An external stability audit framework to test the validity of personality prediction in AI hiring.

Automated hiring systems are among the fastest-developing of all high-stakes AI systems. Among these are algorithmic personality tests that use insights from psychometric testing, and promise to surface personality traits indicative of future success based on job seekers' resumes or social media profiles. We interrogate the validity of such systems using stability of the outputs they produce, noting that reliability is a necessary, but not a sufficient, condition for validity. Crucially, rather than challenging or affirming the assumptions made in psychometric testing - that personality is a meaningful and measurable construct, and that personality traits are indicative of future success on the job - we frame our audit methodology around testing the underlying assumptions made by the vendors of the algorithmic personality tests themselves. Our main contribution is the development of a socio-technical framework for auditing the stability of algorithmic systems. This contribution is supplemented with an open-source software library that implements the technical components of the audit, and can be used to conduct similar stability audits of algorithmic systems. We instantiate our framework with the audit of two real-world personality prediction systems, namely, Humantic AI and Crystal. The application of our audit framework demonstrates that both these systems show substantial instability with respect to key facets of measurement, and hence cannot be considered valid testing instruments.

Introduction

AI-based automated hiring systems are seeing ever broader use and have become as varied as the traditional hiring practices they augment or replace. These systems include candidate sourcing and resume screening to help employers identify promising applicants, video and voice analysis to facilitate the interview process, and algorithmic personality assessments that purport to surface personality traits indicative of future success. HireVue, a company that sells one of these systems, estimates that the “pre-hire assessment” market is worth $3 billion annually (Kelly-Lyth 2020). Indeed, most Fortune 500 companies are using some form of algorithmic hiring (Schellmann et al. 2021a). Ian Siegel, the CEO of ZipRecruiter (a popular online employment marketplace), estimates that 75%–100% of all submitted resumes are now read by software, and that only a small fraction of those go on to be read by humans (Schellmann et al. 2021a).

In this paper, we focus on automated pre-hire assessment systems, as some of the fastest-developing of all high-stakes uses of AI (Kelly-Lyth 2020). The popularity of automated hiring systems in general, and of pre-hire assessment in particular, is due in no small part to the hiring sector’s collective quest for efficiency. Employers choose to use them to source and screen candidates faster and with less paperwork and, in a world reshaped by the COVID-19 pandemic, with as little in-person contact as is practical. Job seekers are, in turn, promised a more streamlined job search experience, although they rarely have a choice in whether they are screened by an automated system, and they are typically not notified when algorithmic screening is used Stoyanovich 2021). The flip side of efficiency potentially afforded by automation is that job seekers, the general public, and even employers themselves rarely understand how these systems work and, indeed, whether they work. Is a resume screener identifying promising candidates or is it picking up irrelevant—or even discriminatory—patterns from historical data, potentially exposing the employer to legal liability? Are job seekers participating in a fair competition if they are systematically unable to pass an online personality test, despite being well-qualified for the job (Weber and Dwoskin 2014)?

Personnel selection is an especially sensitive, high-stakes application of AI. Hiring decisions are often of great consequence to the financial and emotional well-being of the job seekers (Bendick 2007), and in aggregate contribute to widespread economic inequality (Blau et al. 2013; Hegewisch et al. 2010). Consequences for hiring organizations can be substantial as well: if their selection procedures are arbitrary or unfair, they risk litigation and class action lawsuits. As such, any algorithms deployed in the field of hiring deserve rigorous scrutiny.

This realization is starting to be codified in laws and regulation. An important recent example is Local Law 144 of 2021 that requires bias auditing of “automated employment decision tools” used by employers in New York City, and also mandates disclosure about the use of these tools to job seekers before they are screened (New York City Council 2021). Another example is the Artificial Intelligence Act (AI Act), proposed by the European Commission in 2021 to serve as a common regulatory and legal framework for AI in the European Union (The European Commission 2021). The Act states that “AI systems used in employment, workers management and access to self-employment, notably for the recruitment and selection of persons, for making decisions on promotion and termination and for task allocation, monitoring or evaluation of persons in work-related contractual relationships, should also be classified as high-risk, since those systems may appreciably impact future career prospects and livelihoods of these persons,” and subjects such systems to strict oversight requirements.

Reports of algorithmic hiring systems acting in ways that are discriminatory or unreliable abound (Bandy 2021; Bogen and Rieke 2018; Dastin 2018; Datta et al. 2015; Köchling and Wehner 2020; Stark and Hutson 2021). In a recent example, when testing automated phone interview software, Hilke Schellmann found that the system produced “English competency” scores even when the candidate spoke exclusively in German or Chinese (Schellmann et al. 2021b). This finding undermines the validity of the tool, and crystallizes the fact that black-box algorithms may not act as we expect them to.

In our work we interrogate the validity of algorithmic pre-hiring assessment systems of a particular kind: those that purport to estimate a job seeker’s personality based on their resume or social media profile. Our focus on these systems is warranted both because the science behind personality testing (algorithmic or not) in hiring is controversial (Emre 2018; Lussier 2018; Sloane 2021), and because algorithmic personality tests are rarely validated by third-parties (Schellmann et al. 2021a). Warning against this trend, Chamorro–Premuzic et al.  (Chamorro-Premuzic et al. 2016) write in the Journal of Industrial and Organizational Psychology: “shiny new talent identification objects often bamboozle recruiters and talent acquisition professionals with no regard for predictive validity.” Despite this warning, unvalidated use of these “objects” continues. For example, as we will discuss in Sect. 4, DiSC, a psychometric instrument used by several algorithmic personality assessment systems, has not been validated in the hiring domain, and the company that produces DiSC specifically warns against using it for pre-employment screening.

In our work, we focus on stability, by which we refer to a property of an algorithmic system whereby small changes in the input lead to small changes in the output, noting that this property is a necessary, albeit not a sufficient, condition for validity. Our approach is to (1) develop a methodology for an external audit of the stability of algorithmic personality predictors, and (2) instantiate this methodology in an audit of two real-world systems, Humantic AI and Crystal. Crucially, based on the insights of Sloane et al.  (Sloane et al. 2022), we frame our methodology around testing the underlying assumptions made by the vendors of the algorithmic personality tests themselves.

Humantic AI and Crystal were selected as audit subjects because they each produce quantitative personality traits as output, accept easily-manipulated textual features as input, and allow multiple input types. These systems also have substantial presence in the algorithmic hiring market: Humantic AI reports that it is used by Apple, PayPal and McKinsey,1 and Crystal claims that 90% of Fortune 500 companies use their products, though neither company distinguishes between use for hiring and use for other purposes, such as sales. 2

In this paper, we make the following contributions:We discuss the results and limitation of our work in Sect. 6, and conclude in Sect. 7.

We provide an overview of the key literature on psychometric testing applied to hiring and on algorithm auditing with a particular focus on hiring (Sect. 2). We find that reliability is seen as a crucial aspect of the validity of a psychometric instrument, yet it has not received substantial treatment in algorithm audits.

We propose a socio-technical framework for auditing the stability of algorithmic systems (Sect. 3). Figure 1 gives an overview of our proposed methodology. As part of this contribution, we develop an open-source software library that implements the technical components of the audit, and can be used in stability audits of automated decision systems (ADS), with suitable input data, treatment generation techniques, and choice of stability metrics. Our library can be extended with additional input and output data types, treatment and control generation methods, and choice of stability metrics.

Fig. 1

Socio-technical framework for stability auditing, discussed in detail in Sect. 3

We instantiate this methodology in an external stability audit of Humantic AI and Crystal, two black-box algorithms that predict personality for use in hiring, over a dataset of job applicant profiles collected through an IRB-approved study (Sect. 4).

The application of our audit framework surfaces substantial instability with respect to important facets of measurement in both these systems, results are presented in Sect. 5. For example, we find that personality profiles returned by both Humantic AI and Crystal are substantially different depending on whether they were computed based on a resume or a LinkedIn profile, violating the assumption that an algorithmic personality test is stable across input sources that are treated as interchangeable by the vendor. Further, Crystal frequently computes different personality scores if the same resume is given in PDF vs. in raw text format, violating the assumption that the output of an algorithmic personality test is stable across job-irrelevant variations in the input.

