Trust

Our commitment

The Dayforce Our Way values are core to our culture: Customer Focus, Shared Ambition, Agility, Equity, Optimism, and Transparency. They are our roadmap for delivering our brand promise, and we aim to reflect our values in everything we do—including through the policies and procedures we adopt as a business. These values inform our management philosophy and help us create a positive experience for our employees, customers, and partners.

Governance

We aim to maintain high standards of corporate governance and ethics. The Chief Legal and Compliance Officer oversees global legal activities, corporate governance, ethics, and compliance, including commercial transactions, employment, mergers and acquisitions, privacy, and product compliance.

The Governance Risk and Compliance Executive Committee (GRCEC), which includes senior executives from Legal, HR, Finance, and Digital, regularly reports to the Executive Operating Committee. The GRCEC provides oversight and operational support related to governance, compliance, and risk, including cybersecurity and privacy, ethics and compliance, internal audits, internal controls, and third-party risk management, and sustainability.

We maintain a comprehensive compliance program supported by policies, training, and oversight mechanisms.

Cybersecurity

Effective stewardship and protection of customer data are top priorities for our organization. We believe effective cybersecurity depends on the deployment of analytics, automation, AI-driven capabilities, skilled professionals, and strong data governance to maintain high standards for compliance, privacy, and customer protection.

Cyber threats continue to evolve in both scale and sophistication, including the rapid emergence of AI-enabled attacks and autonomous technologies. Our Cybersecurity team remains focused on strengthening resilience across the organization and enabling secure innovation.

Each year, we work to meet this challenge by making strategic investments in new tools and technologies, expanded expertise, and improving already strong internal processes and procedures.

Privacy

Safeguarding data privacy is one of our most important responsibilities as a business, and Dayforce customers trust us to handle some of their employees’ most sensitive personal information.

We maintain a robust global privacy management program that allows us to meet these high expectations. In addition to a commitment to continuous improvement, our areas of focus include:

• Fostering more consistent cross-functional coordination between Privacy and other enterprise trust functions
• Maintaining clear policies, guidance, and procedures that foster accountability in our enterprise and that reflect legal requirements and best practices
• Conducting Privacy by Design assessments of our operations and offerings
• Providing ongoing workforce training and communication to ensure an always-on privacy mindset
• Overseeing third-party privacy risk management
• Promoting transparency and management of individual rights
• Reducing privacy risk caused by human error
• Raising Dayforce’s privacy brand profile internally and externally

Enterprise risk management

Our Enterprise Risk Management (ERM) program supports risk-informed decision-making across the company by helping leaders identify, assess, prioritize, and respond to enterprise risks and opportunities that may affect our strategy, operations, stakeholders, and long-term resilience.

Our ERM program is based on the COSO Enterprise Risk Management Framework and ISO 31000, and our ERM strategy has two core components: the Enterprise Risk Framework and the Enterprise Risk Process. We continue to advance our ERM program through ongoing evaluation of risks, regular reviews of mitigation strategies and controls, and continuous program improvement.

Product and technical compliance

Dayforce views security, privacy, and regulatory compliance as foundational commitments. The Dayforce data security program aligns with industry-standard frameworks, reinforced by independent reviews of our supporting controls.

Security and compliance are embedded across our global operations through a single, enterprise-wide Information Security Management System (ISMS). Our company and products are certified to ISO 27001, reflecting a consistent and disciplined approach to managing information security risks worldwide. We further reinforce customer trust through independent, third-party assurance programs, including SOC 1® Type II and SOC 2® Type II reports across our products, providing transparency into the effectiveness of our security and control environment.