Payroll is the most sensitive data a company holds.
Salaries, bank accounts and national ID numbers in one place. This page says plainly what WageVerge enforces to protect them, and what we do not yet claim.
Your data stays in your workspace
Every company has its own workspace. The platform filters every read by workspace, so a page cannot show another company’s people, even by mistake. A permission granted in one workspace is not honoured in another.
Nobody approves their own case
The person a request is about can never approve, reject or enter it: loans, bank-detail changes, tax adjustments, leave, dependants, claims and final settlements all follow this rule. A period is not approved by the person who reviewed it.
The server owns the money
Figures are computed on the server from the rules and the recorded facts. A form cannot post its own tax, its own status or another workspace’s id. Saving a calculation recomputes it; it does not trust what the browser sent.
Process is separate from pay
Someone can enter overtime hours or approve leave without ever seeing salaries. Pay figures, bank details and tax sit behind their own permissions, and the activity log hides financial events from anyone without them.
An audit trail that is only ever added to
Every significant action is recorded with who did it, in what role, from where and when. Records are insert-only: the application refuses to modify or delete them.
Sign-in you can control
Sign in with Microsoft or Google, or with an email account that can be protected by two-factor codes. Passwords are chosen by the person, repeated wrong attempts lock the account for a while, and changing a password or two-factor setting ends the other sessions.
Payslips reach only their owner
A payslip opens for the employee it belongs to, only once it is published and never once voided. One-time access codes are single-use, limited in number, and admit only the person who typed them.
Public forms are guarded
Sign-up, sign-in and enquiry forms sit behind a robot check and per-address limits, and respond the same way whether or not an account exists, so they cannot be used to find out who has one.
What we do not claim
We do not hold a security certification today. We have not published a hosting region or an uptime figure on this page. Where a buyer needs those, we answer in writing and in detail instead of a badge.
Ask us for:
- Where your data is hosted, and how it is backed up
- How long data is kept and how a company is removed
- Which outside services process data on our behalf
- Our answers to your security questionnaire
Security questions
Is WageVerge certified (SOC 2, ISO 27001)?
Not today, and we will not say otherwise. We can answer your security questionnaire and describe the controls above in detail. We will list a certification here only once we hold it.
Can I see who changed a salary or a bank account?
Yes. Every change is recorded with the person, their role and the time, and bank-detail changes also need approval from someone other than the person who filed or owns them.
How do I report a security problem?
Write to us and we will respond. Our contact details for security reports are in the security.txt file on this site.
Can line managers see pay?
No. A line manager sees their team’s attendance, leave and requests through My Team. Pay and bank details need separate permissions, which a line manager does not receive by default.
See WageVerge run your payroll.
Tell us about your business and we will walk you through it, mapped to your pay components, your policies and the modules that matter to you.