Skip to main content
Responsibilities for IAM lifecycle are clearly assigned and monitored, with a shared responsibility model: Empuls internal IAM: Xoxoday owns and monitors the identity lifecycle for internal users accessing the Empuls platform (provisioning, role assignment, periodic access reviews, and deprovisioning).
Responsibilities for IAM lifecycle are clearly assigned and monitored, with a shared responsibility model: Empuls internal IAM: Xoxoday owns and monitors the identity lifecycle for internal users accessing the Empuls platform (provisioning, role assignment, periodic access reviews, and deprovisioning). Client-side IAM: The lifecycle of client end-users remains the customer’s responsibility. Empuls supports this via SCIM integration with the client’s identity provider, when SSO with SCIM is enabled, provisioning and deprovisioning occur automatically in real-time upon user activation/deactivation in the client’s IdP. Learn more: Empuls Help Centre

Are logs monitored for abnormal activity?

Logs are continuously analyzed by the SIEM for indicators such as repeated failed logins, unusual IP/geo access, privilege escalation, API abuse, and…

Are supply chain threats continuously monitored and mitigated?

Supply chain threats are addressed through: (1) Vendor risk assessment process for all third-party suppliers; (2) SBOM maintained for all software…