Security & Trust

• Every workspace requires an email and password to sign in.
• Passwords are stored hashed, never in readable form.
• Password reset runs through a time-limited link sent to your email address.

Payroll records, employees and payslips are scoped to your account. Database access rules are enforced on the server, so one customer cannot read another customer's data even if a request is crafted by hand.

Danko Wage runs on managed cloud infrastructure. Traffic between your browser and the application is encrypted in transit with HTTPS, and the database is managed by our hosting provider with backups handled at the platform level.

• Our platform providers secure the underlying infrastructure, network and managed database.
• We build and maintain the application, its access rules and its data handling.
• You control who has your login details, what employee data you load, and how you share payslips.

We collect only what the product needs: account details, company details, and the employee and payroll data you enter. We do not sell data and we do not run third-party advertising trackers. Full detail lives in the Privacy Policy.

Payroll history stays available while your account is active so you can meet SARS record-keeping expectations. On request we delete your data, except records we are legally required to keep.

To access, correct or delete personal information, email privacy@dankowage.com.

If you believe you have found a security issue, please email security@dankowage.com with enough detail to reproduce it. Please do not test against other customers' accounts or attempt to access data that is not yours. We will acknowledge reports and keep you updated while we investigate.

We aim to handle personal information in line with POPIA. We do not currently hold SOC 2, ISO 27001 or other third-party certifications, and we will not claim otherwise.