Indeed
Transparency
ReportJan. 1 - Jun. 30, 2020
Highlighting how we help people get jobs
by protecting the job seekers and employers
who use Indeed

As the world’s #1 job site, Indeed is committed tohelping people get jobs.1 With every decision we
make, we ask ourselves, “What’s best for thejob seeker?” in service of making it faster, easierand more enjoyable for people to get a job. Our
job seeker-first mentality ultimately benefits
employers, as well, by getting the right people
in the right jobs, quickly.
We greatly value the trust that 250 million
unique visitors place in us during critical stagesof their career development and business growth.2
This first edition of the Indeed Transparency
Report highlights the ways in which we protect
the privacy and security of our job seekers andemployers. All data found in this report is fromJanuary 1 to June 30 and covers such topics as:
Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Page 3
Search Quality. . . . . . . . . . . . . . . . . . . . . . . . . . . Page 6
Data Privacy and Legal. . . . . . . . . . . . . . . . . . . Page 10

Source: Comscore, Total Visits, March 2020. 2Source: Google Analytics, September 2018

1

Jan. 1 - Jun. 30, 202002

Security
As Indeed’s first layer ofdefense from potential
threats, the Security teamworks closely with Indeed’s
Product teams to protect
job seekers and employers
on our site in many ways,
including by…
Blocking bots and malicious requests
Running a bug bounty programBlocking malicious traffic
Security uses a multi-layered system of defenses
to detect and mitigate malicious traffic on Indeed,
which primarily takes the form of bots, in addition
to some human fraudsters.
Malicious bots are automated programs thatcan steal personal data, register fake accounts
and otherwise abuse our platform. Indeed has
implemented automated strategies that leverage
network reputation, anomaly detection and othermachine learning solutions to distinguish between
human users and bots, blocking the latter before
they infiltrate Indeed’s platform.

Where malicious traffic gets blocked
Login429,398,381
Account registration
47,485,523
Forgot password
1,601,709
All others
3,054,792

Malicious requests are human-directed attacks
on a network, through which bad actors attempt
to compromise user accounts to perpetrate fraud.
Though Indeed believes that most people on theInternet have good intentions, we strive to block
those who don’t by using technology to determine
the origin and intent of requests into our system.

Jan. 1 - Jun. 30, 202004

PublicPrivate

TotalsUnique submissions

540135675

Validated and accepted7336109

Running a bug bounty programSix years ago, as part of our long-standing
commitment to security, Indeed established bothpublic and private bug bounty programs, throughwhich over 2,000 researchers flag potential gaps
in our systems in exchange for compensation (upto $10,000).
By crowdsourcing this information fromthird-party researchers, Indeed is able tofocus its internal resources on resolving theidentified vulnerabilities.

Jan. 1 - Jun. 30, 202005

SearchQuality
As Indeed’s second line ofdefense, the Search Quality
team strives to protect jobseekers and employers
from outstanding instancesof fraud and spam byautomatically and manually...
Identifying and removing
fraudulent accounts
Identifying and removing low-quality
job postings

What’s thedifference
between fraud
and spam?

Accounts removed
due to spam
281,614
Accounts removed
due to fraud
152,235

Indeed defines fraud as accounts or job postings
that target job seekers or employers withmalicious actions or law-breaking activities.
Indeed defines spam as accounts or job
postings that may violate our quality policiesand/or guidelines.

Jan. 1 - Jun. 30, 202007

Identifying and removing
fraudulent accounts
Indeed uses automatic and manual means ofidentifying and removing fraudulent accounts fromour site as quickly as possible. We put rules inplace to flag potentially risky accounts for review
by our moderators, and our Search Quality teamproactively uses various tools and subject matter
expertise to manually identify any accounts thatthe automatic system may miss.
Users can also identify and report potentiallyfraudulent accounts, which our moderators swiftly
review and remove if they are found to be in
violation of our policies.

Total fraudulent accounts removed
Proactively identified and removed
Identified and removed due to user report
025,000

50,00075,000100,000

125,000

150,000

50,00075,000100,000

125,000

150,000

Speed of removal
Removed in four days or less

025,000

Through these automatic and manual means ofidentifying fraudulent accounts, Indeed is able tominimize their impact on our users, especially job
seekers who do not then put themselves at risk byengaging with fraudulent employers.

