Security at RemotesFirst
Protecting your data is our top priority
At RemotesFirst, security isn’t just a feature—it’s foundational to everything we do. We understand that job seekers entrust us with sensitive personal and professional information, and we take that responsibility seriously. Our platform is built with security by design, implementing industry best practices to safeguard your data.
Our Security Commitment
We’re committed to maintaining the highest standards of security to protect your personal information, resume data, and account details. Our team continuously works to enhance our security measures, staying ahead of emerging threats and vulnerabilities.
How We Protect Your Data
Encryption
All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Your sensitive information, including passwords and personal details, is encrypted at rest using industry-standard encryption algorithms.
Secure Infrastructure
Our platform is hosted in SOC 2 compliant data centers with multiple layers of physical and network security. We implement strict access controls, regular security audits, and continuous monitoring to detect and respond to potential threats.
Authentication & Access
We implement strong password requirements and offer two-factor authentication (2FA) to add an extra layer of security to your account. Our employees only have access to user data on a need-to-know basis, with strict access controls and monitoring.
Regular Security Testing
Our security team conducts regular vulnerability assessments and penetration testing to identify and address potential security issues before they can be exploited. We also partner with external security experts to validate our security measures.
Data Minimization
We only collect the information necessary to provide our services, and we maintain clear data retention policies. Your data is only stored for as long as needed to fulfill the purposes for which it was collected.
Continuous Monitoring
Our systems are continuously monitored for suspicious activities and potential security incidents. We use automated alerting systems to detect and respond to anomalies in real-time.
Job Listing Verification
To protect our users from scams and fraudulent listings, we implement various verification measures:
- Employer Verification: We verify the legitimacy of employers posting jobs on our platform through multiple verification methods.
- Listing Review: Our team reviews job listings to identify potential scams or suspicious content before they’re published.
- User Reporting: Users can report suspicious job listings, which our team promptly investigates.
- Fraud Detection: We use automated systems to flag potentially fraudulent activities and suspicious patterns.
- Educational Resources: We provide resources to help users identify and avoid common job scams.
Security Best Practices for Users
While we implement robust security measures on our end, security is a shared responsibility. Here are some best practices to help keep your account secure:
Strong, Unique Passwords
Use a strong, unique password for your RemotesFirst account. Consider using a password manager to generate and store complex passwords securely.
Enable Two-Factor Authentication
Add an extra layer of security to your account by enabling two-factor authentication in your account settings.
Be Cautious of Phishing
Always verify emails claiming to be from RemotesFirst. We will never ask for your password via email. Access your account directly through our website rather than clicking on links in emails.
Keep Your Devices Secure
Ensure your devices have up-to-date security patches and antivirus software. Avoid accessing your account on public or shared computers when possible.
Report Suspicious Activity
If you notice any suspicious activity related to your account or job listings on our platform, report it to us immediately.
Review Connected Applications
Regularly review and remove any third-party applications connected to your account that you no longer use or recognize.
Security Compliance
RemotesFirst maintains compliance with key security and privacy regulations, including:
- GDPR: We comply with the European Union’s General Data Protection Regulation.
- CCPA: We adhere to the California Consumer Privacy Act requirements.
- SOC 2: Our infrastructure and security practices align with SOC 2 requirements for security, availability, and confidentiality.
- NIST Framework: Our security program is informed by the National Institute of Standards and Technology Cybersecurity Framework.
Security Vulnerability Reporting
We value the input of security researchers and the broader community in identifying potential vulnerabilities. If you believe you’ve found a security vulnerability in our platform, please report it to us responsibly by emailing security@remotesfirst.com.
Please include the following information in your report:
- A description of the vulnerability and the potential impact
- Steps to reproduce the issue
- Any supporting screenshots or proof of concept
We commit to:
- Acknowledge receipt of your vulnerability report within 48 hours
- Provide regular updates on our investigation and resolution process
- Work diligently to validate and fix any legitimate issues
- Recognize your contribution, with your permission
Contact Us
If you have any questions about our security practices or concerns about your account security, please contact our security team at security@remotesfirst.com.
Your Security is Our Priority
We’re committed to maintaining a secure platform where you can focus on finding your ideal job opportunity without worrying about your data’s safety.