Skip to main content
Screening is conducted for all third-party vendors. Xoxoday follows a structured due-diligence framework that includes evaluation of vendor security certifications, compliance posture, data handling practices, and contractual obligations.
Screening is conducted for all third-party vendors. Xoxoday follows a structured due-diligence framework that includes evaluation of vendor security certifications, compliance posture, data handling practices, and contractual obligations. Regular security assessments are performed, and NDAs are signed with all vendors and sub-processors. The primary infrastructure sub-processor (AWS) holds SOC 1/2/3, ISO 27001, PCI-DSS, and other certifications. Learn more: Empuls Help Centre

Is third-party/vendor access strictly controlled?

Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured…

Is there a third-party audit of backup/DR processes?

Backup and DR processes are audited as part of the annual ISO 27001:2022 surveillance audit and the SOC 2 Type II examination conducted by an…