Loading page
Salary figures are the most sensitive records an employer holds. Here is exactly how they are stored, who can reach them, and what we can show your security reviewer.
SOC 2 Type II
Audited annually across security, availability and confidentiality.
ISO 27001
Information security management system certified and surveilled.
GDPR
DPA and sub-processor list available; EU data residency on request.
Penetration tested
Independent annual test with remediation tracked to closure.
Every item below is something we can evidence during a vendor assessment — no aspirational statements.
How payroll data is stored, moved and isolated.
Who can see a salary figure, and how that is proven.
How the code that touches your data is built and checked.
What happens when something goes wrong.
If you believe you have found a security issue, email security@kormopay.example with enough detail to reproduce it. We acknowledge within 72 hours, keep you updated while we fix it, and credit reporters who want it. Please do not run automated scans against production or access data that is not yours.
First response
Within 72 hours
Customer notification
Within 24 hours of a confirmed incident
Start a 14-day trial with your real payroll data. If the numbers do not match your current system to the cent, we will tell you why.
14-day trial · Free data migration · No credit card