Companies trust Payscale to make critical compensation decisions

Committed to data privacy and regulatory compliance

Our team continuously monitors evolving data protection and privacy requirements so that our practices align with applicable laws and leading industry standards.

Data minimization by design

You control how much data you share with Payscale. Many of our products are designed to work with minimal inputs, and any additional data you provide unlocks more features on your terms, so you can stay focused on making confident compensation decisions.

Dedicated 24-hour security and monitoring

Payscale has a team of experts focused on monitoring and protecting your data around the clock.

Certifications and Compliance

TX-RAMP Certified badge - Texas Risk and Authorization Management Program
AICPA SOC 2 badge - American Institute of Certified Public Accountants - System and Organization Controls 2
GDPR badge - General Data Protection Regulation
CCPA badge - California Consumer Privacy Act
CPRA badge - California Privacy Rights Act
Privacy & Data Protection
Artificial Intelligence at Payscale
Contact Us
For matters related to AI, information security, technical safeguards, assurance documentation (e.g., SOC 2 reports), security reviews, or vulnerability-related inquiries.
For questions related to data privacy, personal data handling, data subject rights (e.g., access or deletion requests), DPAs, or regulatory privacy compliance.
Environmental, Social & Governance (ESG)
Payscale's security controls
Data security
Network security
Application security
Corporate security
Legal compliance
Data privacy
Platform security
Access controls
Encryption
Third-party assessments
Endpoint security

Security and compliance documentation requests

To help customers streamline their security and compliance reviews, Payscale maintains a comprehensive set of assurance materials and standardized responses. These resources can be shared upon request and, where applicable, under NDA.

If you need access to any of the materials below, please contact Payscale's Response Management Team (response-management@payscale.com) to request the appropriate documentation.

Questionnaires and standardized responses

  • Custom questionnaires – Customers may submit their own security or compliance questionnaires for Payscale to complete.​
  • Pre-filled standardized questionnaires – Available formats include SIG, CAIQ, and HECVAT, helping reduce review time and effort.​
  • Third-party security response repositories – Pre-filled questionnaires hosted in industry-standard repositories may also be available upon request.​
  • Certifications and attestations – Latest SOC 2 Report, TX-RAMP certification, and other relevant attestations.
  • Penetration testing results – Most recent independent penetration testing report.
  • Security program deliverables – Documentation such as incident response tabletop exercise results, disaster recovery testing evidence, and security architecture diagrams.
  • Company policies – Current versions of Payscale’s core security policies and procedures.

Accessibility

  • VPAT conformance report – Latest accessibility testing and alignment with industry standards. (Available upon request, product-driven.)

Request for proposal (RFP) and request for information (RFI) assistance

  • Direct support – Our team can assist with the completion of RFPs/RFIs.
  • Compensation management-specific RFI and RFP templates – Standard Compensation Intelligence platform templates provided to accelerate the procurement process.

Note: Many of these resources are nonpublic and require a signed NDA or verified customer relationship to access. Please contact response-management@payscale.com to request access.

Work with a trusted and transparent Payscale

Get a Demo