Most articles on global payroll best practices are written for someone choosing a vendor. This one is written for whoever has to make the pay cycle work. The difference matters, because the practices that actually reduce errors are not the ones that appear in vendor checklists. They are segregation of duties, input cut-off discipline, reconciliation, a measured set of KPIs, and a written policy on who bears currency risk.

This guide sets out ten rules with the benchmark data to calibrate against, the controls that prevent the two things that really go wrong, errors and fraud, and the 2026 regulatory changes that have already landed. One of those changes, the EU pay transparency regime, turns payroll data into a reporting obligation for the first time, and the first reports are due in June 2027 on 2026 pay data you are collecting right now.

All figures are attributed with the source and the year, and all regulatory references were checked in October 2026. Where a widely circulated payroll statistic is commonly misquoted, this guide says so.

Key Takeaways

• Only 28 percent of organizations have a formalized global payroll strategy, and 42 percent have not started one, according to PayrollOrg’s 2025 survey of 585 payroll professionals. Strategy is the gap, not technology.
• Roughly two thirds of payroll issues originate in data inputs, not in payroll calculation. CloudPay’s index of over one million payslips puts data input issues at 63.6 percent of all issues logged. Fixing payroll usually means fixing what arrives at payroll.
• Segregation of duties is absent from every major guide on this topic and it is the control that matters most. Bank detail changes under four-eyes approval, plus a headcount reconciliation every cycle, prevent both the common error and the common fraud.
• Benchmark against real numbers. Global payroll accuracy runs at about 8.56 issues per 1,000 payslips, and only 73.8 percent of payrolls are approved first time. Asia Pacific outperforms both other regions on accuracy and cycle time.
• Pay transparency is now a payroll reporting obligation in the EU. Employers with 250 or more workers must report gender pay gap data annually, starting by 7 June 2027, and a gap of 5 percent or more in any worker category triggers a joint pay assessment if it is not justified or remedied.
• Ask your provider for SOC 1 Type II or ISAE 3402, not just SOC 2 and ISO 27001. The security certifications say nothing about whether your payroll is calculated and authorized correctly. This distinction appears on no competing guide.
• Know which statutory payments are actually statutory. The Philippines mandates 13th month pay by law. Singapore and Vietnam do not, despite both being routinely listed as 13th month countries.

What Is Global Payroll?

Global payroll is the practice of paying employees across multiple countries while meeting each country’s rules on calculation, withholding, statutory contributions, reporting deadlines and record keeping. It covers gross to net calculation, funding and disbursement, statutory filing, and the controls and reconciliation that sit around all of it.

The thing that makes it hard is not volume. It is that every country has a different definition of taxable pay, a different filing calendar, a different set of mandatory contributions and a different set of things that are customary but not legally required. A process that works in one country does not transfer. What transfers is the governance around the process, which is why the rules below are mostly about governance rather than about calculation.

The State of Global Payroll in 2026, With Real Numbers

Before the practices, it helps to know how far most organizations are from them. The figures below are the most useful published data available, with the source and vintage stated, because several of these numbers circulate as current when they are not.

• Fragmentation is the norm. PayrollOrg’s Getting the World Paid survey, fielded in early 2025 with 585 respondents, found 36 percent run payroll in six or more countries, 48 percent use multiple payroll systems, and among the third who use a global payroll provider, 26 percent still use two to five additional providers alongside it.
• Strategy is rare. In the same survey only 28 percent had a formalized global payroll strategy, 42 percent had not started one, and only around one in five had reached 80 percent process standardization.
• Most teams do not measure themselves. Thirty-eight percent reported tracking no payroll performance metrics at all.
• Errors are expensive and start upstream. An EY survey commissioned by Paycom in 2022, covering 508 payroll decision makers at US companies of 250 to 10,000 employees, put the average cost of remedying a single payroll error at 291 US dollars directly and indirectly.
• Cost per payslip was 14.60 US dollars in Deloitte’s Global Payroll Benchmarking Survey, which covered more than 750 organizations across 55 countries. Note that this is 2020 data, still widely cited as current, so treat it as an order of magnitude rather than a current benchmark.
• Payroll talent is scarce. Seventy-four percent of PayrollOrg respondents reported difficulty finding global payroll talent, which is the practical reason process documentation matters more than it used to.

