Security and compliance
Remote protects your business and your employees’ sensitive HR and payroll data with industry-leading security and compliance.
Remote provides a secure platform for payroll, benefits, taxes and compliance to help you expand your international team with confidence. We prioritise the security of your data and your employees’ information.
We hold ISO27001 certification, comply with SOC 2 and are accredited at CSA Star Level 1, reflecting our strict security policies and processes.
These accreditations show our ongoing commitment to upholding the highest security standards.
Independent third-party auditors routinely review and validate our practices, ensuring a strong, dependable security posture you can rely on.
We host our infrastructure in segregated networks with restricted, fully auditable access.
Advanced firewall protection guards our systems and includes threat detection and prevention capabilities.
For compliance and protection, we use Amazon Web Services as our cloud provider; AWS meets stringent industry standards: SOC 1, 2, 3, ISO 27001/27017/27018 and PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We assess systems for vulnerabilities and keep audit logs of application access and modifications to strengthen network security.
Data security: We treat the protection of private and employee information with utmost seriousness, encrypting data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to limit system access to essential staff only. All internal tools and systems use SSO, and we perform regular recertification and training to maintain our exacting standards.
Collecting and storing critical personal details about your organisation and hires — such as salaries, addresses, bank details and government-issued IDs — demands extreme caution.
Remote Data Protection Guard provides leading policies, processes and controls to ensure compliance with the world’s strictest privacy laws.
To reinforce security for Remote users and their data, we have activated two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA asks users to enter a code delivered to their mobile device through an authenticator app such as Google Authenticator or Duo Mobile. SSO can be configured at the company level, letting users securely sign into the Remote platform with their corporate credentials.
We do not allow our dedication to securing your data to impede your progress.
Our processes and tools enable us to sustain 99.999% uptime.
Our best-in-class product delivers industry-leading response times below 150 ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off site, where they are retained for 30 days.
Independent top-tier security organisations externally validate and certify our HR and payroll security policies and procedures.
Remote adheres to GDPR by keeping data encrypted and secure regardless of where it travels. We enable your employees to request modification or deletion of their personal data, upholding the highest GDPR standards.
All sensitive information—documents and data—is encrypted and accessible only to the owner and platform administrators. We reduce exposure by deleting any data not essential for business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s complete selection of products and services.
Hire full-time employees anywhere in the world.
Onboard and pay contractors globally in their local currencies with no hidden fees.
Remote provides industry-leading security and reliability.
Obtain ironclad IP protection that guarantees full ownership of what is yours.
Scale your global business with confidence.
Remote takes customer security very seriously and continually seeks improvement. The work of the security research community is an important part of that effort. If you discover a vulnerability affecting Remote, please complete the form below with all necessary reproduction details to help us address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security describes the steps an organisation must take to safeguard payroll data and financial assets from threats like fraud, data breaches and unauthorised access. It involves implementing multiple safeguards, such as secure data handling, a protected IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to steal funds.
Payroll carries several risks, including:
Incorrect tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Faulty record-keeping
If your organisation operates internationally, you must understand and comply with payroll regulations and tax systems in your employees’ jurisdictions. Non-compliance can lead to substantial fines, penalties and reputational harm.
Outsourcing payroll to an unfamiliar third-party provider also introduces risks like loss of control, data breaches, degraded service quality or regulatory non-compliance by the provider. That is why choosing a trusted, dependable provider is critical.
Finally, be mindful of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Manipulation or alteration of pay rates
Payroll records can be exposed through various channels. Insider threats (for example, data theft by a disgruntled employee) or external attacks can lead to compromise. Organisations using outdated systems with known vulnerabilities are especially at risk.
Many breaches result from the following methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This type of malware infiltrates and encrypts data, with attackers typically demanding a significant ransom to restore access.
Securing payroll requires implementing comprehensive security measures, such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, ensure your selected platform is regularly updated and well supported, and that ISO-standard security protocols are implemented. You should also provide ongoing education on security best practices, including creating strong passwords and recognising phishing attempts.
Lastly, evaluate the effectiveness of your security measures through regular audits and risk assessments.