Background and related work

Validity and reliability in psychometric theory applied to hiring

Personality testing in hiring. Since the early 1900s, personnel selection practices have relied on the use of psychometric instruments such as personality tests to identify promising candidates (Scroggins et al. 2008), and the use of these tests continues to be wide-spread (Meinert 2015). And although this practice is both longstanding and wide-spread, it has been met with skepticism from industrial-organizational (I-O) psychologists due to validity and reliability concerns, and even led to disagreements about whether personality itself is a meaningful and measurable construct (Scroggins et al. 2008). A comprehensive literature review of personality testing in personnel selection published in 1965 found little evidence of predictive validity, and concluded that “it is difficult to advocate, with a clear conscience, the use of personality measures in most situations as a basis for making employment decisions” (Guion and Gottier 1965). Several other surveys would come to the same conclusion in the following decades (Hough et al. 1990; Schmitt et al. 1984), yet, HR professionals continued to use personality testing for hiring (Scroggins et al. 2008). The rise of the “Big Five” model of personality in the 1990s led to wider acceptance of personality testing in hiring amongst I–O psychologists, albeit not without controversy. (See Sect. 4.1 for more on the Big Five.)

The use of a traditional personality test in personnel selection relies on the following assumptions:Validity and reliability of psychometric instruments. Within the field of psychometrics, instruments are considered useful only if they are both reliable and valid (Cardinet et al. 1976; Carmines and Zeller 1979). Reliability refers to the consistency of an instrument’s measurements, and validity is the extent to which the instrument measures what it purports to measure (Mueller and Knapp 2018). Reliability is a necessary (although not a sufficient) condition for validity (Nunnally and Bernstein 1994). Thus, when considering psychometric instruments, the question of reliability is central to the question of validity.

The personality traits being measured are meaningful constructs;

The test is a valid measurement instrument: it measures the traits it purports to measure;

The test is a valid hiring instrument: its results are predictive of employee performance.

Reliability can be measured across time (test-retest reliability), across equivalent forms of a test (parallel forms reliability), across testing environment (cross-situational consistency), etc. (Mueller and Knapp 2018). Each of the dimensions across which measurements are compared is referred to as a facet, such that we can talk about reliability with respect to some facet (e.g., time) that varies between measurements, while other facets (e.g., test location) are held constant (Cardinet et al. 1976). Under Classical Test Theory (CTT), measurements can be decomposed into a true score and a measurement error (Schmidt et al. 2003). The true score is the value of the underlying construct of interest (e.g., extraversion). Measurement error can be broken down across various experiment facets (Schmidt et al. 2003).

Reliability is usually measured and evaluated with correlations. Although 0.80 is often cited as an acceptable threshold of reliability, Nunnally and Bernstein differentiate between standards used to compare groups (for which 0.80 is an appropriate reliability), and those used to make decisions about individuals. For the latter type of test, they advise that 0.90 should be the “bare minimum,” and that 0.95 should be the “desirable standard” (Nunnally and Bernstein 1994).

Algorithmic personality tests, on which we focus in this paper, constitute a category of psychometric instruments, and are thus relying on the same assumptions—about test validity as a measurement instrument and as a hiring instrument—as do their traditional counterparts. Guzzo et al. caution that reliability and validity are “often overlooked yet critically important” in big-data applications of I–O psychology (Guzzo et al. 2015). In our work, we aim to fill this gap by interrogating the reliability of algorithmic personality predictors. Because the objects of our study are algorithmic systems that are used by employers in their talent acquisition pipelines, our work falls within the domain of hiring algorithm audits, discussed next.

Auditing of hiring algorithms

Background on algorithm auditing. The algorithm audit is a crucial mechanism for ensuring that AI-supported decisions are fair, safe, ethical, and correct. Increasing demand for such audits has led to the emergence of a new industry, termed Auditing and Assurance of Algorithms by Koshiyama et al.  (Koshiyama et al. 2021).

Scholarly work on algorithm auditing acknowledges that auditing frameworks are inconsistent in terms of scope, methodology, and metrics (Bandy 2021; Brown et al. 2021; Koshiyama et al. 2021; Raji et al. 2020). In this landscape that offers many frameworks, yet minimal technical guidance, auditors are left to define their own scope. As argued by several authors, stakeholder interests should be central to the task of scoping (Brown et al. 2021; Fjeld et al. 2020; Metcalf et al. 2021; ORCAA 2020; Raghavan et al. 2020; Raji et al. 2020; Razavi et al. 2021; Sloane et al. 2022; Vecchione et al. 2021). Sloane et al. argue that audits ought to be specific to the domain and to the tool under study (Sloane et al. 2022).

In the United States, much of the audit literature surrounding predictive hiring technology is concerned with legal liability as laid out in the Uniform Guidelines on Employee Selection Procedures (UGESP) (Kim 2017; Raghavan et al. 2020; Wilson et al. 2021). These guidelines, adopted by the Equal Employment Opportunity Commission in 1978, revolve around a form of discrimination called disparate impact, wherein a practice adversely affects a protected group of people at higher rates than privileged groups

Equal Employment Opportunity Commission (EEOC) et al. (1978). As a result, audits of AI hiring systems are often specifically concerned with adverse impact (Chen et al. 2018; ORCAA 2020; Wilson et al. 2021). It is often noted that avoiding liability is not actually sufficient to ensure an ethical system; that is, a lack of adverse impact should be a baseline rather than the goal (Barocas and Selbst 2016; ORCAA 2020; Raghavan et al. 2020; Wilson et al. 2021).

The main contribution of our work is a socio-technical audit methodology developed to measure the stability of personality prediction systems used in the hiring domain, and an open-source library that generalizes the technical components of this framework for use more broadly in stability auditing. We further instantiate this framework on two real-world personality prediction systems. As we will discuss in Sect. 3, we build on Sloane et al.  (Sloane et al. 2022) to interrogate the assumptions encoded by these systems.

Treatment of reliability in algorithm audits The audit literature is inconsistent in whether reliability is included as a concern and, if it is, how it is defined and treated. Several impactful lines of work do not consider reliability (Hagendorff 2020; Langenkamp et al. 2020; Metcalf et al. 2021; Sandvig et al. 2014; Sühr et al. 2021; Venkatadri et al. 2018; Wilson et al. 2021). Of the works that do take reliability under consideration, some refer to this concept as stability (Brown et al. 2021; Koshiyama et al. 2021; Robertson et al. 2018; Sloane et al. 2022; Riksrevisjonen 2020), others as reliability (Fjeld et al. 2020; Mökander et al. 2021; Raji et al. 2020; Riksrevisjonen 2020; Shneiderman 2020), and others yet as robustness (Chen et al. 2018; Fjeld et al. 2020; Mökander et al. 2021; Oala et al. 2020; ORCAA 2020). Bandy Bandy (2021) forgoes specific terminology and simply refers to changes to input and output. This difference in treatment is more than terminological: stability relates to local numerical analyses, whereas robustness tends to refer to broad, system-wide imperviousness to adversarial attack, and reliability connotes consistency and trustworthiness.

This inconsistency is part of a larger problem within sensitivity analysis—the formal study of how system inputs are related to system outputs. Razavi et al. observe that sensitivity analysis is not a unified discipline, but is instead spread across many fields, journals and conferences, and notes that lack of common terminology remains a barrier to unification (Razavi et al. 2021). In our work, we use the term stability to refer to a property of an algorithm whereby small changes in the input lead to small changes in the output. We adopt a psychometric definition of reliability, which we use to guide the way in which we measure stability. By considering algorithms within their socio-technical context, we can also translate between numerical stability and broader robustness.

Although reliability has not been centered in algorithm audits, the importance of model stability has long been established (Turney 1995). The 2020 manifesto on responsible modeling by Saltelli et al.  (Saltelli et al. 2020) underscores the importance of sensitivity analysis, and both the European Commission European Commission (2021) and the European Science Academies Science Advice for Policy by European Academies (SAPEA) (2019) have called for sensitivity auditing in the policy domain. As detailed by Razavi et al., sensitivity audits have also been applied in the domains of education (Araujo et al. 2017), food security (Saltelli and Lo Piano 2017), public health Lo Piano and Robinson (2019), and sustainability (Galli et al. 2016), see (Razavi et al. 2021). We argue that algorithm auditors should consider stability among the critical metrics they select from, as suggested by Brown et al.   (Brown et al. 2021).

Our work is synergistic with two recent lines of work that contribute substantive quantitative methodologies for auditing algorithm stability. The first, (Xue et al. 2020), introduces a suite of tools to study individual fairness in black-box models, while the second, (Sharma et al. 2020), offers a unified counterfactual framework to measure bias and robustness. Sharma et al. ’s methodology relies on access to the features being used by the model, whereas the methods proposed by Xue et al. and by our work only require query access to black-box models. The key distinction between Xue et al. and our work is that Xue et al. build on notions of individual fairness that can be encoded by Wasserstein distance, while we approach stability through a socio-technical lens, borrowing metrics that are familiar to I–O psychologists.

