Security

RoPA

Record of processing activities: the register of how personal data is used.

A RoPA (record of processing activities) lists what personal data an organisation processes, why, on what lawful basis, who it is shared with and how long it is kept. It is the starting point for showing that you comply with data protection law. In Vintage People the RoPA register is a tab of Data protection, and every addition, edit and deletion is audited.

Help & how-to

See it in practice

Single sign-on and SCIM

Verify your domain, connect OIDC or SAML, provision users.

Data protection under the NDPA

The privacy console tabs and the breach clock.

Roles & access control

A two-stage model: what each role can see, and what it can do.

Browse the Help Center

See it applied to real payroll

Vintage People applies these statutory rules on every run, with a full audit trail.

See Vintage Payroll PAYE calculator