Paylocity
Security and trust center evidence
Paylocity Holding Corporation is an American provider of cloud-based payroll, spend management, and human capital management (HCM) software
Summary
Paylocity has 1 registry-verified row and 3 vendor-stated rows in the CertReports index, last verified 26 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Paylocity states on its trust centre that it has a SOC 2 Type II report, as of 18 Sep 2026. Paylocity states on its trust centre that it holds ISO/IEC 27001:2022, as of 18 Sep 2026. Paylocity states on its trust centre that it has a SOC 1 Type II report, as of 18 Sep 2026. Paylocity is listed in the EU-US Data Privacy Framework registry as Active for the UK Extension Certification, EU-US Certification and SW-US Certification, issued 22 Jun 2017 with a listed expiry of 2 Feb 2027, as of 17 Sep 2026. No public evidence was found for FedRAMP or CSA STAR coverage, as of 19 Sep 2026.
- States SOC 2 Type II and SOC 1 Type II on its trust centre, as of 18 Sep 2026.
- States ISO/IEC 27001:2022 on its trust centre, as of 18 Sep 2026.
- Listed in EU-US Data Privacy Framework registry (Active), issued 22 Jun 2017, expiry listed 2 Feb 2027, as of 17 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among finance and accounting vendors
1verified rows
Category median 1, across 176 indexed finance and accounting vendors. Paylocity has more verified rows than 32 percent of them.
benefits-administrationemployee-managementhr-softwarepayroll
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 30 Sep 20263 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20263 sources- SOC 1Vendor-stated
Vendor states SOC 1 Type II on its trust centre
as of 30 Sep 20263 sources 
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 26 Oct 20261 source
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 22 Sep 2026BAA availability changedBAA availability moved from unknown to public.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Finance and accounting category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Hibob
Finance and accounting
Streamline HR, Payroll & Finance with
IRIS Global
Finance and accounting
Award-winning business software and management solutions across Accounting, Payroll and
Zeal
Finance and accounting
Modern payroll for modern work
Ramp
Finance and accounting
Make expense management easy with Ramp's spend management
Evidence against regulations
All regulations for PaylocityHow much of each regulation’s vendor requirements Paylocity’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read