Form G-1595 API (Application Programming Interface) Production Acces

API (Application Programming Interface)
Production Access Request
Department of Homeland Security
U.S. Citizenship and Immigration Services

USCIS
Form G-1595

What Is the Purpose of Form G-1595?
Software development companies may use Form G-1595 to request production access to USCIS APIs. USCIS staff will use the
information provided on the form to verify that software development companies' products are in compliance with the Americans with
Disabilities Act and covered by a suitable privacy policy as described in the form. Organizations must complete and submit this form
before scheduling an application demonstration. Each application can also be governed by separate terms and conditions, so each
application will need to submit documentation separately.

DRAFT
NOT FOR
PRODUCTION
03/05/2024

General Instructions

How To Complete This Request
1.

Type or print legibly in black ink.

2.

Answer all questions fully and accurately.

3.

Print the completed request. Sign and date the request. A stamped or typewritten name in place of a signature is not acceptable.
USCIS will consider a photocopied, faxed, or scanned copy of an original signature as valid for email submission purposes. The
photocopy, fax, or scan must be of the original document containing the handwritten ink signature.

Where To Submit This Request

Email the completed request to [email protected]. USCIS recommends that any email with PII or other sensitive
information be encrypted by the sender.
You must submit all evidence requested in this form. If you fail to submit required evidence, USCIS may not accept this request.
Please attach any requested evidence, if applicable, to the email submission.
Please see the Get Started page on our website at https://developer.uscis.gov/get-started for more information on the USCIS API
Program.
Note that if you are granted access to USCIS' API, you must inform USCIS via email if any information you provide on this form has
changed. You must agree to maintain all requirements for privacy and terms of use as specified by USCIS for the duration of your
access to USCIS' API.

Part 1. Verification
Confirm:
1.

Are you a US-based company? (Required)

2.

To which APIs are you requesting production access? (Required)

3.

Terms of Use - USCIS Online Electronic Immigration System (Required)
Review our Terms of Use.

Yes

No

I agree to the Terms of Use.

Part 2. Contact Information
Who have you designated as Points of Contact (POC) to speak with us about your app?
1.

Primary Contact
Family Name (Last Name) (Required)

Given Name (First Name) (Required)

Middle Name (if applicable)

Email Address (Required)

Form G-1595 Edition XX/XX/23

Page 1 of 5

Part 2. Contact Information (continued)
2.

Secondary Contact
Family Name (Last Name) (Required)

Given Name (First Name) (Required)

Middle Name (if applicable)

Email Address (Required)

DRAFT
NOT FOR
PRODUCTION
03/05/2024

Part 3. Information About Your Company or Organization
1.

Company or organization name (Required)

2.

Daytime Telephone Number

3.

Front-end name of application (if different from organization name)

4.

Notification Email address for API status updates (Required)

NOTE: A distribution list email is preferred. This email can be updated later if needed.
5.

What is your company or organization's homepage URL?

6.

Are each of these products and their websites in compliance with the Americans with Disabilities Act?

7.

Please provide the URL or attach your organization's Terms of Service.

8.

Please provide the URL or attach your organization's Privacy Policy.

Yes

No

NOTE: We may require updates to your Terms of Service or Privacy Policy before we schedule your demo and grant production
access. Details are located in Part 5. Requirements for Privacy and Terms of Service.

Part 4. Production Key and/or Open Authorization 2.0 (OAuth) Credentials

We require you to store your production key and/or OAuth credentials securely so as not to risk unauthorized exposure or use. As a
security best practice, each application will require separate credentials.
1.

How and where do you provide OAuth credentials? (Required)

2.

Does your system store Personally Identifiable Information (PII)? (Required)

Yes

No

If you answered “Yes,” please answer the following questions:
3.

Describe why this information is stored, and how it is securely stored/encrypted. (Required)

4.

Describe the safeguards you have in place to prevent multiple, unnecessary requests to access such PII. (Required)

Form G-1595 Edition XX/XX/23

Page 2 of 5

Part 4. Production Key and/or Open Authorization 2.0 (OAuth) Credentials (continued)
5.

Describe your breach management process. (Required)

6.

Provide information about your vulnerability management and remediation process. (Required)

DRAFT
NOT FOR
PRODUCTION
03/05/2024

Part 5. Requirements for Privacy and Terms of Service

Our requirements for privacy policies and terms of service are listed below. We strongly suggest you review your policies to make
sure they meet these requirements before you upload them.
Desktop Readability

• Do the policies have a 12th grade reading level or below?
• Are the policies free of obvious typos?
• Does the text formatting meet the following requirements?
○ Font size is 14pt or larger
○ No long, unbroken paragraphs
○ No ALL-CAPS paragraphs (one sentence or two is okay)
○ No run-on sentences
○ No narrow column widths
• Do text and background colors meet minimum Web Content Accessibility Guidelines (WCAG) contrast requirements
of at least 4.5:1?
Mobile Readability
Does the text formatting meet all of the following requirements for mobile readability:
○ Font size is 14pt or larger
○ No long, unbroken paragraphs
○ No ALL-CAPS paragraphs (one sentence or two is okay)
○ No run-on sentences
○ No narrow column widths
Data Retention and Deletion
Do your terms of service and/or privacy policies:
○ Give users an easy way to request permanent deletion of their data; and
○ State how soon data deletion will happen after the user makes the request.
Privacy and Data Practices

