Security and compliance
Remote safeguards your company and employees’ confidential HR and payroll records with industry-leading security and compliance standards.
Remote provides a secure platform for payroll, benefits, taxes and compliance to support the growth of your global team with confidence. The protection of your data and that of your employees is our highest priority.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited, which reflects our stringent security policies and procedures.
These accreditations illustrate our ongoing commitment to uphold the highest security standards.
Independent third-party auditors routinely review and validate our practices, confirming a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks, with restricted access that is fully auditable.
Advanced firewalls protect our systems and incorporate threat detection and prevention mechanisms.
For compliance and protection, we use Amazon Web Services as our cloud provider; AWS adheres to stringent industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We identify vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: We treat private information and employee records with care, encrypting all data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to restrict system access to essential staff only. All internal tools and systems require SSO, and we run periodic recertification and training to uphold our strict standards.
When collecting and storing extremely sensitive personal information about your company and its hires, including salary figures, addresses, bank information and government-issued IDs, you must exercise the utmost care.
Remote Data Protection Guard provides market-leading policies, processes and controls to ensure compliance with the world’s toughest privacy laws.
To strengthen security for Remote users and their data, we require two-factor authentication (2FA) and offer single sign-on (SSO) at login.
2FA asks users to enter a code from an authenticator app on their mobile device, such as Google Authenticator or Duo Mobile. SSO can be activated across the company, enabling secure access to the Remote platform with corporate credentials.
Our commitment to safeguarding your data does not impede performance.
Our tools and processes enable us to sustain 99.999% uptime.
Our best-in-class product delivers industry-leading response times below 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off site, where they are retained for 30 days.
Top global security institutions externally validate and certify our HR and payroll security policies and procedures.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. Employees are empowered to request modification or deletion of their personal data, in line with GDPR’s highest standards.
All sensitive files and data are encrypted and accessible only to the owner and designated platform administrators. We reduce exposure by deleting data not essential to business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s complete range of products and services.
Hire full-time employees anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote delivers industry-leading security and reliability.
Obtain ironclad IP protection guaranteeing full ownership of what is yours.
Scale your global business with confidence.
Remote takes the security of its customers very seriously and continually seeks improvement. The security research community’s contributions are valuable in this regard. If you discover a vulnerability affecting Remote, please complete the form below with all necessary details to reproduce the issue, helping us to resolve it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security describes the measures a company implements to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. This includes safe data-handling practices, a secure IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to misappropriate funds.
Payroll carries a range of risks, including:
Inaccurate tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Inaccurate record keeping
If your organisation operates internationally, you must understand and comply with payroll regulations and tax systems in your employees’ jurisdictions. Non-compliance can lead to substantial penalties, fines and reputational harm.
Outsourcing to an unfamiliar third-party payroll provider can introduce risks—loss of control, data breaches, poor service quality or regulatory non-compliance by the vendor. For this reason, outsourcing to a trusted, dependable provider is essential.
Finally, be alert to internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay-rate manipulation or alteration
Payroll records may be compromised in multiple ways. Insider threats (for example, data theft by a disgruntled employee) or external attacks can expose them. Organisations that rely on outdated systems with known vulnerabilities are particularly at risk.
Many breaches stem from the following attack methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing login credentials, allowing unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malicious software that infiltrates and encrypts data; attackers typically demand a significant ransom to restore access.
To secure payroll, implement comprehensive security measures, such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, ensure your chosen platform is regularly updated, well supported and implements ISO-standard security protocols. Regular staff training on best security practices—creating strong passwords and recognising phishing attempts—is also essential.
Finally, assess ongoing security effectiveness via periodic audits and risk assessments.