Built for other people's salaries.
Payroll holds what people earn and where they are paid. Here is exactly how Nxtpay protects it. Everything on this page describes how Nxtpay works today.
Signing in
-
Two-factor sign-in with an authenticator app, required for owners and finance, the roles that can see pay.
-
Passwords of at least 12 characters, stored as Argon2id hashes, never in readable form.
-
Wrong passwords pause sign-in: after 5 in 15 minutes, signing in to that account is paused and the account holder is emailed.
-
Sessions end after 30 minutes without activity, and 12 hours after signing in, whatever happens.
-
Owners can sign anyone out of every device, and suspend access without deleting the account.
Who sees what
-
Three roles. Owners, finance and HR, each with what their job needs.
-
HR never sees pay. Salaries are removed by the server before a page is built, not hidden on screen.
-
Every organization is separate. Each request is checked for who you are, your role and your organization, and every database query is limited to your organization. Automated tests prove one organization cannot read or change another's data.
Approving pay
-
Two people for every run. The person who prepared it cannot approve it.
-
Approval locks the run. Approved payslips cannot be changed or deleted; corrections go in next month, with a reason.
-
The approved account is the one paid. The bank file uses the account details that were approved, so a change made afterwards cannot redirect a salary. Owners are emailed whenever bank details change.
Protecting data
-
Account numbers and two-factor secrets are encrypted (AES-256-GCM). Screens show only the last four digits.
-
An audit log nobody can edit. Every change, approval, sign-in and download of pay data, with who and when.
-
No pay in email. Emails say what happened and link to Nxtpay; they never include amounts or account numbers.
-
No pay in error reports. Error reports leave out what was submitted, who was signed in and their cookies, and mask amounts, account numbers and email addresses before anything is sent.
-
Nothing kept on your phone. The installed app stores only an offline page and the logo; pay always comes from the server.
Where your data lives
- Database: MongoDB Atlas, in Stockholm, Sweden (AWS eu-north-1), encrypted at rest.
- Application: Vercel.
- Email: Resend. Error monitoring: Sentry.
Your data, your rights
Under the Nigeria Data Protection Act 2023, an organization can take a full export of its data, and ask for it to be deleted when it leaves. See our privacy policy, or write to privacy@nxtedgestudio.com. Privacy policy
Reporting a vulnerability
If you find a security problem, email security@nxtedgestudio.com. We'll acknowledge it, keep you informed, and credit you if you'd like. Please don't access other people's data or disrupt the service while testing.
See your own payroll in Nxtpay.
Bring last month's salary sheet and deductions schedule. We'll walk through a run with you.