Audit scope. A number of recent algorithm audits focus on tools used at various stages in hiring pipelines. Wilson et al.  (Wilson et al. 2021) and O’Neil Risk Consulting and Algorithmic Auditing (ORCAA)  (ORCAA 2020) each focus on tools for pre-employment assessment (i.e., candidate screening). Raghavan et al.   (Raghavan et al. 2020) evaluate the public claims about bias made by the vendors of 18 such tools. Chen et al.  (Chen et al. 2018) audit three resume search engines, Hannák et al.  (Hannák et al. 2017) audit two online freelance marketplaces, and De–Arteaga et al.  (De-Arteaga et al. 2019) builds and evaluates several classifiers that predict occupation from online bios. All of these studies focus primarily on bias and discrimination. It is also common to frame these audits around the promises made by the companies in their public statements (ORCAA 2020; Raghavan et al. 2020; Wilson et al. 2021). By contrast, in our work we focus on auditing stability, which is a necessary condition for the validity of an algorithmic hiring tool.

Access level is a critical factor in determining audit scope. Audits can be internal (where auditors are employed by the company being audited), cooperative (a collaboration between internal and external stakeholders), or external (where auditors are fully independent and do not work directly with vendors). Sloane et al.  (Sloane et al. 2022) explain that the credibility of internal audits must be questioned, because it is advantageous to the company if they perform well in the audit. Ajunwa Ajunwa (2021) argues for both internal and external auditing imperatives, with the latter ideally performed by a new certifying authority. Brown et al.  Brown et al. (2021) offer a flexible framework for external audits that centers on stakeholder interests. Bogen and Rieke Bogen and Rieke (2018) stress the importance of independent algorithm evaluations and place the burden on vendors and employers to be “dramatically” more transparent to allow for rigorous external audits. Absent that transparency, however, external audits must be designed around what information is publicly available. In this work we develop an external auditing methodology.

Methodology

Socio-technical methodology

We now present a socio-technical framework to assess the stability of algorithmic personality tests in hiring, inspired by the auditing framework of Brown et al.  (Brown et al. 2021).

Define the socio-technical context in which the system operates, and detail the system’s inputs and outputs.

Identify assumptions made by the vendors regarding stability of the system.

Identify key facets of measurement across which the system assumes its outputs to be stable, based on validity assumptions.

Collect data that is representative of the tool’s intended context of use.

Generate treatments by perturbing the input (control) across the features that correspond to each facet of measurement, while keeping all other features fixed to the extent possible.

Identify stability metrics and acceptance/rejection criteria that suitably capture the statistical relationship between the control and treatments.

Query the external system of interest to collect scores for the control and treated inputs.

Quantify the across each facet based on the selected statistical criteria.

Technical framework and open-source library

As part of this work, we developed an open-source software library3 that implements the technical components of the audit, and can be used for the stability audit of any automated decision system (ADS), given suitable input data, treatment generation techniques, and choice of stability metrics. The technical framework is shown in Fig. 2 and consists of three modules: ADS, Treatment Generator, and Auditor, described next.

Fig. 2

Overview of the technical framework, implemented by our open-source library

ADS

The ADS class is an abstraction of the algorithmic system being studied. It has a generic score function that takes inputs and returns scores. We include the ADS class in the audit framework to make explicit the nature of access that the user has to the system being studied, and it is intentionally designed to be generic to allow the user to model different auditing conditions. For example, for external audits that treat the system as a black box, the score function of the ADS object will be a simple look-up of the outputs that were produced by the system. As another example, external audits that do not have direct access to the system may instead fit a model on the collected data. Then, the score function will be executed over that fitted model. The framework can similarly be applied for internal audits, where the user has access to the model and invokes the score function directly.

Users can also implement custom score functions to generate treatment baselines. We would expect any algorithmic system that is used in the real world to be at least as good as a random guesser, and so a score function that appropriately implements random guessing can be used as a baseline for model stability, where the variation between control and treatment scores for any of the treatments should not exceed the variation observed between the control and the randomly generated outputs.

Treatment generator

In this work, we focus on an important desideratum of algorithmic systems—-stability. We measure stability based on how robust system outputs are to different treatments performed on the input. The treatment generator is a technical instantiation of the mechanism that generates treatments, based on a particular facet of measurement of stability. In the audits implemented in this study, described in Sect. 4, the treatments are hand-designed based on domain expertise with personality scores and their use in hiring. However, we envision that future technical frameworks can at least partially automate the creation of treatments, for example, by sampling values for a particular feature from an appropriate distribution, or by automatically perturbing values in text features.

Auditor

The Auditor is the main class of this technical framework: it instantiates a generic Auditor that can be used to analyze the stability of a variety of algorithmic systems. The generic Auditor class allows the user to specify the following information: The Auditor class currently supports the following functionality:

Score names The framework is flexible to test the stability of multiple scores produced by the same system, and takes in a list of score names from the user. For example, Crystal produces four scores corresponding to the personality traits of Dominance, Influence, Steadiness, and Conscientiousness.

Control score This is the score corresponding to the unmodified/unperturbed input.

Treatment scores The framework is flexible to simultaneously analyze the stability of the ADS for several different treatments, and accepts a dictionary of treatment names and the corresponding treatment scores from the user. For example, in the audit of Crystal, treatments include modifying input type, modifying source context, and embedding LinkedIn URL.

Demographic information. The framework can break down audit results by demographic group. To invoke this functionality, the user can pass identifiers that link demographic information to each input and score, and specify groups of interest within the population being evaluated/scored by the ADS. All the subsequent analysis is then performed for both the overall population and for the specified groups.

From a socio-technical standpoint, this audit framework identifies facets across which the system assumes its output to be stable, and then tests the validity of those claims. The socio-technical heavy-lifting is in identifying these facets, designing treatments that vary along this facet, and identifying measures that capture the variation between control and treatments as a measure of instability. The Auditor class of the technical framework automates the subsequent hypothesis testing by instantiating a generic computestatistic() method. This method supports several popular correlation tests (such as Spearman, Pearsons and Kendall–Tau), parametric tests (such as student-t, paired student-t and ANOVA) and non-parametric tests (such as Mann-Whitney, Wilcoxon and Kruskal–Wallis). Users can also choose to plug in their own custom functions to compute statistics that the framework does not currently support.

Users can thereby test their hypotheses about the stability of the ADS with respect to different treatments, and for demographic groups of interest, by using the Auditor class with the relevant statistical measure.

Our audit framework supports functionality to compute and visualize the total variation between the control and treatments, with a large amount of variation indicating greater instability. The generic computetotalvariation method of the Auditor class implements this. For the purposes of the Crystal and Humantic AI audits, we chose to measure total variation as the L1 distance between the control and each treatment, but the framework is flexible to accommodate different measures of total variation.

The Auditor class also has a visualizetotalvariation method that produces box plots of the total variation for each treatment, broken down by demographic groups of interest. Extensions of this framework could include additional measures and visualization techniques to analyze the total variation.

The Auditor class implements the visualizescores method that produces scatter plots of control vs. treatment scores, compared with the ideal line (no variation between control and treatment scores), and the visualizetotalvariation method discussed above.

Instantiation of the framework for personality testing in hiring

We now instantiate our socio-technical framework through external audits of Humantic AI and Crystal. Jupyter notebooks demonstrating the use of our open-source library to conduct these audits are available on GitHub,where we also publish a third audit on a synthetically-generated dataset to demonstrate a broader, more general application of the technical framework.4

Socio-technical context

Employers purchase candidate-screening tools from Crystal and Humantic AI and use them to build personality profiles of potential employees. Both systems offer functionality for ranking candidates based on their personality profiles. Crystal assigns a “job fit” score to candidates, which is measured based on a comparison to either a “benchmark candidate” with a user-specified ideal personality profile, or to a job description that is analyzed to “detect the most important personality traits.” Similarly, Humantic AI assigns a “match score” to candidates by comparing them to an “ideal candidate,” specified with a LinkedIn URL or an ideal personality score vector.

The hiring processes supported by these systems are not fully automated. Human decision-makers must choose whether and how to define an ideal candidate, at what stage of hiring to use the tool, and how to incorporate tool outputs into hiring decisions. For example, an HR professional may decide to use an existing employee to define an ideal candidate, then run all resumes they receive through the tool, and finally offer interviews to all candidates with match scores above 90%. A different HR department may use the system to filter resumes before human review, choosing to rank candidates based on predicted Steadiness scores, and then discard all but the top 25 candidates. As these examples illustrate, the human-in-the-loop implementation details are crucial to actual outcomes.

Both systems output candidate DiSC scores: vectors of 4 numeric values, each corresponding to a personality trait. Humantic AI produces a score for each trait on a scale from 0 to 10, while Crystal represents each trait as a percent of the whole, giving each a score from 0 to 100 such that all four traits sum to 100%. In addition to DiSC, Humantic AI also outputs scores for The Big Five model of personality.

