Indeed
Transparency
ReportJan.1 - Jun. 30, 2022
Highlighting how we help people get jobs
by protecting the job seekers and employers
who use Indeed

As the world’s #1 job site, Indeed is committed
to helping people get jobs.1 With every decision
we make, we ask ourselves, “What’s best for thejob seeker?” in service of making it faster, easierand more enjoyable for people to get a job. Our
job seeker-first mentality ultimately benefits
employers, as well, by getting the right people inthe right jobs, quickly.
We greatly value the trust that 250 million
unique visitors place in us during critical stagesof their career development and businessgrowth.2 This edition of the Indeed Transparency
Report highlights the ways in which we protect
the privacy and security of our job seekers andemployers. All data found in this report is from
July 1 to December 31 and covers such topics as:
Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Page 3
Trust & Safety. . . . . . . . . . . . . . . . . . . . . . . . . . . . Page 6
Data Privacy and Legal. . . . . . . . . . . . . . . . . . . Page 10

Source: Comscore, Total Visits, March 2020. 2Source: Google Analytics, February 20201

Jan.1 - Jun. 30, 2022

02

Security
As Indeed’s first layer ofdefense from potential
threats, the Security teamworks closely with Indeed’s
Product teams to protect
job seekers and employers
on our site in many ways,
including by…
Blocking bots andmalicious requests
Running a bug bounty program

Blocking malicious traffic
Security uses a multi-layered system of defenses
to detect and mitigate malicious traffic onIndeed, which primarily takes the form of bots, inaddition to some human fraudsters.
Malicious bots are automated programs thatcan steal personal data, register fake accounts
and otherwise abuse our platform. Indeed has
implemented automated strategies that leverage
network reputation, anomaly detection andother machine learning solutions to distinguishbetween human users and bots, blocking thelatter before they infiltrate Indeed’s platform.
Malicious requests are human-directed attacks
on a network, through which bad actors attempt
to compromise user accounts to perpetratefraud. Though Indeed believes that most people
on the Internet have good intentions, we strive
to block those who don’t by using technology todetermine the origin and intent of requests into
our system.

Where malicious traffic gets blocked
Login
188,337,007
Account registration
34,284,137
Forgot password
9,172,837
All others
4,318,049
Resume scraping
1,495,811

Jan.1 - Jun. 30, 202204

Running a bug bounty programSix years ago, as part of our long-standing
commitment to security, Indeed establishedboth public and private bug bounty programs,
through which over 2,000 researchers flag
potential gaps in our systems in exchange forcompensation (up to $10,000).

PublicPrivate

TotalsUnique submissions

621

23644

Validated and accepted

12013133

By crowdsourcing this information fromthird-party researchers, Indeed is able tofocus its internal resources on resolving theidentified vulnerabilities.

Jan.1 - Jun. 30, 202205

Trust &Safety
As Indeed’s second line ofdefense, the Trust & Safety
team strives to protect job
seekers and employers
from outstanding instancesof fraud and quality
violations by automaticallyand manually...
Identifying and removing
fraudulent accounts
Identifying and removing
low-quality job postings

What’s thedifference
between fraud
and a quality
violation?
Indeed defines fraud as accounts or job
postings that target job seekers or employers
with malicious actions or law-breaking activities.

Accounts removed
due to fraud
200,917
Accounts removed
due to a quality violation
54,478Accounts removed
due to unverifiablity
211,648
Accounts flagged
as compromised
3,097

Indeed defines quality violations as accounts
or job postings that may go against our policies
and/or guidelines.

Jan.1 - Jun. 30, 2022

07

Identifying and removing
fraudulent accounts
Indeed uses automatic and manual means ofidentifying and removing fraudulent accounts
from our site as quickly as possible. We put
rules in place to flag potentially risky accounts
for review by our moderators, and our Trust &Safety team proactively uses various tools andsubject matter expertise to manually identify any
accounts that the automatic system may miss.
Users can also identify and report potentiallyfraudulent accounts, which our moderators
swiftly review and remove if they are found to bein violation of our policies.
Through these automatic and manual means ofidentifying fraudulent accounts, Indeed is able tominimize their impact on our users, especially job
seekers who do not then put themselves at risk
by engaging with fraudulent employers.

Total fraudulent accounts removed
Proactively identified and removed
Reported by user
Removed by automated system

050,000

100,000

150,000

200,000

250,000

150,000

200,000

250,000

Speed of removal
Removed in four days or lessRemoved prior to receiving applications

050,000

100,000

Jan.1 - Jun. 30, 2022

08

Identifying and removing
low-quality job postings
Indeed also works in the best interest of job
seekers by striving to ensure that the jobs posted
on our site are of the highest quality possible.
In order to remain visible on the site, postingsmust offer open jobs (not training opportunities,
expired positions, etc.), provide a detailed andaccurate description of the role and be free ofvulgar or illicit content, in addition to meetingother criteria outlined here.
As with fraudulent accounts, we have triggers inplace that automatically flag postings that may
not meet our standards for manual moderation.
If a posting can be fixed, we will provide theemployer with feedback and direct them tothe Employer Help Center to help them do so.
Additionally, users can flag any roles they deem
problematic through the “report job” link at thebottom of any job posting. We use these reports
to continuously improve our policy enforcement.

Top job policy violations detected in operational workflows
Low quality job title
Reposting
Duplicate content
Location blasting
Job posting standards

01,000Indeed categorizes job posting removals for a variety of reasons. This list is not intended to be exclusive.

