PrimePay’s Best in Class Security Aims to Reduce Growing Risk of Cybersecurity Threats to Sensitive Customer Data 

According to IBM’s 2023 data breach report, breaches affecting sensitive business and personal information are increasing in both velocity and cost. As a leading HR, Payroll and Benefits Administration SaaS company, the privacy and security of our clients’ confidential information is at the forefront of our work. PrimePay continues to substantially invest in security, technology, and experienced resources to protect the data and personal information belonging to our clients and their employees. 

We welcome questions from our clients or prospective clients who have concerns regarding how PrimePay’s Cybersecurity and Data Protection Policies and Procedures safeguard their information. In order to educate our staff internally to best capitalize on opportunities to highlight our best-in-class security posture, we wish for our teams to be armed with the latest information of data protection PrimePay provides that go “above and beyond” the typical “check the box” mentality. You may refer to our IT Security blog here or the bullet points below: 

• 2023 SOC Audit Reports – PrimePay has successfully completed our 2023 SOC Audit with zero deficiencies or exceptions in our internal and external controls, many of which revolve around cybersecurity. This means  PrimePay customers have assurance from an independent auditor that the design and operating effectiveness of PrimePay’s systems meet the scrutiny of the American Institute of Certified Public Accountants (AICPA). Copies of PrimePay’s SOC reports are available to customers by request with a signed NDA. 
• Encryption – PrimePay uses the latest encryption technologies to protect the data of our clients.  Data is encrypted not only in transit, but also at rest. 
• User Authorizations – access to sensitive customer data is restricted to only those individuals whose roles require such access to perform the functional tasks for our customers. All our products include the ability to utilize Multifactor Authentication (MFA).  For the products where this is optional for the client, PrimePay strongly encourages that it be activated and used without exceptions. 
• Password Protection – PrimePay enforces robust password security standards to help our clients protect their data from unauthorized access. 
• Certifications – The IT Security team at PrimePay maintains certifications that enable them to develop and manage robust security infrastructure and processes to secure PrimePay and its Customers’ sensitive data. These individuals continually strive to identify and implement best practices to prevent data breaches within the confines of PrimePay’s systems. 
• HR Data Security Experts – PrimePay maintains a dedicated team of IT Security experts that supplements PrimePay’s system security features with monitoring capabilities and alerts to enable secure HR data management. 
• Managed Security Products – PrimePay utilizes best of class security products to protect the network perimeters, endpoints, user accounts, and email.    
• Annual Audits – PrimePay conducts annual audits and state examinations which address Cybersecurity and Data Protection. PrimePay’s systems, policies and procedures are under constant scrutiny from regulators nationwide.   

For more information about how PrimePay collects, uses, or discloses customer information, you may refer to our privacy policy, available here. If anyone has any questions or comments on PrimePay’s security and compliance, please feel free to reach out to me directly. 

Thank you for your continued support,  

_____________________ 

Adil Shabbir 
Chief Product and Technology Officer