DiSC is a behavioral psychology test that assesses the extent to which a person exhibits four personality traits: Dominance (D), Influence (I), Steadiness (S), and Conscientiousness (C). 5 Although official DiSC documentation states that C represents Conscientiousness, Humantic AI states that C in DiSC stands for Calculativeness. 6 Notably, although both Humantic AI and Crystal market DiSC as a rigorous psychology-based analysis methodology, scholarly work on DiSC in I–O psychology has been limited, especially with regard to its validity and reliability for hiring. In fact, the DiSC website explicitly states that DiSC scores are “not recommended for pre-employment screening.” 7

The Big Five model contains five traits: Openness (O), Conscientiousness (C), Extraversion (E), Agreeableness (A), and Neuroticism (N). Humantic AI replaces Neuroticism with the more palatable Emotional Stability, which, they explain, is “the same as Neuroticism rated on a reverse scale”. 8 The use of the Big Five in personnel selection, while deemed acceptable by some I–O psychologists Goodstein and Lanyon 1999; Hurtz and Donovan 2000), is not without criticism. For example, Morgeson et al. argue that “the validity of personality measures as predictors of job performance is often disappointingly low” (Morgeson et al. 2007).

Humantic AI and Crystal state that they use machine learning to extract personality profiles of job candidates based on the text of their resumes and LinkedIn profiles. However, public information about model design and validation is limited. Humantic AI states that “all profile attributes are determined deductively and predictively from a multitude of activity patterns, metadata or other linguistic data inputs.”9Crystal explains that their personality profiles are “predicted through machine learning and use text sample analysis and attribute analysis.”10 Neither company makes its training data publicly available or discusses the data collection and selection methodology they used. For this reason, an external audit cannot assess whether the training data is representative of the populations on which the systems are deployed.

Information about validation is limited as well. Humantic AI reports that their outputs “have an accuracy between 80–100%”11Crystal advertises that “based on comparisons to verified profiles and our user’s direct accuracy validation through ratings and endorsements, Crystal has an 80% accuracy rating for Predicted [sic] profiles.”12 No additional information is given about the validation methodology, the specific accuracy metrics, or results. Finally, update schedules for the models used by the systems are not disclosed.

System assumptions

In accordance with Sloane et al., our methodology is centered around testing the underlying assumptions made by algorithmic systems within their specific socio-technical context (Sloane et al. 2022). Because algorithmic personality tests constitute a category of psychometric instrument, they are subject to the assumptions made by the traditional instruments, as laid out in Sect. 2.1. The validity of these systems is subject to the following additional assumptions:13Importantly, all these assumptions are testable via an external audit. Thus, these are the assumptions on which we focus our analysis, and with respect to which we quantify stability as a necessary condition for validity.

A1: The output of an algorithmic personality test is stable across input types (such as PDF or Docx) and other job-irrelevant variations in the input. This assumption corresponds to parallel forms reliability from psychometric testing (see Sect. 2.1).

A2: The output of an algorithmic personality test is stable across input sources (such as resume or LinkedIn) that are treated as interchangeable by the vendor. This assumption corresponds to cross-situational consistency (see Sect. 2.1).

A3: The output of an algorithmic personality test on the same input is stable over time. This assumption corresponds to test-retest reliability (see Sect. 2.1).

Key facets of measurement

We identify the following key facets across which Humantic AI and Crystal operationalize reliability, as discussed in Sect. 3:

Absent specific formatting instructions, the file format of an applicant’s resume (e.g., PDF or text), should have no impact on their personality score. Per assumption A1, stability estimates across this facet quantify parallel forms reliability.

Both systems use implicit signals within certain contexts (i.e., resumes, LinkedIn profiles, and tweets) to assign personality scores to job seekers. Further, both systems allow direct comparisons of personality scores derived from multiple source contexts, for example by ranking candidates on their “match score,” which is computed from resumes for some job seekers and from LinkedIn profiles for other job seekers. Per assumption A2, stability estimates across this facet quantify cross-situational consistency.

The decision to embed a LinkedIn URL into one’s resume should have no impact on the personality score computed from that resume. This is because output is expected to be stable across input sources per assumption A2, and across job-irrelevant input variations per A1.

(time when input is scored). Both systems generate personality scores for the same input at different points in time, and they compare and rank job seekers based on their scores made at different times. For example, consider an extended hiring process that takes place over the course of months, with new candidates being screened at different times. In this situation, Humantic AI and Crystal would both encourage users to compare output generated months apart. Based on assumption A3 (test-retest reliability), we expect the personality score computed on the same input to be the same, irrespective of when it is computed.

(time when input is produced). An employer may keep candidate resumes on file to consider them for future positions. An HR specialist might be tempted to generate scores from resumes they have on file, and compare them to scores of new candidates. Neither Humantic AI nor Crystal offer any guidance to users regarding the time period during which results remain valid, thus encouraging users to generalize across participant-time. Based on A3 (test-retest reliability), we expect the personality score computed based on time-varying input from the same individual to be the same, irrespective of when the input is generated.

Data collection

Primary data collection. We conducted an IRB-approved human subjects research study at New York University to seed the input corpus for the audit. For this, we recruited current graduate students at New York University’s Center for Data Science (), Tandon School of Engineering (), and Courant Institute of Mathematical Sciences (). We further required that participants not be currently located in the European Union or the United Arab Emirates. Participants were asked to complete a survey to upload their resume, provide a link to their public LinkedIn URL, their public Twitter handle, and their demographic information. All survey questions were optional.

In total, 94 participants qualified for the study, of whom 92 submitted LinkedIn URLs, 89 submitted resumes (in PDF, Microsoft Docx, or .txt format), and 32 submitted public Twitter handles. Participants were given access to their personality profiles computed by Crystal and Humantic AI in exchange for their participation in the study. See Appendix A.1 for demographic details.

Persistent linkage of email addresses to LinkedIn profiles, and the need for de-identification. During the initial processing of participant information in Humantic AI, we observed that the personality profile produced from LinkedIn is often identical to the one produced from a resume containing an embedded LinkedIn URL. We hypothesized that for such URL-embedded resumes, Humantic AI was disregarding any information on the resume itself and pulling information from LinkedIn to generate a personality score. We further hypothesized that the system may create persistent linkages between email addresses and LinkedIn profiles.

To investigate this trend, resumes containing a LinkedIn URL and an email address were passed to Humantic AI. Next, we created and submitted synthetic PDF resumes, which were blank except for the email addresses that had been passed along with LinkedIn URLs, and compared the Humantic AI output produced by these two treatments. (Note: Due to privacy concerns, all linkage experiments used researchers’ own accounts and either their own or synthetic email addresses.) It was revealed that, when Humantic AI encounters a document that contains both a LinkedIn URL and an email address, it persistently associates the two such that the system produces the same personality score whenever it encounters that email address in the future. Because Humantic AI uses the embedded URLs to import information directly from LinkedIn, the predicted profiles in our linkage experiments displayed names, photos, and employment information present on LinkedIn, but not on the resumes.

These findings further substantiate that Humantic AI operationalizes assumption A2 of cross-situational consistency (see Sect. 3).

These findings necessitated the use of de-identified resumes in all future Humantic AI experiments. De-identification allows comparison of the algorithm’s predictions on resumes, without the obfuscating effect of information being pulled from LinkedIn. It also prevents participants’ emails from being linked to synthetically altered versions of their resumes. See Table 1 for de-identification details. Note that de-identification was not necessary in Crystal, as no such linkage was observed there. Further findings from our linkage explorations are detailed in Sect. 5.1.

Table 1

Resume versions used as input

Version	File Format	Pre-Processing
Original	Various	None
De-Identified	PDF	Remove identifiers (name, phone, email, social media links, usernames). Save as PDF.
Raw Text	Raw Text	Copy text.
PDF	PDF	Save as PDF (if original in other format).
DOCX	DOCX	Remove identifiers (name, phone, email, social media links, usernames). Save as DOCX.
URL-Embedded	PDF	Remove identifiers (name, phone, email, social media accounts, LinkedIn URL). Insert hyperlinked LinkedIn URL into beginning of document. Save as PDF.

Treatment generation

To assess stability with respect to a facet of measurement, we need to perturb the input across the features that correspond to each facet, while keeping all other features fixed to the extent possible. As a result, we generate a pair of datasets, which we call treatments, for each facet. To isolate facet effects as cleanly as possible, we prepared several resume versions, described in Table 1. Details of each set of score-generating model calls that use these resume versions, or social media links, are presented in Appendix A.2. We will explain how these versions are used as treatments in the stability experiments in Sect. 5.

