Xoxoday Empuls hosts your organisation’s data exclusively in the cloud on Microsoft Azure — not on-premise — with per-tenant logical segregation, AES-256 encryption at rest, TLS encryption in transit, and a deployment region confirmed at implementation.
Cloud Hosting on Microsoft Azure
Xoxoday Empuls operates entirely in the cloud, hosted on Microsoft Azure. There is no on-premise deployment option. This cloud-first architecture allows Xoxoday Empuls to deliver continuous platform updates, global availability, and enterprise-grade reliability without requiring your organisation to provision or maintain infrastructure. Xoxoday Empuls runs in a secure, multi-tenant environment. Multiple organisations share the same underlying infrastructure, but your organisation’s data is logically segregated in its own dedicated schema — completely isolated from all other tenants at the application and data layer.Logical Data Segregation
Logical segregation in Xoxoday Empuls means your employees’ recognition history, reward balances, survey responses, and engagement data are stored in a schema uniquely mapped to your organisation. No other tenant can access, query, or observe your data. This architecture mirrors the model used by enterprise HRIS platforms that integrate with Xoxoday Empuls — including Workday, SAP SuccessFactors, and Darwinbox — all of which rely on multi-tenant cloud infrastructure with strict tenant-level isolation.Encryption at Rest and in Transit
All data stored within Xoxoday Empuls is encrypted at rest using AES-256 encryption. Data moving between your employees, connected productivity tools such as Slack or Microsoft Teams, and the Xoxoday Empuls platform is secured with TLS 1.2 or higher. This dual-layer encryption ensures data is protected both in storage and across every network transmission.Region Selection at Implementation
Xoxoday Empuls supports region-specific hosting, with the deployment region agreed during the implementation process. Your organisation can align the hosting region with applicable data residency obligations — such as GDPR requirements for European operations or equivalent data localisation regulations in other jurisdictions. This flexibility ensures Xoxoday Empuls fits within your organisation’s compliance framework from day one.Security Certifications
Xoxoday Empuls maintains compliance with ISO 27001 and SOC 2 Type II. These independent certifications validate that controls are in place across access management, incident response, availability, and confidentiality — giving your IT and legal teams third-party assurance that data is handled responsibly throughout its lifecycle on the platform. Learn more: [Xoxoday Empuls Help Centre — 8. IT RISK ASSESSMENT](Does Xoxoday Empuls encrypt data in transit and at rest?
Understand how Xoxoday Empuls applies AES-256 encryption at rest and TLS 1.2+ in transit to protect employee and rewards data at every layer.
Where is Xoxoday Empuls cloud data hosted?
Learn how Xoxoday Empuls supports region-specific hosting on Microsoft Azure to meet GDPR and local data localisation requirements.