VICTIG offers two background check APIs: a REST API with JSON, sandbox testing and webhooks, and an XML API used by hundreds of applicant tracking and property management integrations. Both run on the TazWorks Instascreen platform, which is SOC 2 Type II and PCI DSS compliant. Developers can order criminal checks, motor vehicle reports, drug screening and verifications, then receive results automatically in their own system.
Choose your integration
| Feature | REST API (TazAPI Advanced) | XML API (TazAPI Basic) |
|---|---|---|
| Format | JSON over REST endpoints | XML schema over HTTPS |
| Best for | New builds and modern applications | Existing ATS and PMS connectors |
| Testing | Dedicated sandbox environment | Test with VICTIG before go-live |
| Results | Webhook events for orders, clients and users | Automatic status notifications or on-demand status checks |
| Capabilities | Applicant management, background check ordering, client management | Order specific products and searches; receive order IDs and report status |
| Documentation | TazWorks developer portal | XML guide from VICTIG |
How ordering and results work
- Create the applicant and order. Your system sends the applicant’s details and the package or searches you want.
- Get an order ID. The API validates the request and returns an order ID, or a clear error if something is missing.
- Track progress. Receive status updates automatically through webhooks (REST) or XML notifications, or check status on demand.
- Receive the completed report. Results flow back into your platform when the screening is done. VICTIG’s average turnaround across screening services is 1.8 days.
What you can order through the API
- Criminal background checks
- Motor vehicle reports (MVRs)
- Drug screening
- Employment and education verification
- Employment credit reports
- Health sanctions searches
Planning which screenings to automate? See our employer guides to MVR screening and choosing a drug screening provider.
Security and compliance
- Platform security: TazWorks, which powers VICTIG’s screening platform, is SSAE 18 SOC 2 Type II and PCI DSS compliant.
- Encrypted transport: API requests and responses travel over HTTPS with 256-bit encryption.
- Controlled access: VICTIG issues credentials and controls which client resources each integration can reach.
- Accreditation: VICTIG is accredited by the Professional Background Screening Association (PBSA).
- FCRA workflows: consent and adverse action steps can be built into your hiring flow.
Existing integrations
VICTIG already connects with major systems, so you may not need to build anything:
- Applicant tracking and HR: UKG, iCIMS, Lever, Workday, Paylocity, Greenhouse, ADP, BambooHR, Bullhorn, Dayforce, JazzHR, Jobvite, SAP SuccessFactors, Oracle Taleo, TalentReef, Tenstreet and more
- Property management: Entrata, Yardi, ResMan, Rent Manager and more
- Drug testing labs: Quest Diagnostics, Labcorp, Abbott/eScreen, i3screen and more
See the full integrations list.
Getting started
- Talk to our team about your platform, the screenings you need and expected volume.
- Get credentials and read the docs on the TazWorks developer portal for the REST API, or request the XML guide.
- Build and test in the sandbox (REST) or with VICTIG’s support team (XML).
- Go live with VICTIG’s US-based support team. Email responses average about 7 minutes.
Talk to our integration team →
Frequently asked questions
Does VICTIG have a REST API?
Yes. VICTIG offers a REST API with JSON (TazAPI Advanced), plus an XML API (TazAPI Basic) for existing integrations.
Is there a sandbox for testing?
Yes. The REST API includes a dedicated sandbox, so developers can build and test before going live.
How do I get results back from the API?
The REST API sends webhook events when orders change. The XML API can send status notifications automatically, or your system can check status on demand.
What can I order through the API?
Criminal background checks, motor vehicle reports, drug screening, employment and education verification, employment credit reports and health sanctions searches.
Is the API secure?
Requests travel over HTTPS with 256-bit encryption. The TazWorks platform behind VICTIG is SOC 2 Type II and PCI DSS compliant.
Does VICTIG already integrate with my ATS?
VICTIG connects with dozens of applicant tracking, HR and property management systems, including UKG, iCIMS, Workday, Greenhouse, Lever and Yardi. Check the full integrations list before building a custom connection.
How do I get API access?
Contact VICTIG’s team. We’ll review your use case and provide credentials. REST API documentation is on the TazWorks developer portal.