Stability measures

In the context of personality prediction, we identify the following measures of stability, summarized here, with additional details given in Appendix A.3.

As explained in Sect. 2.1, the reliability of psychometric instruments is measured with correlations. Thus, we select correlation as the statistical measure of rank-order stability. Morrow and Jackson make a convincing argument against providing significance levels for reliability correlations. Instead, we use the “bare minimum” of 0.90 and the “desirable standard” of 0.95, as proposed by Nunnally and Bernstein (1994), as the accept/reject threshold on correlations (Morrow et al. 1993).

If a system allows users to compare output across a key facet, then we should also assess locational stability across that facet, i.e., whether one facet treatment generally yields higher overall scores. We select the Wilcoxon signed-rank test, a non-parametric alternative which tests whether the median of the paired differences is significantly different than zero, as the statistical measure of locational stability. We select a suitable significance threshold after correcting for multiple hypothesis testing: We also identify total change as a relevant measure of instability, and use the L1 distance to measure it.

Bonferroni correction controls the family-wise error rate. It is guaranteed to falsely reject the null hypothesis no more often than the nominal significance level, however, it can be overly conservative, especially when sample sizes are low (i.e., it can falsely accept the null hypothesis more often than the nominal significance level implies), refer to VanderWeele and Mathur (2019) for details:

Benjamini–Hochberg correction is a less conservative approach that controls the false discovery rate. The procedure ranks obtained p-values in ascending order and uses these ranks to derive corrected thresholds, which range between and , refer to Benjamini and Hochberg (1995) for details:

Note that these are three different ways to quantify stability, and that a system may, for example, be found to have sufficient rank-order stability but to lack locational stability, and vice versa.

Generating outputs

To conduct this audit, we purchased nine months of Humantic AI basic organizational membership at a total cost of $2,250, and a combination of monthly and annual Crystal memberships at a total cost of $753.82. We carried out our experiments over the period of November 23, 2020 through September 16, 2021.

One week into our evaluation, representatives from Humantic AI ascertained that we were using their tool to conduct an audit, and reached out to inform us that they would like to collaborate in the effort. In light of this development, we weighed the advantages and disadvantages of engaging with Humantic AI and decided to continue with a neutral external audit, to minimize the potential for conflicts of interest and maximize our ability to critically analyze the system for stability. The cost of that decision is that we had to forgo potential access to the underlying data, modeling decisions, features, and model parameters that a collaboration with Humantic AI may have afforded (Koshiyama et al. 2021; Sloane et al. 2022). While we do not have any reason to believe that the discovery of our audit caused Humantic AI to change their models or operation, we cannot rule out this possibility.

Computing stability measures

For the audits of Crystal and Humantic AI we compute the following statistical measures using our technical framework:

We compute Spearman’s correlation (a measure of rank order stability) as follows:

We perform Wilcoxon’s signed rank test (as the measure of locational stability) as follows:

We also compute the L1 distance (as a measure of total variation) as follows:

Results

Table 2 summarizes the results of our audit. We found that Humantic AI and Crystal predictions both exhibit rank-order instability with respect to source context and participant-time. In addition, Crystal is rank-order unstable with respect to file format, and Humantic AI is rank-order unstable with respect to URL-embedding in resumes. The systems were sufficiently rank-order stable with respect to all other facets. We did not find any significant locational instability in Crystal. Some traits in Humantic AI displayed significant locational instability with respect to URL-embedding, source context, and participant-time. Complete experimental results can be found in Appendix B.

Table 2

Summary of stability results for Crystal and Humantic AI, with respect to facets of measurement from Sect. 4.3.

Facet	Crystal	Humantic AI	Details
Resume file format	×	✓	Sect. 5.3
LinkedIn URL in resume	?	×	Sect. 5.4
Source context	×	×	Sect. 5.5
Algorithm-time / immediate	✓	✓	Sect. 5.6
Algorithm-time / 31 days	✓	×	Sect. 5.6
Participant-time / LinkedIn	×	×	Sect. 5.7
Participant-time / Twitter	N/A	✓	Sect. 5.7

“✓” indicates both sufficient rank-order stability () and sufficient locational stability () in all traits, “✗” indicates either insufficient rank-order stability () or significant locational instability () in at least one trait, and “?” indicates the facet was not tested in our audit

Persistent linkage and privacy violations in Humantic AI

Investigative linkage experiments revealed that when Humantic AI encounters a document that contains a LinkedIn URL and an email address, the resulting profile will have a 100% confidence score, and it will contain information found only on LinkedIn (including name, profile picture, and job descriptions and dates). Furthermore, the Humantic AI model produces the same personality profile whenever it encounters that email address in the future. This linkage persists regardless of how different the new resume is from the one that initially formed the linkage. The email address in question need not be associated with the LinkedIn profile, or even with the candidate. We observed one case in which a participant listed contact information for references, and Humantic AI created a link between a reference’s email and the participant’s LinkedIn.

We also found that, once a linkage between an email address and a LinkedIn URL had been made, we were able to alter the personality score produced from a LinkedIn profile by submitting a resume with strong language, namely, containing keywords “sneaky” and “adversarial.” We therefore conclude that the linkage is used by Humantic AI in both directions: the content of a LinkedIn profile can affect the personality score computed from a linked resume, and the content of a linked resume can affect personality score computed based on a LinkedIn profile.

We did not observe any linkage with participants’ Twitter accounts. However, when we used high-profile celebrity Twitter accounts as input, Humantic AI produced profiles that contained links to several other profiles, including Google+, LinkedIn, Facebook, and Klout. We observed one case in which a high-profile popstar was linked to a software engineer of the same name.

Although Humantic AI offers an option at the bottom of their website to “opt out of Humantic AI ” by entering an email, social network username, LinkedIn URL, or phone number (see Fig. 3), this feature seems to be inoperable. Various forms of participant information were entered into this field, yet, personality scores associated with this information in the past persisted on the Humantic AI dashboard, and new results were returned when the information was passed to Humantic AI in a new account. In cases where LinkedIn profiles were deactivated after profiles were created from them, it was observed that Humantic AI would still create new profiles from the deactivated LinkedIns, even on different Humantic AI accounts.

Fig. 3

Screen shots of the Humantic AI “opt out” feature

Score distributions

Output scores in Humantic AI were approximately normally distributed, with the exception of DiSC Calculativeness, which was strongly left-skewed in all runs.

We observed discontinuity in Crystal output, which was particularly marked in Steadiness and Conscientiousness, as shown in Fig. 4. For example, no one in our sample had a Steadiness score between 40–50, but many individuals had scores in the 20–30 range, and then again in the 55–65 range. This may be problematic from the point of view of stability, because a small change in the input may lead to a large change in output across the point of discontinuity, effectively moving between clusters. In fact, we observe this in Fig. 4, where in two cases, the value of Steadiness jumps from around 30 for raw text resumes to around 60 for PDF resumes. Having a PDF resume can make you twice as steady, according to Crystal. Yet, two other examples show the opposite effect: A raw text resume scores about twice as high on Steadiness compared to PDF, for another pair of individuals in our sample. And so having a PDF resume can also make you half as steady, according to Crystal. There are further examples of this for Conscientiousness, also shown in Fig. 4.

Fig. 4

Comparison of Crystal output across the resume file format facet. Note evidence of discontinuous measurement in DiSC Steadiness and Conscientiousness, with some participants’ scores moving between clusters with different file formats

We found no evidence of significant locational instability in Crystal. The median for each DiSC trait remained fairly constant across all Crystal runs. The median Dominance score was always 5, the median Influence score was always 10, the median Steadiness score was always 22 or 23, and the median Conscientousness score ranged from 59 to 62.

File format

We determine that Humantic AI is in general sufficiently stable with respect to file format. Rank correlations range from 0.982 (Emotional Stability) to 0.998 (Steadiness). (The two sets of runs are constant with regard to participant-time, and are very close to each other in terms of algorithm-time; scores for the de-identified PDF and Docx resumes were generated on the same day, within minutes of each other.)

Crystal ’s overall stability across the file format facet fails to meet Nunnally and Bernstein’s preferred standard of 0.95 for Steadiness (0.918) and Conscientiousness (0.911), and falls below the minimum limit of 0.90 for Dominance (0.822) and Influence (0.826). In some subgroups, Steadiness and Conscientiousness do fall below 0.90: female () and those whose primary language is English (). Although PDF resumes were scored by Crystal four months earlier than raw text resumes, given the perfect reproducibility of Crystal ’s text predictions, albeit over a shorter time span, we can assume that algorithm-time is not a factor here.

There were no significant locational stability differences across the file format facet in either Humantic AI or Crystal.

