Skip to main content
Empuls enforces strong encryption controls for both data at rest and data in transit, aligned with Xoxoday’s information-security and cryptography policies.
Empuls enforces strong encryption controls for both data at rest and data in transit, aligned with Xoxoday’s information-security and cryptography policies.
  • Data at rest: All personally identifiable (PI) and other sensitive data in Empuls databases is encrypted using AES-256, with company-wise unique encryption keys. Master keys are managed and rotated through an enterprise key-management system comparable to an HSM, following Xoxoday’s cryptographic key-management policy (generation, storage, rotation, and revocation).
  • Data in transit: All client-server and service-to-service communication uses TLS 1.2+ over HTTPS/SMTPS/SFTP, ensuring confidentiality and integrity for browser, mobile, HRIS, SSO, and payment-gateway integrations.
These controls ensure that customer data remains protected both on disk and on the network, and they are operated under ISO 27001 and SOC 2–aligned cryptographic governance. Learn more: Empuls Help Centre

How does Xoxoday Empuls handle password and encryption requirements?

Xoxoday Empuls enforces ISO 27001-aligned password policies and TLS 1.2 encryption for all data in transit and at rest.

Does Xoxoday Empuls encrypt data in transit and at rest?

Xoxoday Empuls encrypts data in transit via TLS 1.3 and data at rest with AES-256, using AWS KMS for secure key management.