Skip to content

Verification Policy Management

Overview

This user story covers the functionality for staffing companies to configure verification policies defining identity assurance levels and identifying data requirements for disclosure requests.

User Stories

Configure Identity Assurance Levels

As a staffing company user,
I want to configure verification policies with specific identity assurance levels,
So that I can ensure candidates meet the appropriate level of identity verification for my requirements.

Acceptance Criteria: - Given I am logged in as a staffing company user - When I access the verification policy configuration interface - Then I should be able to set identity assurance levels: - Level 1: Basic identity verification (email confirmation) - Level 2: Enhanced identity verification (phone + email) - Level 3: Document-based identity verification (government ID) - Level 4: Biometric identity verification (facial recognition) - And I should be able to select the minimum required level for each credential type - And I should be able to set different levels for different roles or positions - And the system should validate that higher levels include all lower level requirements - And I should be able to preview how each level appears to candidates

Define Identifying Data Requirements

As a staffing company user,
I want to specify what identifying data candidates must provide,
So that I can ensure proper identity verification for my disclosure requests.

Acceptance Criteria: - Given I am configuring a verification policy - When I select identifying data requirements - Then I should be able to choose from: - Email address verification - Phone number verification - Driver's license verification - Passport verification - National ID verification - Social security number (where legally permitted) - Date of birth verification - Address verification - And I should be able to mark each requirement as mandatory or optional - And I should be able to set different requirements for different credential types - And the system should validate legal compliance for each data type - And I should see clear explanations of what each requirement entails

Create Policy Templates

As a staffing company administrator,
I want to create and manage verification policy templates,
So that I can standardize verification requirements across different roles and departments.

Acceptance Criteria: - Given I have administrative privileges - When I create verification policy templates - Then I should be able to: - Name templates for easy identification - Set default identity assurance levels - Define standard identifying data requirements - Assign templates to specific job categories or departments - Set templates as organization defaults - And I should be able to clone existing templates as starting points - And I should be able to version templates for audit purposes - And I should be able to share templates across different users in my organization - And template changes should require approval for sensitive roles

Integrate with Velocity Credential Agent Policies

As a platform administrator,
I want to integrate verification policies with Velocity Credential Agent policies,
So that the platform leverages Velocity Network's verification capabilities.

Acceptance Criteria: - Given the platform is integrated with Velocity Credential Agent - When I configure verification policies - Then the system should: - Support all Velocity Network verification policy types - Sync policy configurations with Velocity Credential Agent - Validate policy compatibility with Velocity Network standards - Handle policy updates from Velocity Network - Provide fallback options if Velocity policies are unavailable - And policy changes should be synchronized in real-time - And I should receive notifications of policy conflicts or issues - And the system should maintain audit logs of all policy changes

Apply Policies to Disclosure Requests

As a staffing company user,
I want to apply verification policies to specific disclosure requests,
So that each request has appropriate verification requirements.

Acceptance Criteria: - Given I am creating a disclosure request - When I select verification policies - Then I should be able to: - Choose from saved policy templates - Customize policies for specific requests - Preview how policies will appear to candidates - Override default policies when necessary - And the system should validate policy compatibility with requested credential types - And I should see clear warnings if policies are too restrictive or too lenient - And applied policies should be clearly communicated to candidates - And policy requirements should be enforced during the disclosure process

Monitor Policy Compliance

As a staffing company administrator,
I want to monitor compliance with verification policies,
So that I can ensure all disclosure requests meet our verification standards.

Acceptance Criteria: - Given I have verification policies in place - When I monitor policy compliance - Then I should see reports showing: - Percentage of requests meeting each policy level - Common policy violations or failures - Candidates who couldn't meet verification requirements - Time taken for candidates to complete verification - Success rates for different policy configurations - And I should receive alerts for policy compliance issues - And I should be able to export compliance reports for audit purposes - And the system should suggest policy optimizations based on compliance data

Handle Policy Exceptions

As a staffing company user,
I want to handle exceptions to verification policies,
So that I can accommodate special circumstances while maintaining security.

Acceptance Criteria: - Given a candidate cannot meet standard verification requirements - When I need to make a policy exception - Then I should be able to: - Request approval for policy exceptions from administrators - Document the reason for the exception - Apply alternative verification methods - Set time limits for exceptions - Track all exceptions for audit purposes - And exceptions should require appropriate authorization levels - And I should be able to see the history of all exceptions - And exceptions should be clearly marked in verification reports - And the system should alert administrators to frequent exceptions

Technical Notes

Velocity Network Integration

  • Support for all Velocity Network verification policy types
  • Real-time synchronization with Velocity Credential Agent
  • Compliance with Velocity Network verification standards
  • Proper handling of policy updates and changes

Policy Storage and Management

  • Secure storage of verification policies with encryption
  • Version control for policy changes and updates
  • Role-based access control for policy management
  • Audit logging of all policy modifications

Integration Requirements

  • Integration with Velocity Credential Agent policies
  • Connection to identity verification services
  • Real-time policy validation and enforcement
  • Compliance reporting and monitoring systems

Dependencies

  • Organization onboarding and configuration
  • User authentication and authorization
  • Velocity Credential Agent integration
  • Identity verification service integrations

Priority

High - Essential for ensuring proper identity verification, required for second project drop