Accepting social security numbers with Jotform

  • Profile Image
    David Randolph
    Asked on July 22, 2015 at 03:16 PM

    I need clarification as far as collecting social security numbers with Jotforms.  We are a nationally licensed mortgage company having people fill out loan applications.  Your guidelines forbid phishing for social security numbers we do not phish for the numbers it is very clear that they are providing there SS# for mortgage qualification purposes.  Is this allowable?

  • Profile Image
    Sammy
    Answered on July 22, 2015 at 04:08 PM

    Hello Davi,

    Since you mode of business requires the collection of SSN from your clients, you can create a from that collect the numbers. As this is sensitive information we would require you to follow the following recommendations

    1. Embed the form using  SSL method

    http://www.jotform.com/help/63-How-can-I-receive-SSL-Submissions

    2. Add a sort agreement and/or an e-signature field to the form, so your customers will agree to provide their SSN along with personal info.

    http://widgets.jotform.com/widget/scrollable_text

    Here are some widgets you can add to the form (signature fields): http://widgets.jotform.com/search/signature

    Kindly let us know if you will need further information and assistance regarding this

  • Profile Image
    SFDCERT
    Answered on July 22, 2015 at 06:36 PM

    Think LONG AND HARD before taking SSN or other Personally Identifiable Information (PII).  We CONSTANTLY get email notices of form submissions that are not even our forms.

    JotForm has yet to solve this problem, but someone could potentially submit information with PII in it and it would go to another random JotForm user!

    I can provide emails of this 'phenomenon' that JotForm has not fixed - just got an email a few minutes ago.

    Robert Ross

    robr@sfdcert.com

  • Profile Image
    Jeanette
    Answered on July 22, 2015 at 11:07 PM

    We know that there are businesses that require a Social Security number for legitimate purposes. However, online form builders, including JotForm have been used for identity theft in the past and still, that's why we have gone to great lengths to prevent this and this is the reason why SSNs are considered as a Phishing activity as stated in our Terms

     

    When you do request SSN through a jotform,  our automated phishing detector will flag the form(s)  and suspend the account or this will be manually performed by our Staff in case it belongs to a paid user. That is why we recommend the steps as described above.