Information Security & Trust Statement

Last updated: November 2025

4Remote, Inc. (“4Remote”, “we”, “us”) is committed to protecting the confidentiality, integrity, and availability of information entrusted to us. As a cybersecurity provider, information security is fundamental to our operations and our customer relationships.

This statement provides a high-level overview of our information security practices.

Security Governance

4Remote maintains an information security program designed to align with industry best practices and applicable US laws and regulations. Security oversight is supported by executive leadership and integrated into our business operations.

Security policies and procedures are reviewed and updated periodically to reflect evolving risks and regulatory requirements.

Risk Management

We take a risk-based approach to information security, which includes:

• Identifying and assessing security risks
• Implementing controls proportionate to risk
• Monitoring and improving controls over time

Security considerations are incorporated into product development, infrastructure management, and vendor selection.

Access Control

Access to systems and data is restricted based on the principle of least privilege.

Key practices include:

• Role-based access controls
• Multi-factor authentication where appropriate
• Secure credential management
• Periodic access reviews

Access is promptly revoked upon role changes or termination.

Data Protection

4Remote implements measures designed to protect customer data, including:

• Logical separation of customer environments where applicable
• Encryption in transit using industry-standard protocols
• Encryption at rest where appropriate based on risk
• Secure key management practices

We do not use customer data for advertising or unrelated purposes.

Secure Development Practices

Security is integrated into our software development lifecycle, including:

• Secure coding standards
• Code review processes
• Vulnerability identification and remediation
• Testing prior to release

Changes to production systems are controlled and monitored.

Infrastructure and Network Security

We use reputable cloud and infrastructure providers and implement controls designed to protect systems and networks, including:

• Network segmentation
• Monitoring and logging
• Intrusion detection and prevention mechanisms
• Protection against common attack vectors

Incident Response

4Remote maintains an incident response process designed to detect, respond to, and recover from security incidents in a timely manner.

In the event of a confirmed incident involving customer data, we will notify affected customers in accordance with applicable law and contractual obligations.

Business Continuity and Resilience

We maintain measures designed to support service availability and resilience, including:

• Backup and recovery processes
• Redundancy where appropriate
• Continuity planning to support critical operations

Third-Party Risk Management

We assess third-party service providers based on risk and require them to maintain appropriate security and privacy safeguards.

Where applicable, we impose contractual obligations on vendors regarding confidentiality, data protection, and security.

Compliance and Certifications

Our security program is informed by recognized frameworks such as:

• NIST Cybersecurity Framework
• ISO/IEC 27001 principles
• SOC 2 Trust Services Criteria

Any formal certifications or reports are made available to customers under appropriate confidentiality terms where applicable.

Continuous Improvement

Information security is an ongoing process. We regularly review and improve our security controls to address emerging threats, changes in technology, and customer expectations.

Contact

Questions regarding information security may be directed to:

Email: support@4remote.io

Postal address:
1910 S. Stapley Drive, Ste. 221
Mesa, AZ 85204
United States