Snapshot 13814

Document
Subprocessor list
URL
https://trust.paylocity.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
99923 bytes
SHA-256 (raw)
488635bdf31eb050f66c755de50d170e696039e07a1000ec77dc47986e706a63
SHA-256 (normalized text)
2c6596c3c52e1a8119b93c197ab3e26dd8b91c287740b37e9b27a9ecde8147d8

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Paylocity
Delivering a seamless experience to your employees requires us to have access to very important and sensitive data. That's a huge responsibility that we take very seriously, and it's why we embed security and privacy controls into what we do. And we keep safeguarding of that data top of mind so that it informs our decision-making process — the technology we build, the infrastructure we use, and the way we educate and hire our people. We use third party auditors to regularly assess our procedures, processes, controls, and infrastructure. These audits reflect our commitment to data protection throughout our organization.
Subscribe to our Trust Center to receive updated information on our security posture.
Protecting Our ClientsOpens in new tab
Privacy PolicyOpens in new tab
The following downloads are available for your internal and audit purposes only. If you wish to share any of these materials with a third party other than your third party auditor, please contact your Account Manager (if you are a current or former client) or your Sales Representative (if you are a prospective client) to obtain the proper authorization.
Compliance
ISO 27001:2022
SOC 1 Type II
SOC 2 Type II
Resources
View all
Program Overview
Current
ISO 27001:2022 Certificate
2025 SOC 1 Type II Report
2025 SOC 2 Type II Report
SOC Bridge Letter through 6/30/26
View 9 more
Previous
2024 SOC 1 Type II Report
2024 SOC 2 Type II Report
SOC Bridge Letter through 12/31/24
2023 SOC 1 Type II Report
View 2 more
Privacy
Paylocity List of Sub-processors
Controls
View all
Security Governance
Organizational Context (GV.OC)
Oversight (GV.OV)
Policy (GV.PO)
View 3 more Security Governance controls
Risk Identification
Asset Management (ID.AM)
Risk Assessment (ID.RA)
Risk Management Improvement (ID.IM)
Protection Safeguards
Awareness and Training (PR.AT)
Data Security (PR.DS)
Identity Management, Authentication, and Access Control (PR.AA)
View 2 more Protection Safeguards controls
Security Event Detection
Adverse Event Analysis (DE.AE)
Continuous Monitoring (DE.CM)
Security Incident Response
Incident Analysis (RS.AN)
Incident Management (RS.MA)
Incident Mitigation (RS.MI)
View 1 more Security Incident Response control
Security Incident Recovery
Incident Recovery Communication (RC.CO)
Incident Recovery Plan Execution (RC.RP)
FAQ
View all
Updates
View all
Privacy
Update to the Paylocity Corporation List of Sub-processors
Published September 24, 2026
We have updated our List of Sub-processors in connection with the release of the Recruiting Optimizer following Paylocity’s acquisition of Grayscale. This update reflects our expanded product and service offerings following integration and these sub-processors are engaged in connection with the provision of Paylocity's recruiting solution and apply to clients who elect to use the Recruiting Optimizer.
Additional information regarding the acquisition can be found in our public press announcement: https://www.paylocity.com/company/about-us/newsroom/press-releases/paylocity-acquires-grayscale-to-expand-ai-powered-recruiting-capabilities/Opens in new tab
Please contact the Paylocity Privacy Office at privacy@paylocity.com for any questions.
Privacy
Update to the Paylocity Corporation List of Sub-processors
Published August 21, 2026
In connection with our release of Ignite AI, we updated our list of sub-processors to identify AI Providers that process Client Data in assisting with the provision of our AI features and services. These sub-processors are engaged in connection with the provision of AI features and apply to clients who elect to use such features.
Please contact the Paylocity Privacy Office at privacy@paylocity.com for any questions.
Compliance
New 6/30/26 Bridge Letter available for download
Published July 8, 2026
Covers 10/1/25-6/30/26
Audit firms that would like to obtain the bridge letter will need to request this directly from their clients due to verification rules in place.
Compliance
New 3/31/26 Bridge Letter available for download
Published April 8, 2026
Covers 10/1/25-3/31/26
Audit firms that would like to obtain the bridge letter will need to request this directly from their clients due to verification rules in place.