What the evidence says
Audit studies of LLM-based resume screening find race and gender differences in how identical resumes are ranked. In a retrieval test of three massive text embedding (MTE) models over more than 3 million comparisons, resumes with White-associated names were preferred in 85.1% of cases and resumes with female-associated names in 11.1%. A minority of cases showed no difference. White male names were preferred over Black male names in all 27 tests (p<0.05). Male names were preferred over female names in 51.9% of 27 gender tests, and female names in 11.1%. Race preference was therefore stronger than gender preference in this setting. Black female names were preferred over Black male names in 66.7% of tests, while White female names were preferred over Black female names in 48.1% of tests.
The size and direction of these gaps depend on low-level text features. Title-only resumes showed differences in 96.2% of 27 race tests, against 93.7% for full-length resumes. When names were matched to roughly equal frequencies in the training corpus, the race pattern reversed. Black names were preferred in 51.9% of tests and White names in 22.2%. The sources point to name frequency as one pathway for the measured preference.
Generative and ranking audits of GPT-4 find similar gaps. In a resume-scoring task, White names scored 1.14 points above Asian names on a 1-100 scale (p=0.006). Women scored 0.28 points below men (p=0.052). When the model wrote resumes, women's resumes had 16.26 fewer months of experience on average (p=0.022). Asian names' resumes listed language skills 45% of the time, and none of the White or Black names' resumes included non-U.S. experience, against 15 of 80 Asian names and 3 of 80 Hispanic names. No Black names were assigned engineering occupations. The authors report that resume generation showed more and larger biases than resume assessment.
For disability, GPT-4 ranked a disability-enhanced resume first less often than a control resume. The rate varied by disability: 0 of 10 trials for Autism, 1 of 10 for Deaf, 2 of 10 each for Depression and Cerebral Palsy, and 5 of 10 each for Blindness and general disability. A GPT-4 variant given disability-justice and DEI guidance ranked the enhanced resume first in 37 of 70 trials (53%), against 15 of 70 (21%) for unmodified GPT-4. It did not change the rate for Depression (2 of 10 trials in both conditions). Text analysis found GPT-4 over-used the word "DEI" when describing enhanced resumes.
Model quality also varies. In a simulation, Claude-Sonnet-4 selected the more-qualified candidate in 96% of pairs, and Llama-3.1-8B in 74%. For equally qualified pairs, most models had discriminant validity below 0.9 when demographic information was present. Smaller open models did no better than random guessing. Criterion validity fell by 0.09 on real Reddit resumes. In a separate counterfactual audit of a purpose-built classifier, gender-associated name swaps changed the top role in 14.76% of comparisons, race-associated swaps in 10.43%, and age cues in 7.72%. A model with those cues removed did not change at all.
Evidence on human reviewers working with AI recommendations is thinner and associational. Not having AI recommendations was associated with 55.6% longer resume viewing. When AI recommendations were extremely severe and incongruent with stereotypes, non-white candidates' resumes were viewed 20.1% less time than white candidates' for high-status occupations. Completing an implicit association test first was associated with no measured difference in viewing time between Black and white candidates for high-status occupations.
Applicants also manipulate screening systems. About 1% of 196,682 resumes contained hidden prompt injections. The share rose to about 1.2% in 2024, from 0.6% to 0.8% in 2019-H2 through 2023-H2. Over 90% used data injection rather than explicit instructions, and none used optimization-based attacks. General-purpose detectors had 7.0% and 5.0% recall on this data. No source on this page measures whether these injections change hiring outcomes.
Where the evidence splits
The gender gap is not consistent across studies. The MTE retrieval audit finds male names preferred in 51.9% of tests, while the GPT-4 scoring audit finds women rated 0.28 points lower at p=0.052, which is just above the 0.05 threshold. The authors of the second study note that a different prompt showed no gender effect. The sources do not explain the difference, though the studies use different tasks (retrieval ranking versus 1-100 scoring) and different models.
The direction of the race gap depends on name frequency. With population-proportional frequencies, White names were preferred. With names matched to equal corpus frequencies, Black names were preferred in 51.9% of tests. The study itself ties the reversal to name frequency, so this is a split within one design. The sources do not say which setting resembles deployed systems.
The link between viewing time and selection depends on whether the AI recommended the candidate. For candidates not recommended by AI, selection chance rose 3-4% for every additional 30 seconds of viewing. For recommended candidates, duration had a negative association with selection. The sources do not explain the difference.
Findings
Resume-matching embedding models rank resumes with White-associated names above those with Black-associated names
confidence — direction: highconfidence — magnitude: highconsensus: contested on the matched-frequency setting; the weight leans toward a preference for White names under population-proportional frequencies.
- mechanism
- embedding similarity between resumes and job descriptions differs by the name on the resume. Name frequency in the training corpus is one tested pathway.
- effect
- increases the preference for White-associated names. They were preferred in 85.1% of cases, and White male names were preferred over Black male names in all 27 tests (p<0.05). Resumes with Black names were preferred in 51.9% of tests when name frequencies were matched.
- conditions / moderators
- reverses under matched name frequencies. Title-only resumes showed differences in 96.2% of race tests, against 93.7% for full-length resumes.
Gender and intersectional preferences in embedding models are smaller than race preferences
confidence — direction: highconfidence — magnitude: highconsensus: contested. A GPT-4 scoring audit found women rated 0.28 points lower (p=0.052) and one prompt showed no gender effect.
