Compliance & Security
Compliance isn't a feature we added — it's the foundation
Every statutory rate, leave rule, and deadline lives in effective-dated rule tables with its legal basis, so your payroll follows the law in force on the day it applies.
Statutory coverage
Five agencies, built in
Contributions and tax are computed on every payroll run, with the rate version and legal basis shown on each payslip line.
SSS
RA 11199
- · Regular SS, MPF & EC contributions
- · Monthly Salary Credit table by effective date
- · Employer share tracking
PhilHealth
RA 11223
- · Premium rate within floor & ceiling
- · Equal employee/employer sharing
- · Contribution per payslip
Pag-IBIG
RA 9679
- · Mandatory EE/ER contributions
- · Maximum fund salary applied
- · Employer share tracking
BIR
RA 10963 (TRAIN)
- · Withholding tax on compensation
- · TRAIN withholding tables
- · Taxable compensation per payslip
DOLE
Labor Code
- · Leave and time request records
- · Time request approvals on record
- · OSH incident logging
Laws we model
The rules behind the numbers
The law is the floor. Your company policy can be more generous than the statutory minimum — never less.
Government reports
Labor Code (PD 442)
Hours of work, premium pay, wages, termination, and due process
PD 851
13th month pay
RA 11199
Social Security Act of 2018
RA 11223
Universal Health Care Act (PhilHealth)
RA 9679
Home Development Mutual Fund Law (Pag-IBIG)
RA 10963
TRAIN Law — withholding tax on compensation
RA 11210
105-Day Expanded Maternity Leave
RA 8187
Paternity Leave
RA 11861
Expanded Solo Parents Welfare Act
RA 9262
VAWC leave
RA 7641
Retirement Pay Law
RA 11058
Occupational Safety and Health Standards
RA 11313
Safe Spaces Act
RA 11165
Telecommuting Act
RA 10173
Data Privacy Act of 2012
D.O. 174-17
Contracting and subcontracting
Security
Your people's data, protected at every layer
HR data is among the most sensitive information any company holds.
Role-based access
HR admin, payroll, manager, employee, and more — each sees only what their role allows.
Record-level checks
Managers act only on their direct reports. No one approves their own requests.
Company data isolation
Every record is scoped to your account and access-checked on every request.
Segregation of duties
The person who prepares payroll isn't the person who approves it.
Audit ledger
Approvals and balance changes are recorded with who did what, and when.
Single sign-on & MFA
SAML/OIDC sign-in with your identity provider, plus multi-factor authentication.
Data masking & field-level security
Government IDs and bank accounts masked by default; salary visible to payroll only.
Maker-checker approvals
Bank account, pay rate, and tax status changes need a second approver.
Data privacy
Designed around the Data Privacy Act
Built on RA 10173 principles — transparency, legitimate purpose, and proportionality — with tools for your Data Protection Officer.
Data subject requests
Intake for access, correction, and erasure requests from employees.
Consent & privacy notices
Versioned notices with employee acknowledgment.
Retention & anonymization
Retention periods by record type, with legal hold.
72-hour breach workflow
Incident logging and NPC notification timelines.
Sensitive data access logs
See who viewed salary, health, or ER data.
Records of processing
Processing activities and DPO registry per entity.
This page describes how the platform is designed; it is not a certification. See our Privacy Policy for data-handling terms.
Have a compliance question?
Talk to our team about your statutory requirements, data privacy obligations, or security review.