Payroll means bank accounts, Social Security numbers and salaries. Here's exactly how we protect them.
Three layers, working together on every payroll.
All data is encrypted in transit with TLS 1.2 and at rest with AES-256.
Hosted on AWS in private subnets. No public IP addresses and no direct internet access to our systems.
A web application firewall checks everything entered into Friday. Health, performance and logging alerts flag issues fast.
Security is part of how we build, not a step at the end.
Every developer is trained in secure coding.
People get only the access they need. Passkeys and multifactor authentication come first.
Our security program is built on a risk register we keep current.
An active incident management program, ready if something goes wrong.
The full policy, in plain view.
We take security and privacy seriously.
If you have any questions about our security practices or this Security policy, please contact us:
We have a bug bounty program. If you find a security issue in Friday, tell us privately at security@fridayapp.com.
Email security@fridayapp.comWe use your information to run your payroll and support your business. We don't sell it.
Found a vulnerability or something that looks wrong? Tell us right away.
security@fridayapp.comWant to see, change or delete your data? A real person answers.
privacy@fridayapp.com