- mechanism
- not established beyond name-associated differences in embedding similarity.
- effect
- male names were preferred in 51.9% of 27 tests and female names in 11.1%, with 37% showing no difference. Black female names were preferred over Black male names in 66.7% of tests, and White female names over Black female names in 48.1%.
- conditions / moderators
- consistent across three MTE models; not established for other model types.
GPT-4 scores and generates resumes differently by race, gender and occupation
confidence — direction: highconfidence — magnitude: mediumconsensus: thin; one audit study.
- mechanism
- name-associated stereotypes shape the content the model generates, such as experience length, languages and occupation. They also shape scores.
- effect
- White names scored 1.14 points above Asian names on a 1-100 scale. Women's generated resumes had 16.26 fewer months of experience. 45% of Asian names' resumes listed languages, against about 0% for White and Black names. No White or Black names' resumes had non-U.S. experience, against 15 of 80 Asian and 3 of 80 Hispanic names. No Black names were assigned engineering occupations.
- conditions / moderators
- generation showed more and larger biases than assessment. The gender score gap was just above p=0.05.
GPT-4 ranks disability-enhanced resumes lower than control resumes, with the rate varying by disability
confidence — direction: highconfidence — magnitude: highconsensus: thin; one study, with 10 trials per condition.
- mechanism
- the model infers deficits not in the resume text, such as less leadership experience for Autistic candidates despite a disability leadership award. It also conflates disability items with DEI.
- effect
- decreases the rate at which the enhanced resume is ranked first: Autism 0/10, Deaf 1/10, Depression 2/10, Cerebral Palsy 2/10, Blindness 5/10, general disability 5/10.
- conditions / moderators
- a disability-justice-trained GPT ranked the enhanced resume first in 37/70 trials (53%), against 15/70 (21%) for GPT-4. It showed no measured effect for Depression (2/10 in both).
Identity-cue substitutions change a classifier's resume scores only when demographic-associated text is available
confidence — direction: highconfidence — magnitude: mediumconsensus: thin; one study.
- mechanism
- the model uses text associated with gender, race or age. Removing those fields removes the pathway.
- effect
- increases top-role flips. Gender-associated swaps flipped the top role in 14.76% of 3,680 comparisons, race-associated swaps in 10.43%, and age-cue swaps in 7.72%. Mean score shifts were 0.0047, 0.0032 and 0.0020. The blind model showed no change.
- conditions / moderators
- a model whose training data included direct role-bearing text reached 1.0000 accuracy, so such fields inflate measured accuracy. Frozen-model accuracy fell from 0.2489 to 0.1346 on out-of-distribution resumes.
LLM selection accuracy increases with model scale and falls on equally qualified pairs and real-world resumes
confidence — direction: highconfidence — magnitude: highconsensus: thin; one study, though model ordering was stable across synthetic and real resumes.
- mechanism
- models struggle to separate candidates with small qualification differences. On equally qualified pairs they choose arbitrarily instead of abstaining.
- effect
- criterion validity was 0.96 for Claude-Sonnet-4 and 0.74 for Llama-3.1-8B. Discriminant validity was below 0.9 for most models when demographic information was present. Criterion validity decreased by 0.09 on Reddit resumes. Validity was 0.85 for educational credentials and 0.81 for soft skills. The median share of errors that were unjustified abstentions was 0.93.
- conditions / moderators
- results come from simulation. Generalization beyond software engineering is not established.
Reviewer viewing time and selection vary with AI recommendations and stereotype strength
confidence — direction: highconfidence — magnitude: mediumconsensus: thin; one secondary analysis.
- mechanism
- AI recommendations and stereotype associations change how long reviewers read resumes. Viewing time is associated with selection differently depending on the recommendation.
- effect
- no AI recommendations was associated with 55.6% longer viewing. Not-recommended candidates gained 3-4% selection chance per additional 30 seconds. Under extremely severe incongruent recommendations, non-white candidates' resumes were viewed 20.1% less than white candidates'. Stronger race-status associations increased viewing time, with no size reported.
- conditions / moderators
- the difference in viewing time disappeared for high-status occupations after an implicit association test. For recommended candidates, duration had a negative association with selection.
Hidden prompt injections appear in about 1% of resumes, and existing detectors miss most of them
confidence — direction: highconfidence — magnitude: highconsensus: thin; one study.
- mechanism
- applicants embed hidden text, mostly keywords and skills, to manipulate automated screening.
- effect
- 1.19% of Applicant Match resumes and 0.91% of ATS resumes contained injections. The rate rose to about 1.2% in 2024. Data injection made up 90.5% and 95.7% of cases, and skills injection was most common (56.5% and 42.3%). PromptArmor and PromptGuard had 7.0% and 5.0% recall. The authors' detectors had 86.1% and 92.7% precision.
- conditions / moderators
- all detected attacks were heuristic, none optimization-based. Whether injections change screening outcomes is not established.
Recommendation-model opacity may amplify historical hiring bias
confidence — direction: highconfidence — magnitude: lowconsensus: thin
- mechanism
- models trained on historical hiring data can reproduce its biases. Opaque deep models hide why a candidate was not recommended.
- effect
- amplification of existing bias is asserted, with no measured size. The paper cites Recall@10 of 0.35-0.40 for a deep person-job model.
- conditions / moderators
- the review cites these claims and does not test bias amplification itself.