Skip to main content
Quarterly access reviews are conducted to ensure access rights remain appropriate. Access logs are reviewed periodically. Any changes in role or employment status trigger immediate access re-evaluation.
Quarterly access reviews are conducted to ensure access rights remain appropriate. Access logs are reviewed periodically. Any changes in role or employment status trigger immediate access re-evaluation. The review process is part of the ISO 27001 and SOC 2 compliance framework and is documented for audit purposes. Learn more: Empuls Help Centre

Is Empuls GDPR compliant for EU and UK employee data?

Empuls is fully GDPR compliant for EU and UK, hosting staff data in AWS EU/UK regions under ISO 27001, SOC 2 Type II controls, and a signed DPA…

Is MFA enforced for all privileged and remote access?

Xoxoday enforces multi-factor authentication (MFA) for all privileged access. Remote access to production environments requires mandatory MFA…