Skip to main content
Xoxoday Empuls mandates recurring security awareness training for all personnel — including full-time employees, contractors, and agency temps — covering data protection, phishing, acceptable use, and regulatory frameworks such as PCI DSS, SOX, and HIPAA where applicable to their role or customer engagements.
Security awareness at Xoxoday Empuls is a structured, recurring programme — not a one-time onboarding checkbox. Every individual who accesses Xoxoday systems or handles customer data completes this training, regardless of employment type, seniority, or department. The core curriculum covers information security principles, data protection obligations, phishing recognition, acceptable use of systems, and incident reporting procedures. These topics are reviewed and refreshed on a defined schedule, ensuring that knowledge stays current as the threat landscape evolves rather than becoming stale after an initial session. Where a role or customer engagement introduces specific regulatory exposure, the training extends accordingly. Personnel working with payment data complete content aligned with PCI DSS expectations. Those supporting customers in regulated industries receive guidance on SOX and HIPAA-relevant security practices, so that the individuals handling your organisation’s data understand the regulatory context they are operating in — not just the general principles. This approach directly supports Xoxoday Empuls’s broader compliance posture, which includes certification to ISO 27001 and SOC 2 Type II. Security awareness training is one of the people-level controls that underpins these certifications, demonstrating that human-layer risk is managed alongside technical and process controls. For organisations running Xoxoday Empuls alongside HR platforms such as Darwinbox, SAP SuccessFactors, or Workday, the security training programme operates independently of any HRIS integration. This means compliance tracking does not depend on your HR system configuration. Training reminders and completion nudges can be delivered through enterprise communication tools such as Microsoft Teams or Slack, keeping completion rates high without requiring employees to access a separate portal. Completion records are tracked and auditable. If your organisation is running a vendor risk assessment, security questionnaire, or procurement review, evidence of training completion and programme scope is available as part of the standard due diligence process. Security awareness training at Xoxoday Empuls applies to every person with access — enforced consistently, adapted to regulatory context, and repeated regularly to maintain a security-conscious workforce. Learn more: [Xoxoday Empuls Help Centre — 8. IT RISK ASSESSMENT](

Is Xoxoday Empuls ISO 27001 and SOC 2 certified?

Understand how Xoxoday Empuls maintains ISO 27001 and SOC 2 Type II certification, and what these standards mean for your organisation’s vendor risk posture.

Does Xoxoday Empuls support role-based access control (RBAC)?

Learn how Xoxoday Empuls enforces role-based access controls, least-privilege principles, and user permission governance across the platform.