Answer:
Since the regulation requires you to gather the EIN, but does not require that you verify it, whatever you do would be decided by the way your board approved CIP policy is written and approved.
Since the regulation requires you to gather the EIN, but does not require that you verify it, whatever you do would be decided by the way your board approved CIP policy is written and approved.