Skip to main content
Empuls operates as a fully cloud-hosted SaaS platform that meets ISO 27001 and SOC 2 Type II security standards, with AES-256 encryption, role-based access controls, and native integrations with tools like Slack, MS Teams, Workday, SAP SuccessFactors, and Darwinbox.

​
Infrastructure and Access Requirements

Empuls requires no on-premise installation or dedicated server infrastructure. It runs entirely in the cloud, accessible through any modern web browser (Chrome, Edge, Firefox, Safari) over a standard HTTPS connection. There are no minimum hardware specifications for end users beyond a stable internet connection. For organizations using single sign-on, Empuls supports SAML 2.0-based SSO and integrates with identity providers including Azure Active Directory, Okta, and Google Workspace. Administrators can enforce MFA at the identity provider level before access reaches Empuls, ensuring authentication policies align with existing IT governance.

​
HRMS and Collaboration Integrations

Empuls connects directly with leading HRMS platforms—Workday, SAP SuccessFactors, and Darwinbox—to sync employee data automatically. This means new joiners, role changes, and exits reflect in Empuls without manual CSV uploads, reducing administrative overhead and the risk of stale data. For day-to-day engagement, Empuls integrates with Slack and Microsoft Teams, allowing employees to give peer-to-peer recognition, redeem rewards, and participate in surveys without leaving the tools they already use. For example, a manager using MS Teams can send a recognition badge directly from a channel, and the recipient sees it in real time across both MS Teams and the Empuls web app.

​
Data Security and Compliance

Empuls encrypts all data in transit using TLS 1.2+ and at rest using AES-256 encryption. Data is hosted on AWS infrastructure with logical tenant isolation, ensuring one organization’s data is never accessible to another. Xoxoday Empuls holds ISO 27001 certification, demonstrating a systematic approach to managing information security risks across people, processes, and technology. SOC 2 Type II attestation independently verifies that Empuls security controls operate effectively over time—not just at a point-in-time audit. Role-based access control lets IT and HR administrators restrict who can view reports, manage budgets, configure campaigns, or export employee data. Audit logs capture all administrative actions with timestamps, supporting internal compliance reviews and external audits.

​
GDPR and Data Residency

Empuls is built to support GDPR obligations. Data subjects can request access to or deletion of their personal data, and Empuls provides the tooling for administrators to action these requests. Organizations with specific data residency requirements can discuss regional hosting options with the Empuls implementation team during onboarding. All third-party sub-processors used by Empuls are evaluated against the same security standards and documented in a publicly available sub-processor list, giving procurement and legal teams the transparency they need during vendor assessments. Learn more: Empuls Help Centre — General

SSO and Authentication Setup

Configure SAML 2.0 SSO with Azure AD, Okta, or Google Workspace to enforce your existing identity policies across Empuls.

HRMS Integrations with Workday and SAP SuccessFactors

Automate employee data sync between Empuls and your HRMS to keep recognition rosters accurate without manual effort.