Data Flows
- Solid = evidenced
- Dashed = not evidenced
- Unknown Amber = unknown retention or vendor training
- Globe = leaves the UK
Tax-code review suggestions· Vendor B (United Kingdom)
Steps (3 of 13)
| ID | Step | From | To | Data | Location | Retention | Vendor training | Evidence | Basis | Gap | Requests | Findings |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | PendlePay platform | Vendor B | Employee tax codes and pay-period data (exact fields to confirm) | United Kingdom | Deleted within 30 days | No | Mixed | Exact fields sent (RQ-08) | None | |||
| 2 | Vendor B | PendlePay platform → payroll user | Tax-code review suggestions | United Kingdom → PendlePay | Not documented | No | Evidence-supported | — | None | |||
| 3 | Payroll user | Payroll record | Accepted tax-code change (only on user action) | Inside PendlePay | General payroll records – outside AI scope | Not applicable | Evidence-supported | — | None |