Customer requesting Background check and Confidentiality Agreement to be signed

[lilithx]

Does anyone know if this is allowed and if it would be breaking ToS? They do seem legit.

Client message:

"Hello, would it be possible to get a custom offer for the attached scope of work? I envision this work taking up to 10 hours a month to complete as most of it is copy/paste material. In addition, I would need anyone who I hire as a VA to pass a background check (I will cover the costs) and sign a Confidentiality Agreement. I handle very sensitive NPI (Non-Public Information) and my VA will be working within my CRM that stores this information. Thanks"