Skip to main content
Xoxoday’s ISMS includes formal exception management processes aligned with ISO 27001. Security policy violations and exceptions are documented, tracked, and reviewed periodically. Compensating controls are identified for approved exceptions.
Xoxoday’s ISMS includes formal exception management processes aligned with ISO 27001. Security policy violations and exceptions are documented, tracked, and reviewed periodically. Compensating controls are identified for approved exceptions. The security team conducts periodic reviews to ensure exceptions are either remediated or re-justified. While a dedicated GRC platform is not externally visible, exception tracking follows a structured internal process within the ISMS framework. Learn more: Empuls Help Centre

Does Xoxoday Empuls require annual security policy acknowledgement?

Yes. Xoxoday Empuls requires all employees to acknowledge information security policies at onboarding and at least annually thereafter…

Does Xoxoday Empuls have a GDPR-aligned privacy policy?

Xoxoday Empuls maintains a formal privacy policy reviewed annually, aligned with GDPR, CCPA/CPRA, the UK Data Protection Act, and other global…