Skip to main content
PayslipIQUSA
EnglishEspanol (Beta)
Compliance

Compliance posture.

The frameworks below are the ones that apply to a US-audience educational paycheck explainer. SOC 2 is roadmapped, not certified. The operator is GoldPaid Ltd (England and Wales).

Frameworks

  • SOC 2 Type 1

    Roadmapped

    We do not claim SOC 2 certification. Same as the Trust Centre: roadmapped, not earned. No Type 1 audit is claimed as scheduled.

  • FCRA (Fair Credit Reporting Act)

    Not applicable, by design

    PayslipIQ outputs are not consumer reports. PayslipIQ is not a consumer reporting agency. Outputs must not be used for employment screening, tenant screening, credit decisions, insurance underwriting, or any FCRA-regulated purpose.

  • CCPA / CPRA (California)

    Compliant

    PayslipIQ does not sell personal information and does not share it for cross-context ads. See Your Privacy Choices. Rights via privacy@payslipiq.com. GPC is honored as the default because there is no sale or share. Analytics are cookie-less Plausible.

  • GDPR (EU/UK residents)

    Compliant where applicable

    PayslipIQ is a US-only service. EU/UK residents who voluntarily use the site have access, deletion, and correction rights. Email privacy@payslipiq.com.

  • HIPAA

    Not in scope

    PayslipIQ does not handle Protected Health Information (PHI) covered by HIPAA. Health insurance premium amounts on a pay stub are not PHI in this context.

  • PCI DSS

    Not in scope

    Checkout is not live. PayslipIQ does not collect or process card data. If billing opens through a PCI-certified processor, that processor would be named here.

Sub-processor list

All sub-processors are bound by contract with security obligations equal to or stronger than ours. Last reviewed: May 2026.

VendorPurposeCertificationRegion
VercelHosting and edge CDNSOC 2 Type 2United States
AnthropicClaude vision model for pay-stub extractionNo-training agreementUnited States
GitHubSource controlSOC 2 Type 2United States
StripeNot in use. Checkout is not live. Would process payments if billing opens.PCI DSS Level 1United States
ResendTransactional email (waitlist and contact). No payment receipts today.SOC 2 Type 2United States
PlausibleCookie-less analyticsEU GDPR-alignedEuropean Union

Data Processing Addendum (DPA)

B2B partners (HR platforms, payroll software, financial wellness vendors) requiring a signed DPA can request the standard PayslipIQ DPA from legal@payslipiq.com.

Reporting concerns

Privacy or data-handling concerns: privacy@payslipiq.com
Security findings: security@payslipiq.com (or /.well-known/security.txt)
Legal: legal@payslipiq.com

PayslipIQ provides educational information and estimated calculations only. It does not provide tax, legal, financial, accounting, employment, benefits, or payroll advice. PayslipIQ is not a CPA firm, law firm, financial advisor, payroll provider, or tax authority. Always verify your paycheck, deductions, withholdings, and tax position with your employer's payroll department, a qualified CPA, the IRS, your state tax authority, or another appropriately qualified professional. Calculations are estimates; your actual paycheck may differ based on factors specific to your employer, location, benefits elections, and personal tax situation.