Suppliers
Everybody else who holds it
Almost no employer knows the chain behind its payroll, which is the question asked second.
Processors, and the Contract You Need
Required terms that most supplier agreements partially contain, and the distinction that determines who answers when something happens.
Payroll, Benefits and the Chain Behind Them
The oldest supplier relationships, the most sensitive data, and the arrangements least likely to have been documented since they began.
Transfers Outside the Jurisdiction
The row most often left blank in the record of processing, and the one most likely to be true without anybody having noticed.
Due Diligence That Is Proportionate
A small employer cannot audit a large supplier, and is still obliged to make a judgement. What that judgement reasonably consists of.
When a Supplier Has a Breach
Their incident becomes your obligation, on your clock, with information you do not control.
Changing or Leaving a Supplier
The point at which staff data is most likely to be duplicated, stranded or left behind, and the obligation that nobody owns during a migration.