Security

PayRunSuper is designed for commercially sensitive payroll timing information. This page outlines baseline practices; pair it with your own security review before relying on it for regulated environments.

Transport & sessions

Public pages and authenticated areas are served over HTTPS in production. Session handling follows the patterns configured in this deployment's authentication stack — rotate credentials if you suspect compromise.

Data handling

Calculator and dashboard inputs are stored per product rules to support recon workflows. Minimise posting personally identifying information in free-text fields unless your internal policy approves it.

For voluntary disclosure note helpers, treat generated copy as draft until your tax agent signs off — see Disclosure notes.

Reporting issues

Contact us via Contact with reproduction steps; we triage suspected vulnerabilities before public disclosure.