Snapshot 251229

Document
Subprocessor list
URL
https://trust.paylocity.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
95760 bytes
SHA-256 (raw)
e970eb2a1929b570043a9ef424b499c7dc27a2919d864d148d9e8a3740793b50
SHA-256 (normalized text)
1329f2785da28e9c1cc073c5a2b320e76d115f6b5de85dc70cb59411d5d009cc

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Paylocity
Delivering a seamless experience to your employees requires us to have access to very important and sensitive data. That's a huge responsibility that we take very seriously, and it's why we embed security and privacy controls into what we do. And we keep safeguarding of that data top of mind so that it informs our decision-making process — the technology we build, the infrastructure we use, and the way we educate and hire our people. We use third party auditors to regularly assess our procedures, processes, controls, and infrastructure. These audits reflect our commitment to data protection throughout our organization.
Subscribe to our Trust Center to receive updated information on our security posture.
Protecting Our ClientsOpens in new tab
Privacy PolicyOpens in new tab
The following downloads are available for your internal and audit purposes only. If you wish to share any of these materials with a third party other than your third party auditor, please contact your Account Manager (if you are a current or former client) or your Sales Representative (if you are a prospective client) to obtain the proper authorization.
Compliance
ISO 27001:2022
SOC 1 Type II
SOC 2 Type II
Resources
View all
Program Overview
Current
ISO 27001:2022 Certificate
2025 SOC 1 Type II Report
2025 SOC 2 Type II Report
SOC Bridge Letter through 9/30/26
View 10 more
Previous
2024 SOC 1 Type II Report
2024 SOC 2 Type II Report
SOC Bridge Letter through 12/31/24
2023 SOC 1 Type II Report
View 2 more
Privacy
Paylocity List of Sub-processors
Controls
View all
Security Governance
Organizational Context (GV.OC)
Oversight (GV.OV)
Policy (GV.PO)
View 3 more Security Governance controls
Risk Identification
Asset Management (ID.AM)
Risk Assessment (ID.RA)
Risk Management Improvement (ID.IM)
Protection Safeguards
Awareness and Training (PR.AT)
Data Security (PR.DS)
Identity Management, Authentication, and Access Control (PR.AA)
View 2 more Protection Safeguards controls
Security Event Detection
Adverse Event Analysis (DE.AE)
Continuous Monitoring (DE.CM)
Security Incident Response
Incident Analysis (RS.AN)
Incident Management (RS.MA)
Incident Mitigation (RS.MI)
View 1 more Security Incident Response control
Security Incident Recovery
Incident Recovery Communication (RC.CO)
Incident Recovery Plan Execution (RC.RP)
FAQ
Updates
View all
General
New Certificate of Insurance - Marsh Evidence of Coverage available for download
Published October 30, 2026
Covers 10/31/26-10/31/27
Privacy
Update to the Paylocity Corporation List of Sub-processors
Published October 13, 2026
Paylocity values the trust placed in its services and remains committed to meeting all obligations to its clients. As part of these obligations, this notice is provided to inform that the List of Sub‑processors has been updated to include Vestwell Holdings, Inc. as an optional sub‑processor.
Please contact the Paylocity Privacy Office at privacy@paylocity.com for any questions.
Compliance
New 9/30/26 Bridge Letter available for download
Published October 8, 2026
Covers 10/1/25-9/30/26
Audit firms that would like to obtain the bridge letter will need to request this directly from their clients due to verification rules in place. As a reminder, new SOC reports will be issued in late November 2026.
Privacy
Update to the Paylocity Corporation List of Sub-processors
Published September 24, 2026
We have updated our List of Sub-processors in connection with the release of the Recruiting Optimizer following Paylocity’s acquisition of Grayscale. This update reflects our expanded product and service offerings following integration and these sub-processors are engaged in connection with the provision of Paylocity's recruiting solution and apply to clients who elect to use the Recruiting Optimizer.
Additional information regarding the acquisition can be found in our public press announcement: https://www.paylocity.com/company/about-us/newsroom/press-releases/paylocity-acquires-grayscale-to-expand-ai-powered-recruiting-capabilities/Opens in new tab
Please contact the Paylocity Privacy Office at privacy@paylocity.com for any questions.