Data security and privacy
Your privacy means the world to us. That’s why we are committed to the absolute data security, protection and privacy of the data stored in our platform Epix.
Data security
Your privacy means the world to us. That’s why we are committed to the absolute data security, protection and privacy of the data stored in our platform EPIX.
- Physical security
Paybix uses highly-secure Azure data centers in Germany West Central to host its SaaS platform. Read more here.
- Access Control
The Epix platform operates on the Principle of Least Privilege (POLP) and Role-based Access Control (RBAC) to restrict user access to the bare minimum.
- Authentication
Paybix uses Azure B2C for user and password management.
- Data Encryption
Network traffic to and from the Epix platform across the public internet is protected by Transport Layer Security (TLS). TLS defends against data tampering and eavesdropping
- Zero Touch
Epix’ Zero Touch approach protects all data on our platform. Automation and integrations replace manual intervention by users to record and validate all data.
- Advanced Data Control
As a payroll platform, Epix is designed to be audit-ready. Changes to the personal data are tracked for audit.
- Availability
The Epix platform is highly available. We ensure minimal disruption to your business in the event of a disaster. The Epix platform is fully scripted to make sure we can set up a recovery environment in a minimum of time. Besides, Paybix data is backed up continuously and is archived in a secure vault.
- Smart Data Governance
Thanks to role-based access you choose what your users can see and what actions they can perform.
Privacy
Data privacy means that we properly handle, process, store and use all personal identifiable information.
- Data Retention
Data is solely retained when required by law of the relevant countries and Paybix takes the instructions from the Client and Client ICP’s as their In-country experts.
- Data isolation
Every tenant on Epix is on a completely separate schema to ensure no tenant can ever access anyone else’s data.