Security and compliance
Remote safeguards your organisation and your employees’ sensitive HR and payroll data with industry-leading security and compliance measures.
Remote provides a secure platform for payroll, benefits, taxes and compliance to help you expand your global team with confidence. We prioritise the security of your data and that of your employees.
We hold ISO27001 certification, are SOC 2 compliant and CSA Star Level 1 accredited, reflecting our rigorous security policies and procedures.
These accreditations demonstrate our ongoing commitment to uphold the highest security standards.
Independent third-party auditors regularly review and verify our practices, giving you a robust and dependable security posture.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We secure our systems with advanced firewalls that incorporate threat detection and prevention mechanisms.
For compliance and protection we rely on Amazon Web Services as our cloud provider; AWS adheres to strict industry standards: SOC 1, 2, 3; ISO 27001/27017/27018; and PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We scan for vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: We treat private and employee information with utmost care, encrypting all data both in transit and at rest.
Internal security: We apply the Least Privilege Principle so only essential personnel have system access. All our internal tools and systems require SSO, and we run regular recertification and training to keep to our strict standards.
When you collect and store some of the most sensitive personal details about your business and its hires – such as salary amounts, addresses, bank details and government-issued IDs – extreme caution is required.
Remote Data Protection Guard provides market-leading policies, processes and controls to ensure compliance with the world’s strictest privacy laws.
To bolster security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA requires users to enter a code from an authenticator app, such as Google Authenticator or Duo Mobile, sent to their mobile device. SSO can be activated across a company, letting users sign in to the Remote platform securely with their corporate credentials.
We do not allow our commitment to protecting your data to slow you down.
Our tools and processes enable us to sustain 99.999% uptime.
Our leading product delivers industry-best response times of under 150 ms.
We continuously monitor applications and infrastructure, back up data every day, and transfer application logs off-site, where they are retained for 30 days.
Our HR and payroll security policies and procedures have been externally validated and certified by leading international security institutions.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. We enable your employees to request changes to or deletion of their personal data, upholding the GDPR’s highest standards.
All sensitive information, including important documents and data, is encrypted and accessible only to the owner and internal platform administrators. We reduce risk exposure by deleting any data not essential for business operations. If you wish to contact us about security, please send an email to [email protected]
Explore Remote’s complete range of products and services.
Employ full-time staff anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote provides industry-leading security and reliability.
Get ironclad IP protection that guarantees full ownership of your assets.
Accelerate your international business with confidence.
Remote takes its customers’ security very seriously and aims to improve it continually. The work of the security research community is an important contribution in this regard. If you discover a vulnerability affecting Remote, please complete the form below with all details needed to reproduce the issue, so we can address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security describes the measures a company must adopt to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. It requires implementing multiple safeguards, including secure data handling, a resilient IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to appropriate funds unlawfully.
There are several payroll risks, including:
Incorrect tax calculations
Non-compliance with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, it is vital to understand and comply with payroll regulations and tax systems in your employees’ countries. Failure to comply can lead to substantial penalties and fines, as well as reputational harm.
When outsourcing to an unfamiliar third-party payroll provider, you may face risks such as loss of control, data breaches, poor service, or regulatory non-compliance by the provider. That is why outsourcing to a trusted, reliable supplier is essential.
Finally, be mindful of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in various ways. They might be exposed through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Companies that use outdated systems with known vulnerabilities are especially at risk.
Many breaches result from the following methods:
Phishing attacks. Attackers may deceive payroll staff into revealing login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. Ransomware attacks involve malicious software that infiltrates and encrypts data; the attacker typically demands a sizeable ransom to restore access.
To protect your payroll, implement comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, ensure your chosen platform is regularly updated and well supported, with ISO-standard security protocols in place. You should also train staff regularly on security best practice, including creating strong passwords and recognising phishing attempts.
Finally, assess the ongoing effectiveness of your security through periodic audits and risk assessments.