Encrypting what matters
Payroll systems hold some of the most sensitive information a company has about its people. In July we worked through a structured data-protection review and closed the gaps it found.
The largest change is that sensitive employee personal details are now encrypted at rest. That creates a practical problem, because payroll still needs to find an employee by those details, so we added a lookup method that allows matching without decrypting everything, plus a command and health check that confirm it is working. Backups and data snapshots are now encrypted too. We tightened sign-in, stopped personal data from being passed to outside services where it was not needed, moved remaining secrets into managed configuration, and added a post-deployment health check.
A front door for AI assistants
We also built the Agent Gateway, which lets AI assistants work with Mintage Payroll through a defined catalogue of tools: creating and updating employees, managing loans, assigning people to pay runs and more. Each connected client gets only the permissions it is granted, sensitive data needs its own explicit permission, actions are rate-limited and audited, and the audit trail itself is kept free of personal data. Administrators manage these connections from the Customization area.
A fresh coat of paint
On the frontend, many everyday dialogs were redesigned: PAYE, NIS, basic salary, overtime, lost time, loans, payment preferences and the gross and net salary calculators. Adding a team member is now a guided wizard, and administrators have a new activity history. Loans gained annual simple interest and a reducing-balance method, Data Sync reviews were made safe when two people act at once, and payroll fields now support text codes. July came to 516 commits.
This article was written from Mintage Payroll’s commit history for July 2026. See Mintage Payroll today