Indeed
Transparency
ReportJul. 1 - Dec. 31, 2020
Highlighting how we help people get jobs
by protecting the job seekers and employers
who use Indeed

As the world’s #1 job site, Indeed iscommitted to helping people get jobs.1 With
every decision we make, we ask ourselves,“What’s best for the job seeker?” in serviceof making it faster, easier and more enjoyablefor people to get a job. Our job seeker-firstmentality ultimately benefits employers, aswell, by getting the right people in the rightjobs, quickly.
We greatly value the trust that 250 million
unique visitors place in us during criticalstages of their career development andbusiness growth.2 This edition of the Indeed
Transparency Report highlights the ways inwhich we protect the privacy and security of
our job seekers and employers. All data foundin this report is from July 1 to December 31 andcovers such topics as:
Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Page 3
Search Quality. . . . . . . . . . . . . . . . . . . . . . . . . . Page 6
Data Privacy and Legal. . . . . . . . . . . . . . . . Page 10

Source: Comscore, Total Visits, March 2020. 2Source: Google Analytics, February 2020

1

Jul. 1 - Dec. 31, 202002

Security
As Indeed’s first layer ofdefense from potential
threats, the Security teamworks closely with Indeed’s
Product teams to protect
job seekers and employers
on our site in many ways,
including by…
Blocking bots andmalicious requests
Running a bug bounty program

Blocking malicious traffic

Where malicious traffic gets blocked

Security uses a multi-layered system of
defenses to detect and mitigate malicious
traffic on Indeed, which primarily takes theform of bots, in addition to somehuman fraudsters.

Login80,989,415

Malicious bots are automated programs
that can steal personal data, register fakeaccounts and otherwise abuse our platform.
Indeed has implemented automatedstrategies that leverage network reputation,
anomaly detection and other machinelearning solutions to distinguish between
human users and bots, blocking the latter
before they infiltrate Indeed’s platform.

Forgot password
906,690

Account registration
64,996,144

All others
5,733,914

Malicious requests are human-directedattacks on a network, through which badactors attempt to compromise user accounts
to perpetrate fraud. Though Indeed believes
that most people on the Internet have goodintentions, we strive to block those who don’t
by using technology to determine the origin
and intent of requests into our system.
Jul. 1 - Dec. 31, 202004

Running a bug bounty programSix years ago, as part of our long-standingcommitment to security, Indeed establishedboth public and private bug bounty programs,
through which over 2,000 researchers flag
potential gaps in our systems in exchange forcompensation (up to $10,000).

PublicPrivateTotals

Unique submissions

817

51868

Validated and accepted

8023103

By crowdsourcing this information fromthird-party researchers, Indeed is able tofocus its internal resources on resolving theidentified vulnerabilities.

Jul. 1 - Dec. 31, 202005

SearchQuality
As Indeed’s second line ofdefense, the Search Quality
team strives to protect job
seekers and employers
from outstanding
instances of fraud andspam by automaticallyand manually...
Identifying and removing
fraudulent accounts
Identifying and removing
low-quality job postings

What’s thedifference
between fraud
and spam?

Accounts removed
due to spam
260,052
Accounts removed
due to fraud
168,914

Indeed defines fraud as accounts or
job postings that target job seekers or
employers with malicious actions or
law-breaking activities.
Indeed defines spam as accounts or job
postings that may violate our quality policies
and/or guidelines.

Jul. 1 - Dec. 31, 202007

Identifying and removing
fraudulent accounts
Indeed uses automatic and manual means ofidentifying and removing fraudulent accounts
from our site as quickly as possible. We put
rules in place to flag potentially risky accounts
for review by our moderators, and our Search
Quality team proactively uses various tools
and subject matter expertise to manually
identify any accounts that the automatic
system may miss.
Users can also identify and report potentiallyfraudulent accounts, which our moderatorsswiftly review and remove if they are found to
be in violation of our policies.

Total fraudulent accounts removed
Proactively identified and removed
Identified and removed due to user report

025,000

50,00075,000100,000

125,000

150,000

175,000

75,000100,000

125,000

150,000

175,000

Jul. 1 - Dec. 31, 202008

Speed of removal
Removed in four days or less

025,000

50,000Through these automatic and manual meansof identifying fraudulent accounts, Indeed isable to minimize their impact on our users,
especially job seekers who do not thenput themselves at risk by engaging withfraudulent employers.

Identifying and removing
low-quality job postings

Top job policy violation categories
Low quality post (i.e. job title does not match job description)

Indeed also works in the best interest of job
seekers by striving to ensure that the jobs
posted on our site are of the highest quality
possible. In order to remain visible on the site,
postings must offer open jobs (not training
opportunities, expired positions, etc.),
provide a detailed and accurate descriptionof the role and be free of vulgar or illicit
content, in addition to meeting other criteria
outlined here.

Post has been manipulated to improve search position
Poor application experience
Inconsistent income opportunity
Fees required from job seeker

As with fraudulent accounts, we have triggers
in place that automatically flag postings
that may not meet our standards for manualmoderation. If a posting can be fixed, wewill provide the employer with feedback anddirect them to the Employer Help Center tohelp them do so. Additionally, users can flag
any roles they deem problematic throughthe “report job” link at the bottom of any job
posting. We use these reports to continuously
improve our policy enforcement.

