All sub-contractors and third-party vendors are contractually mandated to retain and dispose of data in accordance with Xoxoday’s data retention and disposal policies. This includes secure deletion of data upon contract termination and adherence to NIST 800-88 standards for data sanitization.
Is there a third-party audit of backup/DR processes?
Backup and DR processes are audited as part of the annual ISO 27001:2022 surveillance audit and the SOC 2 Type II examination conducted by an…
Is third-party/vendor access strictly controlled?
Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured…