Step 1
The employee owns the profile
Every credential is owned by the employee, contributed at source through trusted rails: government registries, professional bodies, training providers, employer records, and identity providers globally.
Compliance verification, reusable across every employer
One verified compliance profile per employee. Built collaboratively. Owned by the employee. Used by every employer.
Thesmios replaces the duplicate verification work that costs every employer time and money. AI-verified credentials at source, contributed by both the employee and the employer, portable between every job.
No account required · Global rollout 2026 · SOC 2 in progress
Or see the live demo →Portable profile
Employee compliance record
Employee ownedIdentity, training, credentials
Employer contributedHistory, attestations, references
Verified at sourceEvidence, audit trail, status
Shared with the next employer
Only approved fields leave the profile.
Built for global tech companies, regulated financial firms, AI deployers, healthcare providers, and consultancies operating across multiple jurisdictions.
The problem
Employers keep paying to verify the same person again.
$5,000 per hire
Cost of running compliance checks on a single new hire
Background screening, right-to-work verification, training records, sanctions checks, qualification confirmation, and reference collection. Every previous employer has paid for the same checks. The data is locked in their systems.
10 vendors
Tools used to verify a single hire
Companies stitch together background checks, sanctions screening, training records, and right-to-work verification across ten different vendors.
4 weeks
Time to onboard a single regulated employee end to end
From offer letter to first day with full compliance verification, the average regulated employee takes four weeks to onboard. Most of that time is rebuilding what previous employers already verified.
Why now
Three forces are converging in 2026.
Regulatory complexity
Compliance rules multiply across every jurisdiction.
AI laws, pay transparency rules, and data protection requirements multiply across every jurisdiction every year. Compliance teams cannot keep up.
Verifiable credentials
Portable compliance is now technically possible.
The W3C Verifiable Credentials standard and the EU Digital Identity Wallet under eIDAS 2.0 make signed portable credentials production-ready.
AI verification
Verification at near-zero cost makes the rebuild model obsolete.
AI verifies compliance data at source in minutes for cents. The four-week, ten-vendor rebuild is no longer the rational choice.
Platform
How it works
Step 2
Both sides contribute
Employees add identity, qualifications, and self-declared compliance data. Employers add employment history, conduct attestations, and regulatory references. Each credential is verified at source by AI.
Step 3
The profile travels
The profile is owned by the employee. When they move to the next employer, the profile moves with them. The new employer sees verified compliance evidence in seconds, not weeks. Verify once. Trusted everywhere.
Compliance areas
Built to cover the full employment lifecycle, in every jurisdiction.
From hiring to offboarding, Thesmios covers every compliance area an employer needs to verify. Activate the modules your business requires. The profile travels with the employee across all of them.
Stage 1
Trust and verification
The verifiable credential layer that runs across every other stage.
Audit trail
Show who changed what, when, why, and from which source.
Wallet and verifiable credentials
Issue and accept signed W3C Verifiable Credentials that travel with the profile.
Continuous monitoring and re-verification
Refresh evidence on a schedule and flag changes for review.
Performance and development
Carry training, development, review, and progression records across employments.
Stage 2
Identity and eligibility
Confirms who the employee is and what they are eligible to do.
Identity verification
Confirm who the employee is with biometric, document, and source-linked records.
Right to work and immigration
Track eligibility, visas, permits, and work location rules across every jurisdiction.
I-9 verification and E-Verify
Record US employment eligibility checks and E-Verify status.
Visa sponsorship compliance
Track UK Skilled Worker, US H-1B, EU Blue Card, and Posted Workers duties.
Independent contractor classification
Assess US ABC test, UK IR35, EU Platform Work Directive, and equivalents.
Background checks and criminal record
Store DBS, FBI, criminal, credit, bankruptcy, and litigation checks.
Drug screening and substance testing
Track consent, results, timing, and retesting for regulated roles.
Beneficial ownership and UBO disclosure
Track founders, controllers, owners, PSC filings, and disclosure duties.
Stage 3
Credentials and history
Verifies what the employee knows and what they have done.
Education and qualifications
Verify degrees, certificates, training, and academic standing at source.
Professional licences and registrations
Track SRA, GMC, NMC, FCA, FINRA, ARB, ICAEW, ACCA, and equivalents.
Employment history
Record verified roles, dates, references, and continuous employment history.
Regulatory references
Capture and issue SYSC 22, SMCR, and equivalent regulatory references.
References and verifiable history
Collect source-backed references and historical confirmations as credentials.
Stage 4
Conduct, ethics, and risk
Tracks financial crime, ethics, and integrity duties.
AI Act compliance
Track Article 4 literacy, Article 26 oversight, FRIA, and transparency duties.
Sanctions screening
Check OFAC, OFSI, EU consolidated, UN, and local sanctions lists continuously.
PEP and adverse media
Track politically exposed person status, adverse media, and reputational risk.
Anti-money laundering training
Record AML, KYC, and financial crime training and refresh schedules.
