Security Overview

Effective Date: July 21, 2026

Last Revised: Not yet revised

Version: 1.0

1. Purpose

Payroll information is among the most sensitive business information an employer maintains.

Diversified Payday is designed to help Customers manage payroll securely while recognizing that security is a shared responsibility.

This overview is intended to provide general information regarding our security practices. It is not a contractual guarantee of any particular technology, configuration, certification, or security standard.

2. Shared Responsibility

Security depends on both Diversified Payday and each Customer.

Diversified Payday is responsible for protecting the platform and maintaining reasonable safeguards.

Customers remain responsible for protecting:

• User accounts
• Passwords
• Authorized users
• Devices
• Internal payroll procedures
• Banking approvals
• Employee information entered into the platform

No technology can eliminate every security risk.

3. Account Security

Customers should:

• Use strong passwords.
• Protect login credentials.
• Limit administrative access.
• Remove former employees promptly.
• Review user permissions regularly.
• Secure computers and mobile devices.
• Keep browsers and operating systems updated.
• Avoid shared credentials.

Each authorized User should maintain an individual account whenever possible.

4. Access Controls

Diversified Payday is designed to limit access based on user permissions.

Administrative users are responsible for assigning appropriate permissions and periodically reviewing user access.

Customers should immediately remove access for individuals who no longer require it.

5. Banking Information

Payroll banking information is particularly sensitive.

Customers are responsible for:

• Reviewing bank account information.
• Confirming routing numbers.
• Verifying payroll totals.
• Reviewing generated payroll files before submission.
• Confirming payroll instructions before transmitting them to their financial institution.

Diversified Payday cannot verify whether a Customer is authorized to use a particular bank account beyond the certifications required during platform use.

6. Payroll Review

Customers should review each payroll before approval.

Examples include:

• Employee wages
• Contractor payments
• Hours worked
• Tax withholding
• Deductions
• Direct deposit information
• Check amounts
• Payroll totals

Approvals should only be completed by authorized personnel.

7. Fraud Prevention

Diversified Payday may monitor platform activity for indications of fraud, abuse, unauthorized access, or other activity that could threaten Customers or the Services.

Monitoring helps protect platform integrity but cannot prevent every fraudulent act.

Customers should promptly report suspected fraud or unauthorized activity.

8. Protection of Customer Data

Diversified Payday uses reasonable safeguards intended to help protect Customer Data from unauthorized access, disclosure, alteration, or destruction.

Security practices may evolve over time as technology, threats, laws, and business needs change.

For security reasons, Diversified Payday does not publicly disclose every protective measure used within the platform.

9. Customer Responsibilities

Customers should:

• Review payroll carefully.
• Protect credentials.
• Limit access.
• Maintain current contact information.
• Monitor account activity.
• Report suspicious activity promptly.
• Keep devices secure.
• Train authorized users.
• Follow internal approval procedures.
• Verify banking information before payroll submission.

10. Incident Response

If Diversified Payday becomes aware of a security incident affecting Customer information, Diversified Payday will respond in accordance with applicable law, contractual obligations, and internal response procedures.

The specific actions taken will depend upon the nature and scope of the incident.

11. Reporting Security Concerns

Customers who believe:

• An account has been compromised,
• Credentials have been stolen,
• Banking information has been altered,
• Unauthorized payroll activity has occurred,
• Or another security concern exists,

should contact Diversified Payday as soon as reasonably possible.

Prompt reporting helps reduce potential harm.

12. Availability

Diversified Payday works to maintain reliable platform availability.

However, no online service can guarantee uninterrupted availability.

Maintenance, upgrades, internet outages, third-party service interruptions, security events, or other circumstances may temporarily affect access.

Customers should plan payroll processing with sufficient time before deadlines.

13. Third-Party Services

Diversified Payday relies on third-party providers for certain infrastructure, communications, payment processing, tax filing, hosting, and other operational services.

Those providers maintain their own security practices.

Diversified Payday carefully selects service providers but cannot guarantee the independent security practices of third parties.

14. No Absolute Security

No software platform, website, cloud provider, network, device, or communication system can guarantee complete security.

Accordingly:

• No security measure is perfect.
• No system is immune from attack.
• No online service can eliminate every risk.

Diversified Payday continually evaluates security practices but cannot guarantee that unauthorized access will never occur.

15. Changes to This Overview

Diversified Payday may update this Security Overview to reflect changes in technology, security practices, business operations, or applicable law.

The Last Revised date and Version number will be updated when material changes are published.

16. Contact

Questions regarding security may be directed to:

Diversified Payday
A Division of Diversified Company
6212 US Highway 6, Suite 184
Portage, Indiana 46368-5057
Phone: 833-990-7297
Email: CustomerService@ChooseDiversified.com