Our platforms hold employee, payroll and document data, so compliance is part of the product, not an afterthought. This page sets out the frameworks we work to and the Malaysian statutory obligations our software handles.
The standards our security and privacy practices are built around.
The EU General Data Protection Regulation governs personal data of people in the EU and EEA, wherever it is processed. Our platforms are built so you can meet those obligations: access, correction and erasure of employee records, export of a person's data, retention controls, and a data processing agreement between your company and ours.
SOC 2 examines the controls behind a service organisation's security, availability, processing integrity, confidentiality and privacy. We operate our systems around those criteria: change management, access reviews, monitoring, backups and incident response.
ISO/IEC 27001 defines how to run an information security management system — risk assessment, documented policies, staff responsibilities and continuous review. Our internal security policies follow its control areas, covering access control, cryptography, supplier relationships and business continuity.
Certification and audit status: for current certificates, audit reports and our data processing agreement, contact our Kuala Lumpur team and we will share the latest documentation for your review.
Contributions, deductions and records our software prepares for each local authority.
The Personal Data Protection Act 2010 governs personal data in commercial transactions in Malaysia. Employee data is held with role-based access, so only the people who need a record can open it, and every record can be corrected or removed on request.
Employee and employer provident fund contributions calculated each pay run, with the monthly contribution schedule ready for submission.
Social security contributions processed for every eligible employee, including new joiners and leavers within the month.
Employment Insurance System contributions deducted and reported alongside SOCSO.
Monthly tax deductions worked out from each employee's pay and tax profile, with the year-end statements your staff need for their own filing.
Human Resources Development levy tracked for employers registered with HRD Corp, alongside the training records behind it.
The measures that apply across WebHR, PayDay, HireSide, Greeter and FileIt.
Tell us what your procurement or security team needs — certificates, our data processing agreement, or answers to a security questionnaire — and we will send it across.