025,000

50,000Indeed categorizes job posting removals for a variety of reasons. This list is not intended to be exclusive.

75,000100,000

Jul. 1 - Dec. 31, 2020

125,000

09

Data Privacy
and Legal
The Indeed Privacy teamtakes data security very
seriously—read more
about our guiding values
here. A few of the many
ways in which theyprotect job seekers andemployers include...
Facilitating Data Subject Right(DSR) requests
Processing government andprivate party requests

Our privacy values
We value the trust that job seekers andemployers place in us to help them find theright jobs and candidates.
We strive to maintain this trust by investing
significant resources to protect their personal
data and adhering to our privacy values. Hereare some of those values:

Privacy by design
We take the protection of personal data
into consideration when launching any newservice or business process, ensuring there aresystems and practices in place to do so.
Privacy by defaultWe process Personally Identifiable
Information (PII) to achieve the specificpurpose for which the PII was provided. This
also means that we are transparent with theindividuals who use Indeed about:+ The personal data we collect+ Why we’re collecting it+ How it’s processed
Consistency
We afford all of our users globally the sametransparency into our data privacy andprotection practices through comprehensive
privacy disclosures and similar rights toaccess and delete the personal data thatIndeed holds.
Jul. 1 - Dec. 31, 202011Facilitating Data Subject Right(DSR) requests
In compliance with privacy laws like theGeneral Data Protection Regulation (GDPR)
and the California Consumer Privacy Act(CCPA), we respond to requests from users
regarding their personal data. These Data
Subject Right requests typically fall into one oftwo categories:

Access requests
Individuals are able to access most of theirpersonal data on Indeed by visiting thesite. Upon request, Indeed also gathers thepersonal data it holds on an individual andgenerates a report that allows them to accessthis data.
Deletion requests
Indeed gathers the personal data it holds
about an individual and, subject to certain
limitations under applicable laws, deletes thisdata from Indeed’s systems. This action also
closes the individual’s Indeed account.
TotalsAccess requests

4,746

Deletion requests

26,125

Jul. 1 - Dec. 31, 202012

Processing government andprivate party requests for
information
Indeed receives information requests for user
data from government and law enforcement
agencies worldwide, as well as private parties
in the US.
In striving to comply with local laws while
also protecting our users’ privacy, we produce
information only when data protection orother laws require it.
Please note, we may not produce informationin response to various government, lawenforcement or private party requests,including those that:+ Do not comply with data protection laws
+ Do not provide a unique identifier with 		which Indeed can accurately search our 		systems for an account+ For which Indeed has no user
account information+ Are overly broad and that Indeed cannot 		
narrow after consultation with the 				requesting party+ Are withdrawn by the requesting party+ Seek users’ identifying information or 			account contents when Indeed is not 			legally obligated to produce it+ Request information we do not collect
Indeed may object to these types of official
requests through court procedures or by directcommunication with the party.

Jul. 1 - Dec. 31, 202013

Processing government requests
Examples of government and law enforcement
agencies include: US Department of Justice,
State Workers Compensation and police
departments. These requests may be in theform of a subpoena, court order or warrant.
Number of requests by country
Requests for information can originate fromany country in which we operate. However,
the account information in question may exist
elsewhere and, therefore, require the request
to be rerouted to the appropriate location.
The chart reflects the country from which therequest was originally submitted. 		

Rate of production“Rate of Production” shows the percentage
of cases for which Indeed provided user
information to the requesting party.

Number of accounts impacted
Indeed may receive one request for multiple
accounts. This data reflects the number ofaccounts for which some information has
been produced. The type and amount of
information produced may vary by request.

CountryNo. ofrequests

No. ofproductions

Rate ofproductionAccounts
impacted

United States

28

1450%35

Germany

11100%1United Kingdom

2150%

1Spain100%0Canada

100%0Singapore

11100%

11Jul. 1 - Dec. 31, 202014

Processing private party requests(US only)Indeed defines information requests asprivate party when the information isrequested by parties that do not represent a
government or law enforcement agency, suchas a law firm that represents an individual ora private organization.

Location

No. ofrequests

No. ofproductions

Rate ofproduction

Accounts
impacted

United States

3900%0In the US, there are many laws to protectuser information. If Indeed receives a request
to produce a job seeker or employer’s
information as a third-party in private
litigation, Indeed will review the request andobject whenever possible, only producing therequested information when required by law.

Indeed categorizes job posting removals for a variety of reasons. This list is not intended to be exclusive.

Jul. 1 - Dec. 31, 202015

Additional
resources
Indeed lives its mission to help people getjobs every day by ensuring job seekers andemployers can safely search for the rightposition and candidate.
For more information on our efforts to help
guarantee the validity and relevance of
our job content, as well as the security andprivacy of our users, please explore thefollowing resources:+ HR Tech Privacy Center+ Cookies, Privacy and Terms of Service+ Job Seeker Help Center+ Employer Help Center+ Indeed Security
Jul. 1 - Dec. 31, 202016