Anti-bribery and anti-corruption
Track FCPA, UK Bribery Act, Sapin II, and equivalent attestations.
Conduct and ethics attestations
Capture code of conduct, policy confirmations, and conduct rule attestations.
Conflicts of interest declarations
Maintain current and historical conflicts disclosures with audit trail.
Outside business activities
Record approved outside roles, side businesses, and ongoing review status.
Insider trading and personal account dealing
Track personal dealing acknowledgements and restricted list compliance.
Whistleblower and grievance compliance
Record reports, protections, investigations, and resolution status.
Modern slavery and supply chain compliance
Evidence forced labour checks, supplier reviews, and statutory statements.
ESG and CSDDD compliance
Track sustainability duties, due diligence, and supply chain evidence.
Stage 5
Workforce regulations
Covers working conditions, pay, and protected-class duties.
Working time and rest periods
Track hours, overtime, and rest under EU, UK, US state, and local rules.
Pay transparency and DEI
Keep role, band, reporting, and disclosure evidence across jurisdictions.
Workplace harassment and discrimination
Record training, accommodation requests, and protected-class evidence.
Tax and social security
Track residency, payroll, benefits, and social security status.
Cross-border tax days
Track 183-day residency, permanent establishment, and shadow payroll triggers.
Pension and retirement compliance
Record auto-enrolment, qualified plan participation, and scheme duties.
Health and safety
Store training, incident records, certifications, and statutory duties.
Occupational health and accommodation
Track adjustments, health clearance, and accommodation duties.
Mental health and wellbeing
Record awareness training, EAP enrolment, and stress risk assessments.
Travel and mobility
Connect travel, work location, immigration, and tax checks for mobile roles.
Posted Workers and A1 certificates
Track EU coverage, posted worker notices, and bilateral certificate duties.
Data protection and privacy
Evidence GDPR, CCPA, LGPD, PIPL training, permissions, and incidents.
Stage 6
Corporate and information security
Covers equity, IP, security, and governance duties.
Equity and compensation governance
Track awards, disclosures, approvals, and compensation evidence.
Equity tax and global mobility
Track Section 83(b), Section 431, qualified plans, and equity tax treatment.
IP assignment and restrictive covenants
Verify IP assignment, confidentiality, covenants, and trade secret training.
Trade secrets and confidentiality
Track trade secret training, acknowledgements, and protection programmes.
Export controls
Track ITAR, EAR, UK, and EU dual-use training and authorisation.
Insurance and indemnity
Store coverage, exclusions, certificates, and renewal status.
Directorships and corporate interests
Verify board roles, interests, ownership, and outside activity.
Cybersecurity and acceptable use
Record device, access, training, policy, and security reviews.
SOC 2, ISO 27001, ISO 42001 evidence
Track access reviews, control evidence, and AI management system roles.
Algorithmic management and AI hiring rights
Track AI hiring audits, EEOC guidance, and platform work rights.
Sector-specific compliance
Add checks for finance, health, education, legal, defence, and other sectors.
Stage 7
Termination and post-termination
Closes the lifecycle and carries forward what travels with the employee.
Termination compliance
Track notice, garden leave, redundancy consultation, WARN Act, and directives.
Post-termination obligations
Record covenants, garden leave, settlements, and post-employment restrictions.
Final pay and equity treatment
Track final salary, accrued leave, vesting, leaver status, and Section 280G.
Continuing duties and references
Carry confidentiality, IP assignment, non-disparagement, and references.
Modules cover regulations across the EU, US, UK, APAC, and LATAM, including AI Act, GDPR, FCRA, CCPA, LGPD, PIPL, NYC LL144, Colorado AI Act, EU Pay Transparency Directive, EU Working Time Directive, EU Platform Work Directive, CSDDD, Modern Slavery Act, UFLPA, FCPA, UK Bribery Act, Sapin II, OFAC, OFSI, ITAR, EAR, IR35, AB5, Section 83(b), Section 431, ADA, Equality Act, OSHA, HSE, SOC 2, ISO 27001, ISO 42001, WARN Act, and sector-specific frameworks.
Thesmios integrates with existing HR, payroll, identity, learning, and document management systems including Workday, BambooHR, HiBob, ADP, Deel, Rippling, Okta, Microsoft Entra, Google Workspace, DocuSign, LinkedIn Learning, and others. The compliance evidence sits with the employee. The operational systems remain with the employer.
New jurisdictions, modules, and integrations added continuously.
For Heads of People, compliance officers, and DPOs
Verify any new hire in under an hour.
Replace ten vendors with one platform. Pull verified compliance evidence from a portable employee profile that has been built across the employee's previous employers. Demonstrate audit-ready compliance across every jurisdiction your workforce operates in.
For employees
Carry your compliance profile between every employer.
Build one verified profile across your career. Employers add what they verify, you keep what is yours. Never repeat the same right to work check, training certificate, or professional registration upload again.