Per-tenant isolation
Each payroll provider has its own isolated database. One client's data never mixes with another's.
Security & compliance
Your payroll, secured and compliant.
Payroll is among your most sensitive data. nominaHQ protects it with per-tenant isolation, credential encryption and world-class infrastructure — and keeps it compliant with Panama's CSS, DGI and Labor Code.
COMPLIANT ✓
Designed so you never get CSS or DGI fines.
Rates and formats stay current — including the Ley 462 employer-rate ramp (2027 and 2029) — so your calculations and your SIPE payroll are always right.
Platform security
Protection at every layer
Argon2 passwords
Credentials hashed with Argon2; sessions use cookies with sliding expiry.
Signed webhooks (HMAC)
Every outbound webhook is HMAC-SHA256 signed, so you can verify it came from nominaHQ.
SSRF protection
Webhook delivery blocks non-public targets (loopback, private ranges, cloud metadata) and disables redirects.
Audit & access control
Tenant users with access levels, immutable pay stubs and a webhook delivery log.
Microsoft Azure infrastructure
Built on Microsoft Azure, with forced HTTPS (HSTS) and security headers across the site.
Certifications
Backed by international standards.
SOC 2 Type II
Certified
ISO 27001
Certified
GDPR
Compliant
99.9% SLA
Guaranteed uptime
Certifications of the P4 Software platform, on which nominaHQ is built.
Panama compliance
Every obligation, covered
CSS · SIPEACH · BankingISREducation taxDécimoVacations · LiquidationsLabor CodeLey 462 (2025)
Have a security question or an IT requirement? Email sales@p4.software.