Jan. 1 - Jun. 30, 202008

Identifying and removing low-quality
job postings
Indeed also works in the best interest of job
seekers by striving to ensure that the jobs posted
on our site are of the highest quality possible. In
order to remain visible on the site, postings must
offer open jobs (not training opportunities, expiredpositions, etc.), provide a detailed and accurate
description of the role and be free of vulgar orillicit content, in addition to meeting other criteria
outlined here.
As with fraudulent accounts, we have triggers inplace that automatically flag postings that may notmeet our standards for manual moderation. If aposting can be fixed, we will provide the employer
with feedback and direct them to the Employer
Help Center to help them do so. Additionally,users can flag any roles they deem problematic
through the “report job” link at the bottom of any
job posting. We use these reports to continuously
improve our policy enforcement.

Top job policy violation categories
Post has been manipulated to improve search position
Poor application experienceLow quality post (i.e. job title does not match job description)
Inconsistent income opportunity
Fees required from job seeker
025,000

50,000Indeed categorizes job posting removals for a variety of reasons. This list is not intended to be exclusive.

75,000100,000

Jan. 1 - Jun. 30, 2020

125,000

09

Data Privacy
and Legal
The Indeed Privacy teamprotects job seekers andemployers by managing
access to their data; a fewof the many ways in which
they do so include...
Facilitating Data Subject Right(DSR) requests
Processing government and law
enforcement requests

Facilitating Data Subject Right(DSR) requests
In compliance with privacy laws like the General
Data Protection Regulation (GDPR) and theCalifornia Consumer Privacy Act (CCPA), we
respond to requests from users regarding theirpersonal data. These Data Subject Right requests
typically fall into one of two categories:

Access requests
Individuals are able to access most of theirpersonal data on Indeed by visiting the site. Upon
request, Indeed also gathers the personal data it
holds on an individual and generates a report thatallows them to access this data.
Deletion requests
Indeed gathers the personal data it holds about anindividual and, subject to certain limitations underapplicable laws, deletes this data from Indeed’ssystems. This action also closes the individual’s
Indeed account.
TotalsAccess requests

2,978

Deletion requests

23,567Jan. 1 - Jun. 30, 202011

Processing government and law
enforcement requests for information

Please note, we may not produce information forvarious reasons, including:Indeed receives information requests for user datafrom government and law enforcement agencies
worldwide. In striving to comply with local lawswhile also protecting our users’ privacy, weproduce information only when data protection
or other laws require it.

+ Requests that do not comply with dataprotection laws

Examples of government and law enforcement
agencies include: US Department of Justice, State
Workers Compensation, and police departments.
These requests may be in the form of a subpoena,court order or warrant.

+ Requests where Indeed has no user
account information+ Requests where we are not provided a unique
identifier and so cannot accurately search oursystems for an account+ Requests that are overly broad and that Indeed
cannot narrow after consultation with the 			requesting party+ Requests that were withdrawn by therequesting party
Indeed may object to these types of official
requests through court procedures or by directcommunication with the party.

Jan. 1 - Jun. 30, 202012

Processing government and law
enforcement requests for information(cont’d)Number of requests by country
Requests for information can originate fromany country in which we operate. However,
the account information in question may exist
elsewhere and, therefore, require the request to
be rerouted to the appropriate location. This chart
reflects the country from which the request wasoriginally submitted. 		

Rate of production“Rate of Production” shows the percentage ofcases for which Indeed provided user information
to government agencies or law enforcement inresponse to an official request.

Number of accounts impacted
Indeed may receive one request for multiple
accounts. This data reflects the number ofaccounts for which some information has been
produced. The type and amount of information
produced may vary by request.

CountryNo. ofrequests

No. ofproductions

Rate ofproduction

Accounts
impacted

United States

241354%94Italy

200%

0Singapore

22100%

1United Kingdom

11100%

2Jan. 1 - Jun. 30, 2020

13Additional
resources
Indeed lives its mission to help people getjobs every day by ensuring job seekers andemployers can safely search for the rightposition and candidate.
For more information on our efforts to help
guarantee the validity and relevance of our job
content, as well as the security and privacy of ourusers, please explore the following resources:+ HR Tech Privacy Center+ Cookies, Privacy and Terms of Service+ Job Seeker Help Center+ Employer Help Center+ Indeed Security

Jan. 1 - Jun. 30, 202014