Security & Data Protection
Your payroll data is some of the most sensitive information your organization holds. Checkwriters protects it with independently audited controls, encrypted infrastructure, and a team you can trust.
SOC 1 Type II
Audited annually
SOC 2 Type II
Audited annually
Security Built Into Every Layer
Security isn’t the responsibility of one department. Instead, it’s woven into our culture, infrastructure, development process, and how we train our team.
Certified & Audited
We hold SOC 1 Type II and SOC 2 Type II certifications, independently audited annually, so you can demonstrate due diligence to your own stakeholders.
Built on Best Practices
Enterprise-grade cloud infrastructure with multi-zone redundancy, AES-256 encryption, and 24/7 monitoring protects your payroll data at every layer.
People You Can Trust
Every Checkwriters team member is background-screened and trained on strict security policies before they ever access client systems.
Secure by Design
Our software is built with security top-of-mind—peer-reviewed code, regular penetration testing, and a responsible vulnerability disclosure program.
Independently Audited. Every Year.
Checkwriters meets rigorous, independently-verified compliance standards. Our certifications are renewed annually and available to clients under NDA.
SOC 1 Type II
Our SOC 1 Type II report covers internal controls over financial reporting relevant to payroll processing. Audited annually by an independent CPA firm, it demonstrates that our controls operate effectively over time—essential for any organization relying on Checkwriters for payroll.
Request the reportSOC 2 Type II
Our SOC 2 Type II report covers the trust services categories of Security, Availability, and Confidentiality. Audited annually by an independent third-party firm, this report is available to prospective and current clients under NDA upon request.
Request the reportIRS & Payroll Compliance
Our full-service Tax Department files payroll taxes in all 50 states and US territories, monitoring legislative changes in real time so you’re never exposed to late-filing penalties or compliance gaps.
Learn about payrollBuilt to Protect Your Most Sensitive Data
Your payroll data represents some of the most sensitive information your organization holds. Our infrastructure is designed with that responsibility in mind.
-
AES-256 Encryption
Financial data is encrypted at rest using AES-256 standards and all data is encrypted in transit. Access is controlled through role-based permissions and limited to authenticated, authorized users.
-
Enterprise Cloud Infrastructure
Our applications are hosted on enterprise-grade cloud infrastructure with multi-server redundancy, fault isolation, and end-to-end data security designed for high availability.
-
Daily Backups & Disaster Recovery
All production systems are backed up daily and replicated offsite. Backups are retained for 30 days, supporting granular recovery at the file, volume, or instance level. Disaster recovery plans are tested annually.
-
24/7 Security Monitoring
Our infrastructure is continuously monitored for threats, anomalies, and availability issues around the clock. Automated alerts notify our Technology Management Team of any incidents requiring response.
A Team Held to the Highest Standards
The Checkwriters team is based right here in Massachusetts. Our people are your data’s strongest defenders—and we hold them to the same standards we expect of our systems.
-
Background Screening & NDAs
All new personnel must pass a criminal background check before joining Checkwriters. Every employee also signs a Confidentiality, Non-Disclosure, and Non-Solicitation Agreement prior to their first day.
-
Security Awareness Training
All employees complete security awareness training upon hire and at least annually thereafter, covering data handling, phishing recognition, and information security responsibilities.
-
Least-Privilege Access & vCISO Oversight
Access to client data is granted based on job responsibilities and strictly controlled. Our Technology Management Team is guided by a Virtual Chief Information Security Officer (vCISO) who oversees compliance, encryption standards, and company-wide security policy.
What Makes Our Team Different
- Northampton, MA-based team—no offshore call centers
- Dedicated account specialists who know your payroll
- Criminal background check required before hire
- Confidentiality & NDA signed by every employee
- Annual security awareness training for all staff
- User accounts suspended immediately upon termination
- Role-based access approved by department managers
- Security policies reviewed and updated annually
Our Developers Keep Security Top of Mind
From the moment code is written to the moment you run payroll, every step of our development process is designed to prevent vulnerabilities before they happen.
Penetration Testing
An independent third-party firm performs a full penetration test annually to identify security exploits. Identified issues are classified by risk level, analyzed, and remediated in a timely manner.
Vulnerability Scanning
Vulnerability scans are performed monthly to identify threats to production systems. Issues are analyzed and remediated promptly. Production servers are also scanned monthly to confirm patch compliance.
Secure SDLC & Change Management
All changes to systems and applications follow a formal change management procedure with documented requests and testing strategies. Appropriate segregation of duties exists between developers and those with access to push code to production.
Third-Party Vendor Management
All vendor partners are required to sign Non-Disclosure Agreements and undergo a security assessment prior to onboarding. Management reviews SOC reports from service providers annually to evaluate scope and identified exceptions.
Payroll represents a promise each organization makes to its employees. At Checkwriters, we consider it our responsibility to help you deliver on this promise, by ensuring your payroll experience is accurate, safe, and secure.
Dig Deeper Into Our Security Posture
Explore our policies, request compliance documentation, and learn how Checkwriters protects your organization.
Request Our SOC Reports
Our SOC 1 Type II and SOC 2 Type II reports are available to prospective and current clients under NDA. Contact us to request a copy for your security review.
Privacy Policy & Data Processing
Understand exactly how Checkwriters collects, uses, and protects your personal and payroll data. Read our full privacy policy for details on your rights and our data handling practices.
Report a Security Incident
If you believe you’ve discovered a vulnerability or experienced an incident, contact our security team directly. We take every report seriously and respond promptly.