Inclusion of LinkedIn URL in resume

We discovered substantial instability with regard to URL-embedding in resumes in Humantic AI. Correlations between de-identified resumes and the same resumes with LinkedIn URLs embedded into them ranged from 0.077 (Extraversion) to 0.688 (Calculativeness). We also discovered locational differences deemed significant by the Bonferroni threshold in Dominance, Steadiness, Big Five Conscientiousness, Extraversion, and Agreeableness. Under the more liberal Benjamini–Hochberg standard, there were also significant locational differences in DiSC Calculativeness and Openness. Figure 5a gives a representative example; complete results are presented in Appendix B.1.

Fig. 5

a Humantic AI Dominance scores from de-identified and URL-embedded resumes. b Humantic AI Extraversion scores produced by de-identified resumes and LinkedIn profiles

We note that algorithm-time is unfortunately an unavoidable factor here; the two resume versions were run about four months apart. Furthermore, if we accept that Humantic AI uses information from LinkedIn profiles when it encounters embedded LinkedIn URLs, then we are also faced with a mismatch in participant-time.

Source context

Humantic AI and Crystal both displayed low stability across input sources. See Figure 6 for comparison of L1 distances between each treatment of the input source facet in Humantic AI.

Fig. 6

Normalized L1 distances between Humantic AI DiSC and Big Five scores produced from pairs of treatments that vary with respect to their input source

Crystal ’s rank-order correlations between PDF resumes and LinkedIn profiles were all below the 0.90 threshold; they ranged from 0.233 (Dominance) to 0.526 (Influence). There was no significant locational instability in Crystal. PDF resumes and LinkedIn URLs were scored the same day, and, as we will discuss in Sect. 5.6, Crystal is immediately reproducible, and so we can rule out algorithm-time as a factor in this finding. Furthermore, for each candidate, this scoring took place within two weeks of resumes being submitted; thus, the participant-time of the resume matches very nearly to the participant-time of the LinkedIn. With all other facets being identical or near-identical, we can safely attribute the observed score differences to differences in source context.

De-identified resumes were submitted to Humantic AI 4 months after LinkedIn profiles had been run. This difference in algorithm-time hampers our interpretation of cross-profile correlations. Nonetheless, it is undeniably troublesome that the observed correlations are as low as 0.090 (Dominance), and that there were significant locational differences under Bonferroni in Dominance and Extraversion, and under Benjamini–Hochberg in Steadiness and Openness. See Appendix B.2 for details.

We can avoid the issue of algorithm-time by using Humantic AI scores derived from original resumes, which were run at the same time as LinkedIn profiles. However, these results are somewhat misleading, as 57 of the 84 resumes in this experiment contained some form of LinkedIn URL. Considering the evidence that Humantic AI uses information directly from LinkedIn in such cases, correlations derived from original resumes are likely to overestimate cross-contextual stability. Nevertheless, the correlations we observe across all 84 participants range from 0.177 (Dominance) to 0.712 (Big Five Conscientiousness), with significant locational differences under Bonferroni in Dominance and Extraversion; and in Influence and Big Five Conscientiousness under Benjamini–Hochberg. We also found significant differences for non-native English speakers in Agreeableness under Benjamini–Hochberg. See Appendix B.2 for details. Limiting analysis to the 27 participants whose original resumes contained no reference to LinkedIn, we find that the correlations straddle zero, ranging from -0.310 (Influence) to 0.297 (DiSC Calculativeness).

Figure 5b highlights some of these results. Appendix B.2 presents details of this experiment, and further includes a comparison of Humantic AI scores computed from Twitter to those computed from original resumes and from LinkedIn.

Algorithm-time

Crystal results on resumes were reproducible immediately as well as one month later. We can conclude that Crystal ’s text prediction tool is deterministic and was not updated over the course of April 2021, when the experiment was performed.

Humantic AI results were not perfectly reproducible, even immediately. This may be explained by a non-deterministic prediction function, or by an online model that is updated with each prediction it makes. The latter explanation is in-line with our findings in the linkage investigations, where we observed that one call to the model can influence the outcome of other calls. Only Steadiness and DiSC Calculativeness remained constant for all participants when identical resumes were run back-to-back. One participant had changes in their Dominance and Influence scores (DiSC total normalized L1 difference was 0.005), and two participants had changes in their Big Five scores (maximum Big Five total normalized L1 difference was 0.003). The correlations for immediate reproducibility were all above 0.95, and there were no significant locational differences.

After 31 days, rank-order correlations in Humantic AI ranged from 0.962 (Extraversion) to 0.998 (DiSC Calculativeness). Although the overall Humantic AI correlations across algorithm-time were all above the 0.95 threshold, we find that for non-native English speakers (), Dominance () and Extraversion () both fell below 0.95. We also find significant instability in Openness under Benjamini–Hochberg.

See Appendix B.3 for additional details about this experiment.

Participant-time

Humantic AI scores on Twitter accounts showed no change over 7–9 months. LinkedIn correlations across 7–9 months of participant-time were all below the 0.90 threshold: they ranged from 0.225 (Dominance) to 0.768 (Emotional Stability). Under Bonferroni correction, we found a significant difference in Big Five Conscientiousness scores, and under Benjamini–Hochberg we found a significant difference in Agreeableness.

Crystal LinkedIn correlations across 8–10 months of participant-time were all below the 0.90 threshold as well, ranging from 0.531 (Dominance) to 0.868 (Steadiness). We found that the reliability for male participants was particularly low (, ). See Figure 7 for cross-gender comparison of L1 distances between participant-time treatments. There was no significant locational instability across participant-time in Crystal. See Appendix B.4 for additional details about this experiment.

Fig. 7

Normalized L1 distances between Crystal DiSC scores produced from LinkedIn profiles scored 8–10 months apart

Discussion

Stability audit conclusions

Humantic AI and Crystal both exhibit low reliabilities across time and input source context. Humantic AI also exhibited low reliability with respect to the presence of LinkedIn URLs in resumes. Crystal ’s reliability with respect to resume format is unacceptably low as well. The correlations we observed allow us to conclude that the tools cannot be considered valid instruments in high-stakes decisions.

Overall, each of these observed unreliabilities undermines the cost and effort reduction that employers seek from candidate screening tools. Employers’ desire for valid decisions reflective of job performance is severely compromised by sensitivity to job-irrelevant factors. Thus, we find that Humantic AI ’s sensitivities to participant-time, URL-embedding, and source context, and Crystal ’s sensitivities to file format and source context, could be quite problematic for employers. The sensitivity of these algorithms to job-irrelevant factors is also a threat to individual fairness; a job seeker could reasonably conclude from the present audit that Humantic AI and Crystal are both likely to judge their job-worthiness unfairly, letting meaningless criteria dictate their outcomes.

These unreliabilities are also at odds with the trustworthiness that society seeks in its AI products. Humantic AI ’s lack of reproducibility is a particularly insidious violation of trustworthiness, because it undermines the power of audits on its system. Although Humantic AI ’s stability over algorithm-time exceeds Nunnally and Bernstein’s classical 0.95 reliability threshold for tests used to make decisions about individuals (see Sect. 2.1), the Supreme Audit Institutions of Finland, Germany, the Netherlands, Norway and the UK have asserted that reproducibility is “a mandatory condition for reliability” (Riksrevisjonen 2020). Irreproducibility resulting from frequently or continuously updated models poses a threat to the ongoing monitoring and auditing necessary to ensure a system is working as expected (Bogen and Rieke 2018; Koshiyama et al. 2021).

Finally, Humantic AI ’s and Crystal ’s lack of transparency regarding training data and model architecture are at odds with privacy concerns. Humantic AI ’s deceptive and ineffective opt-out option is an example of what Ajunwa calls “algorithmic blackballing,” whereby an applicant’s profile is allowed to live on past its shelf-life (Ajunwa 2021). This is especially dangerous in combination with the potential to leverage Humantic AI ’s email linkage mechanism in an adversarial attack. Humantic AI ’s failed opt-out option may also violate the California Consumer Privacy Act’s right to delete (California Civil Code 2018).

Study limitations

In our audit we do not conduct stakeholder evaluations. Several audits and frameworks emphasize the importance of stakeholder evaluation and impact assessment (Brown et al. 2021; Fjeld et al. 2020; ORCAA 2020; Raji et al. 2020; Razavi et al. 2021; Sloane et al. 2022).

For example, Metcalf et al. explain that an external audit must not stand in as an algorithmic impact assessment (Metcalf et al. 2021). Without collaboration of internal agents, third parties do not have access to design decisions or stakeholder interviews, and cannot directly influence change in the design or operation of the algorithm should it be needed. Per Ajunwa, algorithms need to be audited internally as well as externally (Ajunwa 2021).

