Security and compliance
Remote safeguards your company and employees’ sensitive HR and payroll information with industry-leading security and compliance measures.
Remote delivers a secure platform for payroll, benefits, taxes and compliance so you can grow your global team with confidence. We place the security of your data and your employees’ data at the highest priority.
Our ISO27001 certification, SOC 2 compliance and CSA Star Level 1 accreditation demonstrate the rigour of our security policies and procedures.
These accreditations show our ongoing commitment to upholding the highest security standards.
Independent third-party auditors regularly assess and verify our practices, ensuring a robust, dependable security posture you can rely on.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We secure our systems with advanced firewalls that incorporate threat detection and prevention mechanisms.
For compliance and protection, we use Amazon Web Services as our cloud provider; AWS adheres to the strictest industry standards: SOC 1, 2, 3; ISO 27001/27017/27018; PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We conduct vulnerability testing and keep audit logs of application access and changes to strengthen network security.
Data security: We treat confidential and employee information with the utmost care, encrypting data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to limit system access to only essential personnel. All internal tools require SSO, and we run periodic recertification and training to uphold our rigorous standards.
When collecting and storing highly sensitive personal information about your organisation and hires — such as salary details, addresses, bank account data and government-issued IDs — extreme caution is required.
Remote Data Protection Guard provides industry-leading policies, processes and controls to ensure compliance with the world’s strictest privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA requires users to enter a code delivered to their mobile device via an authenticator app such as Google Authenticator or Duo Mobile. SSO can be enabled organisation-wide, allowing users to sign in to the Remote platform securely with their company credentials.
We do not let our commitment to the security of your data slow you down.
Our tools and processes enable us to sustain 99.999% uptime.
Our best-in-class product achieves industry-leading response times below 150ms.
We continuously monitor applications and infrastructure, perform daily data backups, and transfer application logs off-site, where they are retained for 30 days.
Our HR and payroll security policies and procedures undergo external validation and certification by the world’s leading security institutions.
Remote meets GDPR requirements by keeping data encrypted and secure wherever it travels. We enable employees to request modification or deletion of their personal data, upholding the GDPR’s highest standards.
All sensitive information, including key documents and data, is encrypted and accessible only to the owner and authorised platform administrators. We reduce exposure by purging data that is not essential for business operations. If you wish to contact us about security, please send an email to [email protected]
Explore Remote's complete range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors worldwide in their local currencies with no hidden fees.
Remote delivers industry-leading security and reliability.
Receive ironclad IP protection that guarantees you retain full ownership of your assets.
Accelerate your global expansion with confidence.
Remote takes customer security very seriously and continuously seeks improvements. In this context, work from the security research community makes an important contribution. If you discover a vulnerability affecting Remote, please complete the form below with all necessary details to reproduce the issue so we can resolve it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security describes the measures an organisation must implement to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. This involves a range of safeguards, including secure data-handling practices, a protected IT infrastructure and robust security policies and procedures.
Payroll abuse (or payroll fraud) happens when an employee or malicious actor exploits weaknesses in an organisation’s financial management system to misappropriate funds.
Payroll carries multiple risks, for example:
Inaccurate tax calculations
Failure to comply with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, it is essential to understand and comply with payroll regulations and tax systems in your employees’ jurisdictions. Failure to comply can lead to significant penalties and fines, and reputational damage.
If you outsource to an unfamiliar third-party payroll provider, you may face risks such as loss of control, data breaches, poor service quality or regulatory non-compliance by that provider. That is why it is crucial to outsource to a trusted, reputable provider.
Finally, be aware of internal fraud risks, which include:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in several ways. They may fall into the wrong hands through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Organisations using outdated systems with known vulnerabilities are particularly exposed to such risks.
Many breaches occur through the following methods:
Phishing attacks. Attackers may deceive payroll staff into divulging login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll processes.
Ransomware attacks. This involves malware that infiltrates and encrypts data; attackers typically demand a substantial ransom to restore access.
To secure payroll, implement comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, ensure your chosen platform is regularly updated, well supported and follows ISO-standard security protocols. Also educate staff regularly on best security practices, such as creating strong passwords and recognising phishing attempts.
Finally, assess security effectiveness continuously through periodic audits and risk assessments.