One widely repeated statistic deserves correcting, because getting it wrong will mislead your own business case. The EY and Paycom survey reported a payroll accuracy rate of 80.15 percent, and this is frequently recycled as “one in five payslips contains an error”. That is not what it measured. It measured accuracy of HR and payroll data inputs, not of payslips issued. Payslip-level accuracy is far higher, as the benchmark table later in this guide shows. The real lesson in that study is not that payroll is broken. It is that the data arriving at payroll is.

10 Global Payroll Best Practices

1. Write the Strategy Before You Change the System

The most common mistake in global payroll is treating a fragmented process as a software problem. Buying a platform on top of an undocumented process gives you an expensive version of the same process. With only 28 percent of organizations holding a formalized strategy, this is where most of the available improvement sits.

A workable global payroll strategy document is short and answers six questions:

• Which countries are in scope now, and which are expected within 24 months? This determines whether you need breadth or depth from a provider.
• What is centralized and what is local? Name the decisions that must be made in one place, such as approval thresholds and the pay calendar, and the ones that have to be local, such as statutory filing.
• Who owns payroll? Payroll sits between HR and finance, and in most organizations that means nobody owns it. Name a single accountable owner.
• What is the operating model per country? In-house, a regional provider, a global provider, or an employer of record. Different countries can justify different answers, and smaller organizations often land somewhere different from large ones. See how startups handle payroll for global teams.
• What are the control standards? Approval thresholds, segregation of duties, reconciliation requirements. These should be identical in every country even when the process is not.
• What will you measure? See rule five.

Write it down. The reason is practical rather than bureaucratic: with payroll talent as scarce as it currently is, an undocumented process is one resignation away from becoming an emergency.

2. Standardize Payroll Processes Across Regions

Standardization reduces errors, makes cover possible when someone is away, and lets you compare countries against each other. Without it, each country becomes a separate black box understood by one person.

The practical way to do this is to separate what law requires from what habit has produced. Statutory filing formats, contribution calculations and payslip content requirements are genuinely local and cannot be standardized. Almost everything else can:

• One payroll calendar template, with input cut-off, validation, approval, funding and pay date expressed as working days before pay date rather than as fixed dates.
• One input file format for variable pay, expenses and time data, with validation rules applied before submission rather than after.
• One approval hierarchy and one set of thresholds, applied in every country.
• One change control process for employee master data, especially bank details.
• One reconciliation pack per cycle per country, in the same format, so a reviewer can read any country without a briefing.
• One documented escalation path with named roles and response times.
• One view of headcount, reconciled to payroll, which is also the foundation of global workforce management reporting.

A useful test of whether you have standardized enough: could a competent payroll person who has never run your Philippines payroll run the reconciliation and spot an anomaly, using only the documentation? If not, what you have is tribal knowledge rather than a process. Our guide to payroll processing covers the underlying cycle in detail.

3. Fix the Inputs, Because That Is Where Most Errors Start

This is the highest-return practice on the list and the one most guides skip, because it is unglamorous. CloudPay’s Global Payroll Efficiency Index, built on more than one million payslips across over 130 countries, attributes 63.6 percent of all payroll issues to data inputs. PayrollOrg’s 2025 respondents named the same three root causes of inaccuracy: poor quality data inputs, late or inaccurate time data, and inputs arriving after the cut-off.

None of those are payroll’s fault, and all of them are payroll’s problem. What works:

• Make the cut-off real. A cut-off that is routinely waived is not a cut-off. Late inputs should go to the next cycle or through the off-cycle process with its own approval, not into the current run as a favor. This single change removes a large share of rework.
• Validate before submission, not after. Range checks on hours and amounts, mandatory field checks, and duplicate detection applied at the point of entry. An error caught in HR costs minutes. The same error caught after funding costs a correction run, a reconciliation and an apology.
• Reconcile headcount every cycle. HR headcount against payroll headcount against the number of payment lines in the bank file. Every variance gets an explanation before approval. This is also a fraud control, as rule four explains.
• Fix the joins, not the symptoms. Most recurring input errors come from a handoff: a manager approving timesheets late, a benefits change that never reaches payroll, a leaver whose last day is recorded in one system and not another. Map the handoffs and fix the worst one each quarter.
• Log every issue with a cause code. You cannot reduce input errors you have not categorized. A simple cause code on every correction, reviewed monthly, tells you where to spend effort.

The reason to care is not only operational. HiBob’s 2025 survey of 2,000 US employees found 44 percent had noticed a payroll error affecting them, 53 percent would consider leaving if mistakes continued, and 21 percent said an error made them lose trust in their employer. Sixty-four percent reported stress or disruption, including 20 percent who postponed bills and 14 percent who delayed rent or a mortgage payment. Payroll accuracy is a retention issue, not just an accounting one.

4. Build the Control Framework, Starting With Segregation of Duties

No major guide on global payroll best practices names segregation of duties, which is surprising, because it is the most basic internal control over the largest cash outflow most companies have. If you adopt one thing from this article, adopt this.

The duties that must be separated. No single person should be able to complete more than one of each pair:

• Creating or amending employee master data, including bank details and pay rates, versus approving that change.
• Entering or importing time and variable pay versus approving the payroll run.
• Releasing the bank payment versus reconciling that payment back to the payroll register.
• Payroll processing versus general ledger posting and bank reconciliation.
• Authorizing a hire and its pay rate, which belongs to HR, versus paying it, which belongs to payroll.

The controls that enforce it. In rough order of value:

• Four-eyes approval on all master data changes, with out-of-band verification for bank detail changes. A changed bank account should be confirmed by a call to a known number or another channel that is not the one the request arrived on. This is the single highest-value control in payroll, because a diverted salary is the easiest payroll fraud there is and the hardest to reverse.
• Dual authorization on payment release, against a fixed list of named signatories. Your provider should never hold unilateral release authority over your funds.
• New starter and leaver reconciliation every cycle, as described in rule three. This is what catches both the ghost employee and the leaver who is still being paid.
• Off-cycle and manual payment approval at a higher authority level, with a documented reason code and a monthly report of all off-cycle payments going to finance. Off-cycle payments are where controls get bypassed under time pressure.
• Gross to net variance analysis cycle on cycle, with a materiality threshold that triggers investigation before approval rather than after.
• Duplicate detection on bank accounts and tax or national insurance identifiers.
• Periodic review of privileged access in the payroll system, including the access your provider’s staff hold.

The evidence that controls work. The ACFE’s Occupational Fraud 2026 report, covering 2,402 cases and more than 3.4 billion US dollars in losses, found a median loss of 104,000 US dollars per case and a median of 12 months before detection. More usefully, it measured the effect of specific controls on median loss: management review reduced it by 55 percent, proactive data monitoring by 53 percent, surprise audits by 50 percent, and fraud awareness training by 44 percent. Tips accounted for around 43 percent of detections, which is an argument for a reporting channel your payroll staff can actually use.

5. Measure Payroll With Real KPIs and Real Benchmarks

Thirty-eight percent of PayrollOrg’s 2025 respondents tracked no payroll performance metrics at all. If you are in that group, the following table is the fastest way out of it. The benchmark values come from CloudPay’s Global Payroll Efficiency Index, published in 2024 on 2023 data covering more than a million payslips in over 130 countries, and from Deloitte’s benchmarking survey where noted. Both are stated with their vintage because payroll benchmarks age badly.

KPI	What it measures	Published benchmark
Issues per 1,000 payslips	Accuracy, normalized for size	8.56 globally. Asia Pacific 7.53, EMEA 8.56, Americas 9.71
Payroll cycle length	Working days from input cut-off to pay date	5.66 days globally. Asia Pacific 4.1, Americas 5.8, EMEA 8.2
First-time approval rate	Share of payrolls approved without a second pass	73.82 percent globally
Payment timeliness	Share of payments made on the due date	99.28 percent globally
Data input issue share	Share of issues originating in inputs	63.6 percent of all issues
Off-cycle payment rate	Share of payments made outside the normal run	Supplemental impact 16.98 percent of issues
Cost per payslip	Total payroll cost divided by payslips issued	14.60 US dollars (Deloitte, 2020 data)
Employees per payroll FTE	Team efficiency	Around 1,100 to 1 globally (Deloitte, 2020 data)
Gross to net variance	Cycle on cycle movement, unexplained portion	No published benchmark, set your own threshold
Time to onboard a new country	Expansion readiness	No published benchmark, measure your own baseline

Two observations worth drawing out of that table, because they change how you should read your own numbers.

First-time approval rate is the most useful number most teams do not track. At 73.8 percent globally, roughly one payroll in four needs a second pass. That rework is invisible in an accuracy metric, because the error gets caught before anyone is paid, but it is where your team’s time goes. If you measure one new thing, measure this.

Asia Pacific outperforms on both accuracy and cycle time, which contradicts the common assumption that the region is the hard part of a global payroll footprint. On this data, Asia Pacific runs payroll in 4.1 days against 8.2 in EMEA, with fewer issues per thousand payslips. Complexity in Asia Pacific is real, but it sits in statutory variety rather than in operational execution. See building efficient global teams in APAC.

6. Run Compliance as a Calendar, Not a Status

Compliance in global payroll is not a condition you achieve. It is a set of recurring obligations with dates attached, in every country you operate in.

The practical form this takes is a single compliance calendar covering, per country, the filing deadlines, the contribution payment dates, the year-end obligations, the statutory reporting dates, the record retention period and the date each rate set changes. Assign an owner per line. Review it quarterly against a source that is not your provider’s newsletter, because a provider’s guidance updating late is a real failure mode and you carry the consequence.

Record retention deserves a line of its own, because it is the obligation that outlives the employee and gets forgotten in system migrations. Two verified examples: under the US Fair Labor Standards Act, payroll records must be kept three years and supporting records such as time cards two years. In Australia, the Fair Work Ombudsman requires time and wages records to be kept seven years, legible, in English and readily accessible to an inspector. Retention periods vary widely, so confirm each country rather than applying one global rule.

What Changed in 2025 and 2026

A reference table, because several of these have already taken effect and a great deal of published payroll guidance has not caught up.

Jurisdiction	Change	Effective	Payroll impact
EU	Pay Transparency Directive 2023/970 transposition deadline	7 June 2026	Gender pay gap reporting, pay range disclosure in recruitment, salary history ban. See rule seven
Australia	Payday Super	1 July 2026	Superannuation contributions must reach the employee’s fund within 7 business days of payday, at 12 percent of qualifying earnings. Missing it triggers the super guarantee charge
Singapore	CPF Ordinary Wage ceiling rises to 8,000 SGD a month	1 January 2026	Final step of a four-stage increase. Senior worker rates also rose
United Kingdom	Umbrella company PAYE reform	6 April 2026	Recruitment agencies, or the end client where there is no agency, become accountable for PAYE on umbrella worker payments
United States	Separate W-2 reporting of qualified tips and qualified overtime	Tax year 2026	Systems must track and report these amounts separately. IRS penalty relief applied to 2025 only, so 2026 is the first year with exposure
India	Four labour codes brought into force	21 November 2025	A single statutory definition of wages, with basic wages required to be at least 50 percent of total remuneration, re-bases provident fund, gratuity and bonus calculations
EU	Platform Work Directive 2024/2831 transposition deadline	Reported December 2026	Employment status presumption affecting who must be on payroll. Verify the deadline locally

Two notes on that table. The UK’s mandatory payrolling of benefits in kind is frequently reported as an April 2026 change; it was deferred to April 2027 and phased, so plan accordingly. And India’s labour codes are a large change whose operational detail is still settling at state level, so treat the 50 percent wage rule as a prompt for local advice rather than a finished calculation.

One further item for large groups: under the OECD’s global minimum tax rules, the substance-based income exclusion carves out a percentage of eligible payroll costs per jurisdiction, which means in-scope groups above the 750 million euro revenue threshold now need payroll cost and headcount data by jurisdiction and entity, reconcilable to the financial statements. If your group is in scope, tax has become a consumer of your payroll data, and the reporting granularity required is probably finer than what your current system produces.

For the recurring obligations in more depth, see our guide to global payroll compliance and our view on global payroll trends.

7. Get Ready for Pay Transparency Reporting Now

This is the most consequential change to global payroll in a decade and almost no guide on this topic covers it. EU Directive 2023/970 turns pay data into a reporting obligation with legal consequences attached, and the clock has already started.

The transposition deadline was 7 June 2026. A large majority of member states missed it, and several transposed on or around the date, including Italy, Malta, Greece, Lithuania and Estonia. Late transposition does not buy employers time in any useful sense, because the first reporting dates and the 2026 reference year apply regardless.

