Security and compliance
Remote safeguards your company and employees’ sensitive HR and payroll data through industry-leading security and compliance measures.
Remote delivers a secure platform for payroll, benefits, taxes, and compliance to help you grow your global team with confidence. We prioritize the protection of your data and your employees’ data.
We are ISO27001 certified, SOC 2 compliant, and CSA Star Level 1 accredited — demonstrating our stringent security policies and procedures.
These accreditations reflect our ongoing commitment to maintaining the highest security standards.
Independent third-party auditors regularly audit and verify our practices, ensuring a robust, trustworthy security posture.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We safeguard our systems with advanced firewalls that feature threat detection and prevention mechanisms.
To guarantee compliance and protection, we rely on Amazon Web Services as our cloud provider, which meets the most stringent industry standards: SOC 1, SOC 2, SOC 3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team keeps your business secure through comprehensive security practices.
Application security audits: we test for vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: we treat the protection of private information and employee data with utmost seriousness, encrypting all data both in transit and at rest.
Internal security: we follow the Least Privilege Principle to limit system access to only essential personnel. All internal tools and systems require SSO, and we carry out regular recertification and training to uphold our stringent standards.
When collecting and storing critical personal information about your company and hires — such as salary figures, addresses, bank details, and government-issued IDs — extreme care is essential.
Remote Data Protection Guard provides industry-leading policies, processes, and controls to ensure compliance with the world’s most stringent privacy laws.
To provide stronger security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for login.
2FA requires users to enter a code sent to their mobile device via an authenticator app such as Google Authenticator or Duo Mobile. SSO can be enabled across the company, allowing users to log in to the Remote platform securely using their corporate credentials.
We do not let our commitment to your data’s security slow you down.
Our tools and processes enable us to maintain 99.999% uptime.
Our best-in-class product delivers industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, back up data daily, and transfer application logs off site, where they are retained for 30 days.
Our HR and payroll security policies and procedures are validated and certified externally by the world’s leading security institutions.
Remote complies with GDPR by ensuring data remains encrypted and secure wherever it travels. We empower your employees to modify or delete their personal data on request, upholding the highest standards set out in the GDPR.
All your sensitive information—including key documents and data—is encrypted and accessible only to the owner and internal platform administrators. We minimize exposure by deleting any data that is not strictly necessary for business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote offers industry-leading security and reliability.
Ensure ironclad IP protection that guarantees full ownership of what’s yours.
Accelerate your global business with confidence.
Remote takes the security of its customers very seriously and strives to continuously improve it. In this context, the work of the security research community provides an important contribution. If you find a vulnerability that affects Remote, please fill in the form below including all necessary details to reproduce the issue, thereby helping us to fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security refers to the measures a company must take to protect its payroll data and financial assets from potential threats such as fraud, data breaches, and unauthorized access. It requires implementing a range of safeguards, including secure data handling practices, a resilient IT infrastructure, and strong security policies and procedures.
Payroll abuse (also known as payroll fraud) occurs when an employee or a malicious actor exploits weaknesses in a company’s financial management system to misappropriate funds.
There are multiple payroll risks, such as:
Inaccurate tax calculations
Failure to comply with local labor laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organization operates internationally, it’s essential to understand and comply with the payroll regulations and tax systems in your employees’ countries. Failure to do so can lead to significant penalties and fines, as well as reputational harm.
If you’re outsourcing to an unfamiliar third-party payroll provider, you may face risks like loss of control, data breaches, poor service quality, or non-compliance with regulations by that third party. This is why outsourcing to a trusted, reliable provider is essential.
Finally, be aware of internal fraud risks, including:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in several ways. They can fall into the wrong hands due to insider threats (for example, data theft by a disgruntled employee) or through external attacks. If your company uses outdated systems with known vulnerabilities, you may be particularly exposed to such threats.
Many breaches result from the following methods:
Phishing attacks. Attackers may trick payroll team members into disclosing their login credentials, granting unauthorized access to payroll systems.
Malicious software. Malware and viruses can compromise systems, exfiltrate data, or disrupt payroll operations.
Ransomware attacks. These attacks involve malicious software that infiltrates and encrypts data; attackers typically demand a substantial ransom to restore access.
To secure your payroll, implement comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you’re outsourcing payroll, ensure your chosen platform is regularly updated and well supported, and that ISO-standard security protocols are in place. You should also regularly train your people on security best practices, such as how to create strong passwords and how to recognize phishing attempts.
Finally, assess the ongoing effectiveness of your security by conducting periodic audits and risk assessments.