We want our form to ask for a nonprofit organization's EIN (employment identification number). Any problems with such a question?

  • BoonvilleCommunityFoundation
    Asked on May 2, 2016 at 3:58 PM

    Hi there,

    We create forms for nonprofit organizations. We want our form to ask for a nonprofit organization's EIN (employment identification number). Any problems with such a question?

  • Kevin Support Team Lead
    Replied on May 2, 2016 at 5:21 PM

    Although I'm not totally sure if it is legal to ask for EIN numbers, I think that this could be possible, I found a link about this and here is stated to ask for this information using secure links(HTTPS) this is something that JotForm uses to load forms, submissions, and all the links that you use from JotForm are secure. 

    I will quote the text form the link that I found:

    "Look for a Web address that begins with 'https://' -- this indicates the site is using a secure server to gather information"

    So I think that this is not really ilegal and you may ask for this information with your form. 

     

  • NJFallen
    Replied on May 2, 2016 at 6:33 PM

    Just FYI - an EIN (IRS Employee Identification Number) is easily found  - in fact you'll find that the majority of Non-profits will publish it on their website as a means of verification similar to this..."NJ Run For The Fallen, Inc. has been granted 501(c)(3) status by the IRS - EIN 27-3718089." that's mine and it appears on the footer on my website.   IRS quote "The IRS makes nonprofit EINs publicly available so that businesses and individuals who want to donate money, goods or services to a nonprofit can verify that the organization is registered as tax-exempt with the IRS."

    Mike

     

     

  • Kevin Support Team Lead
    Replied on May 2, 2016 at 8:06 PM

    Yes, seems like this is not sensitive data like the Social Security Number, something that is not allowed to ask in JotForm and it is stated in our terms, as I see you should be able to ask for this in your form and your form should not be cataloged as phishing.