Your organization might not need to see a physical Social Security card