Security

We require individual user IDs so your company and TransUnion know who pulls each and every report. Credit information is highly confidential and can be given only to users who have legitimate business needs. The FCRA refers to this as permissible purpose. Unauthorized access to credit information is not only illegal; it is an invasion of consumer privacy and can lead to identity fraud.

The User ID system lets us trace every request to an individual. If anyone were to use TransUnion Direct inappropriately, your company would be able to take fast action. In addition, when employees leave your company, your company administrator or TransUnion can quickly turn off their User ID.

I have so many User IDs and passwords I can't remember them all. What's the best way to manage them?

The best password is one you can remember and others can't guess. It's best not to use obvious passwords, like the name of your spouse or pet. In addition, there are programs available on the Internet that crack passwords and work especially well if the password is found in the dictionary. So TransUnion Direct requires that your password be at least eight (8) characters long containing at least two (2) letters and two (2) numbers.

Although you may like to use the same password for the many different Web sites and systems you access, this can be a risky practice. Using different passwords for various systems and Web sites reduces the chance that someone will have access to all those systems and Web sites if they learn your password. It is not a good security practice to write down your passwords; however, if you find you need to do this, keep the document in a secure place.

What are digital certificates and how do they offer more security?

Digital certificates are electronic credentials that are installed on workstations authorized to use TransUnion Direct. Using certificates helps your company better ensure that only authorized workstations (those with certificates installed) are ordering and receiving TransUnion products. This prevents employees from trying to access information from other computers.

What is the challenge response and how is it used?

The first time you log into TransUnion Direct, you will be prompted to select a challenge question and enter a response to the question. This challenge response will be used to confirm your identity when you need to reset your password.

Because of the potential risk of improper access to this information if your systems or passwords are compromised, TransUnion has instituted the additional security measure of requiring a challenge response when your Order History is accessed in a subsequent session.  The challenge question and response is NOT intended to be a substitute for good security practices.

Why can't my coworker view my order history?

Order history information is intended for your exclusive use.  The retention of this data is provided as a convenience for you, in lieu of printing or storing reports elsewhere.  Subsequent access to this data is subject to your contractual obligations and all applicable legal requirements, including the FCRA certification you provided when the report was initially requested and you may use the report for no other purpose.

Why can't I view orders more than a week old?
TransUnion Direct archives reports and allows you to view order history information for recently ordered requests. You may view reports for up to seven days without having to reorder, refer back to previous orders, and request additional reports without having to re-enter consumer information. Consumer data input is retained for 90 days to facilitate re-order of new TransUnion services on the consumer.  Reorders are also subject to your contractual obligations and all FCRA and other legal requirements.