You want to use the CBR to verify a SSAN or to fish for one? If you may be pulling a report on a non-applicant, non-customer I'd say it is not legit.
If you are verifying data provided to you by a customer, I'd say yes. I am not sure what you are doing checking on a subpoena though. Sounds like it could be fishing?
My opinions are not necessarily my employers.
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell