Security and compliance
Remote safeguards your company and employees’ sensitive HR and payroll information through industry-leading security and compliance measures.
Remote delivers a secure platform for payroll, benefits, taxes and compliance so you can grow your international team with assurance. Protecting your data—and that of your employees—remains our foremost priority.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited, which demonstrates the rigour of our security policies and procedures.
These accreditations reflect our ongoing commitment to uphold the highest security standards.
Independent third-party auditors routinely audit and verify our practices, ensuring a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We guard our systems with advanced firewalls that include threat detection and prevention capabilities.
For compliance and protection, we rely on Amazon Web Services as our cloud provider; AWS adheres to the most stringent industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated security team protects your business through comprehensive security practices.
Application security audits: We assess applications for vulnerabilities and retain audit logs of access and changes to strengthen network security.
Data security: We treat private information and employee data with the utmost seriousness, encrypting all data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to restrict system access to necessary personnel only. All internal tools and systems require SSO, and we perform regular recertification and training to maintain our stringent standards.
When collecting and storing critical personal information about your business and hires — such as salary details, addresses, bank details and government-issued IDs — extreme caution is required.
Remote Data Protection Guard provides industry-leading policies, processes and controls designed to ensure compliance with the world’s most stringent privacy laws.
To enhance security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA requires users to enter a code provided by an authenticator app on their mobile device, such as Google Authenticator or Duo Mobile. SSO may be enabled across the company, enabling users to sign in to the Remote platform securely with their corporate credentials.
We do not allow our commitment to safeguarding your data to impede your progress.
Our tools and procedures enable us to sustain 99.999% uptime.
Our best-in-class product delivers industry-leading response times below 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off-site, where they are retained for 30 days.
Our HR and payroll security policies and procedures are externally validated and certified by the world’s leading security institutions.
Remote complies with GDPR by ensuring data stays encrypted and secure wherever it must travel. We enable your employees to modify or delete their personal data on request, upholding the highest standards set out in the GDPR.
All your sensitive information, including crucial documents and data, is encrypted and is accessible only to the owner and internal platform administrators. We reduce risk exposure by deleting any data not strictly required for business operations. If you wish to contact us about security, please send an email to [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere across the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote delivers industry-leading security and reliability.
Receive ironclad IP protection that guarantees full ownership of what is yours.
Fast-track your global business with confidence.
Remote takes the security of its customers very seriously and is committed to continual improvement. The work carried out by the security research community is an important contribution in this context. If you discover a vulnerability that affects Remote, please complete the form below with all necessary details to reproduce the issue so we can address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security denotes the measures an organisation must implement to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. This entails adopting safeguards like secure data-handling practices, a resilient IT infrastructure and robust security policies and procedures.
Payroll abuse (also referred to as payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial management systems to misappropriate funds.
Payroll carries a range of risks, including:
Inaccurate tax calculations
Non-compliance with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, it is essential to understand and comply with payroll regulations and tax systems in the countries where your employees are based. Non-compliance can lead to substantial penalties and fines, as well as reputational harm.
If you outsource payroll to an unknown third-party provider, you may face risks such as loss of control, data breaches, poor service quality or regulatory non-compliance by that third party. For this reason, it is crucial to use a trusted, reliable provider.
Finally, be mindful of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records may be compromised in various ways. Insider threats (for example, data theft by a disgruntled employee) or external attacks can result in unauthorised access. Organisations using outdated systems with known vulnerabilities are particularly exposed to these risks.
Many breaches occur via the following methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malicious software that encrypts your data; attackers typically demand a substantial ransom to restore system access.
To secure payroll, implement comprehensive security measures, such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, ensure your chosen platform is regularly updated, well supported and implements ISO-standard security protocols. Also, regularly train your staff on security best practices, including creating strong passwords and recognising phishing attempts.
Finally, assess the ongoing effectiveness of your security through periodic audits and risk assessments.