Security and compliance
Remote safeguards your company and employees’ sensitive HR and payroll data through industry-leading security and compliance measures.
Remote provides a secure platform for payroll, benefits, taxes, and compliance to help you grow your global team with confidence. We prioritize safeguarding your data and your employees’ information.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited, demonstrating our rigorous security policies and procedures.
These accreditations reflect our ongoing commitment to uphold the highest standards of security.
Independent third-party auditors regularly audit and verify our practices, ensuring a robust, reliable security posture you can trust.
Our infrastructure resides in isolated networks with restricted, fully auditable access controls.
We secure our systems using advanced firewalls equipped with threat detection and prevention mechanisms.
For compliance and protection, we rely on Amazon Web Services as our cloud provider; AWS adheres to strict industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team safeguards your business through comprehensive security practices.
Application security audits: we test for vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: we treat the protection of private and employee information with utmost seriousness, encrypting all data both in transit and at rest.
Internal security: we adhere to the Least Privilege Principle, restricting system access to essential personnel only. All internal tools and systems require SSO, and we run regular recertification and training to meet our rigorous standards.
When collecting and storing sensitive personal information about your company and hires - including salary figures, addresses, bank details, and government-issued IDs - it is essential to exercise extreme care.
Remote Data Protection Guard provides industry-leading policies, processes, and controls that ensure compliance with the world’s most stringent privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA requires users to enter a code sent to their mobile device via an authenticator app such as Google Authenticator or Duo Mobile. SSO may be enabled company-wide, allowing users to sign in to the Remote platform securely with their company credentials.
We do not allow our commitment to your data’s security to slow you down.
Our tools and processes help us maintain 99.999% uptime.
Our best-in-class product boasts industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, back up data daily, and transfer application logs off-site, where they are retained for 30 days.
Our HR and payroll security policies and procedures are validated and certified externally by the world’s leading security institutions.
Remote complies with GDPR by ensuring data remains encrypted and secure wherever it travels. We empower your employees to modify or delete their personal data on request, upholding the highest standards set out in the GDPR.
All your sensitive information—including key documents and data—is encrypted and accessible only to the owner and internal platform administrators. We minimize exposure by deleting any data that is not strictly necessary for business operations. If you would like to contact us regarding security, please send an email to [email protected]
Explore Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote offers industry-leading security and reliability.
Ensure ironclad IP protection that guarantees full ownership of what’s yours.
Accelerate your global business with confidence.
Remote takes the security of its customers very seriously and strives to continuously improve it. In this context, the work of the security research community provides an important contribution. If you find a vulnerability that affects Remote, please fill in the form below including all necessary details to reproduce the issue, thereby helping us to fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security refers to the measures an organization adopts to safeguard payroll data and financial assets from threats such as fraud, data breaches, and unauthorized access. These measures include secure data handling practices, a robust IT infrastructure, and strong security policies and procedures.
Payroll abuse (also known as payroll fraud) happens when an employee or malicious actor exploits weaknesses in a company’s financial management system to misappropriate funds.
There are several payroll risks, including:
Incorrect calculation of taxes
Failure to comply with local labor laws
Cyberattacks
Human error
Inaccurate record keeping
If your organization is international, it is essential to understand and comply with the payroll regulations and tax systems in your employees’ countries. Failure to do so can result in hefty penalties and fines, as well as reputational damage.
If you outsource to an unfamiliar third-party payroll provider, you may risk loss of control, data breaches, poor service quality, or that provider’s non-compliance with regulations. This is why it is crucial to partner with a trusted, reliable provider.
Finally, be aware of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in many ways: through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Companies using outdated systems with known vulnerabilities may be particularly exposed.
Many breaches result from the following methods:
Phishing attacks. Attackers may deceive payroll staff into divulging login credentials, gaining unauthorized access to payroll systems.
Malicious software. Malware and viruses can compromise systems, exfiltrate data, or disrupt payroll operations.
Ransomware attacks. This malicious software infiltrates and encrypts your data, after which attackers often demand a substantial ransom to restore system access.
To secure payroll, implement comprehensive security measures, such as:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, ensure your chosen platform is regularly updated and well supported, with ISO-standard security protocols implemented. Also, regularly train your staff on security best practices, including creating strong passwords and recognizing phishing attempts.
Finally, assess the effectiveness of your security on an ongoing basis by conducting periodic audits and risk assessments.