The platform undergoes independent third-party assessment: annual external VAPT by accredited assessors, plus SOC 2 Type II and ISO 27001 audits. Xoxoday also performs security assessments of its own sub-processors under a third-party risk-management program.
Is there a third-party audit of backup/DR processes?
Backup and DR processes are audited as part of the annual ISO 27001:2022 surveillance audit and the SOC 2 Type II examination conducted by an…
Is third-party/vendor access strictly controlled?
Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured…