This article outlines the key requirements that must be met in order to pass a physical on-site inspection in order to allow MonitorBase to provide prescreened credit data.
In order to gain access to consumer credit data, certain requirements must be met that are outlined in the FCRA. To ensure that MonitorBase users meet those requirements and have a permissible purpose to view prescreened credit data we use the services of a Third Party On-Site Physical Inspection company. The purpose of this article is to outline what things the inspections are looking for so that you know what to expect before they arrive.
- The main office of the company must be at the address that is put on the End User Agreement when you are signing the contract.
- The office must look like a permanent business location. The following items are what the inspector will be looking for to determine this (not all of these are required in order to pass this section):
- Address Matches Contract
- Permanent Exterior Signage
- Permanent Interior Signage
- Business License
- Matching Business Card / Letter Head
- Office Equipment Present
- Telephones In Office
- Files Present (this includes electronic files)
- Employees Present
- Trade Association Plaques
- If the office is at a residential location, please see the additional requirements listed below.
- If the office is in a shared workspace of any kind there must be a physical separation and security measures between the office being inspected and other offices. Most commonly this is a locking door at least and even better if there is also a security system of some kind.
- The inspector will ask, "what service or product is provided by your company?" This is to ensure that the company is not associated with specific business types that do not have a "permissible purpose" to access prescreened consumer credit data. These specific business types that do not have a permissible purpose to access credit data are listed below:
- Adoption Search Firms
- Asset Location Services
- Bail Bond
- Companies Involved with Adult Content
- Homeowners Associations
- Credit Counseling / Repair
- Country Clubs
- Dating Services
- Diet Centers
- Investigative Companies
- Legal Services
- Loan Modification Companies
- Media Agencies
- Weapons Dealer
- The company must have a functioning website.
Security and Data Storage:
- The inspector will look for the following security measures, not all are required, but the most important ones will be marked with an asterisk*:
- Locking Door to the whole office*
- Locking Doors within the office to individual offices
- Lockable file cabinets*
- Password Protected Computers*
- Alarm System
- Security Guard
- If there is a server at the office it must be password protected and must be behind the aforementioned physical security measures.
- Computers must have up to date anti-virus/anti-malware software.
- The office must not share their internet network access with any other companies in the building.
- There must either be a crosscut shredder or document destruction service bin in the office.
- When the inspector calls the company they are checking to see if the phone is answered in a professional manner where they give the company name and their name.
- They will be calling the number put on the signed contract.
- They will also call the number when they are at the office to ensure that it rings the office phone.
Residential Office Additional Requirements:
- There must be a physical separation between the living space and office space. A locking door is the minimum requirement here, the addition of a security system is preferable.
- There must be a password-protected computer.
- There cannot be any indications that the office space is used for anything other than business. The following are items that should not be present in the office space:
- A Bed
- Clothes In The Closet
- Children's Toys
- Other Items Not Pertaining to Business
If you have any questions regarding any of these requirements feel free to reach out to the MonitorBase Customer Success Representative that you have been working with throughout the onboarding process.