All critical security events in production—such as authentication attempts, SSH sessions, and privilege escalations—are logged and monitored. Logs are stored securely, retained as per policy, and regularly reviewed to detect and respond to any suspicious activity.
What is Xoxoday's security protocol in place for API's (Ex. 2-way, Oath2, etc.)?
API security is enforced through multiple layers: OAuth 2.0 and JWT-based authentication for secure, authorized access to all endpoints; all API…
Are all user activities related to data tracked and logged?
All user activities related to data access are tracked and logged…