The payroll access log
Salaries and OASI (AHV) numbers are your employees’ most confidential data. To Bill records every view of this data in a log, in the name of the person who viewed it.
Before you start
The access log is reserved for the people who manage payroll (Payroll · Manage permission). Others do not see the tab.
View the log
Open Payroll › Access log. Each row says When, What, Who and for which Employee (or Whole payroll), the most recent at the top.
What is recorded
| Action | When it is recorded |
|---|---|
| Employee list viewed (OASI, IBAN) | Someone opened Payroll › Employees, which shows the OASI numbers in full. |
| Employee record viewed (OASI, IBAN) | Someone opened an employee’s record, with their OASI number and IBAN in full. |
| OASI number shown | Before 11 October 2026, an employee’s record only showed the end of the OASI number: someone clicked the button that showed it in full. These rows stay in the log. |
| Payslip downloaded | The PDF of a payslip. |
| All payslips downloaded | The PDF of all the payslips of a payroll. |
| Payment file made | The pain.001 file of a payroll. |
| Salary certificate downloaded | The PDF of an employee’s certificate. |
| All salary certificates downloaded | The PDF of all the certificates of a year. |
| OASI statement downloaded, occupational pension (BVG) statement downloaded | The annual files for the OASI fund and the pension fund, which contain the full OASI numbers. |
| Leaving document downloaded | A document from an employee’s departure, for example the employer’s certificate or the work certificate. See When an employee leaves. |
| Retention archive created | The archive of your books, which includes the payroll accounting. See Archive and retention of your books. |
The two screens that show OASI numbers and IBANs in full, the employee list and an employee’s record, are recorded each time they are opened. Opening a payroll is not recorded.
The log is kept
To Bill offers no way to edit or erase a row of the log. It is part of your books’ archive, together with the payslips, certificates and payment files.
Legal basis
- The OASI (AHV) number must be protected by technical and organisational measures: access limited to the people who need it, and security in line with the state of the art: Art. 153d AHVG, the Federal Act on Old-Age and Survivors’ Insurance (German version: fedlex has no English one).
- The controller ensures data security appropriate to the risk: Art. 8 FADP. This includes, in particular, being able to check which data was entered or changed, by whom and when: Art. 3 para. 3 let. a DPO.
- For the archived data of the books, including payroll accounting, views and accesses are recorded, and these records are kept as long as the data: Art. 8 and Art. 1 para. 3 GeBüV, the Ordinance on the Keeping and Retention of Accounting Records (German version: fedlex has no English one).