Skip to main content
Empuls (Xoxoday) and all its employees, subcontractors, agents, and representatives have never been convicted of any felony involving dishonesty or breach of trust.
When HR teams and procurement leads evaluate a new employee engagement vendor, criminal history checks are a standard part of the security review. Xoxoday Empuls has a clean legal record: neither the company nor any of its employees, subcontractors, agents, or representatives providing services to clients has ever been convicted of a felony involving dishonesty or breach of trust. This assurance covers the full delivery chain — from engineering and product teams to customer success managers and the third-party subprocessors who may access client data. Empuls maintains this standard as part of its broader commitment to operating with transparency and accountability at every layer of the organization.

​
Why This Matters for Enterprise Procurement

Legal integrity checks are a routine requirement from legal, security, and procurement teams before onboarding any new HR technology vendor. For organizations running enterprise HRIS platforms such as Workday, SAP SuccessFactors, or Darwinbox, any integrated vendor becomes part of the data trust chain. A felony conviction involving dishonesty or breach of trust would raise serious concerns about data handling, employee information security, and fiduciary responsibility. Empuls integrates directly with these platforms as well as with workplace collaboration tools like Slack and Microsoft Teams, giving it access to employee directories, engagement signals, and reward transactions. The absence of any criminal history across Xoxoday’s workforce and contractor network means organizations can extend that trust boundary to Empuls without added legal exposure.

​
Alignment with ISO 27001 and SOC 2 Type II

Empuls is certified under ISO 27001 and SOC 2 Type II, both of which require documented security practices, regular third-party audits, and evidence of organizational trustworthiness. Legal background verification aligns directly with the personnel security controls in ISO 27001 Annex A.7, which governs the screening of individuals who handle sensitive assets. SOC 2 Type II audits examine whether an organization demonstrates consistent security controls over a defined observation period. A workforce free of relevant criminal history is a prerequisite for sustaining these certifications in good standing. Empuls treats personnel integrity as an ongoing operational requirement, not a one-time checkbox.

​
Responding to RFP and Due Diligence Requests

Security questionnaires and RFP submissions from enterprise buyers regularly ask vendors to disclose prior criminal convictions among principals, staff, and subcontractors. Xoxoday Empuls answers this question with a clear and unambiguous no. Procurement teams can document this as a confirmed low-risk response when completing the legal risk sections of vendor assessments. If your organization requires a signed attestation or a formal response letter for vendor risk management records, Xoxoday’s legal team can provide that on request through your dedicated account contact. Learn more: Empuls Help Centre — Legal Risk

SOC 2 Type II Compliance

Understand how Empuls maintains SOC 2 Type II certification and what it means for your organization’s data security obligations.

ISO 27001 Certification

Learn how Empuls aligns with ISO 27001 controls across personnel security, access management, and information asset handling.