2.3.1 Report Specifications Each report shall include, at a minimum, the following information: A) The Contractor shall provide an individual credit report in the form of an RMCR for each applicant that includes credit data and credit scores from all three major credit bureaus (Equifax, TransUnion, and Experian), based on personally identifiable information (PII). B) When two applicants (e.g., co-borrowers or spouses) apply jointly, the Contractor shall provide a joint (aggregate) report that includes both applicants' credit data. Each applicant’s credit profile must be clearly separated and individually identifiable within the report. C) All reports must include three credit scores per applicant when available. If fewer than three scores are present, the report must identify which credit agency did not return a score. D) Reports must include an assessment of credit risk based on the data presented, and clearly distinguish each applicant's risk level when multiple applicants are included in a single report. E) Flagging on any report that may have been subject to identity theft. F) Employment history of the applicant(s) and indication of whether applicants are self-employed. G) FICO Score as expressly developed by the Fair Isaac Corporation (typically three per borrower). H) Provide source of trade information by credit line in accordance with industry standards, to include tradeline terms and payment history. I) Show residential history and all public record filings against each applicant, in accordance with industry standards. 2.3.2 Report Procedures A) The Department will submit requests for RMCRs to the Contractor on behalf of the customer. In response, Contractor will provide the RMCR to the Department. B) The provision of and retrieval of RMCRs must be over the internet and through a secure portal. C) The Department must be able to order the RMCR through a secured portal and must have access to the report that is pulled through a secured portal. D) The Department must have administrative rights within the secure portal. E) There must be no minimum or maximum number of credit reports that may be pulled in any given year. If the Department establishes new programs, it may require more RMCRs to be pulled. The Department must own the RMCR that is provided to it pursuant to this Contract.