Authorization
Explicit language stating consumer consent to obtain and use the credit report for the stated purpose.
A written request documents consent, demonstrates a lawful purpose under the FCRA, and creates an auditable record for compliance. It reduces disputes and helps demonstrate due diligence when sharing sensitive consumer information.
Organizations and professionals use these requests when a credit file is necessary to evaluate risk, verify identity, or complete a transaction.
Keep purpose, scope, and retention clear to limit liability and ensure the requester meets FCRA and state privacy obligations.
| Field | Configuration |
|---|---|
| Identity Fields | Required; enforce formats and validation rules |
| Authentication | Email + SMS or KBA for higher-assurance requests |
| Routing | Auto-forward signed request to in-house compliance team |
| Retention | Set automatic archival and access controls |
Use platforms that support secure document formats, strong access controls, and auditable signing records.
Ensure the platform supports TLS/AES encryption in transit and at rest, detailed audit trails, and the ability to attach attachments and retain signed copies for compliance reviews.
Consumers may request one free report annually under FCRA procedures.
CRA must investigate and respond within 30 days (15 U.S.C. §1681i).
Obtain signed authorization before pulling credit for employment screening.
Some bureaus offer faster products for a fee; timelines vary by vendor.
Keep signed authorization and retrieval log for your compliance retention period.
Explicit language stating consumer consent to obtain and use the credit report for the stated purpose.
Full legal name, SSN/TIN, DOB, and current address to ensure accurate bureau matching.
Specify permissible purpose under FCRA, such as credit underwriting, employment (if allowed), or account review.
Indicate which bureau(s) and what level of report or product is requested.
State secure delivery method: encrypted email, vendor portal, or physical mail to authorized party.
Declare how long authorization and report copies will be retained and who can access them.
A property manager collects full name, SSN, and DOB with written consent
A loan officer attaches a signed authorization to the loan file
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Contact vendor | Contact vendor | Contact vendor | Contact vendor |
| Bulk Send | Yes (Business Premium) | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA available) | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |