Data Security
Paycor Sets the Standard for Data Security
Paycor sets the standard for state-of-the-art data security. We apply machine-learning to enhance our risk management capabilities by intelligently flagging suspicious activity at scale. Paycor stays one step ahead of fraud, with robust and adaptive fraud prevention solutions.
More than 2.5 Million Users
Our HR solutions support more than 2.5 million users across 50 states.
30+ Years of Experience
Paycor has more than 30 years in the HCM industry.
Best-in-Class Implementation
We provide the hands-on guidance, expert support and tools needed to ensure a seamless transition.
30k+ businesses
Paycor serves more than 30,000 businesses nationwide.*
Industry‑Leading Security
Paycor’s security protocols pinpoint suspicious activity to prevent fraudulent account takeovers. With a flexible approach to data security, we quickly adapt to new threats by allowing the risk team to confidently change existing strategies with A/B and back-testing capabilities.
Robust Data Protection
Paycor safeguards client data through enterprise-class data centers with Intrusion Detection and Prevention Systems. Our infrastructure features full redundancy and live backups for reliability. We implement comprehensive encryption, including disk-level and file-level protection, securing data against both physical and digital threats.
Dedicated Risk Assessment
Cybersecurity threats are constantly evolving and becoming more complex. Paycor has a dedicated team that performs vulnerability scans and penetration tests across our entire network. We also rotate third-party software companies to perform software scans on our network twice per year.
Accredited and Compliant
Paycor uses advanced data security protocols like multi-factor authentication (MFA), industry-leading encryption, and a dedicated risk assessment team. But security goes beyond a checklist of features. Paycor is accredited by and compliant with GDPR, FinCen, US Privacy Shield, SOC 1 Type 2, and SOC 2 Type 2 security standards.
Follow these basic tips:
- Use a strong and unique password for paycor.com
- Guard your email account and mobile device for two-step authentication
- Do not share your password with anyone
- Keep your antivirus, web-browsers, and operating system up to date with security patches
- Be cognizant of phishing and malware emails
- Only use trusted devices and be careful of free WIFI
- Let us know if you have concerns about your account security
We utilize SMS or email-based two-step authentication as an added protection for signing in. Our applications offer workflows and generate notifications for high-risk changes like direct deposit changes or account lockouts.
“Phishing” is a situation where an individual receives a fraudulent email that appears to be sent by a trusted vendor in order to steal personal information. Phishing attempts can be very convincing as the web site requesting information can seem very similar to the legitimate vendor’s site. There are some best practices that Paycor recommends to prevent you or your employees from becoming victims to this type of attack.
- Validate the sender: When you receive emails from Paycor, ensure that the address ends in @paycor.com.
- Validate the URL: When entering your username and password, check the URL in the browser to ensure that it is indeed the correct address and that it is protected with “HTTPS” at the front of the URL.
- Look for inconsistencies: Oftentimes, phishing attempts can contain subtle differences in the design of the site. Be sensitive to nuances such as misspellings or poor graphics.
- Look for threats: Phishing attempts often warn of bad consequences if an action is not taken immediately or within a certain period time.
- Enable Multi-Factor Authentication: Multi-factor authentication is an additional and significantly effective security measure that requires a “second factor” such as a secure code to authenticate.
- Ensure a strong password: We recommend your password include a combination of lower and upper-case characters, numbers and other symbols.
- It is important to note that Paycor will never request that your username or password be sent via email.
We utilize SMS or email-based two-step authentication as an added protection for signing in. Our applications offer workflows and generate notifications for high-risk changes like direct deposit changes or account lockouts.
If you or your employees have received a suspicious email, we recommend that you delete it immediately. If you or your employees have entered information such as username, password, or other confidential information into a suspicious site, we recommend that the password for the account is changed immediately. Please contact your specialist with additional questions.