What it requires of employers. The recruitment obligations bite immediately and the reporting obligations bite from 2027:

• Pay ranges before interview. Applicants must be given the initial pay or pay range for the role, based on objective and gender neutral criteria, before the interview. This can be in the job posting or supplied separately.
• No questions about salary history. Employers may not ask applicants about their current or previous pay. If your interview templates or applicant tracking system still capture it, that is a remediation item.
• Employees can request pay information, specifically their own pay level and the average pay levels broken down by sex for workers doing the same work or work of equal value. The employer must respond within two months. Pay secrecy clauses are banned.
• Burden of proof shifts to the employer in equal pay claims where the transparency obligations were not met, which is the provision that gives the rest of it teeth.

The reporting thresholds and dates. These determine what you need to be able to produce and when:

Workforce size	Reporting frequency	First report due
250 or more workers	Annually	7 June 2027
150 to 249 workers	Every three years	7 June 2027
100 to 149 workers	Every three years	7 June 2031
Fewer than 100 workers	No EU-level obligation	Member states may go further

What each report has to contain: the overall gender pay gap, the median gap, the gap in complementary and variable pay components, the proportion of each sex receiving complementary pay, the proportion of each sex in each pay quartile, and the gap by category of worker doing equal work or work of equal value.

The 5 percent trigger is the part to plan around. Where reporting shows a gap of at least 5 percent in any category of workers, which is not justified by objective gender neutral criteria and is not remedied within six months of the report, the employer must conduct a joint pay assessment with workers’ representatives. Member states may also exclude operators with unjustified gaps above that threshold from public procurement.

What this means for payroll specifically, as opposed to for HR policy. Three things:

• You need variable pay captured cleanly and separately. The report requires the gap in complementary and variable components and the proportion of each sex receiving them. If bonuses, allowances and commissions are not consistently coded in payroll across entities, you cannot produce this.
• You need a defensible job categorization. The report is by category of worker doing equal work or work of equal value, and the 5 percent trigger applies per category. Your payroll job codes were almost certainly not designed for this and will need mapping to a grading structure.
• You need the 2026 data to be right, now. The first report covers a reference year you are already in. Data you cannot reconstruct later is data you will report badly.

Outside the EU, the direction is the same. Several US states introduced pay transparency obligations during 2025, including Illinois and Minnesota from January 2025, New Jersey from June 2025, Vermont from July 2025 and Massachusetts from October 2025, each with its own headcount threshold. If you operate in the EU and the US, treat this as one programme rather than two. Our guides to global salary benchmarking and employee compensation strategy cover the pay structure work this depends on.

8. Handle Payroll Data Lawfully, and Know Who the Controller Is

Get the lawful basis right. Under the GDPR, payroll processing normally relies on Article 6(1)(b), necessary for performance of the employment contract, for paying the agreed salary, and Article 6(1)(c), compliance with a legal obligation, for tax, social security and statutory reporting. Special category data, such as health data used for sick pay or trade union subscriptions, relies on Article 9(2)(b) on employment and social security law.

Do not rely on consent. This is a common and serious error. Consent must be freely given, and the power imbalance in an employment relationship means it generally is not. Consent is also withdrawable at any time, which would make lawful payroll impossible, since you cannot stop filing tax data because an employee changed their mind. If your payroll privacy notice asks employees to consent to payroll processing, it is describing the wrong legal basis.

Establish who is controller and who is processor, per arrangement. This is where generic guidance goes wrong, and the distinction has practical consequences:

• A payroll bureau acting on your instructions is a processor. You are the controller. You need an Article 28 data processing agreement covering sub-processor authorization, security measures, audit rights, and deletion or return of data on termination.
• The same provider is usually a controller for its own statutory filings, because there it determines its own purpose. Many real arrangements are therefore processor for payroll execution and independent controller for the provider’s own obligations, and the contract should say so.
• An employer of record is the legal employer, so it is typically a controller in its own right for that worker’s payroll, with you as a separate controller for your own HR purposes. That is a controller to controller or joint controller analysis, not a simple processor DPA. If your EOR has handed you a standard processor agreement, the paperwork does not match the arrangement.

Map your international transfers, including the ones you did not choose. A single global payroll platform almost always involves transfers outside the EEA through hosting, disaster recovery and offshore support desks. Each needs a transfer mechanism, an adequacy decision, standard contractual clauses with a transfer impact assessment, or binding corporate rules. Most of Asia Pacific is not covered by an adequacy decision. Several jurisdictions also impose their own obligations on outbound data, including China’s PIPL, India’s DPDP Act and Vietnam’s personal data protection rules, so the sub-processor chain matters more than it looks. The EDPB’s guidelines on controller and processor concepts are the reference practitioners use for the analysis.

