3 ms·
From their security page[0]: >The bank account information you provide in order to complete payroll processing is secured using the same technology that banks
by obituary_latte 14y ago
From their security page[0]:
>The bank account information you provide in order to complete payroll processing is secured using the same technology that banks use. ZenPayroll employees never have access to this information and it is fully encrypted and stored securely in our system.
This can't be true can it? Surely an admin/dev has access to the crypto procedures and the key has to exist somewhere, right? At some point the key has to meet the encrypted data and if they are sending ACH or other payments, surely the "inaccessible to employees" data has to be decrypted and sent, right?
Is this just layman speak for "Rhonda the Receptionist can't see your account number"?
[0]https://zenpayroll.com/security https://zenpayroll.com/security
- edawerd 14y agoWe take security really seriously here at ZenPayroll. This includes encrypting any sensitive/private information at rest, so that no one has access to it. You are correct in that there are some instances where our support and operations teams need access to this information to better help our customers. In such cases, the information is decrypted only when necessary and made available only on a need-to-know basis. I'm updating the text on the security page to clarify more. Thanks!
- obituary_latte 14y agoThanks for the reply. I meant the question to be more from a technological standpoint. Anxious to see what you come up with. That's a wobbly road when you start trying to differentiate. "Most of our employees don't have access...", uh, "Many of our employees can not access...", hmm, "In the case of sudden...", no, "Should there be an issue...", uh...