RFP template
36 requirements covering payroll, time, integrations, security, payments, implementation and whole-life cost.
An original P.A.Y. selection guide
Turn a long vendor list into a decision your payroll, HR, finance and IT teams can explain. Use the same requirements and test cases with every provider.
List every employing entity, jurisdiction, worker population, pay group and location. Separate what must work on day one from later phases. Name the business decision owner and document the current pain in observable terms.
Name the HR, time, payroll, finance, benefits and identity systems. Mark keep, replace or investigate for each. Identify the source of truth, integration owner, important identifiers and the people responsible for funding, filing and support. A similar feature is not proof an existing system can be retired.
Describe the result, not only a feature label. Include country scope, effective dates, multiple assignments, approved pay rules, time exceptions, correction history and role restrictions. Mark Must, Should or Could and state the evidence needed. The template includes 36 starting requirements to adapt.
Request exact products and editions, prerequisites, partner responsibilities, interface charges, implementation work, support coverage, minimums and exit costs. Use the same headcount, entities, volumes and comparison period for every quote. No directory price or implementation timeline is assumed.
Give each vendor the same fictional population, changes, time exception, malformed file and expected results. Ask them to show correction, reconciliation, approvals and audit evidence. Record demonstrated, explained-only, not-shown and gap separately. Keep production data and real payment actions out of the demo.
Have the appropriate security and IT owners assess access controls, MFA/SSO, data handling, subprocessors, logs, resilience, incident response and customer responsibilities. Verify exact connectors, data direction, permissions, error recovery and ongoing ownership. An assurance report or marketplace badge alone does not answer every requirement.
Agree weights before demos. Apply the same 0–4 rubric, preserve unknowns and link each score to evidence. Resolve mandatory gaps separately; a high average must not hide an unsupported country or missing payment control. Ask comparable customers about implementation, support and the actual workflows that matter to you.
Name migration and cutover owners, populations, expected results, tolerances and sign-off. Test record sets, cents, GL, payment controls and integration recovery. Agree rollback and escalation criteria before go-live. The accountable employer team approves the decision; no quiz or worksheet automatically authorizes production payroll.
Source-backed security questions
NIST’s 2026 supplier due-diligence guide describes researching suppliers and products to inform acquisition decisions. CISA’s cloud architecture guidance explains that cloud providers and customers share security responsibilities, with details varying by service and provider.
For this RFP, turn those principles into specific questions: who manages identities, configures access, reviews exports, monitors interfaces, handles incidents and verifies recovery? Ask for evidence relevant to the service you are buying, then have your security and procurement owners assess it.
These sources inform the planning questions; they do not endorse a vendor, certify this worksheet or replace your organization’s assessment. Sources reviewed November 2, 2026.
Three practical working documents
36 requirements covering payroll, time, integrations, security, payments, implementation and whole-life cost.
Ten fictional scenarios with expected evidence, exception handling and a review record.
An editable weighted 0–4 rubric, mandatory-gap review and named decision record.
Each download is a fillable HTML document. Open it in your browser, complete the editable fields and use Print to save a PDF. Your entries are not submitted to P.A.Y. or saved to your account.
A current free profile is required. All four free account options are eligible; email preferences can remain off.
Create a free P.A.Y. profile for practical tools and downloads. Newsletter updates are optional.