How can we help today?

Truework Credentials: A Comprehensive Security Overview

  • Updated


In today's digital age, safeguarding personal information has become paramount. At Truework, our commitment to empowering individuals to own and control their personal information in a safe and secure manner is deeply ingrained in the foundation of our service and culture. As a regulated Consumer Reporting Agency (CRA), we protect customer and consumer data under the highest regulatory standards possible, ensuring our products and services remain accurate, trustworthy, and secure.


How Credentials Improves Applicant Outcomes 

Credentials allows applicants to share income and employment data directly from their payroll provider. Using Credentials helps individuals protect themselves from fraud as the Credentials user experience clearly states the business entity requesting your information (e.g., lender) and what information will be shared (e.g., past two years of income history). 



Data-sharing tools like Credentials help individuals accelerate the application process by putting you in control of how and when your data is shared. Until now, consumers have been required to manually download W2s and pay stubs from different systems in order to share source-of-truth income data directly with a verifier. 

Truework Credentials changes the game by giving you the power to share income and employment data directly from your payroll provider. This user-permissioned technology also reduces the risk of data entry errors caused by manual processes, preventing unnecessary application delays. 


How Truework Protects Consumer Data 

Truework Credentials empowers individuals to maintain control over their personal data and share it as they see fit. In a few steps, an applicant can securely share payroll information with a verifying party (e.g. lender) while using encryption best practices such as TLS 1.2 and TLS 1.3.


Truework strives to protect all applicant data at-rest as well, mandating the use of at-rest encryption technologies on all systems, as well as envelope encrypting sensitive data stored within those systems. Through this, Truework is able to ensure that applicant data is safe, and secure through all stages of the Credentials process. As a CRA regulated by the Fair Credit and Reporting Act (FCRA), we support applicant's rights to control the accuracy and usage of their data. We employ the principles of least privilege to ensure applicant data is only processed by authorized parties, thus minimizing any associated risks.


Read more about Truework’s approach to security and trust


Truework's dedication to security extends beyond Credentials. We maintain a robust approach to security with ISO 27001 and SOC2 type 2 security audits and certification from independent external auditors and award bodies. Our comprehensive security policies cover various aspects of data protection and privacy, ensuring a safe environment for our customers and users. 


Our mission of creating trust in every financial transaction reinforces our dedication to upholding the highest standards of security and privacy. Our product development practices echo this ethos as we update our software frequently, ensuring we patch any vulnerabilities as soon as they are discovered. This security-first mindset permeates throughout our organization, ensuring our internal processes align with our commitment to safeguarding sensitive information.


At Truework, security is not just a feature; it's an integral part of our ethos. Our commitment to empowering individuals to control their personal information securely drives every decision we make, which is why we strive to build trust with every transaction. With Truework Credentials and our extensive security measures, you can be confident that your data is shared only with authorized parties and only with your direct consent.  


Privacy Policies

We adhere to strict and comprehensive privacy policies to maintain the confidentiality and security of your data. For a detailed overview of our approach, please visit our Privacy Policy page.


Contact Us

Should you have any questions or concerns regarding security or any aspect of our services, please don't hesitate to contact us at We are always here to assist and provide the highest level of support.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request