SSAE 18 Competitive Advantage
Payroll Partners Selling Workforce Management Software
Financial & HR services providers like PEO’s, professional employee organizations, payroll providers, benefits administrators, HR services companies and others benefit by attracting more business if they know how to leverage and understand how SSAE 18 reports from service providers give them a competitive advantage. For the most part, both public and private companies are held to at least some, if not all, portions of the Sarbanes-Oxley mandates often called Sarbox or SOX. Thus, pushing service providers to go through a third party SSAE 18 audit actually shows potential clients as well as other business relationship suiters that they have passed a set of complex management, security and readiness reviews. Service providers that obtain SSAE 18 reports are confident and able to meet new vendor criteria above those they are competing against. Resellers and other partners that learn to leverage this advantage by building their service business around choosing service providers who make available their SSAE 18 report letter, could set new benchmark criteria that help set them apart from the competition.
Payroll and professional employee organizations have a competitive advantage over provider companies that are not working with a service provider who has undergone the complex SOC 2 / SSAE 18 audit and has the letter of recommendation. Resellers of professional employee services that learn how to set the bar high by recommending to their potential clients to make having the SSAE 18 report a requirement are able to raise client awareness, setting higher requirement benchmarking and increase revenue growth because they provide these extra assurances of compliance.
The extra value of educating creates client awareness raises the bar for higher client satisfaction due to a sense of security over sensitive information. “Public Company Accounting Reform and Investor Protection Act” or SOX, is a United States federal law that sets new or expanded requirements for all U.S. public company boards, management and public accounting firms. There are also a number of provisions of the Act that apply to privately held companies, for example, the willful destruction of evidence to impede a Federal investigation.
SSAE 18 Types
The SOC 1 / SSAE 18 report provides assurance regarding the controls at a service organization relevant to the user entities’ internal control over financial reporting. Ensuring that a service provider has internal control over financial reporting helps a client to know that the service provider has an understanding of SOX and internal controls at service organizations that may affect their clients’ financial statements.
Knowing that your service provider obtained a SOC 1 /SSAE 18 report does differentiate their and your offering by ensuring the establishment of effectively designed controls and subsequently providing your customers with the peace of mind to engage with your organization.
Here is an example of the two types of SSAE 18 reports, Type 1 & Type 2:
Type 1 – The Type 1 report focuses on management’s description of the service organization’s system as well as the suitability of the design of its controls and their ability to achieve the related control objectives. A Type 1 reports on a service organization’s controls as of a specific date in time.
Type 2 – The Type 2 report provides the same components as a Type 1 report with the addition of an opinion on the operating effectiveness of the controls to achieve the related control objectives. A Type 2 report also includes a detailed description of the service auditor’s tests of the operating effectiveness of the controls and the results of those tests. A Type 2 reports on a service organization’s controls over the course of a specific review period.
How do you know if it’s worth changing service providers or minimally asking the status of your current service providers plans for obtaining a SSAE 18 report? Here’s the short list why:
- A competitive advantage against similar companies who have not received a SSAE 18 report
- Able to meet contractual requirements
- Demonstrated internal controls benchmarking
- Revenue growth due to an increase in clientele
SwipeClock is a leading provider of cloud-based integrated workforce management software solutions that include automated time and attendance, advanced scheduling, and leave management capabilities. SwipeClock has completed SOC Type 2 SSAE 18 by an approved CPA firm. The company’s products including TimeWorksPlus, TimeWorks Mobile, and TimeSimplicity, enable more than 1000+ partners to help their clients manage their most important and expensive asset—employees. SwipeClock’s workforce management products enable more than 30,000+ businesses to lower labor costs, comply with regulatory mandates, and maximize their profits.