Security

Foundation of security

We're committed to delivering exceptional security as your payroll tax infrastructure partner. After all, payroll never takes a break and neither does our dedication to ensuring safe, accurate, and compliant software.

Our 40 years of expertise in tax compliance ensures our solutions not only handle the intricacies of evolving tax regulations but also demonstrates our commitment to providing a safe, stable, and scalable software platform for your payroll systems.

Data security

Data encryption

Data in transit
All data transferred between the user’s browser and Symmetry’s servers is encrypted in transit. Symmetry supports TLS 1.3.
Data at rest
Data is encrypted at rest in AWS using AES-256 key encryption.

Data center security

Data center provider
Symmetry uses Amazon Web Services (AWS) to host its production servers, databases, and supporting services.
Multi-region
Symmetry uses a multi-region setup for its infrastructure. The principal region for running applications is AWS region US-West-2 (Oregon), with AWS region US-East-2 (Ohio) for its backup.

Data availability

Backups
Symmetry’s production systems and data are backed up on a regular basis and across multiple cloud computing regions to maintain business continuity.
System status page
Symmetry service statuses, maintenance updates, and any incidents affecting our users are documented and available at status.symmetry.com.

Application security

Access controls

Access to Symmetry’s systems is limited based on employee roles and responsibilities. The principle of least privilege is enforced.

Testing and review

All changes to our applications are subject to peer review and testing before being merged.

Separate environments

Symmetry maintains segregated development, testing, staging, and production environments.

Penetration testing

Symmetry’s security team uses third parties to conduct penetration tests to identify deficiencies in the system that may affect critical assets.

Vulnerability scanning

Symmetry uses third-party security tools to continuously scan our applications, systems, and infrastructure for security risks and vulnerabilities.

Code analysis

Symmetry’s code repositories are regularly scanned for security issues using static code analysis.

Product security

Unified Authentication
Symmetry leverages a single sign-on (SSO) platform to manage client access to Symmetry’s systems and resources.
Application Authentication
Symmetry uses a combination of secure API keys along with signed and encrypted JSON web tokens (JWT) for API authentication.

People security

Security awareness
Dedicated team
Symmetry has access to a dedicated security team to enforce secure practices and respond to security incidents quickly and efficiently.
Policies
Symmetry maintains a robust set of security policies that are updated periodically to meet the demand of an evolving security environment. Policies are communicated to employees and available for review at any time.
Training
All Symmetry employees are required to complete security training. The security team provides continuous education on emerging security threats, and communicates updates with employees regularly.
Employee checks
Background checks
Symmetry performs background checks for potential candidates before hiring.
New-hire reviews
All new hires are required to read, sign, and acknowledge Symmetry’s information security policy and confidentiality agreements upon joining the team.