White List Form with SSNs?

  • Profile Image
    Asked on December 16, 2014 at 12:01 PM

    Before starting accepting Staff Applications, I wanted to make sure I would be able to white list my form and not have our account suspended. 


    We ask for social security number and other relevant information to comply with Child Licensing Laws and conduct pre-employment status checks with necessary authorities. 


    How can I make sure this is accomplished?  

  • Profile Image
    Answered on December 16, 2014 at 01:12 PM


    Regarding  SSNs, online form builders, including JotForm have been used for identity theft in the past. We go to great lengths to prevent this. That is why our Terms will mention SSNs are considered as a Phishing activity.

    Therefore, when you do request SSN, chances are that our automated phishing detector will flag the form(s) and suspend the account. If this happens you'll have to contact support to white list the form and reactivate the account, explaining the purposes of the form(s). These are some examples of businesses that require a Social Security number for legitimate purposes:

    Insurance companies Credit card companies, lenders, and any other company receiving a credit application from you The three main credit reporting agencies: TransUnion, Equifax, and Experian Any company that sells products or services that require notification to the IRS, including: - Investment advisors - Banks -Real estate purchases -Financial transactions over $10,000, such as automobile purchases; and other financial transactions

    Moreover, you need to know that since we do store the information in your account, anyone with access to it, would also have access to social security numbers. So, in the event of a security breach of your account this could be an issue.

    Please follow these recommendations in order to help us to whitelist your forms:

    1. Embed the form using SSL method

    2. Add a sort agreement and/or an e-signature field to the form, so your customers will agree to provide their SSN along with personal info.
    Here are some widgets you can add to the form (signature fields):


    You can also add this Terms of use widget (for the agreement)


    In conclusion: If your purpose is not to collect SSN from the general public, but from your own customers; if your business is among the list above and if you follow the recommendations; then all this will surely make your forms not be considered as guilty of phishing activities.

    I hope this helps.

    Thank you.