Skip to main content
Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured due-diligence framework that includes evaluation of certifications (ISO 27001, SOC 2, etc.), security practices, and contractual obligations.
Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured due-diligence framework that includes evaluation of certifications (ISO 27001, SOC 2, etc.), security practices, and contractual obligations. Access is governed by RBAC and the principle of least privilege. NDAs are signed with all vendors and sub-processors. Time-bound access is granted only for specific operational needs. Learn more: Empuls Help Centre

Is screening conducted for third-party (vendor) usage?

Screening is conducted for all third-party vendors. Xoxoday follows a structured due-diligence framework that includes evaluation of vendor security…

Is there a third-party audit of backup/DR processes?

Backup and DR processes are audited as part of the annual ISO 27001:2022 surveillance audit and the SOC 2 Type II examination conducted by an…