9. Write Down Who Bears Currency Risk

First, the funding model, because it decides who carries the risk:

• Fund in local currency. You convert and fund each country’s payroll account in its own currency. You bear the conversion cost and the timing risk, but the employee’s net pay is fixed in the currency they spend.
• Pay from a single funding currency. Your provider or bank converts, at its rate, on its date. Your cost is predictable in the funding currency, but the rate is usually opaque and the spread is where money quietly leaks.

The risk does not disappear in the second model. It gets priced by someone else, often as an undisclosed margin on top of the interbank rate. A written FX policy is how you find out what you are paying for it.

A payroll FX policy should cover:

• The funding currency for each country, and the reason for it.
• The rate source and the fixing convention. A named reference rate, at a stated time, on a stated day relative to pay date. “The prevailing rate” is not a convention.
• The maximum permitted spread or fee against that reference rate, disclosed separately from the conversion itself rather than buried in it.
• Who absorbs movement between the funding date and the pay date.
• Whether forwards or hedges are used for predictable payroll cash flows, and who authorizes them.
• A re-rate trigger for salaries denominated in a currency other than the payment currency, for example a review at a stated percentage move.
• Rounding and net pay protection rules, so an employee’s local net pay does not move because of a rate change they had no part in.
• Reconciliation of funded against disbursed amounts, per cycle and per currency, with FX variance posted to a named account rather than absorbed into payroll cost where nobody sees it.

That last point is the one that pays for the policy. If FX variance is buried in payroll expense, nobody can tell you what currency conversion cost the business last year. Posted to its own account, it becomes a number you can negotiate about. See also how to pay international employees.

10. Choose the Operating Model and the Provider on Evidence

There are three broad ways to run multi-country payroll, and the right answer is often different per country rather than uniform across the footprint.

• In-house with local expertise. Maximum control, highest fixed cost, dependent on retaining scarce specialists. This presumes you already have an entity in each country, which is the constraint that usually decides the question. See how to hire international employees.
• In-country providers. Strong local knowledge, but a fragmented vendor set, which is how organizations end up with the multiple providers PayrollOrg’s data describes.
• A global provider or aggregator. One contract and consolidated reporting, with local depth varying by country depending on whether the provider owns the local capability or subcontracts it.

An employer of record is a fourth option and a different thing. An EOR is the legal employer, so it suits countries where you have no entity, and it resolves the problem that a company without a local entity usually cannot register as a contributing employer at all. It is not simply a payroll outsourcing arrangement, which is why the data protection analysis above differs. See EOR payroll and benefits of outsourcing payroll.

Ask for the Right Assurance Report

This is the part no competing guide gets right, and it is worth a few lines because the distinction is widely exploited.

Report or standard	What it actually covers	Does it tell you payroll is calculated correctly?
SOC 1 Type II	Controls at a service organization relevant to your internal control over financial reporting, tested for operating effectiveness over a period, usually 6 to 12 months	Yes, this is the relevant one
ISAE 3402 Type 2	The international equivalent of SOC 1. Expect this from European and Asia Pacific providers, SOC 1 from US ones	Yes, it is a substitute for SOC 1
SOC 2	Security, availability, processing integrity, confidentiality and privacy	No, it is a security report
ISO/IEC 27001	Certification of an information security management system	No, it certifies the management system, not any calculation
ISO/IEC 27701	Extension to 27001 for a privacy information management system, with separate control sets for controllers and processors	No, it is the privacy layer and is not a GDPR certification

A global payroll or EOR provider should hold SOC 1 Type II or ISAE 3402 for financial controls, and ISO/IEC 27001 for security, with ISO/IEC 27701 as the privacy layer. Many providers present SOC 2 and ISO 27001 and let buyers assume the financial control assurance is covered. It is not.

Two further things to do with the report once you have it, both of which separate a real review from a box tick:

• Read the exceptions section. A Type II report lists control deviations the auditor found. That section tells you more about the provider than the opinion does.
• Read the complementary user entity controls. Every service auditor’s report lists the controls the provider assumes you operate for its own controls to be effective. That list is where your obligations hide, and most buyers never read it.

For a view of the market, see international payroll providers.

