Security and compliance
Remote safeguards your business and employees' sensitive HR and payroll information with market-leading security and compliance.
Remote provides a secure platform for payroll, benefits, tax and compliance, helping you scale your global team with confidence. We place the security of your data and your employees' data at the forefront of everything we do.
We’re ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited — evidence of our strict security policies and procedures.
These accreditations show our ongoing commitment to upholding the highest security standards.
Independent third-party auditors regularly review and verify our practices, ensuring a robust, reliable security posture you can depend on.
Our infrastructure operates in isolated networks with restricted, fully auditable access.
Our systems are protected by advanced firewalls that include threat detection and prevention mechanisms.
For compliance and protection we use Amazon Web Services as our cloud provider, which meets the strictest industry standards: SOC 1, 2, 3; ISO 27001/27017/27018; PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: we test for vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: we treat private information and employee data with care, encrypting all data both in transit and at rest.
Internal security: we apply the Least Privilege Principle so only essential personnel have system access. All internal tools and systems require SSO, and we run regular recertification and training to maintain our high standards.
Collecting and storing crucial personal information about your company and hires — such as salaries, addresses, bank details and government-issued IDs — demands extreme care.
Remote Data Protection Guard provides market-leading policies, processes and controls that ensure compliance with the world’s toughest privacy laws.
To strengthen security for Remote users and their data, we’ve enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA requires users to enter a code sent to their mobile device by an authenticator app such as Google Authenticator or Duo Mobile. SSO can be turned on company-wide so users can sign in to the Remote platform securely with their corporate credentials.
Our commitment to your data security won’t slow you down.
We use tools and processes that keep uptime at 99.999%.
Our best-in-class product delivers industry-leading response times under 150ms.
We continuously monitor applications and infrastructure, back up data daily and send application logs off site, where they’re retained for 30 days.
Our HR and payroll security policies and procedures are externally validated and certified by leading global security organisations.
Remote complies with GDPR by keeping data encrypted and secure wherever it travels. We enable your employees to modify or delete their personal data on request, upholding the highest standards set out in the GDPR.
All sensitive information, including documents and data, is encrypted and only accessible to the owner and platform administrators. We reduce risk exposure by deleting any data that isn’t strictly required for business operations. If you’d like to contact us about security, please email [email protected]
Explore Remote’s full range of products and services.
Hire full-time workers anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote provides industry-leading security and reliability.
Get ironclad IP protection that guarantees full ownership of what's yours.
Accelerate your global business with confidence.
Remote takes customer security very seriously and is committed to continuous improvement. The work of the security research community is an important part of that. If you discover a vulnerability affecting Remote, please complete the form below with all details needed to reproduce the issue so we can address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security covers the measures a business must take to protect payroll data and financial assets from threats like fraud, data breaches and unauthorised access. This involves implementing safeguards such as secure data-handling practices, a robust IT infrastructure and strict security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to misappropriate funds.
Payroll carries a range of risks, including:
Incorrect tax calculations
Non-compliance with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, you must understand and comply with payroll regulations and tax systems in your employees’ countries. Failure to comply can lead to significant fines, penalties and reputational damage.
Outsourcing to an unfamiliar third‑party payroll provider can introduce risks such as loss of control, data breaches, poor service quality or non-compliance by that provider. For that reason, it’s vital to use a trusted, reliable partner.
Finally, be aware of internal fraud risks, including:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in several ways — through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Companies using outdated systems with known vulnerabilities are especially at risk.
Many breaches happen through the following methods:
Phishing attacks. Attackers may deceive payroll staff into revealing login credentials, allowing unauthorised access to payroll systems.
Malicious software. Malware and viruses can damage systems, steal data or disrupt payroll processes.
Ransomware attacks. This is malicious software that encrypts your data; attackers typically demand a large ransom to restore access.
To secure your payroll, implement a set of comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, make sure the platform you choose is regularly updated, well supported and follows ISO-standard security protocols. Also regularly train your staff on security best practice, including creating strong passwords and recognising phishing attempts.
Finally, assess the ongoing effectiveness of your security through periodic audits and risk assessments.