Although this audit considers various dimensions of reliability and stability, the analysis is not comprehensive. We have constrained our audit methodology to analyze the numerical scores produced by personality prediction AI that claim to offer a quantitative measure of personality, such as the DiSC and Big Five scores produced by Crystal and Humantic AI. However, much of the advertising of such tools focus on the profiles holistically, not just on the scores. Further Crystal and Humantic AI both categorize candidates into one of several types and produce descriptive personality profiles. Written profiles are likely influential in hiring decisions, however, in the interest of keeping the scope of our work manageable, we leave a treatment of stability in these textual profiles to future work.

The audit methodology is also limited by its emphasis on comparing pairs of control and treatment scores. For example: Humantic AI often fails to produce profiles from inputs (see the discrepancies between number of inputs submitted and number of profiles produced in Table 5). This is especially common when using Twitter profiles. By simply disregarding the failed inputs, we may be introducing some sampling bias into our results. Furthermore, such non-results may exhibit problematic biases (ORCAA 2020).

Table 5

Humantic AI runs (i.e., sets of score-generating calls to Humantic AI models)

Input type	Run ID	Run dates	# Inputs	# Outputs
Original Resume	HRo1	11/23/2020 - 01/14/2021	89	88
De-Identified Resume	HRi1	03/20/2021 - 03/28/2021	89	89
De-Identified Resume	HRi2	04/20/2021 - 04/28/2021	89	89
De-Identified Resume	HRi3	04/20/2021 - 04/28/2021	89	89
DOCX Resume	HRd1	03/20/2021 - 03/28/2021	89	89
URL-Embedded Resume	HRu1	04/09/2021 - 04/11/2021	86	86
LinkedIn	HL1	11/23/2020 - 01/14/2021	92	88
LinkedIn	HL2	08/10/2021 - 08/11/2021	92	91
Twitter	HT1	11/23/2020 - 01/14/2021	32	21
Twitter	HT2	08/10/2021 - 08/11/2021	32	21

Our study population was constrained to technical graduate students at NYU, studying in the realms of computer and data science. This was done in an attempt to control for differences in algorithm response due to characteristics such as job field, experience level, and writing style. We also felt that this restriction more closely replicated a pool of candidates who might realistically be compared to one another in a job search. However, this narrowness, and our modest cohort size (), restrict the generalizability of the results of our audit of Crystal and Humantic AI.

Additionally, this audit evaluates only the intermediate personality profile results, and does not relate them to hiring outcomes. Our audit did not use the “job fit” or “match score” features because, as external auditors, we did not have access to information on how ideal candidates are defined or how thresholds are set. Without this information, we cannot assess outcomes-based fairness metrics. This means that critical questions of discrimination remain out of scope for this study. We caution that the adverse impact of human-in-the-loop hiring systems must be assessed on an employer-by-employer basis in order to account for crucial implementation details and differences in the context of use.

Conclusions and future work

In this paper, we investigated the reliability of algorithmic personality tests used in hiring. We gave an overview of the key literature on psychometric testing applied to hiring and in algorithm auditing, and found that, although reliability is seen as a necessary condition for the validity of a psychometric instrument, it has not received substantial treatment in algorithm audits. Based on this observation, we developed a socio-technical audit methodology, informed by psychometric theory and sociology, to test the stability of black-box algorithms that predict personality for use in hiring. We also developed an open-source software library to automates the quantitative components of this framework. We then instantiated this methodology in an external audit of two systems, Humantic AI and Crystal, using a dataset of job applicant profiles collected through an IRB-approved study. Using our audit methodology, we found that that both systems lack reliability across key facets of measurement, and concluded that they cannot be considered valid personality assessment instruments.

The present study demonstrates that stability, though often overlooked in algorithm audits, is an accessible metric for external auditors. We found that stability is highly relevant to the application of personality prediction. Furthermore, because reliability is a prerequisite of validity, stability is in fact relevant whenever validity is. Importantly, we note that, while reliability is a necessary condition for validity, it is not a sufficient condition. Further evidence of domain-specific validity is essential to support the use of algorithmic personality tests in hiring.

Our methodology can be used by employers to make informed purchasing and usage decisions, and to better interpret algorithm outputs, by legislators to guide regulation, and by consumers to make informed decisions about how and when to disclose their information to potential employers. Our open-source software library reduces the amount of effort that would be required to conduct such analyses.

Moreover, given its modular design, our software library can be easily extended to support other reliability-related measures. As mentioned in Sect. 3, we envision an extension of the Treatment Generator that can (at least partially) automate the creation of treatments, for example, by sampling values for a particular feature from an appropriate distribution, or by automatically perturbing values in text features. The library’s visualization capabilities, which currently include scatterplots and boxplots, can also be extended to facilitate the generation of audit results that are amenable to a wide variety of stakeholders, both technical and non-technical. The library already computes statistics broken down by demographic groups of interest, and can also easily be extended to compute fairness-related measures.

Algorithmic audits must not be one-size-fits-all. The tendency of auditors, especially within the hiring domain, to rely on legal frameworks as a scoping mechanism is likely to leave important risks undetected. Current legal frameworks are insufficient; furthermore, legality does not equate to ethics. Instead, we recommend that auditors interrogate the assumptions operationalized by systems, and design audits accordingly.

Finally, we note that this work was conducted by an interdisciplinary team that included computer and data scientists, a sociologist, an industrial psychologist, and an investigative journalist. This collaboration was both necessary and challenging, requiring us to reconcile our approaches and methodological toolkits, forging new methods for interdisciplinary collaboration.

Table 3

Demographics of study participants: gender and race

	Gender			Race
	Male	Female	Other	Asian	White	Other	No answer
N	56	36	2	57	24	12	1
%	59.6	38.3	2.1	60.6	25.5	12.8	1.0

Table 4

Demographics of study participants: birth country and primary language

	Birth Country					Primary Language
	India	USA	China	Other	No answer	English	Other
N	34	28	12	18	2	60	34
%	36.2	29.8	12.8	19.1	2.1	63.8	36.2

Table 6

Crystal runs (i.e., sets of score-generating calls to Crystal models)

Input type	Run ID	Run dates	# Inputs	# Outputs
Raw Text Resume	CRr1	03/31/2021 - 04/02/2021	89	89
Raw Text Resume	CRr2	05/01/2021 - 05/03/2021	89	89
Raw Text Resume	CRr3	05/01/2021 - 05/03/2021	89	89
PDF Resume	CRp1	11/23/2020 - 01/14/2021	89	89
LinkedIn	CL1	11/23/2020 - 01/14/2021	92	91
LinkedIn	CL2	09/13/2021 - 09/16/2021	89	89

Table 7

Rank-order stability of Crystal DiSC scores, as measured by Spearman’s rank correlations. Columns labeled D (Dominance), I (Influence), S (Steadiness), C (Conscientiousness / Calculativeness).

Facet	Input Versions	N	D	I	S	C
File Format	Raw Text vs. PDF Resume (CRr1 vs. CRp1)	89	0.8225	0.8260	0.9184	0.9114
Source Context	PDF Resume vs. LinkedIn (CRp1 vs. CL1)	86	0.2335	0.5258	0.5103	0.3585
Immediate Rep.	Raw Text Resume back-to-back (CRr2 vs. CRr3)	89	1.0000	1.0000	1.0000	1.0000
Algorithm-Time	Raw Text Resume 31 days apart (CRr1 vs. CRr2)	89	1.0000	1.0000	1.0000	1.0000
Participant-Time	LinkedIn 8–10 months apart (CL1 vs. CL2)	89	0.5314	0.7062	0.8676	0.7811

Reliabilities below 0.90 highlighted in bold; those between 0.90 and 0.95 highlighted in italic. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7

Table 8

Rank-order stability of Humantic AI DiSC scores, as measured by Spearman’s rank correlations. Columns labeled D (Dominance), I (Influence), S (Steadiness), C (Conscientiousness / Calculativeness).

