Completely agree with turnkey,

The best defense is to get a signed authorization...

But, even if you dont have that, theres still plenty of documentation that will work.