Security and compliance
Remote safeguards your company and employees’ sensitive HR and payroll information through industry-leading security and compliance measures.
Remote provides a secure platform for payroll, benefits, taxes and compliance to help you expand your global workforce with confidence. Protecting your data and your employees’ data is our highest priority.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited, which demonstrates our stringent security policies and procedures.
These accreditations attest to our ongoing efforts to uphold the highest security standards.
Independent third-party auditors routinely audit and verify our practices, ensuring a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We secure our systems with advanced firewalls featuring threat detection and prevention capabilities.
For compliance and protection, we use Amazon Web Services as our cloud provider; AWS adheres to rigorous industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team ensures your organisation’s safety through comprehensive security practices.
Application security audits: We test for vulnerabilities and retain audit logs of application access and modifications to strengthen network security.
Data security: We treat private information and employee data with utmost care, encrypting all data both in transit and at rest.
Internal security: We adhere to the Least Privilege Principle, restricting system access to essential personnel only. All internal tools and systems require SSO, and we run periodic recertification and training to maintain our stringent standards.
When collecting and storing critical personal information about your organisation and hires — including salary details, addresses, bank information and government-issued IDs — extreme caution is essential.
Remote Data Protection Guard implements industry-leading policies, processes and controls to ensure compliance with the world’s most stringent privacy laws.
To enhance security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA requires users to enter a code delivered to their mobile device through an authenticator app such as Google Authenticator or Duo Mobile. SSO can be activated company-wide, permitting users to log into the Remote platform securely with their corporate credentials.
We do not allow our commitment to data security to impede your progress.
Our tools and processes enable us to sustain 99.999% uptime.
Our best-in-class product delivers industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off-site, where they are retained for 30 days.
Our HR and payroll security policies and procedures are externally validated and certified by the world’s leading security institutions.
Remote complies with GDPR by ensuring data stays encrypted and secure wherever it must travel. We enable your employees to modify or delete their personal data on request, upholding the highest standards set out in the GDPR.
All your sensitive information, including crucial documents and data, is encrypted and is accessible only to the owner and internal platform administrators. We reduce risk exposure by deleting any data not strictly required for business operations. If you wish to contact us about security, please send an email to [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere across the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote delivers industry-leading security and reliability.
Receive ironclad IP protection that guarantees full ownership of what is yours.
Fast-track your global business with confidence.
Remote takes the security of its customers very seriously and is committed to continual improvement. The work carried out by the security research community is an important contribution in this context. If you discover a vulnerability that affects Remote, please complete the form below with all necessary details to reproduce the issue so we can address it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security denotes the measures a company must implement to safeguard payroll data and financial assets against threats such as fraud, data breaches and unauthorised access. This involves implementing multiple safeguards, including secure data handling, a resilient IT infrastructure and robust security policies and procedures.
Payroll abuse (also known as payroll fraud) takes place when an employee or malicious actor exploits weaknesses in a company’s financial management system to misappropriate funds.
Payroll carries various risks, including:
Inaccurate calculation of taxes
Non-compliance with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, it is essential to understand and comply with payroll regulations and tax systems in your employees’ countries. Failure to comply can lead to substantial penalties and fines, and reputational harm.
If you outsource to an unvetted third-party payroll provider, you may face risks such as loss of control, data breaches, poor service quality or regulatory non-compliance by that third party. For this reason, it is crucial to outsource to a trusted, reliable provider.
Finally, be mindful of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in various ways. They may fall into the wrong hands through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Organisations using outdated systems with known vulnerabilities are particularly exposed to such risks.
Many breaches result from the following methods:
Phishing attacks. Attackers may trick payroll staff into revealing their login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can damage systems, exfiltrate data or disrupt payroll processes.
Ransomware attacks. This refers to malicious software that infiltrates and encrypts data; attackers typically demand a substantial ransom to restore access.
To secure payroll, implement comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, ensure your chosen platform is regularly updated and well supported, and that ISO-standard security protocols are implemented. You should also train your people regularly on security best practices, such as creating strong passwords and recognising phishing attempts.
Finally, assess the continuing effectiveness of your security by conducting periodic audits and risk assessments.