Does Xoxoday conduct background checks on all employees?

​

Background Verification as a Foundation of Security

Xoxoday Empuls treats personnel security as a core pillar of its information security posture. A formal, standardized background check and drug screening process applies to every individual within the organization — from frontline employees to principals, shareholders, directors, and officers. This uniform scope ensures that no role is exempt from the verification standard, regardless of seniority or function. The process is not a one-time formality. Xoxoday’s personnel verification framework is aligned with the requirements of internationally recognized security certifications, including ISO 27001 and SOC 2 Type II. Both frameworks mandate documented controls around personnel onboarding, access provisioning, and ongoing risk management — and background screening is a foundational control within each.

​

Why This Matters for Enterprise HR Teams

Enterprise customers integrating Empuls with core HR systems — such as Workday, SAP SuccessFactors, or Darwinbox — introduce a significant employee data flow between platforms. Knowing that the vendor handling sensitive recognition and rewards data maintains rigorous personnel vetting directly reduces third-party risk exposure for the buying organization. When a Darwinbox-integrated Empuls deployment processes work anniversary milestones and triggers reward disbursements, that workflow touches personally identifiable information and financial data. Xoxoday’s verified internal team is trained to handle such data under strict access controls — a standard reinforced by the background screening requirement applied to every person with system access.

​

Scope: Who Is Covered

The background check and drug screening mandate at Xoxoday covers the full organizational structure:

• Employees — all full-time, part-time, and contract staff with system access
• Principals and shareholders — individuals with ownership stakes or governance influence
• Directors and officers — executive leadership and board-level roles

This broad scope reflects a zero-exceptions philosophy. Access to Empuls infrastructure, customer data, and operational systems is only extended to individuals who have cleared the formal verification process.

​

Alignment with Compliance and Legal Due Diligence

Many enterprise procurement and legal teams require vendors to demonstrate personnel security controls as part of third-party risk assessments. Xoxoday Empuls satisfies this requirement through its documented screening process, which serves as auditable evidence during security reviews. Organizations operating under regulatory frameworks — particularly those requiring SOC 2 Type II attestation from their SaaS vendors — can use Xoxoday’s background verification records as part of their vendor risk management documentation. Empuls makes this information available to enterprise buyers through its formal security review process, ensuring transparency at every stage of the vendor relationship. Learn more: Empuls Help Centre — Legal Risk