What we keep, and for how long
| Data | What we do |
|---|---|
| Social Security numbers | Never stored in full. Any 9-digit SSN in an upload is cut to the last 4 digits when we read the file. The weekly WH-347 only needs an identifying number such as the last 4. |
| Your uploaded payroll files | Encrypted, used to build your report, and deleted after 30 days. |
| Finished reports | Kept encrypted for 3 years so you can re-download them, because Davis-Bacon records must be kept 3 years after a project is completed. Delete a project and its reports go with it. |
| Worker addresses | Only collected when a state format needs them (for example California's eCPR), and encrypted. |
How it is protected
- Files and reports are encrypted in storage, and encrypted again by our application with AES-256-GCM before they are stored.
- Sensitive database fields (worker ID digits, addresses) are encrypted the same way.
- Sign-in uses one-time email links, so there are no passwords to steal or reuse. Sessions are HttpOnly, Secure cookies.
- Download links are signed and expire after 7 days.
- All traffic uses HTTPS.
Who sees your data
- You and the people you add to your company account.
- Our review specialists, only when a report needs a second look, and every change they make is logged with a reason.
- Your prime, only when you click "Send to my prime".
- Service providers that run the product (hosting and storage, email delivery, payments, and an AI model that reads PDF payrolls you upload). They process data only to provide the service.
What we do not do
- We do not sell your data or your workers' data.
- We do not sign certified payrolls or submit them in your name. You sign the Statement of Compliance.
- We do not run payroll or move money to your workers. We are not a payroll provider.
Your controls
Ask for an export of your data or for deletion at help@levelwage.com. Report a security problem to the same address; we will reply within one business day.
More detail in our privacy policy.