Designing Auditability into Enterprise Payroll Integrations: A Configuration-Driven Architecture for Two-Stage Reconciliation and Batch-Scoped Rollback in Multi-Jurisdiction Equity Compensation Tax Processing

Abstract

Equity compensation payroll differs from ordinary payroll in a way that matters for control design: the tax-relevant facts arrive from outside the payroll system. A stock plan administrator supplies transaction records in a vendor format, and those records carry jurisdictional attributes that must be translated into payroll codes before any calculation occurs. This translation step is where error enters, and it is invisible to the payroll engine, which will faithfully compute tax on whatever it is given. This paper specifies an auditability architecture for that class of integration. Three design elements are described. Reconciliation is split into two stages, one before payroll calculation and one after, so that input fidelity and calculation correctness are proven separately rather than confounded. Rollback is scoped to an immutable batch identifier assigned at load time, which makes reversibility a property of a known set of records rather than an open-ended correction exercise, and the boundary at which rollback ceases to be available is stated explicitly. Jurisdictional mapping, earnings and deduction translation, and period control are expressed as configuration under segregation of duties rather than as integration code, so that a jurisdiction change is a reviewable configuration event rather than a code release. The architecture is drawn from a production integration operating across more than 90 tax jurisdictions in the United States and Canada, through which 52,816 equity transactions have been processed since October 2025. Operational counts are reported. Reconciliation break rates, rollback frequency, and cycle-close times were not instrumented and are not claimed.