i don't see what's obvious. what is being audited? why is my email address needed when i'm giving them my id and ssn?