Statutory or Customary? The Payments That Catch People Out

One practical section that no competing guide includes, and the most common source of budgeting mistakes when expanding into Asia Pacific. The distinction between a payment that is required by law and one that is merely expected determines whether it is a liability or a choice, and several countries are routinely mislabeled.

Country	Payment	Statutory or customary	Detail
Philippines	13th month pay	Statutory	Presidential Decree 851. One twelfth of basic salary earned in the year, payable on or before 24 December. Pro-rata is due to employees who resigned mid-year
Indonesia	THR religious holiday allowance	Statutory	One month’s wage after 12 months of service, pro-rata below that, paid before the religious holiday. Confirm the current notice period locally
India	Statutory bonus, gratuity, provident fund	Statutory	EPF at 12 percent employer and employee, gratuity after qualifying service, and a statutory bonus. The November 2025 labour codes re-based the wage definition, so verify current ceilings before budgeting
Singapore	Annual Wage Supplement, 13th month	Customary	Encouraged but not required by law. Binding only if it is in the contract. Singapore is frequently and wrongly listed as a 13th month country
Vietnam	13th month, Tet bonus	Customary	Bonuses are discretionary under the Labour Code. It becomes enforceable only once it is in the contract, the collective agreement or internal labour regulations. In practice candidates assume it, so budget it
Malaysia	EPF	Statutory	Citizens under 60: employer 13 percent at monthly wages of RM5,000 or below and 12 percent above, employee 11 percent. Non-citizens registered from August 1998: 2 percent employer and employee. SOCSO and EIS are separate obligations
Singapore	CPF	Statutory	Ordinary Wage ceiling 8,000 SGD a month from January 2026. Rates vary by age band
Vietnam	Social, health and unemployment insurance	Statutory	Employer 17.5 percent social, 3 percent health, 1 percent unemployment, plus a 2 percent trade union fund contribution. Contributions are capped

The Vietnam line is the clearest illustration of why this matters. The 13th month there is not a legal obligation, but it is so universally expected that treating it as optional costs you candidates, and writing it into a contract converts a custom into an enforceable liability. Both are defensible choices. Making the choice by accident is not. See our country guides to payroll services in Vietnam, payroll services in Thailand and employer of record Vietnam.

How TalentHero Supports Global Teams

TalentHero is an Asia Pacific specialist that recruits, employs and pays, with our own entities in the region. That combination matters for payroll specifically, because the handoffs between recruitment, employment and payroll are where most of the input errors described in rule three originate.

• Global Payroll. Multi-country payroll run against current statutory rates, caps and filing calendars, with reconciliation and reporting in a consistent format across countries.
• Employer of Record. Where you have no entity, we employ your people through ours, with local-law contracts and statutory registration handled. See EOR compliance.
• Recruitment on Demand. Sourcing and screening across Asia Pacific, with the employment and payroll setup already connected rather than handed to a third party.
• Contractor Management. Compliant engagement where the relationship is genuinely contractor rather than employment. See hiring independent contractors vs employees.
• Visa and Immigration, Equipment and Office Space. The practical pieces of operating in a new country, in one relationship.

Where a Different Answer Is Better

• A large existing footprint with mature in-country teams. If payroll already runs well in 20 countries, consolidation is a project with real risk, and the case for it should be made on measured numbers rather than on principle.
• A single high-volume market where you have an entity. A domestic specialist will often beat a global provider on price and depth.
• Markets outside Asia Pacific as the core need. Our depth is regional. If your centre of gravity is Latin America, say so early and we will tell you.

Build a Smarter Global Payroll Strategy With the Right Partner

If you want a straight read on your current setup, the fastest diagnostic is three numbers: your first-time approval rate, your issues per thousand payslips, and the share of your issues that originate in inputs. If you cannot produce them, that is the finding.

Get in touch with TalentHero and we will tell you where your payroll stands against the benchmarks in this guide, including where the answer is that you do not need us.

Frequently Asked Questions

1. What are global payroll best practices?

They are the governance and control practices that make multi-country payroll accurate and auditable: a documented strategy with a named owner, a standardized process with local variation only where law requires it, disciplined input cut-offs, segregation of duties with four-eyes approval on master data changes, a measured KPI set, a compliance calendar per country, a written policy on currency risk, and an operating model chosen per country rather than uniformly.

