- David RandolphAsked on July 22, 2015 at 03:16 PM
I need clarification as far as collecting social security numbers with Jotforms. We are a nationally licensed mortgage company having people fill out loan applications. Your guidelines forbid phishing for social security numbers we do not phish for the numbers it is very clear that they are providing there SS# for mortgage qualification purposes. Is this allowable?Page URL:
- SammyAnswered on July 22, 2015 at 04:08 PM
Since you mode of business requires the collection of SSN from your clients, you can create a from that collect the numbers. As this is sensitive information we would require you to follow the following recommendations
1. Embed the form using SSL method
2. Add a sort agreement and/or an e-signature field to the form, so your customers will agree to provide their SSN along with personal info.
Kindly let us know if you will need further information and assistance regarding this
- SFDCERTAnswered on July 22, 2015 at 06:36 PM
Think LONG AND HARD before taking SSN or other Personally Identifiable Information (PII). We CONSTANTLY get email notices of form submissions that are not even our forms.
JotForm has yet to solve this problem, but someone could potentially submit information with PII in it and it would go to another random JotForm user!
I can provide emails of this 'phenomenon' that JotForm has not fixed - just got an email a few minutes ago.
- JotForm Support ManagerJeanetteAnswered on July 22, 2015 at 11:07 PM
We know that there are businesses that require a Social Security number for legitimate purposes. However, online form builders, including JotForm have been used for identity theft in the past and still, that's why we have gone to great lengths to prevent this and this is the reason why SSNs are considered as a Phishing activity as stated in our Terms
When you do request SSN through a jotform, our automated phishing detector will flag the form(s) and suspend the account or this will be manually performed by our Staff in case it belongs to a paid user. That is why we recommend the steps as described above.