Security and compliance
Remote safeguards your organisation and employees’ sensitive HR and payroll information with industry-leading security and compliance.
Remote provides a secure platform for payroll, benefits, taxation and compliance to support the confident growth of your global team. We place the protection of your data and your employees’ data at the forefront of our priorities.
We are certified to ISO27001, compliant with SOC 2, and accredited at CSA Star Level 1, reflecting our stringent security policies and procedures.
These accreditations evidence our ongoing commitment to uphold the highest security standards.
Independent third-party auditors routinely audit and validate our practices, ensuring a robust, trustworthy security posture.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We secure our systems using advanced firewalls that incorporate threat detection and prevention mechanisms.
To ensure compliance and protection, we use Amazon Web Services as our cloud provider; AWS adheres to the strictest industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We assess vulnerabilities and keep audit logs of application access and modifications to strengthen network security.
Data security: We treat private information and employee data with the utmost care, encrypting all data in transit and at rest.
Internal security: We apply the Least Privilege Principle to restrict system access to only essential staff. All internal tools and systems require SSO, and we run regular recertification and training to maintain our strict standards.
When it comes to collecting and storing some of the most critical personal details about your company and new hires - including salary figures, addresses, bank details and government-issued IDs - you must exercise the utmost care.
Remote Data Protection Guard provides industry-leading policies, processes and controls to ensure compliance with the world’s strictest privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) at login.
2FA requires users to provide a code sent to their mobile device via an authenticator app like Google Authenticator or Duo Mobile. SSO may be enabled company-wide, allowing users to sign into the Remote platform securely with their company credentials.
We do not allow our commitment to your data’s security to slow you down.
Our tools and processes support us in maintaining 99.999% uptime.
Our best-in-class product delivers industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, perform daily backups, and transfer application logs off-site where they are retained for 30 days.
Our HR and payroll security policies and procedures are validated and certified externally by the world’s leading security institutions.
Remote complies with GDPR by keeping data encrypted and secure wherever it travels. We enable your employees to request modification or deletion of their personal data, upholding the highest standards set out by the GDPR.
All sensitive information, including key documents and data, is encrypted and accessible only to the owner and to internal platform administrators. We reduce exposure by removing data that is not strictly necessary for business operations. If you would like to contact us about security, please send an email to [email protected]
Explore Remote’s full range of products and services.
Hire full-time employees anywhere in the world.
Onboard and pay contractors worldwide in their local currencies with zero hidden fees.
Remote provides industry-leading security and reliability.
Obtain ironclad IP protection that guarantees full ownership of what’s yours.
Speed up your global expansion with confidence.
Remote takes the security of its customers very seriously and continually seeks improvement. In this context, the work of the security research community makes an important contribution. If you discover a vulnerability that affects Remote, please complete the form below with all necessary details to reproduce the issue, helping us to resolve it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security refers to the safeguards an organisation must implement to protect payroll data and financial assets from threats such as fraud, data breaches and unauthorised access. It requires safe data handling, a secure IT infrastructure and robust security policies and procedures.
Payroll abuse (also known as payroll fraud) takes place when an employee or malicious actor exploits weaknesses in a company’s financial management system to misappropriate funds.
Payroll carries a range of risks, including:
Inaccurate calculation of taxes
Non-compliance with local employment laws
Cyberattacks
Human error
Inaccurate record-keeping
If your organisation operates internationally, you must be aware of and comply with payroll regulations and tax systems in your employees’ countries. Failure to comply can lead to heavy penalties, fines and reputational damage.
If you outsource to an unknown third-party payroll provider, you may face risks such as loss of control, data breaches, poor service quality or regulatory non-compliance by that third party. That is why it is crucial to use a trusted, reliable provider.
Finally, be aware of internal fraud risks, including:
“Ghost” employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in several ways. They may fall into the wrong hands through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Companies that rely on outdated systems with known vulnerabilities are particularly susceptible.
Many breaches arise from the following methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing their login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll processes.
Ransomware attacks. This refers to malicious software that infiltrates and encrypts data, with attackers typically demanding a substantial ransom to restore access.
To secure payroll, implement comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access control
Robust firewalls
If you outsource payroll, ensure your chosen platform is regularly updated and well supported, with ISO-standard security protocols in place. Also train your staff regularly on best security practices, such as creating strong passwords and recognising phishing attempts.
Finally, assess the ongoing effectiveness of your security through periodic audits and risk assessments.