Payroll

Silo Payroll lets businesses pay employees and contractors in a single batch with one wallet signature, without handling a wallet address at any point. Payroll is available to Business tier accounts with the Payroll sub-type. Employees and contractors receive payroll on Plus or Business accounts (see Three-Tier System).

​

Adding People

Employers add people by Silo username, or by email invite if the person is not on Silo yet, individually or via CSV import. Wallet addresses are never entered anywhere in payroll. Each person’s payout details live in their own receiver preferences and are read fresh at pay time; the employer never sees them. Invited people appear as pending and become payable automatically once they finish setting up their account. Salaries are stored against each person as a recurring amount and can be edited at any time; changes apply to future runs only.

​

Running Payroll

A payroll run is three steps: select the people to pay, review, sign once. The review screen shows every person, every salary, the Silo fee for each payment, and the grand total, along with the funding wallet and its balance. Final compliance screening runs on each individual payment before signing. Anyone who fails screening is held out of the run with the reason shown, and everyone else is paid; held people can be paid in a later run once the flag clears. A single wallet signature authorizes and funds the exact reviewed batch. After signing, a status board tracks each payment to completion, and completed runs are archived in payroll history.

​

Salary Privacy

Individual salary amounts are never exposed on-chain. Salaries are carried in ZK commitments inside the shared vault, so a public observer cannot read a list of per-person amounts from the employer’s payroll activity. Each employee then withdraws under the same unlinkability model as any other Silo payment. Employees cannot see each other’s salaries, and neither can anyone watching the chain.

​

Fees and Delivery

The employer always pays the Silo fee. Employees are credited their full agreed amount with no deductions. Withdrawal then follows each employee’s own receiver preferences, and the standard swap rule applies: if the employee’s preferred asset requires a conversion, that swap cost comes out of the received amount, the same as any other Silo payment. Employees who receive in USDC pay no swap cost.

​

Protections

Payroll includes double-pay guardrails: anyone paid within the recent-pay window is flagged and skipped by select-all, and adding them anyway requires an explicit per-person confirmation. People included in a run that is still executing cannot be added to another run until their payment completes. Payroll payments are final once signed; funds belong to each person the moment they land. One-off payments such as bonuses or reimbursements are sent through the regular payment flow rather than a payroll run.