Employment Hero Security
As Employment Hero continues to grow and innovate, our commitment to information security remains unwavering. We understand that the security of our customers' data is of the utmost importance, and it is a fundamental responsibility that we take very seriously.
At Employment Hero, we believe that making employment as easy as possible for our clients should not come at the expense of their security. That's why we have dedicated teams and resources to ensuring that our products meet the highest standards of security, and that we protect our customers' information at all times. We are constantly looking for ways to improve and enhance the security of our products, and we work closely with industry experts and leading security organizations to stay up-to-date on the latest threats and best practices.
Our customers can trust that their information is safe with us, and that we are doing everything in our power to ensure that it remains that way. We believe that the security of our products is not only a fundamental responsibility, but also a critical aspect of what makes Employment Hero the best choice for businesses around the world.
Use this portal to learn about our security posture and request access to our security documentation.
Documents
Featured Documents
We’re proud to announce that Employment Hero has achieved ISO 27017 (Cloud Security) and ISO 27018 (Protection of Personally Identifiable Information in the Cloud) certifications, adding to our existing ISO 27001 certification.
These internationally recognised certifications reflect our unwavering commitment to safeguarding customer data, maintaining the highest standards of security, and protecting privacy in the cloud. Employment Hero is now the only vendor in our space to hold all three certifications—ISO 27001, ISO 27017, and ISO 27018—a testament to our dedication to meeting and exceeding the evolving security expectations of our customers and partners.
This milestone highlights our continuous efforts to provide a secure and reliable platform that you can trust. You can find our certifications, along with more details about our security practices, on our Security page.
We remain committed to maintaining best-in-class security and privacy measures, ensuring your data is always in safe hands.
We are pleased to announce updates to our Safebase Information Security policies. These changes reflect our ongoing commitment to robust security practices and transparency with our customers.
Key updates include:
- Revised and updated sanitised Information Security policies on Safebase, providing clear, high-level overviews while protecting sensitive information.
- Addition of Cloud Security Policy
- Additional Disaster Recovery policy (reflecting cloud DR based on ISO27017/ISO27018)
- Data Protection Policy (shared in full)
- Shared Responsibility Policy (shared in full)
Our existing policies have been amended, and new policies formed, to align with ISO27017 and ISO27018 standards, expanding upon our current ISO27001 compliance.
We invite you to review these updated and new policies on Safebase. If you have any questions, please contact your internal EH representative or the Support team.
Thank you for your continued trust in our security practices.
Employment Hero has officially been recertified for ISO 27001:2013!
This certification covers Employment Hero Holdings Pty Ltd and its suite of SaaS products, including Employment Hero Payroll, previously known as KeyPay. These products will no longer be certified as separate entities and now fall under Employment Hero's certification.
Our renewed certification has been added to our Security Profile and can be downloaded as required.
Employment Hero is now publishing sanitised versions of its security policy documents. This is done to protect Employment Hero's sensitive information, such as its security products, procedures and strategies. The sanitised versions of the documents are still informative and provide a high-level overview of the our security policies.
Employment Hero believes that it is important to balance the need to protect its sensitive information with the need to be transparent about its security practices. By publishing sanitised versions of its policy documents, Employment Hero hopes to demonstrate its commitment to security and to build trust with the public.
If you think you may have discovered a vulnerability, please send us a note.