Security and compliance
Remote protects your business and your employees’ sensitive HR and payroll data with industry-leading security and compliance.
Remote provides a secure platform for payroll, benefits, taxes and compliance to support confident growth of your global team. We prioritise the security of your data and your employees’ information.
Remote holds ISO27001 certification, is SOC 2 compliant and carries CSA Star Level 1 accreditation, underlining our stringent security policies and procedures.
These accreditations reflect our ongoing commitment to upholding the highest security standards.
Independent third-party auditors regularly review and verify our practices, ensuring a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks featuring restricted, fully auditable access.
We secure our systems with advanced firewalls that include threat detection and prevention capabilities.
For both compliance and security, we use Amazon Web Services as our cloud provider; AWS adheres to rigorous industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team safeguards your business through comprehensive security practices.
Application security audits: We assess vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: We treat personal and employee information with the utmost care, encrypting all data in transit and at rest.
Internal security: We apply the Least Privilege Principle, restricting system access to essential staff. All internal tools and systems use SSO, and we run regular recertification and training to uphold our strict standards.
When you collect and store highly sensitive details about your company and new hires — such as salaries, addresses, bank details and government-issued IDs — caution is essential.
Remote Data Protection Guard provides industry-leading policies, processes and controls that ensure compliance with the world’s strictest privacy laws.
To strengthen security for Remote users and their data, we enable two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA asks users to enter a code from an authenticator app (for example, Google Authenticator or Duo Mobile) sent to their mobile device. SSO can be switched on across a company, letting users sign into the Remote platform securely with their corporate credentials.
We don’t let our commitment to securing your data get in the way of your progress.
Our systems and processes support maintaining 99.999% uptime.
Our top-class product achieves industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, back up data every day, and transfer application logs off-site where they are retained for 30 days.
Our HR and payroll security policies and procedures are validated and certified externally by leading global security institutions.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. We give employees the ability to request modification or deletion of their personal data, upholding the GDPR’s high standards.
All sensitive information, including documents and other data, is encrypted and accessible only to the owner and authorised internal platform administrators. We reduce risk by deleting any data not strictly required for operations. If you want to contact us about security, please email [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors globally in their local currencies with no hidden fees.
Remote delivers industry-leading security and reliability.
Get strong IP protection that secures full ownership of what’s yours.
Accelerate your international business with confidence.
Remote takes the security of its customers very seriously and continuously works to improve it. In this context, contributions from the security research community are important. If you find a vulnerability that affects Remote, please complete the form below with all the details required to reproduce the issue so we can fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security describes the steps a business takes to protect payroll data and financial assets from threats like fraud, data breaches and unauthorised access. This involves putting in place safeguards such as secure data handling, a hardened IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to divert funds.
Payroll involves a number of risks, including:
Inaccurate tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, you must understand and comply with payroll rules and tax systems in the countries where your employees work. Non-compliance can lead to significant fines, penalties and reputational harm.
Outsourcing to an unvetted third-party payroll provider can create risks including loss of control, data breaches, substandard service or the third party’s regulatory non-compliance. That’s why choosing a trusted, dependable provider is essential.
Finally, be aware of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be exposed in various ways: insider threats (for example, data theft by a disgruntled employee) or external attacks. Organisations using legacy systems with known vulnerabilities can be especially at risk.
Many breaches happen through the following methods:
Phishing attacks. Attackers may trick payroll staff into disclosing login details, which grants unauthorised access to payroll systems.
Malicious software. Malware and viruses may corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malware that encrypts data, after which the attacker typically demands a substantial ransom to restore access.
To protect payroll, implement comprehensive security measures such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, make sure the platform you choose is regularly updated, well supported and follows ISO-standard security protocols. Also regularly train your people on security best practices, including creating strong passwords and recognising phishing attempts.
Finally, evaluate the effectiveness of your security on an ongoing basis through periodic audits and risk assessments.