Security and compliance
Remote safeguards your company and employees’ confidential HR and payroll records with industry-leading security and compliance standards.
Remote delivers a secure platform for payroll, benefits, taxes and compliance to support the expansion of your international team with assurance. Protecting your data and that of your employees is treated as a primary responsibility.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited — proof of our stringent security policies and procedures.
These accreditations reflect our ongoing commitment to uphold the highest security standards.
Independent third-party auditors routinely review and validate our practices, providing a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks featuring restricted, fully auditable access.
Advanced firewalls defend our systems and incorporate threat detection and prevention capabilities.
For compliance and protection, we rely on Amazon Web Services as our cloud provider; AWS adheres to rigorous industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We identify vulnerabilities and keep audit logs of application access and modifications to strengthen network security.
Data security: We treat private and employee information with the utmost care, encrypting data in transit and at rest.
Internal security: Adopting the Least Privilege Principle, we restrict system access to essential staff only. All internal tools require SSO, and we run periodic recertification and training to uphold our strict standards.
Collecting and storing highly sensitive personal details about your organisation and hires — such as salaries, addresses, bank details and government-issued IDs — requires extreme caution.
Remote Data Protection Guard provides market-leading policies, processes and controls to ensure adherence to the world’s most stringent privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA requires a code generated on a mobile authenticator app such as Google Authenticator or Duo Mobile. SSO can be activated organisation-wide, permitting users to access the Remote platform securely with their corporate credentials.
Our commitment to data security does not impede your progress.
Our tools and procedures enable us to sustain 99.999% uptime.
Our best-in-class product delivers industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off-site for retention for 30 days.
Top global security institutions externally validate and certify our HR and payroll security policies and procedures.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. Employees are empowered to request modification or deletion of their personal data, in line with GDPR’s highest standards.
All sensitive files and data are encrypted and accessible only to the owner and designated platform administrators. We reduce exposure by deleting data not essential to business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s complete range of products and services.
Hire full-time employees anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote delivers industry-leading security and reliability.
Obtain ironclad IP protection guaranteeing full ownership of what is yours.
Scale your global business with confidence.
Remote takes the security of its customers very seriously and continually seeks improvement. The security research community’s contributions are valuable in this regard. If you discover a vulnerability affecting Remote, please complete the form below with all necessary details to reproduce the issue, helping us to resolve it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security denotes the measures a company implements to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. This involves deploying multiple safeguards, including secure data-handling practices, a resilient IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or a malicious actor exploits weaknesses in an organisation’s financial systems to misappropriate funds.
Payroll carries several risks, including:
Incorrect tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
For international organisations, it is vital to understand and comply with payroll regulations and tax systems in your employees’ jurisdictions. Non-compliance can lead to substantial fines, penalties and reputational harm.
Outsourcing to an unfamiliar third-party payroll provider introduces risks including loss of control, data breaches, poor service quality or regulatory non-compliance by that provider. Hence, it is essential to choose a trusted, dependable provider.
Finally, be mindful of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Manipulation or alteration of pay rates
Payroll records can be exposed through various vectors. Insider threats (for example, data theft by a disgruntled employee) or external attacks may lead to sensitive data ending up in the wrong hands. Organisations using outdated systems with known vulnerabilities are particularly vulnerable.
Many breaches arise from the following methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malware that encrypts data, after which the attacker typically demands a significant ransom to restore access.
Securing payroll requires a set of comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, ensure your selected platform is regularly updated, well supported and follows ISO-standard security protocols. Also provide ongoing staff education on security best practices, such as creating strong passwords and recognising phishing attempts.
Finally, assess the continued effectiveness of your security through periodic audits and risk assessments.