Does Xoxoday Empuls use employee data to train AI models?

​

How AI Works in Xoxoday Empuls

Xoxoday Empuls powers its AI capabilities through OpenAI’s foundational models accessed via open APIs. These models come pre-trained by OpenAI and are not customised, fine-tuned, or supplemented using any data belonging to your organisation. When Xoxoday Empuls invokes an AI feature — such as generating recognition message suggestions or surfacing engagement insights — the request is processed within the bounds of that specific session. No data from that interaction is retained by OpenAI to train future models or improve performance outside that session.

​

What Data Is Used (and What Is Not)

Xoxoday Empuls does not feed employee profiles, recognition history, survey responses, or any other identifiable workforce data into AI training pipelines. The AI layer operates on transient, session-scoped inputs only. This design means your workforce data stays within Xoxoday Empuls’s own infrastructure and never becomes part of a shared model that could surface information across organisations. Sensitive records — including payroll data synced from systems like Workday, SAP SuccessFactors, or Darwinbox — are never passed to AI endpoints.

​

Data Sharing with Third Parties

Xoxoday Empuls shares customer or employee data with third parties only when your organisation explicitly authorises it or when a specific integration requires it. For example, syncing employee records with an HRIS like SAP SuccessFactors or delivering a reward notification through Slack or Microsoft Teams involves only the minimum data fields necessary for that function. No data is shared with external AI vendors for training, benchmarking, or model evaluation purposes. The OpenAI APIs used by Xoxoday Empuls operate under a data processing agreement that prohibits using customer inputs to improve OpenAI’s general models.

​

Compliance and Privacy Standards

Xoxoday Empuls designs its AI and data-sharing practices in full compliance with GDPR and other applicable privacy regulations. Xoxoday Empuls holds SOC 2 Type II and ISO 27001 certifications, which independently verify that data handling controls — including those governing AI feature usage — meet enterprise-grade security standards. If your organisation operates in a regulated industry or geography with stricter data residency requirements, Xoxoday Empuls’s data processing agreements can be reviewed with your legal or compliance team to confirm alignment before deployment. Learn more: [Xoxoday Empuls Help Centre — General](