Trust Center
Security updates
This feed records every change to how we protect client data: security improvements, disclosures, certification changes and subprocessors. Subprocessor changes come 30 days ahead.
In short
The Remote Pro Ai security updates feed records every change that affects how we protect client data: security improvements, vulnerability disclosures, certification renewals and subprocessor changes. Each entry is dated and categorised, and subscribers hear about subprocessor changes at least 30 days before they take effect.
Latest updates
ISO/IEC 27001:2022: in progress (certification target Q2 2027)
AI usage: AI-assisted changes are labelled in pull requests and approved by a senior engineer before merge.
No updates in this category yet.
No updates in this category yet.Vulnerability disclosures
No updates in this category yet.
Found a vulnerability in a Remote Pro Ai system? Report it privately. We acknowledge reports within 2 working days and credit researchers who ask to be named.
You can also email security@remote-pro.ai. Our contact details are published at remote-pro.ai/.well-known/security.txt, and we won't take legal action against good-faith research that follows this policy.
Certification renewals
No updates in this category yet.
Subprocessor changes
No updates in this category yet.
Object within 30 days of this notice through the objection process.
Subscribe
- RSS line: Feed URL: trust.remote-pro.ai/updates/rss.xml · button Copy
Archive
2026
- CertificationsISO/IEC 27001:2022: in progress (certification target Q2 2027)
- Security updatesAI usage: AI-assisted changes are labelled in pull requests and approved by a senior engineer before merge.
Older updates
Frequently asked questions
There are 4 kinds of entries: security improvements, vulnerability disclosures, certification changes and subprocessor changes. Each entry has a date, a category and a plain-language summary of what changed and whether you need to act. Material policy changes are posted here too.
Use the Report a vulnerability form on this page, or email security@remote-pro.ai, and include steps to reproduce. We acknowledge reports within 2 working days, keep you updated while we fix the issue, and credit you in the advisory if you'd like to be named.
Yes. Subprocessor changes are posted here and emailed to subscribers at least 30 days before they take effect. During that window you can object under the process in your DPA. Each notice names the provider, its purpose, the region it processes data in and the effective date, so your privacy team can assess it quickly.
Yes. Anyone can read the feed and subscribe by email or RSS, choosing which categories they want. Clients also see relevant changes inside Client OS. Every subscription email includes a one-click unsubscribe link. Existing clients see relevant changes inside Client OS automatically, so your admins don't need a separate subscription, and procurement can follow the same feed by RSS.
Every disclosure follows the same structure: what happened, who was affected, what we did and what you need to do. If a disclosure is updated, the entry shows the revision date and what changed. Where you need to act, the entry says so in its first line and gives the deadline.