Security and compliance
Remote protects your business and your employees’ sensitive HR and payroll data with industry-leading security and compliance.
Remote provides a secure platform for payroll, benefits, taxes and compliance so you can confidently grow your international team. We prioritise the protection of both your data and your employees’ information.
We hold ISO27001 certification, comply with SOC 2 and are CSA Star Level 1 accredited, which reflects our stringent security policies and procedures.
These accreditations show our ongoing commitment to upholding top-tier security standards.
Independent third-party auditors routinely review and validate our practices, giving you confidence in our strong and dependable security posture.
We host our infrastructure within isolated networks that use restricted, fully auditable access controls.
Our systems are defended by advanced firewalls that incorporate threat detection and prevention capabilities.
For compliance and protection, we rely on Amazon Web Services as our cloud provider; AWS adheres to rigorous industry standards: SOC 1, 2, 3; ISO 27001/27017/27018; PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We assess vulnerabilities and retain audit logs of application access and changes to strengthen network security.
Data security: We treat private and employee information with the utmost care, encrypting data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to restrict system access to only essential staff. All internal tools and systems use SSO, and we run regular recertification and training to uphold our high standards.
Collecting and storing sensitive personal details about your company and employees — such as salaries, addresses, bank details and government-issued IDs — demands utmost caution.
Remote Data Protection Guard provides leading policies, processes and controls to ensure compliance with the world’s strictest privacy laws.
To boost security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA asks users to enter a code from an authenticator app (for example, Google Authenticator or Duo Mobile) sent to their mobile device. SSO can be configured across an organisation so users can securely sign into the Remote platform with their company credentials.
We ensure our focus on data security does not impede your progress.
Our systems and procedures enable us to sustain 99.999% uptime.
Our industry-leading product delivers response times under 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off site for 30 days of retention.
Independent top-tier security organisations externally validate and certify our HR and payroll security policies and procedures.
Remote adheres to GDPR by keeping data encrypted and secure regardless of where it travels. We enable your employees to request modification or deletion of their personal data, upholding the highest GDPR standards.
All sensitive information—documents and data—is encrypted and accessible only to the owner and platform administrators. We reduce exposure by deleting any data not essential for business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s complete selection of products and services.
Hire full-time employees anywhere in the world.
Onboard and pay contractors globally in their local currencies with no hidden fees.
Remote provides industry-leading security and reliability.
Obtain ironclad IP protection that guarantees full ownership of what is yours.
Scale your global business with confidence.
Remote takes customer security very seriously and continually seeks improvement. The work of the security research community is an important part of that effort. If you discover a vulnerability affecting Remote, please complete the form below with all necessary reproduction details to help us address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security covers the measures organisations take to safeguard payroll data and financial resources from threats like fraud, data breaches and unauthorised access. It involves implementing safeguards such as secure data handling, a resilient IT infrastructure and robust security policies and procedures.
Payroll abuse, or payroll fraud, happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to divert funds.
Payroll carries a range of risks, including:
Incorrect tax calculations
Failure to comply with local employment laws
Cyberattacks
Employee mistakes
Inaccurate record keeping
For international organisations, it is vital to understand and comply with payroll rules and tax systems in the countries where your employees work. Non-compliance can lead to substantial fines, penalties and reputational harm.
Outsourcing payroll to an unfamiliar third-party provider can introduce risks like loss of control, data breaches, poor service and that provider’s regulatory non-compliance. That is why selecting a trusted, reliable provider is crucial.
Finally, be aware of internal fraud risks, for example:
Ghost employees
Falsified time entries
Inflated commission schemes
Manipulation or alteration of pay rates
Payroll records can be breached in multiple ways, including insider threats (for example, data theft by a disgruntled employee) or external attacks. Organisations using outdated systems with known vulnerabilities are especially exposed to these risks.
Many breaches happen through methods such as:
Phishing attacks. Attackers may deceive payroll staff into disclosing login credentials, providing unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or interrupt payroll operations.
Ransomware attacks. This refers to software that encrypts your data, with attackers typically demanding a sizable ransom to restore access.
Securing payroll requires implementing comprehensive security controls, such as:
Robust encryption
Multi-factor authentication
Strict access controls
Robust firewalls
When outsourcing payroll, confirm your selected platform receives regular updates and support and follows ISO-standard security protocols. Also, train your staff regularly on security best practices, including creating strong passwords and recognising phishing attempts.
Finally, evaluate the effectiveness of your security controls through periodic audits and risk assessments.