How SeroPayroll protects your data

What this does

SeroPayroll keeps payroll data on your own computer in an encrypted file. This article is a map of the layers that protect it.

The layers

1. Account sign-in. You must sign in before anything else opens. The app signs out after inactivity. See Sign in and the inactivity sign-out.
2. Company file password. Each company file is encrypted and opens only with its password or recovery key. See How company files are encrypted.
3. Users and roles. Inside a company, each person can have a PIN and a role. See Users and roles.
4. Extra care for SIN and bank numbers. They are masked, and showing one needs an approval. See SIN, bank numbers and who can see them.
5. Stub PDF passwords. Emailed stubs can be password protected. See Stub PDF passwords.
6. Audit log. Changes are recorded. See Audit log and history.
7. Limited network use. The app contacts the internet only for a short list of reasons. See What leaves your computer, and when.

Your part

• Keep the company password and recovery key somewhere safe and apart.
• Give each person their own PIN and the lowest role that lets them work.
• Use a short inactivity time on shared computers.
• Keep backups, and keep one off the computer.
• Install updates.

Good to know

• We cannot open your company file if you lose the password and the recovery key.
• With the Cloud add-on, data is encrypted on your computer before it is sent.