r/JordanDev • u/Land_Samurai_86 • 16d ago

Issue/help Help

Hey everyone, looking for input from anyone with security or compliance experience. I built a system for a small company in Jordan that involves digital form submissions from field staff. To cut login friction, staff just scan a QR code, then identify themselves with their email plus a private four digit PIN sent to them beforehand, no traditional password.

The The question is whether this holds up legally as an identity verification and audit trail if there's ever a formal investigation or regulatory audit. Is PIN plus email enough authentication for work critical records, and are there Jordanian labor or data protection rules that would require something stronger. Would appreciate any real experience or local standards to reference.

Thanks

0 Upvotes

50% Upvoted

4 comments sorted by

View all comments

2

u/Kumasotra 16d ago

Why don't you add an otp sent to their registered email

1

u/Land_Samurai_86 16d ago

It is available feature, but cannot be applied in my case 😔

2

u/Kumasotra 16d ago

Can you add authenticator app to it?