Program Overview
Paylocity Information Security Controls OverviewMany steps and procedures go into creating a robust security environment. Read more about the controls we have in place to protect our client data. |
Paylocity Business Resilience OverviewOur Business Continuity and Disaster Recovery Plans ensure that we are prepared to keep our business running. |
Current
2025 SOC 1 Type II ReportCovers 1/1/25-9/30/25 |
2025 SOC 2 Type II ReportCovers 1/1/25-9/30/25 |
SOC Bridge Letter through 3/31/26Covers 10/1/25-3/31/26 |
SOC Bridge Letter through 12/31/25Covers 10/1/25-12/31/25 |
ISO 27001:2022 Certificate |
HIPAA Statement |
Form W-9 |
Penetration Test and Red Team Letters of Engagement (LOEs) |
Certificate of Insurance - Marsh Evidence of CoverageCovers 3/18/26-3/18/27 |
Certificate of Insurance - Plexus Evidence of CoverageCovers 10/31/25-10/31/26 |
Paylocity SIG LiteShared Assessments Standardized Information Gathering (SIG) Lite Questionnaire |
Paylocity CAIQConsensus Assessment Initiative Questionnaire (CAIQ) |
Previous
2024 SOC 1 Type II ReportCovers 1/1/24-9/30/24 |
2024 SOC 2 Type II ReportCovers 1/1/24-9/30/24 |
SOC Bridge Letter through 12/31/24Covers 10/1/24-12/31/24 |
2023 SOC 1 Type II ReportCovers 1/1/23-9/30/23 |
2023 SOC 2 Type II ReportCovers 1/1/23-9/30/23 |
SOC Bridge Letter through 12/31/23Covers 10/1/23-12/31/23 |
Privacy
Paylocity List of Sub-processorsLast updated: April 2026 |
Paylocity Data Protection AddendumLast updated: November 2025 |
Paylocity Supplier Data Protection AddendumLast update: November 2025 |
Business Associate AgreementLast updated: May 2026 |