How safe to collect personal information?

  • Profile Image
    timcorc0341
    Asked on August 27, 2019 at 03:35 PM

    Hi, I would like to create a rental application form. How safe is this for people to put their social security number and other personal information on the form

  • Profile Image
    Richie_P
    Answered on August 27, 2019 at 03:56 PM

    Please be aware that online form builders, including Jotform are being used for identity theft in the past.

    We go to great lengths to prevent this. That is why SSNs are considered as a Phishing activity as stated in our Terms

    Therefore, when you do request SSN, our automated phishing detector will flag the form(s)  and suspend the account or this will be manually performed by our Staff, if your account is on paid status, you should get a notification about it.

    However, there are exceptions, here are some examples of businesses that require a Social Security number for legitimate purposes:

     
    • Insurance companies

    • Credit card companies, lenders, and any other company receiving a credit application from you

    • The three main credit reporting agencies: TransUnion, Equifax, and Experian

    • Any company that sells products or services that require notification to the IRS, including:

    - Investment advisors

    - Banks

    -Real estate purchases

    -Financial transactions over $10,000, such as automobile purchases; and other financial transactions

    If your purpose is not to collect SSN from the general public, but from your own customers; and if your business is among the list above and you comply with recommendations below, then we can make the exception:

     1. Add Terms of Use widget (for your users to read and agree). This will surely make your forms not to be considered as guilty of phishing activities

     
    2. Add a Signature widget where your users sign and agree to provide such sensitive information.

    3. Encrypt the submission, your submission data would be encrypted and only you can view the submission data using a private key.

    Goodie:-Encrypted-Forms-and-How-to-Use-Them

    4. If possible, change the email address on your profile to one that shows your business domain rather than the public email address you currently show.

    Hope this information helps.

    Regarding form security, by default Jotform Forms are SSL.
    Regardless of your plan, all your forms are served across protected 256 bit SSL (Secure Socket Layer) connection that uses a SHA256 Certificate.

    For more information on security, you may check this link:https://www.jotform.com/security/