Skip to content
P.A.Y.Payroll All Year

An original P.A.Y. selection guide

Ask better questions.
See the work.

Turn a long vendor list into a decision your payroll, HR, finance and IT teams can explain. Use the same requirements and test cases with every provider.

Eight steps from scope to sign-off.

  1. Define the business scope

    List every employing entity, jurisdiction, worker population, pay group and location. Separate what must work on day one from later phases. Name the business decision owner and document the current pain in observable terms.

  2. Map the current stack and responsibilities

    Name the HR, time, payroll, finance, benefits and identity systems. Mark keep, replace or investigate for each. Identify the source of truth, integration owner, important identifiers and the people responsible for funding, filing and support. A similar feature is not proof an existing system can be retired.

  3. Write testable requirements

    Describe the result, not only a feature label. Include country scope, effective dates, multiple assignments, approved pay rules, time exceptions, correction history and role restrictions. Mark Must, Should or Could and state the evidence needed. The template includes 36 starting requirements to adapt.

  4. Ask for the full delivery and cost picture

    Request exact products and editions, prerequisites, partner responsibilities, interface charges, implementation work, support coverage, minimums and exit costs. Use the same headcount, entities, volumes and comparison period for every quote. No directory price or implementation timeline is assumed.

  5. Run the same scripted demonstration

    Give each vendor the same fictional population, changes, time exception, malformed file and expected results. Ask them to show correction, reconciliation, approvals and audit evidence. Record demonstrated, explained-only, not-shown and gap separately. Keep production data and real payment actions out of the demo.

  6. Review security and integration evidence

    Have the appropriate security and IT owners assess access controls, MFA/SSO, data handling, subprocessors, logs, resilience, incident response and customer responsibilities. Verify exact connectors, data direction, permissions, error recovery and ongoing ownership. An assurance report or marketplace badge alone does not answer every requirement.

  7. Score the evidence and verify references

    Agree weights before demos. Apply the same 0–4 rubric, preserve unknowns and link each score to evidence. Resolve mandatory gaps separately; a high average must not hide an unsupported country or missing payment control. Ask comparable customers about implementation, support and the actual workflows that matter to you.

  8. Plan acceptance, parallel runs and the handoff

    Name migration and cutover owners, populations, expected results, tolerances and sign-off. Test record sets, cents, GL, payment controls and integration recovery. Agree rollback and escalation criteria before go-live. The accountable employer team approves the decision; no quiz or worksheet automatically authorizes production payroll.

Source-backed security questions

Understand the responsibility you keep.

NIST’s 2026 supplier due-diligence guide describes researching suppliers and products to inform acquisition decisions. CISA’s cloud architecture guidance explains that cloud providers and customers share security responsibilities, with details varying by service and provider.

For this RFP, turn those principles into specific questions: who manages identities, configures access, reviews exports, monitors interfaces, handles incidents and verifies recovery? Ask for evidence relevant to the service you are buying, then have your security and procurement owners assess it.

These sources inform the planning questions; they do not endorse a vendor, certify this worksheet or replace your organization’s assessment. Sources reviewed November 2, 2026.

Three practical working documents

Make the evaluation repeatable.

RFP template

36 requirements covering payroll, time, integrations, security, payments, implementation and whole-life cost.

Scripted demo

Ten fictional scenarios with expected evidence, exception handling and a review record.

Evidence scorecard

An editable weighted 0–4 rubric, mandatory-gap review and named decision record.

Each download is a fillable HTML document. Open it in your browser, complete the editable fields and use Print to save a PDF. Your entries are not submitted to P.A.Y. or saved to your account.

A current free profile is required. All four free account options are eligible; email preferences can remain off.

Stay curious. Keep the evidence.

Create a free P.A.Y. profile for practical tools and downloads. Newsletter updates are optional.