2,000

3,000

4,000

Jan.1 - Jun. 30, 2022

09

Data Privacy
and Legal
The Indeed Privacy teamtakes data security very
seriously—read more about
our guiding values here. A fewof the many ways in which
they protect job seekers andemployers include...
Facilitating Data Subject Right(DSR) requests
Processing government andprivate party requests

Our privacy values
We value the trust that job seekers andemployers place in us to help them find the rightjobs and candidates.
We strive to maintain this trust by investing
significant resources to protect their personal
data and adhering to our privacy values. Here aresome of those values:

Privacy by design
We take the protection of personal data into
consideration when launching any new service
or business process, ensuring there are systems
and practices in place to do so.
Privacy by default
We process Personally Identifiable Information(PII) to achieve the specific purpose for which
the PII was provided. This also means that weare transparent with the individuals who use
Indeed about:+ The personal data we collect+ Why we’re collecting it+ How it’s processed
Consistency
We afford all of our users globally the sametransparency into our data privacy andprotection practices through comprehensive
privacy disclosures and similar rights to accessand delete the personal data that Indeed holds.

Jan.1 - Jun. 30, 2022

11Facilitating Data Subject Right(DSR) requests
In compliance with privacy laws like the General
Data Protection Regulation (GDPR) and theCalifornia Consumer Privacy Act (CCPA), we
respond to requests from users regarding theirpersonal data. These Data Subject Right requests
typically fall into one of two categories:

Access requests
Individuals are able to access most of theirpersonal data on Indeed by visiting the site. Upon
request, Indeed also gathers the personal datait holds on an individual and generates a reportthat allows them to access this data.
Deletion requests
Indeed gathers the personal data it holds about
an individual and, subject to certain limitations
under applicable laws, deletes this data fromIndeed’s systems. This action also closes theindividual’s Indeed account.

TotalsAccess requests

8,583

Deletion requests

41,696

Jan.1 - Jun. 30, 2022

12Processing government and private
party requests for information
Indeed receives information requests for user
data from government and law enforcement
agencies worldwide, as well as private parties inthe US.
In striving to comply with local laws while also
protecting our users’ privacy, we produce
information only when data protection or otherlaws require it.
Please note, we may not produce informationin response to various government, law
enforcement or private party requests, including
those that:+ Do not comply with data protection laws
+ Do not provide a unique identifier with which
Indeed can accurately search our systems foran account+ For which Indeed has no user
account information+ Are overly broad and that Indeed cannot
narrow after consultation with the 				requesting party+ Are withdrawn by the requesting party+ Seek users’ identifying information or 			account contents when Indeed is not legallyobligated to produce it+ Request information we do not collect
Indeed may object to these types of official
requests through court procedures or by directcommunication with the party.

Jan.1 - Jun. 30, 202213

Processing government requests

Location

Subpoena(s)Court Order(s)Warrant(s)TotalExamples of government and law enforcement
agencies include: US Department of Justice,
State Workers Compensation and police
departments. These requests may be in theform of a subpoena, court order or warrant.

United States

190221

Investigations of Indeed by government
agencies may result in a production containing
user information that we have not included inour report. Please note, users are not impacted
by these productions, as their individual
account information is not the subject ofsuch government information requests issued
to Indeed.

Jan.1 - Jun. 30, 202214

Processing government requests(Contd.)Number of requests by country
Requests for information can originate fromany country in which we operate. However,
the account information in question may exist
elsewhere and, therefore, require the request
to be rerouted to the appropriate location.
The chart reflects the country from which therequest was originally submitted.
Rate of production“Rate of Production” shows the percentage
of cases for which Indeed provided user
information to the requesting party.
Number of accounts requested
Indeed may receive one request for multiple
accounts. This data reflects the number ofaccounts subject to a request for which some
information has been produced, but not
any additional accounts from which some
information may have been produced as partof the responsive information relating to therequested account. The type and amount of
information produced may vary by request.

CountryNo. ofrequests

No. ofproductions

Rate ofproduction

Accounts
requested

United States

211152%21Japan

100%0Great Britian

3267%

5Germany

11436%

5

Italy

1

1100%

1

Netherlands

22100%

15France

100%

0Spain100%0Canada

4375%

3

India

1

1100%

1Mexico100%

0Jan.1 - Jun. 30, 2022

15Processing private party requests(US only)Indeed defines information requests as privateparty when the information is requested byparties that do not represent a governmentor law enforcement agency, such as a law
firm that represents an individual or a privateorganization.

Location

No. ofrequests

No. ofproductions

Rate ofproduction

Accounts
requested

United States

7100%0In the US, there are many laws to protect user
information. If Indeed receives a request toproduce a job seeker or employer’s information
as a third-party in private litigation, Indeed
will review the request and object wheneverpossible, only producing the requested
information when required by law.

Indeed categorizes job posting removals for a variety of reasons. This list is not intended to be exclusive.

Jan.1 - Jun. 30, 2022

16

Additional
resources
Indeed lives its mission to help people getjobs every day by ensuring job seekers andemployers can safely search for the rightposition and candidate.
For more information on our efforts to help
guarantee the validity and relevance of our job
content, as well as the security and privacy of ourusers, please explore the following resources:+ HR Tech Privacy Center+ Cookies, Privacy and Terms of Service+ Job Seeker Help Center+ Employer Help Center+ Indeed Security

Jan.1 - Jun. 30, 2022

17