Does Empuls support SSO, role-based security, and GDPR compliance?

​

Single Sign-On (SSO)

Xoxoday Empuls supports out-of-the-box SSO integrations with leading identity providers, including Okta and Microsoft Azure AD. Employees authenticate using their existing corporate credentials, eliminating the need to manage separate login details for Xoxoday Empuls. For organisations already running identity management through Microsoft 365 or Azure Active Directory, SSO activation requires no custom development work.

​

Role-Based Access Control (RBAC)

Xoxoday Empuls includes granular role-based access control built directly into the product. Administrators can assign distinct roles — such as Super Admin, HR Admin, Manager, and Employee — each carrying precisely scoped permissions. An HR Admin, for instance, can configure reward budgets and approval workflows without gaining access to account-level billing or integration settings, keeping sensitive functions appropriately separated across your organisation.

​

Data Encryption at Rest and in Transit

All data stored within Xoxoday Empuls is encrypted at rest using AES-256, the industry-standard algorithm adopted by enterprise platforms such as Workday and SAP SuccessFactors. Data in transit between employees, managers, and Xoxoday Empuls is secured using SSL/TLS 1.2 or higher with a minimum of 256-bit encryption. This dual-layer approach ensures sensitive employee data — recognition records, personal details, and reward histories — stays protected both at the infrastructure level and across every network interaction.

​

GDPR, CCPA, and ADA Compliance

Xoxoday Empuls is fully compliant with the General Data Protection Regulation (GDPR), giving organisations operating across the European Union confidence that employee data is collected, stored, and processed in accordance with applicable privacy law. For workforces that include California residents, Xoxoday Empuls adheres to the California Consumer Privacy Act (CCPA), ensuring personal information rights are respected at the state level. Xoxoday Empuls also meets ADA (Americans with Disabilities Act) accessibility guidelines, so employees with disabilities have equitable access to recognition feeds, reward catalogues, and engagement surveys — an increasingly important requirement for organisations committed to inclusive workplace practices.

​

Security Certifications

Xoxoday Empuls holds ISO 27001 certification and SOC 2 Type II attestation, providing independent, third-party validation of its security controls, data handling policies, and operational practices. These certifications give IT and security teams a structured framework for evaluating Xoxoday Empuls against enterprise risk and procurement requirements without requiring a bespoke security assessment. Learn more: [Xoxoday Empuls Help Centre — General](