Overview

The Gateway Solution enables employers to electronically send Payday data directly from your PayGlobal database to to IR.

The Gateway solution provides the following benefits to employers:

• Reduces the steps/time taken for a user to complete the filing process
• Reduces the security risks of the data within the files being accessed by un-authorised users/parties
• Enables users to see what/has or hasn't been sent from PayGlobal

How it works

The Gateway Service uses an HTTPS transport layer with mutual authentication.

This means data is transported via the “world-wide-web”.

Your organisation will need to have:

• a secure open outbound port
• check/update settings on proxy servers (if proxy servers are used)
• install an MYOB SSL certificate

To reduce the exposure of your PayGlobal environment to the outside world, your data is first transported to the MYOB Agency API.

The MYOB SSL certificate allows your PayGlobal environment to communicate with MYOB’s Agency API service. This service is responsible for holding all submissions/related messages in a queue when IR’s systems are busy or off-line, so that you don’t have to remain logged into PayGlobal or need to leave PayGlobal running with an open outbound port 24/7.

Payday Filing data is not viewable at any point from the time it leaves PayGlobal until the time it reaches IR. Only metadata available to MYOB in order to monitor the overall performance of the system.

Each user will also be required to complete a User Authorisation process before they can commence sending Payday Filing data to IR. Permissions will reflect those granted in myIR. For example, if a user does not have permission to file a return online, they will not be able to file a return via Gateway Services either. This applies to users who are granted access as staff inside an organisation or as staff in a tax agency.

Security

All Payday Filing data is encrypted both in transmission and at rest.

MYOB services are assessed under OWASP Application Security Standard level 3 and undergo annual penetration testing by an external 3rd party.

MYOB services also comply with ISO 27001 the standard for Information Security Management Systems.

Within PayGlobal you can control (via User's Security Profile):

• Access to the Payday Reporting Manager Tool
• Which pay periods a user can send "EI" data for
• Which employees a user can "ED" data for