Keeps: every run and its reasons
The run, each person’s lines, and the explanation of every change from last month.
Centilio PayEvery branch, reached
CENTILIO PAY / MONEY
Payroll compliance software, designed around who approves.
Payroll is the most private record a business keeps and the one with the most due dates. Pay is designed so salaries are encrypted and seen only by the roles you set, India’s deductions are computed and filed with every run, and nothing is paid or submitted until a named person approves. None of it is running yet, and this page says what is designed, not what is certified.
not shipped · wave 3roles from Accountapproval before paynever used to train anything
Product design preview · Pay has not shipped. All features, screens and prices are proposals.
Pay has not shipped yet.
Everything on these pages — the screens, the features, the prices — is Centilio Pay as designed. Pay has not shipped: it sits in the third wave of Centilio tools, after Team and Ledger, and there is no app, no beta and no launch date yet. At launch it is designed to run payroll in India only. We would rather set out the whole design and say so plainly than publish a thin page; join the waitlist and you will hear first.
Boundaries
What Pay keeps, and what it never does.
A payroll record holds what each person earns, their tax and their bank account. The design starts from what Pay should never do with it.
Keeps: who prepared and who approved
Who prepared each run, who approved it, who changed a salary, and when.
Keeps: filings with their runs
Each return or contribution file stored beside the run it came from.
Never: pays without approval
The payment file is released only after a named person approves the run.
Never: shows one person’s pay to another
Employees see their own payslips; payroll roles see the rest.
Never: trains on your payroll
Nothing of yours is used to train anything, inside Centilio or out.
Statutory compliance
What payroll tax compliance software has to get right in India.
Compliance here means the right deduction for the right person, the right file on the right day, and a record that shows both. That is what Pay is designed to do, not a badge it holds.
Rules change. When a rate, a limit or a form changes, the change is designed to be dated, shown in the run it first affects and explained to the approver before the run is paid.
- PF: employee and employer contributions, and the monthly EPF ECR file
- ESI: contributions for everyone within the wage limit, and the contribution file
- TDS on salary: under each employee’s chosen regime, Form 24Q each quarter, Form 16 each year
- Professional tax and labour welfare fund: by state, by where each person works
- Filings submitted on approval where the authority allows; otherwise ready to upload
Roles and audit
Roles from Account, and a trail for every run.
Who may prepare, approve or only read comes from Account, the same login and roles as every Centilio tool.
There is no second list of people to keep in step. When someone leaves and is removed in Account, they lose access to payroll at once; their own payslips stay reachable to them as the law and your policy require.
Every run records who prepared it, who approved it and what changed. On Business, maker and checker can be required, so no one person can both prepare and approve a run.
- Owner, payroll preparer, approver, CA and employee roles
- Approval before any payment or filing (every plan)
- Maker and checker on every run (Business)
- Audit trail export for an auditor (Business)
Celia’s boundaries
Celia sees only what the asker may see.
An assistant inside payroll must never know more than the person asking it. Celia is designed to stay inside that line.
When an employee asks Celia why their pay changed, it reads their payslip and the approved explanation, and nothing about anyone else. When a preparer asks about a run, it reads only what that role may read.
Celia drafts explanations and flags problems; it does not release payments, submit filings or change a salary. Everything it drafted is marked as such in the trail, with the person who accepted it.
Standards
The same platform as Hire, Drive and Account.
Pay is designed to run on the platform that already serves the live Centilio tools.
Payroll records are designed to be encrypted in transit and at rest, inside your organisation’s space, with multi-factor sign-in and device rules from Account. We claim no certification for Pay: a product that is not built cannot hold one, and when there is something true and dated to say, it will be here.
- Encrypted in transit and at rest
- Roles and multi-factor sign-in from Account
- Exportable at any time
- Nothing of yours used to train anything
- Regional residency on Enterprise, on request
Questions
About payroll data, compliance and trust.
Is Pay secure today?
Pay does not exist yet, so there is nothing running to secure or certify. This page is the design, and it will be rewritten with what is true and dated on the day Pay ships.
Who can see salaries?
Only the roles you allow in Account: owner, payroll preparer, approver and CA. Each employee sees only their own pay, and Celia is held to the same limits as the person asking.
Can Pay pay anyone without approval?
No. No run is paid and no filing goes out until a named person approves it, and on Business the person who prepares a run cannot be the one who approves it.
Is payroll data used to train AI?
No. Nothing of yours is used to train anything. Celia reads the run to serve you, inside your organisation’s space.
Does Pay keep PAN, Aadhaar and bank details?
It keeps what payroll and filings need, such as PAN, UAN and bank account details, encrypted and visible only to payroll roles. What is collected at launch will be listed here, field by field, before anyone enters a record.
Where is my data kept?
In your Centilio account, encrypted in transit and at rest, under roles you control and exportable at any time. Regional residency is proposed on Enterprise.
Do you hold a certification for Pay?
No, and we will not claim one for a product that is not built. When there is something true and dated to say, it will be on this page.
Hear first when Pay opens.
Pay is in the third wave, after Team and Ledger, and it starts with India. Join the waitlist and you will hear before the announcement. Tell us how many people you pay, in which states, and what goes wrong in your month today; that shapes the design more than anything else.