Work with Remotly
Play with Remotly
Community
Help
EN
hamburger

Legal information

Remotly - Security Policy and Technology Overview

  1. Introduction

    2. Remotly is a remote access and control solution designed to meet enterprise-grade security, reliability, and confidentiality requirements. This document outlines the security mechanisms, operational standards, and compliance principles that govern the platform's architecture and usage. You can contact us by mail at the above address or via the contact form available on our Website www.remotly.com under "Contact".

  2. Encryption and Connection Security

    3. Remotly employs a comprehensive end-to-end encryption model to protect all transmitted data. Session content is encrypted using AES-256, whileRSA-4096 is utilized for secure key exchange and handshake procedures. Although communication is already encrypted at the application layer, the platform additionally supports TLS 1.2 and TLS 1.3 to accommodate environments that require standardized transport-level security for compliance or network infrastructure policies.

    The software also supports TPM 2.0 for secure cryptographic key storage and enhanced platform integrity. Remote connection codes are generated as strong, 14-character alphanumeric values, ensuring robust protection against unauthorized access.

  3. Secure Communication via IPsec VPN

    4. Communication between user devices and corporate networks can be secured using an IPsec-based VPN tunnel. IPsec ensures confidentiality, authentication, and integrity of network traffic. When Remotly operates over IPsec, all screen data, audio, video, and input signals are protected within an encrypted tunnel and remain resistant to interception and man-in-the-middle attacks.

  4. Access Control and Device Authorization

    5. All new devices must be explicitly authorized by the user. Administrators may disable code-based authentication, enforce stricter access policies, and revoke authorization at any time.

  5. Servers and Infrastructure

    6. Remotly supports dedicated relay servers for private infrastructure deployments. All platform infrastructure operates on secure, redundant cloud systems and CDNs that meet modern data protection and reliability standards.

    For enhanced security and control, custom relays supportPrivate SSL Certificates. This allows the encapsulation of standard end-to-end encrypted streams (AES256) within TLS 1.2 or TLS 1.3protocols, significantly improving interoperability with strict software and hardware firewalls. Additionally, to prevent unauthorized usage by third parties who may discover the server IP, custom relays can be secured via Password Protection. Administrators define a strong 32-character passwordin the relay's configuration file, ensuring only authorized clients can utilize the infrastructure.

  6. Additional Security and Privacy Features

    7. Blank Remote Display Mode hides the remote screen during active sessions. Remote Audio Muting prevents exposure of sensitive sound information. Integration with MaxMind IP Scoring enables early detection of potentially malicious connections.

  7. Customer Responsibilities and Best Practices

    8. Customers are responsible for keeping all software updated, protecting login credentials, and applying the principle of least privilege when assigning access.

  8. Data Protection and Compliance

    9. Remotly does not conduct keylogging, persistent screen capture, or camera monitoring beyond what is required for session operation. User data is processed in compliance with GDPR and protected through legal mechanisms for cross-border data transfers.

  9. Summary

    10. Remotly provides a secure, reliable architecture for organizations requiring remote access. With strong encryption, device authorization, and advanced privacy features, the platform ensures comprehensive data protection.

  10. Security Controls Matrix
    11. Control AreaDescription
    EncryptionAES-256, TLS 1.2/1.3, RSA 4096, IPsec VPN tunneling.
    Access ControlDevice authorization, administrator revocation, policy enforcement.
    Infrastructure SecurityDedicated relay servers, private cloud options, redundancy.
    Session PrivacyBlank display mode, audio muting.
    Threat DetectionMaxMind IP scoring and monitoring.