Pay Stub Scanner Privacy Information

How your pay stub is transmitted and stored

Every pay stub you upload is protected from the moment it leaves your device:

• Encrypted in transit — all documents are sent over HTTPS using TLS 1.2 or higher, the same encryption standard used by banks and financial institutions.
• Encrypted at rest — once received, your pay stub is stored using industry-standard encryption within our secure cloud environment.
• Access controls — access to uploaded pay stubs is restricted through role-based access controls and multi-factor authentication, ensuring only authorized users can view your documents.
• Audit logging — all access to pay stub data is logged and monitored, so there is a complete record of who accessed what and when.
• Employee access — Holistiplan employees may only access customer data when necessary for authorized support purposes and in accordance with strict internal controls. Access is never granted for any other reason.

How pay stub scanning works

Holistiplan uses automated scanning and AI-assisted processing to extract information from your pay stub — such as income, withholdings, and deductions — so you don't have to enter it manually.

A few important things to know about this process:

• Secure environment — all scanning and AI processing occurs within controlled, secure environments. Your pay stub never passes through unsecured systems.
• Limited purpose — data is extracted solely to provide the pay stub scanner functionality. It is not used for any other purpose.
• No AI model training — your data is never used to train public AI models. Ever.
• Vendor obligations — any third-party AI service providers we work with are contractually bound to strict confidentiality and security requirements. They cannot use your data for their own purposes.

What happens after scanning

Once your pay stub has been scanned and the relevant information extracted:

• The extracted data (such as income figures and withholding amounts) is presented to you for review within your Holistiplan account.
• You are in control — you review the results and either accept or reject them. The extracted data is only applied to your account if you choose to accept it.
• Your pay stub is not stored longer than necessary — once the results have been processed and presented to you, the original pay stub document is automatically and permanently deleted, typically within about an hour. It is never retained beyond what is required to complete the scanning process.

Our security program

Holistiplan maintains a formal security program aligned with SOC 2 principles and U.S. data protection standards. This means we have documented policies, regular reviews, and independent oversight to ensure your sensitive financial information remains private and protected — not just today, but on an ongoing basis.