Do your terms of service and/or privacy policies:
○ Define the specific types of data collected, such as geolocation data, financial information, medical information, and a user's
contacts;
○ Clearly describe how data will be used, including the sharing of de-identified, anonymized, or pseudonymized data;
○ Name the entities with which data is shared, including third parties, marketers, partners, etc., and clearly indicate how these
entities use this data;

Form G-1595 Edition XX/XX/23

Page 3 of 5

Part 5. Requirements for Privacy and Terms of Service (continued)
○
○
○
○
○
○
○
○
○

○
○
○
○

State that no data is sold, for profit or other monetary transactions;
Clearly indicate if data is used for transactions that do not, but could, involve money, such as targeted advertising;
Inform users about their data-sharing choices and the risks, benefits, and limitations of data sharing;
Clearly state that third-party use or disclosure of user information (including de-identified, anonymized, or pseudonymized
data) is prohibited for any reason without active consent from the user;
Indicate that third parties are bound to the terms and conditions in your privacy policy;
Specify that if there is a data breach, you will notify the user and provide instructions for further actions they may take, if any;
Specify your data retention policy, including how long you will hold onto data (including non-USCIS data) if the account is
dormant;
Include instructions for how the user can permanently delete their data stored with your app/company;
Specify what will happen to a user's data if there is a transfer of ownership or if your company ends or sells its business. You
must clearly indicate in your policy that the new company's policies will align with yours, or provide the user one of these
options:
• Securely dispose of, transmit, or download their information;
• Close their account;
Indicate that you will notify your users of changes in ownership;
Specify that you will get active consent from users when changes are made to privacy policies and terms of service;
Clearly state how you will get active consent for policy changes, for instance by providing a check box to opt into new terms of
service, or reminding subscribers that they may cancel their subscription to opt out of changes, and;
Provide users with plain-language summaries of what has changed.

DRAFT
NOT FOR
PRODUCTION
03/05/2024

If you have any questions, please contact us via email at [email protected]. You may also visit our FAQ page for
answers to frequently asked questions.

Part 6. Statement, Contact Information, Certification, and Signature of the Authorized Signatory
Authorized Signatory's Contact Information

Authorized Signatory's Given Name (First Name)

1.

Authorized Signatory's Family Name (Last Name)

2.

Authorized Signatory's Title

3.

Authorized Signatory's Daytime Telephone Number

4.

Authorized Signatory's Mobile Telephone Number (if any)

5.

Authorized Signatory's Email Address (if any)

Authorized Signatory's Certification
If filing this request on behalf of an organization, I certify that I am authorized to do so by the organization:
1) I reviewed and provided or authorized all of the responses and information in my request;
2)

I understood all of the responses and information contained in, and submitted with, my request; and

3)

All of the responses and information are complete, true, and correct at the time of submission.

6.

Authorized Signatory's Signature

Form G-1595 Edition XX/XX/23

Date of Signature (mm/dd/yyyy)

Page 4 of 5

DHS Privacy Notice
AUTHORITIES: The information requested on this form is collected pursuant to the Immigration and Nationality Act (INA), as
amended; the Homeland Security Act of 2002 (Public Law 107-296); the e-Government Act of 2002 (Public Law 107-347), the
Rehabilitation Act of 1973 (Public Law 93-112), the Government Paperwork Elimination Act (Public Law 105-277), and 44 U.S.C. §
3534.
PURPOSE: The primary purpose for providing the requested information on this form is to permit USCIS to grant access and manage
information sharing for the third-party Application Program Interface (API) platform. Software development companies may use this
form to request production access to USCIS API's. USCIS staff will use the information provided on the form to verify that software
development companies' products are in compliance with the Americans with Disabilities Act and covered by a suitable privacy policy
as described in the form. This form must be completed and submitted before scheduling an application demonstration.

DRAFT
NOT FOR
PRODUCTION
03/05/2024

DISCLOSURE: The information you provide is voluntary. However, failure to provide the requested information may prevent
USCIS from verifying software development company products and from granting access to the agency's APIs.
ROUTINE USES: DHS may share the information you provide on this form and any additional requested evidence with other
Federal, state, local, and foreign government agencies and authorized organizations. DHS follows approved routine uses described in
the associated published system of records notice [DHS/ALL-004 General Information Technology Access Account Records System
(GITAARS), which you can find at www.dhs.gov/privacy. DHS may also share this information, as appropriate, for law enforcement
purposes or in the interest of national security.

Paperwork Reduction Act

USCIS may not conduct or sponsor an information collection, and you are not required to respond to a collection of information,
unless it displays a currently valid Office of Management and Budget (OMB) control number. The public reporting burden for this
collection of information is estimated at 55 minutes per response, including the time for reviewing instructions, gathering the required
documentation and information, completing the application, preparing statements, attaching necessary documentation, and submitting
the application. Send comments regarding this burden estimate or any other aspect of this collection of information, including
suggestions for reducing this burden, to: U.S. Citizenship and Immigration Services, Office of Policy and Strategy, Regulatory
Coordination Division, 5900 Capital Gateway Drive, Mail Stop #2140, Camp Springs, MD 20588-0009; OMB No. 1615-NEW.
Do not mail your completed Form G-1595 to this address.

Form G-1595 Edition XX/XX/23

Page 5 of 5