SECURITY & PILOT READINESS
Trust requires
specific answers.
Review the controls implemented in the pilot, the limits of the public demo and the work required before an agency authorizes production data.
IMPLEMENTED IN THE PILOTControls you can inspect.
- Verified account access and membership-derived workspace roles.
- Server-side workspace and employee/supervisor scope checks.
- Separate preparation and review decisions.
- Version checks that reject stale saves.
- Atomic state and audit writes, with restricted audit modification.
- Source hashes and row lineage for staged CSV comparisons.
PRODUCTION ACCEPTANCE WORKRequirements to validate together.
- Agency SSO/MFA and identity lifecycle integration.
- Database-enforced tenant isolation and penetration testing.
- Approved hosting, region, encryption and key requirements.
- Retention, recovery, monitoring and incident procedures.
- Accessibility and representative workload testing.
- Validated tax, pension, banking and finance interfaces.
DATA & DEPLOYMENT BOUNDARIES
Use the demo to evaluate the workflow.
The public sandbox contains fictional records and stores your edits in the browser session. Do not enter real employee, banking or tax information. Invited cloud pilot workspaces use Vercel and Neon; a state's approval of those services is a separate requirement.
CivicWage is not represented as FedRAMP-authorized, CJIS-compliant or approved by any state. Pilot tests are evidence of specific behavior, not a security certification. Real payroll processing and payment release remain disabled.
Read the privacy and data handling notice →LET’S START WITH YOUR WORKFLOW
A better payroll process
starts with a closer look.
Bring one agency, one workflow and the questions your team needs answered.