Skip to content
Demiton

KeyPay

Stable Connected tier

KeyPay is a payroll platform used to manage employee pay runs, timesheets, leave, and employment agreements. Demiton integrates with KeyPay to retrieve payroll records and reconcile labour costs against field data from Assignar, and to support workforce lifecycle workflows.

Authentication: API key
System type: KEYPAY
API reference: KeyPay API

Supported resources

ResourceFETCHPUSH
employees✓✓
payruns✓
timesheets✓✓
leaverequests✓✓
locations✓
paycategories✓
leavecategories✓
deductioncategories✓
payschedules✓
payrateschedules✓
employmentagreements✓
qualifications✓
Business✓

Pagination is handled automatically (100 records per page). All resources are scoped to your KeyPay business ID.

Integration model

Records are retrieved and normalised into PayrollRecord business objects with fields: employee, period, hours, gross cost. Worker identities are resolved across systems using a stable employee ID as the cross-system join key.

Labour reconciliation

The primary use case is reconciling payroll totals against field system data:

  • Hours recorded in Assignar are compared against payroll hours
  • Discrepancies are surfaced as variance records for review
  • All payroll writes use simulation mode before production execution

Workforce mirroring

Demiton supports KeyPay→Assignar employee mirroring as part of workforce lifecycle workflows. When an employee is added or updated in KeyPay, the record can be propagated to Assignar - maintaining a consistent worker identity across payroll and field systems without manual data entry. Mirroring runs through the Workflow Runtime with simulation mode enabled by default.

Security

Access type: Read and governed write

Demiton reads the full range of payroll entities from KeyPay. Write operations - creating or updating employee records, timesheets, and leave requests - occur only through governed workforce lifecycle workflows with explicit approval gates.

Permissions required: KeyPay API key with access to your business. Use a dedicated API user for Demiton. Grant the minimum access needed - for reconciliation-only workflows, read access to employees, pay runs, and timesheets is sufficient.

Data sensitivity: Payroll data is the most sensitive data domain in Demiton. Access is restricted to payroll administrators and executives by default. Project Managers see aggregated labour cost totals for their projects but never individual pay records or rates. See the Security Overview for the full payroll domain access model.

Next steps