Specops Password Auditor compares hashes from your AD to hashes in the downloaded Breached Password list.
The Breached Passwords report does not use clear text passwords. The MD4 hashes of the compromised passwords are compared to the hashes of the passwords from the domain. The hashes are not stored, they are read and kept in memory by Specops Password Auditor.