Our approach to data handling. This page summarizes our practice; a binding privacy agreement is part of the customer contract.
EN-Payroll Sync is a B2B platform. We process data on behalf of our customers and their end clients (employers and their employees). This notice describes how we handle that data at the platform level. The binding agreement between EN-Payroll Sync and each customer is a separate signed contract.
On a customer's behalf, the platform processes the employee data fields used by a benefits administration platform:
We don't store full Social Security numbers in our operational database. SSNs are masked to last four digits in any record that lands in the runtime DB. Full identifiers exist only inside encrypted attachments in cloud object storage, behind explicit access controls.
Operational data at rest is encrypted with managed keys. Snapshots and attachments are encrypted at rest in AWS S3 with KMS-managed keys. Data in transit is encrypted via TLS end-to-end.
Access to customer data is controlled at the database layer (row-level security) and the application layer. Operators see only their own clients. End clients (employer users) see only their own company. PHI-bearing surfaces require a separate access capability beyond role.
We rely on a small number of infrastructure providers for hosting, compute, database, object storage, and email delivery. A list is provided in the customer contract.
Operational records are retained for the duration of the customer relationship plus the period required for audit and compliance. Specific retention windows are defined in the customer contract.
The customers we serve act as the data controller for the employees whose data the platform processes. Individuals with requests (access, correction, deletion) should contact the organization that manages their benefits enrollment. EN-Payroll Sync will support customers in fulfilling those requests.
Privacy questions: hello@enpayrollsync.com.
This page is a provisional draft and will be replaced by a final privacy policy ahead of general availability. The provisional draft is not a binding agreement and should not be relied on as such.