Facet	Input Versions	N	D	I	S	C
File Format	De-Identified Resume vs. DOCX Resume (HRi1 vs. HRd1)	89	0.9956	0.9924	0.9978	0.9959
URL Embedding	URL-Embedded Resume vs. De-Identified Resume (HRu1 vs. HRi1)	86	0.3570	0.6253	0.5480	0.6878
URL Embedding	URL-Embedded Resume vs. LinkedIn (HRu1 vs. HL1)	83	0.1555	0.3382	0.6074	0.4701
Source Context	De-Identified Resume vs. LinkedIn (HRi1 vs. HL1)	84	0.0903	0.2553	0.3941	0.3331
Source Context	Original Resume vs. LinkedIn (HRo1 vs. HL1)	84	0.1775	0.4016	0.6939	0.6249
Source Context	Original Resume vs. Twitter (HRo1 vs. HT1)	20	-0.5211	0.1026	0.0382	-0.1475
Source Context	LinkedIn vs. Twitter (HL1 vs. HT1)	18	-0.1317	0.0203	-0.1120	-0.4329
Immediate Rep.	De-Identified Resume back-to-back (HRi2 vs. HRi3)	89	0.9999	1.0000	1.0000	1.0000
Algorithm-Time	De-Identified Resume 31 days apart (HRi1 vs. HRi2)	89	0.9726	0.9948	0.9925	0.9980
Participant-Time	LinkedIn 7–9 months apart (HL1 vs. HL2)	88	0.2248	0.4186	0.6597	0.5827
Participant-Time	Twitter 7–9 months apart (HT1 vs. HT2)	21	1.0000	1.0000	1.0000	1.0000

Reliabilities below 0.90 highlighted in bold. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7

Table 9

Rank-order stability of Humantic AI Big Five scores, as measured by Spearman’s rank correlations. Columns labeled O (Openness), C (Conscientiousness), E (Extraversion), A (Agreeableness), and S (Emotional Stability).

Facet	Input Versions	N	O	C	E	A	S
File Format	De-Identified vs. DOCX Resume (HRi1 vs. HRd1)	89	0.9891	0.9936	0.9939	0.9927	0.9816
URL Embedding	URL-Embedded vs. De-Identified Resume (HRu1 vs. HRi1)	86	0.3988	0.3845	0.0772	0.4190	0.4040
URL Embedding	URL-Embedded vs. LinkedIn (HRu1 vs. HL1)	83	0.6381	0.5470	0.5786	0.6839	0.7018
Source Context	De-Identified Resume vs. LinkedIn (HRi1 vs. HL1)	84	0.2180	0.1558	0.1198	0.2020	0.2186
Source Context	Original Resume vs. LinkedIn (HRo1 vs. HL1)	84	0.5985	0.7124	0.5827	0.6136	0.5990
Source Context	Original Resume vs. Twitter (HRo1 vs. HT1)	20	-0.1768	0.2324	-0.1128	-0.2316	0.0692
Source Context	LinkedIn vs. Twitter (HL1 vs. HT1)	18	-0.2158	0.0000	-0.1559	-0.1517	-0.1125
Immediate Rep.	De-Identified Resume back-to-back (HRi2 vs. HRi3)	89	1.0000	1.0000	1.0000	0.9999	1.0000
Algorithm-Time	De-Identified Resume 31 days apart (HRi1 vs. HRi2)	89	0.9954	0.9969	0.9618	0.9921	0.9854
Participant-Time	LinkedIn 7–9 months apart (HL1 vs. HL2)	88	0.6879	0.6928	0.7301	0.7518	0.7678
Participant-Time	Twitter 7–9 months apart (HT1 vs. HT2)	21	1.0000	1.0000	1.0000	1.0000	1.0000

Reliabilities below 0.90 highlighted in bold. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7

Table 10

Significance in locational instability of Crystal DiSC scores, as measured by two-tailed Wilcoxon signed-rank test p-values. Columns labeled D (Dominance), I (Influence), S (Steadiness), C (Conscientiousness / Calculativeness).

Facet	Input Versions	N	D	I	S	C
File Format	Raw Text vs. PDF Resume (CRr1 vs. CRp1)	89	0.5026	0.4208	0.0173	0.0370
Source Context	PDF Resume vs. LinkedIn (CRp1 vs. CL1)	86	0.4190	0.0012	0.7010	0.8421
Immediate Rep.	Raw Text Resume back-to-back (CRr2 vs. CRr3)	89	N/A	N/A	N/A	N/A
Algorithm-Time	Raw Text Resume 31 days apart (CRr1 vs. CRr2)	89	N/A	N/A	N/A	N/A
Participant-Time	LinkedIn 8-10 months apart (CL1 vs. CL2)	89	0.7299	0.6518	0.3305	0.2870

The absence of bold highlighting indicates that all values are below both the Benjamini–Hochberg and Bonferroni-corrected thresholds based on of 0.05. “N/A” values reflect experiments where there was zero change across the facet. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7

Table 11

Significance in locational instability of Humantic AI DiSC scores, as measured by two-tailed Wilcoxon signed-rank test p-values. Columns labeled D (Dominance), I (Influence), S (Steadiness), C (Conscientiousness / Calculativeness).

Facet	Input Versions	N	D	I	S	C
File Format	De-Identified vs. DOCX Resume (HRi1 vs. HRd1)	89	0.2510	0.2940	0.4574	0.2539
URL Embedding	URL-Embedded vs. De-Identified Resume (HRu1 vs. HRi1)	86	0.0000	0.3194	0.0005	0.0047
URL Embedding	URL-Embedded Resume vs. LinkedIn (HRu1 vs. HL1)	83	0.0066	0.1825	0.5324	0.1213
Source Context	De-Identified Resume vs. LinkedIn (HRi1 vs. HL1)	84	0.0000	0.0580	0.0013	0.3259
Source Context	Original Resume vs. LinkedIn (HRo1 vs. HL1)	84	0.0000	0.0050	0.2299	0.5911
Source Context	Original Resume vs. Twitter (HRo1 vs. HT1)	20	0.5706	0.3118	0.1975	0.6874
Source Context	LinkedIn vs. Twitter (HL1 vs. HT1)	18	0.0342	0.3247	0.6095	0.5539
Immediate Rep.	De-Identified Resume back-to-back (HRi2 vs. HRi3)	89	0.3173	0.3173	N/A	N/A
Algorithm-Time	De-Identified Resume 31 days apart (HRi1 vs. HRi2)	89	0.1416	0.5971	0.5690	0.0307
Participant-Time	LinkedIn 7–9 months apart (HL1 vs. HL2)	88	0.0709	0.0800	0.3457	0.2969
Participant-Time	Twitter 7–9 months apart (HT1 vs. HT2)	21	N/A	N/A	N/A	N/A

Bold highlighting indicates value below Bonferroni-corrected threshold based on of 0.05. Italic indicates p-value below Benjamini–Hochberg corrected threshold and above Bonferroni-corrected threshold. “N/A” values reflect experiments where there was zero change across the facet. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7

Table 12

Significance in locational instability of Humantic AI Big Five scores, as measured by two-tailed Wilcoxon signed-rank test p-values. Columns labeled O (Openness), C (Conscientiousness), E (Extraversion), A (Agreeableness), and S (Emotional Stability).

Facet	Input Versions	N	O	C	E	A	S
File Format	De-Identified vs. DOCX Resume (HRi1 vs. HRd1)	89	0.7193	0.9248	0.5306	0.3003	0.9771
URL Embedding	URL-Embedded vs. De-Identified Resume (HRu1 vs. HRi1)	86	0.0025	0.0000	0.0000	0.0002	0.2214
URL Embedding	URL-Embedded Resume vs. LinkedIn (HRu1 vs. HL1)	83	0.7352	0.0000	0.3603	0.0068	0.7167
Source Context	De-Identified Resume vs. LinkedIn (HRi1 vs. HL1)	84	0.0077	0.3997	0.0000	0.1730	0.6718
Source Context	Original Resume vs. LinkedIn (HRo1 vs. HL1)	84	0.5300	0.0003	0.0001	0.0221	0.4553
Source Context	Original Resume vs. Twitter (HRo1 vs. HT1)	20	0.0121	0.0826	0.8983	0.0020	0.0010
Source Context	LinkedIn vs. Twitter (HL1 vs. HT1)	18	0.0023	0.0047	0.0007	0.0047	0.0007
Immediate Rep.	De-Identified Resume back-to-back (HRi2 vs. HRi3)	89	0.1797	0.3173	0.3173	0.6547	0.6547
Algorithm-Time	De-Identified Resume 31 days apart (HRi1 vs. HRi2)	89	0.0071	0.5314	0.2540	0.0516	0.2424
Participant-Time	LinkedIn 7–9 months apart (HL1 vs. HL2)	88	0.6487	0.0000	0.9615	0.0072	0.6011
Participant-Time	Twitter 7–9 months apart (HT1 vs. HT2)	21	N/A	N/A	N/A	N/A	N/A

Bold highlighting indicates value below Bonferroni-corrected threshold based on of 0.05. Italic indicates p-value below Benjamini–Hochberg corrected threshold and above Bonferroni-corrected threshold. “N/A” values reflect experiments where there was zero change across the facet. Results are discussed in Sects. 5.3, 5.4, 5.5, 5.6, and 5.7