2. What is the single most effective payroll control?

Four-eyes approval on employee bank detail changes, with out-of-band verification. A diverted salary is the easiest payroll fraud to commit and the hardest to recover. Running a close second is a headcount reconciliation each cycle, comparing HR headcount to payroll headcount to the number of payment lines in the bank file, which catches both ghost employees and leavers who are still being paid.

3. What payroll KPIs should we track?

Start with four: issues per 1,000 payslips, first-time approval rate, payroll cycle length in working days, and the share of issues originating in data inputs. Published benchmarks put global accuracy at about 8.56 issues per 1,000 payslips and first-time approval at 73.8 percent, so roughly one payroll in four needs a second pass. First-time approval is the most useful metric most teams do not track, because the rework it measures is invisible in an accuracy figure.

4. How much does a payroll error cost?

An EY survey commissioned by Paycom in 2022, covering 508 US payroll decision makers at companies of 250 to 10,000 employees, put the average cost of remedying one error at 291 US dollars directly and indirectly. The same study reported 80.15 percent accuracy, which is widely misquoted as one in five payslips containing an error. It measured accuracy of HR and payroll data inputs, not payslips issued.

5. What does the EU Pay Transparency Directive require?

Directive 2023/970 had a transposition deadline of 7 June 2026. Employers must give applicants the pay or pay range before interview and may not ask about salary history. Employees may request their own pay level and average levels by sex for equal work, with a two month response deadline, and pay secrecy clauses are banned. Employers with 250 or more workers report gender pay gap data annually from 7 June 2027, and a gap of 5 percent or more in any worker category triggers a joint pay assessment if unjustified and not remedied within six months.

6. What certifications should a global payroll provider have?

SOC 1 Type II or ISAE 3402 for financial controls, which is what actually tests whether payroll is calculated and authorized correctly, plus ISO/IEC 27001 for security and ISO/IEC 27701 for privacy. Be careful here: SOC 2 and ISO 27001 are security standards and tell you nothing about payroll accuracy, yet they are frequently offered as though they do. When you receive the report, read the exceptions section and the complementary user entity controls, which list the controls the provider assumes you operate.

7. Why is global payroll compliance important?

Because the penalties are per country and the obligations are recurring. Late social insurance payment in Vietnam carries a daily charge, missing Australia’s Payday Super window triggers the super guarantee charge, and the EU pay transparency regime shifts the burden of proof onto employers who have not met the transparency obligations. Compliance is a calendar with an owner per line, not a status you reach.

8. Which countries legally require 13th month pay?

In Asia Pacific the Philippines does, under Presidential Decree 851, at one twelfth of basic salary earned in the year and payable on or before 24 December. Indonesia requires THR. Singapore and Vietnam do not, despite both being commonly listed as 13th month countries. In Vietnam it is customary and candidates expect it, so budget for it, but writing it into the contract converts a custom into an enforceable obligation.

9. What is the difference between global payroll and an Employer of Record?

A global payroll provider processes pay for people you employ, so you need a legal entity in each country. An employer of record is the legal employer itself, so it works where you have no entity. The difference has a consequence most guides miss: because an EOR is the employer, it is usually a data controller in its own right for that worker’s payroll rather than your processor, so the data protection paperwork is a controller to controller arrangement, not a standard processing agreement.

10. How can we reduce payroll errors quickly?

Attack the inputs, since roughly 63.6 percent of issues originate there. Three changes with fast returns: stop waiving the input cut-off and route late items through the off-cycle process with its own approval, move validation to the point of entry rather than after submission, and add a cause code to every correction so you can see within a month where the errors actually come from. Fixing the worst handoff each quarter beats a system replacement.

11. Can we use employee consent as the legal basis for payroll data?

No, and it is a common mistake. Under the GDPR, payroll normally relies on Article 6(1)(b), performance of the employment contract, and Article 6(1)(c), compliance with a legal obligation. Consent must be freely given, which is difficult to establish given the power imbalance in employment, and it is withdrawable at any time, which would make lawful payroll impossible since statutory filing cannot simply stop.

12. What are the biggest global payroll challenges in 2026?

Four. Local compliance across a changing rule set, which PayrollOrg respondents name as their top challenge. Fragmentation, with 48 percent running multiple payroll systems. A talent shortage, with 74 percent reporting difficulty hiring payroll specialists. And a new one: pay transparency reporting, which requires variable pay and job categorization data that most payroll systems were never designed to produce.