An on-site inspection must be performed at the principal place of business of all End Users, except as set forth below. The purpose of the inspection is to ensure that the End User’s business facility is commensurate with the size and purported type of business listed on the application, and the identification and certifications made by the End User. All on-site inspections must be documented, must demonstrate when and by whom the physical inspection was conducted, and must reflect the inspector’s findings. Such documentation must also bear the signature of the End User's owner/officer/authorized manager who was present at the on-site inspection.

Home Offices

An End User operating from a home office may be approved by iSoftpull only if each of the following conditions are met:

1. on-site inspection confirms physical separation of the business from the living quarters;

2. End User is listed either in the appropriate category of a reputable/public business telephone directory (e.g., Yellow Pages, yellowpages.com, 411.com) or a national or state trade association, or provides either a current copy of the End User’s telephone bill reflecting the same company name and address as the application for membership along with the commercial rate charges or a confirmation of End User’s telephone setup reflecting the same company name and address as the End User’s application for membership. ISoftpull shall maintain a copy of the above-referenced listing(s) or telephone bill in its membership files.

Shared Office Space

An End User sharing office space with another legal entity, even if they are affiliated with the End User, may be approved by iSoftpull only if the following conditions are met:

• Separate internal signage; and

• Physical separation of End User’s work space with controls in place that prohibit access to individuals other than End User’s personnel.

All on-site inspections must be documented, must demonstrate when and by whom the physical inspection was conducted, and must reflect the inspector’s findings. Such documentation must also bear the signature of the End User's owner/officer/authorized manager who was present at the site inspection.

Change of Business Location

In the event that an End User’s principal place of business changes, an additional on-site inspection of the new location must be performed within sixty (60) days of iSoftpull becoming aware of such change.

No Onsite Required

On-site Inspections are not required for End Users that meet any of the following conditions:

• End User is a publicly held company under the regulatory authority of the US Securities and Exchange Commission. iSoftpull must secure printed documentation of the listing from www.sec.gov/edgar

• End User is listed in The Financial Industry Regulatory Authority’s (FINRA) publication OTC Bulletin Board (OCTBB). iSoftpull secures printed documentation of the listing from www.otcbb.com

• End User is subject to the regulatory authority of any agency listed in Section 621(b) of the FCRA, 15 U.S.C § 1681s(b) and End User address is an exact match to the agency’s listing. ISoftpull must secure printed documentation from the appropriate federal agency’s website If the physical address listed with the agency is not an exact match, iSoftpull must either: a.) perform an on-site visit or, b.) verify directly with the regulatory agency that they have received an address correction notice from the end user and retains documentation to show the date/name/position and phone number of the associate at the agency who verified receipt of the address change.

• End User is a licensed insurance company. ISoftpull must secure a copy of the applicant’s insurance license or printed verification from AM Best

• End User has been approved by the Internal Revenue Service as a tax-exempt organization pursuant to Section 501(c)(3) of the Internal Revenue Code, 26 U.S.C. § 501(c)(3). ISoftpull must secure and retain a copy of the tax-exemption certificate.

• For this classification of End Users, iSoftpull must truncate the following data, unless the data was first provided in full to the iSoftpull by the End User: ‒ Social Security numbers ‒ Driver’s license numbers and ‒ Credit card, debit card, bank account, and other financial account numbers

• End User has been certified by the Small Business Administration for participation in an SBA-administered program, such as the Section 8(a) Business Development program and the Small Disadvantaged Business Program, 13 C.F.R. part 124, or the Historically Underutilized Business (“HUBZone”) program, 13 C.F.R. parts 121, 125, and 126. ISoftpull must secure written documentation from the applicable federal agency that issued the certification

• End User has been certified by the Department of Transportation for participation in the Department of Transportation’s Disadvantaged Business Enterprise Program, 49 C.F.R. part 26. ISoftpull must secure written documentation from the applicable federal agency that issued the certification

• End User is a Federal or State agency. ISoftpull must secure documentation from the applicable Federal (www.usa.gov) or State agency

• End User is a hospital or operates in a medical-related field or facility.

• ISoftpull must secure: (1) documentation that the End User address is an exact match to the listing found in any of the following: Medicaid or Medicare website, Joint Commission (www.jointcommission.org), Accreditation Association for Ambulatory Healthcare (AAAHC), Accreditation Commission for HealthCare (ACHC), American Association for Accreditation of Ambulatory Surgery Facilities (AAAASF), American Osteopathic Healthcare Facilities Accreditation Program (AOA/HFAP), Community Health Accreditation Program (CHAP), Billian’s HealthData, a recognized, verifiable, medical health insurance carrier as an approved provider and the insurance carrier demonstrates the End User resides at the same exact location listed on their application, or a specific healthcare trade association (such as the American Dental Association); and (2) a current copy of a utility (electric or gas only) bill demonstrating an exact match on the address the End User conducts business from and the address where the utility company referenced reads a meter