiring requires careful navigation. Several executive orders and legal challenges have targeted practices that were previously common in DEI-focused hiring: setting explicit demographic hiring goals, preferencing candidates from underrepresented groups, and running sourcing programs specifically targeting certain demographic groups.
What has not changed: the legal prohibition on employment discrimination applies regardless of intent, including discrimination that favors protected groups over non-protected groups in direct violation of Title VII. The voluntary self-identification and EEO data collection requirements remain in force. Adverse impact monitoring remains a valid and important compliance practice.
What requires careful review with employment counsel: any ATS features or HR program elements that weight demographic data in hiring decisions, set demographic-based hiring goals tracked in your ATS, or create preferential treatment based on protected class membership. The legal risk profile of these features has changed in 2025-2026, and the right approach depends on your organisation's specific situation, federal contractor status, and employment counsel's assessment.
The practical ATS implication: configure your system to collect EEO data for compliance reporting, maintain strict separation between that data and hiring evaluation workflows, run adverse impact monitoring as an analytical tool rather than a decision-input, and remove any ATS features that create explicit demographic weighting in hiring decisions until your counsel has reviewed them.
ATS features required for EEOC compliance
EEOC compliance ATS checklist
- Voluntary EEO data collection. Standardised race/ethnicity/gender self-identification form, clearly labeled as voluntary, accessible from the application form but stored separately from the hiring manager view.
- OFCCP self-identification forms. CC-305 disability form and VEVRAA veteran status form for federal contractors, with standardised language and proper administration timing.
- Disposition codes. Standardised, OFCCP-compatible disposition codes at each stage of the hiring pipeline. Not just "rejected" — codes that specify the reason for non-selection at each decision point.
- Applicant flow log. Automated generation of the applicant flow log for OFCCP audits — a complete record of each applicant, position, demographics, and disposition across a defined time period.
- Adverse impact reporting. Analytics that track selection rates by protected class at each pipeline stage and flag potential adverse impact using the 80% rule methodology.
- Data separation. Architecture that strictly separates voluntary demographic data from the hiring manager's candidate profile view — demographic data should require a separate administrative access level.
- Audit trail. Complete logs of all actions taken on candidate records, necessary for demonstrating process consistency in an OFCCP audit or EEOC investigation.
Built with compliance in mind from day one
GDPR-native data privacy. All compliance features included in every plan. Startup: $299/mo · Growth: $499/mo · Scale: $899/mo.
See full pricing →How Treegarden supports EEOC compliance
Treegarden's compliance architecture was designed with US employment law requirements in mind, not added as an afterthought. The key implementation details:
EEO data collection: Treegarden application forms include a standardised voluntary self-identification section with race/ethnicity and gender fields using EEOC categories. The section is clearly labeled as voluntary, and the data is stored in a separate compliance data layer not visible to hiring managers during the pipeline evaluation workflow.
Federal contractor forms: The CC-305 disability self-identification form and VEVRAA veteran status form are available as configurable elements in the application workflow for customers with federal contractor obligations. Data from these forms is stored separately from hiring evaluation data and is accessible to HR administrators with appropriate permissions.
Disposition codes: Treegarden's pipeline includes OFCCP-compatible disposition codes at each stage, configurable to match your organisation's specific rejection reason categories. The codes map to OFCCP's required classification system for applicant flow log generation.
Applicant flow log: The applicant flow log report is automatically generated from pipeline data — a complete record of each applicant, position applied, demographics, and disposition code for a defined date range. This is the document OFCCP requests in a compliance review, and it generates in minutes rather than requiring manual compilation.
Adverse impact reporting: Treegarden's analytics layer includes selection rate tracking by protected class at each pipeline stage, with four-fifths rule calculation applied automatically. Reports flag potential adverse impact at stages where the threshold is crossed. All features are included in every plan — there is no compliance add-on tier.
Questions to ask your ATS vendor about EEOC compliance
When evaluating an ATS for EEOC compliance capability, ask for demonstrated answers to these questions — not verbal assurances.
On data separation: "Show me what a hiring manager sees when they open a candidate profile. Can they see the EEO self-identification data the candidate submitted? Walk me through exactly how that data is separated from the hiring workflow."
On disposition codes: "Show me your default disposition code list. How does it map to OFCCP's required categories? Can I customise codes, and if so, does customisation affect the OFCCP applicant flow log output?"
On adverse impact reporting: "Show me an adverse impact analysis report. At what pipeline stages does it measure selection rates? Does it apply the four-fifths rule calculation automatically, or do I need to calculate that manually from the data it exports?"
On OFCCP self-identification: "Does the platform include the CC-305 disability form and VEVRAA veteran status form with standardised language? How does the system handle re-administration of these forms at the required intervals?"
Frequently asked questions
Does every employer need an EEOC compliant ATS?
EEO-1 reporting is required for employers with 100+ employees and federal contractors with 50+ employees and contracts of $50,000+. OFCCP's full Affirmative Action Plan requirements apply only to federal contractors meeting the threshold. However, any employer using automated screening tools should have adverse impact monitoring capability regardless of their formal reporting obligations, as the four-fifths rule applies to any selection procedure and is relevant to EEOC investigations across all covered employers.
What is adverse impact analysis in recruiting?
Adverse impact analysis assesses whether a hiring selection procedure disproportionately excludes candidates from a protected class. The four-fifths rule is the standard methodology: if the selection rate for a protected group is less than 80% of the rate for the highest-selecting group, there is a presumption of adverse impact. This analysis should be run at each pipeline stage where selection decisions occur, requiring your ATS to track demographic data through the entire funnel.
What's the difference between EEO and OFCCP compliance?
EEO compliance is the general prohibition on discriminatory employment practices under Title VII and related statutes, applicable to most US employers. OFCCP compliance is an additional layer for federal contractors requiring written Affirmative Action Plans, detailed applicant flow logs, disposition code tracking, and readiness for compliance audits. Federal contractors need both layers; non-contractors need only the general EEO framework.
Does the current DEI scrutiny change what our ATS needs to do?
The core obligations — voluntary EEO data collection, applicant flow log maintenance for federal contractors, adverse impact monitoring — remain unchanged. What requires careful review is any ATS feature or HR program element that creates explicit demographic weighting in hiring decisions, as the legal risk profile of such features has changed significantly in 2025-2026. Consult employment counsel about the current status of any DEI-focused ATS features your organisation uses.