Separate client company data
The application checks access to the company and action involved. A user at one accounting firm client cannot access another client company’s data.
Security and continuity
Handling payroll data is a matter of trust.
When a business or accounting firm entrusts employee or client information to our service, we take that responsibility seriously. Data protection and payroll continuity are part of how we build our platform.
Servers in Finland. Access based on responsibilities.
Our primary servers are in a Hetzner data centre in Finland. We are responsible for the application and its access controls.
Encrypted connection
The service uses an encrypted HTTPS connection. Viewing and changing personnel information requires the appropriate access rights.
Checks and event history
Changes and approvals can be reviewed in the event history. Actions proposed by AI also pass through the application’s access and content checks.
Data centre and application security work together.
Hetzner’s ISO/IEC 27001:2022 certified information security management system also covers its Finnish data centre operations. The certification applies to the hosting provider.
AI Payroller is responsible for protecting and maintaining its own service and organising data processing. We explain the processing chain and agree responsibilities during onboarding.
Hetzner certificationsSeveral measures support continuity.
Payroll is time-sensitive. We prepare for disruptions through infrastructure design and recovery procedures.
Redundant core services
Core application and database services run on redundant infrastructure. Automatic failover helps maintain operation when an individual server fails.
Backups and recovery
Production databases are backed up. Copies stored in a separate backup service are encrypted, and recovery has been tested in an isolated environment.
Monitoring and recovery procedures
Service health is monitored automatically. Recovery procedures are documented, and server failover has been tested in practice.
Redundancy reduces the impact of disruptions but does not prevent every outage. Not all service components and external dependencies are redundant. Customer service levels are agreed separately.
Review data handling before you decide.
We can walk through access rights, the processing chain and continuity in the context of your payroll process.