Security & data protection
How we keep your payroll and employee information safe, and where it is stored.
Where your data is hosted
Payroll Africa runs on enterprise cloud infrastructure in professionally managed data centres, currently located in the European Union (Stockholm, Sweden). Our infrastructure providers hold SOC 2 Type II and ISO 27001:2022 certifications. Your data is not kept on office servers or personal computers.
Each company's data is kept separate
Database rules check every request, so a user can only see the companies they belong to. Team members only see the sections they have been given, and view-only users cannot make changes. This is enforced on the server, not just hidden on screen.
Secure sign-in
All traffic is encrypted over HTTPS. Users can turn on two-step verification, and an audit log records who changed what and when.
Private documents
Payslips, tax certificates, disciplinary files and candidate CVs are kept in private storage. They open only through short-lived secure links issued after an access check.
Backups
The database is backed up automatically, so your payroll history is protected against accidental loss.
Data-protection laws
We follow the data-protection laws that apply to our clients, including POPIA in South Africa and GDPR. Under POPIA, your company is the responsible party for your employees' information and Payroll Africa acts as the operator, processing it only to provide the payroll service.
Questions about security? Contact us or read our privacy policy.