Security and compliance
Remote protects your business and your employees’ sensitive HR and payroll data with industry-leading security and compliance.
Remote provides a secure platform for payroll, benefits, tax and compliance so you can expand your international team with confidence. We prioritise the security of your data and your employees’ information.
We hold ISO27001 certification, are SOC 2 compliant and accredited at CSA Star Level 1, which reflects our strict security policies and controls.
These accreditations show our ongoing commitment to maintaining top security standards.
Independent third-party auditors regularly review and verify our practices, ensuring a robust and trustworthy security posture.
Our infrastructure runs in isolated networks with restricted, fully auditable access.
We safeguard systems with advanced firewalls that include threat detection and prevention capabilities.
For compliance and protection, we rely on Amazon Web Services as our cloud provider; AWS meets strict industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated security team keeps your business safe through comprehensive security practices.
Application security audits: We scan for vulnerabilities and retain audit logs of application access and modifications to strengthen network security.
Data security: We treat private and employee information with care, encrypting data both in transit and at rest.
Internal security: We apply the Least Privilege Principle so only essential staff have system access. All internal tools require SSO, and we run regular recertifications and training to uphold our strict standards.
Collecting and storing critical personal information about your organisation and hires — such as salaries, addresses, bank details and government-issued IDs — calls for extreme caution.
Remote Data Protection Guard provides industry-leading policies, processes and controls to keep you compliant with the world’s strictest privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA asks users to enter a code from an authenticator app (for example, Google Authenticator or Duo Mobile). SSO can be activated across a company so users sign in to Remote securely with their company credentials.
We won’t let our focus on securing your data get in the way of your work.
Our tools and processes enable us to deliver 99.999% uptime.
Our leading product delivers response times under 150ms.
We continuously monitor applications and infrastructure, perform daily backups, and move application logs off-site where they are retained for 30 days.
Our HR and payroll security policies and procedures are validated and certified externally by leading global security institutions.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. We give employees the ability to request modification or deletion of their personal data, upholding the GDPR’s high standards.
All sensitive information, including documents and other data, is encrypted and accessible only to the owner and authorised internal platform administrators. We reduce risk by deleting any data not strictly required for operations. If you want to contact us about security, please email [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors globally in their local currencies with no hidden fees.
Remote delivers industry-leading security and reliability.
Get strong IP protection that secures full ownership of what’s yours.
Accelerate your international business with confidence.
Remote takes the security of its customers very seriously and continuously works to improve it. In this context, contributions from the security research community are important. If you find a vulnerability that affects Remote, please complete the form below with all the details required to reproduce the issue so we can fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security means the steps a company takes to protect payroll data and financial assets from threats like fraud, data breaches and unauthorised access. It involves putting in place safeguards such as secure data handling, a hardened IT infrastructure and robust security policies and procedures.
Payroll abuse (also called payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial systems to divert funds.
There are several payroll risks, including:
Incorrect tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Poor record-keeping
If your organisation operates internationally, you must understand and comply with payroll regulations and tax rules in your employees’ countries. Ignoring them can lead to heavy fines, penalties and reputational harm.
Outsourcing payroll to an unfamiliar third-party provider can bring risks like loss of control, data breaches, poor service or the third party failing to meet regulations. That’s why choosing a trusted, reliable provider is critical.
Finally, be aware of internal fraud risks, such as:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be exposed in several ways—through insider threats (for example, data theft by a disgruntled employee) or by external attacks. Companies using ageing systems with known vulnerabilities are especially at risk.
Many breaches happen via the following methods:
Phishing attacks. Scammers can deceive payroll staff into handing over login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses may corrupt systems, exfiltrate data or interrupt payroll operations.
Ransomware attacks. This is malicious software that encrypts your data; attackers typically demand a significant ransom to restore access.
To secure payroll, implement a comprehensive set of security measures, such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, make sure your chosen platform is regularly updated, well supported and follows ISO-standard security protocols. Also train your staff regularly on best practices—like creating strong passwords and recognising phishing attempts.
Finally, evaluate your security’s effectiveness through regular audits and risk assessments.