For HR & recruiting · US
A background check authorization form that protects the SSN on it
Collect the FCRA disclosure acknowledgment, written authorization, and the identity details a screening vendor needs — in a branded form where SSN, date of birth, and address history are encrypted in the candidate’s browser.
Harbor Point Staffing
Pre-employment screening — authorization
Full legal name (and any former names)
Date of birth
encryptedSocial Security number
encryptedAddress history — past 7 years
encryptedDriver’s licence number and state
encryptedIf a driving record is in scope
FCRA disclosure — acknowledgment of receipt
Standalone disclosure shown above this field
Written authorization to obtain a consumer report
Signature and date
Fields marked are encrypted in the browser before this form is sent.
The problem this solves
A background check authorization is a small form carrying an outsized payload: full name, date of birth, Social Security number, and years of address history — everything an identity thief needs, in one place.
Under the FCRA the disclosure has to be a clear, standalone document and the authorization has to be in writing. Neither requirement says anything about that data being readable by a form vendor, an inbox, or a shared drive — so it should not be.
Why the encryption matters here
Every field is encrypted in the candidate’s browser with RSA-3072 and AES-256 before it is sent. The key is generated client-side and never reaches VerifID, so an SSN on this form is not readable by the platform, its staff, or anyone who breached it.
Your HR team decrypts with the key you hold, passes the details to your screening vendor, and deletes the submission. The window in which that SSN sits in readable form is minutes, not months in an inbox.
FCRA: The FCRA requires a standalone disclosure and written authorization — present the disclosure text above the acknowledgment field, and keep the authorization as its own checkbox. Read more →
How it works
- 1
Build the form with your disclosure
Paste your FCRA disclosure as standalone text, then add the acknowledgment and authorization fields and your branding.
- 2
Send to the candidate
Share the link once an offer is extended. The candidate completes it on any device, no account needed.
- 3
Decrypt, submit, delete
Open the submission with your key, hand the details to your screening provider, and delete the record.
Frequently asked questions
Does the FCRA disclosure need to be separate from the authorization? ▾
Yes. The FCRA requires the disclosure to be a clear and conspicuous standalone document. Present the disclosure text as its own block, with the acknowledgment and the written authorization as separate fields the candidate completes. Confirm the specifics with employment counsel.
Is it safe to collect a Social Security number on a web form? ▾
It depends entirely on what happens to the data. On this form the SSN is encrypted in the browser before it is sent and only your team can decrypt it, so it is never readable by the platform — which is a very different risk profile from a plaintext survey tool or an emailed PDF.
How should we handle the data after the check is done? ▾
Decrypt only when you need to act on it, pass what the screening vendor requires, and delete the submission. Because your team holds the only key, deleting the record and rotating the key makes any residual copies unreadable.
Can the candidate fill this in without an account? ▾
Yes. Only your organisation needs an account, and only your organisation can decrypt what comes back.
Build this form for your organisation
Start on the free plan, add your branding, and publish an encrypted version in minutes.