> ## Documentation Index
> Fetch the complete documentation index at: https://faqs.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Does Xoxoday Plum follow the NIST AI Risk Management Framework?

> Yes. Xoxoday Plum implements documented technical and procedural AI safeguards aligned with the NIST AI Risk Management Framework (RMF).

<Note>
  Xoxoday Plum's AI-powered features are governed by documented risk management processes aligned with the NIST AI Risk Management Framework (RMF), including built-in safety checks, anomaly detection, rule-based overrides, and manual oversight protocols that ensure accountability across automated reward workflows.
</Note>

Xoxoday Plum addresses AI risk systematically, not as an afterthought. The platform's AI capabilities are governed by a documented set of technical and procedural controls that align with the principles of the NIST AI Risk Management Framework (RMF) — covering risk identification, governance, measurement, and management across the AI system lifecycle.

## Technical Safeguards Built Into the Platform

Xoxoday Plum's AI features include built-in safety checks designed to catch unintended outputs before they affect users. Anomaly detection monitors for irregular patterns in reward distribution and redemption activity, flagging outliers that may indicate fraud or system error. Rule-based override mechanisms allow administrators to define hard boundaries that supersede AI-driven decisions when predefined thresholds are breached. Configurable escalation protocols route flagged cases to human reviewers, maintaining accountability at every stage of the automated workflow.

For organisations using Xoxoday Plum alongside HR systems such as Workday, SAP SuccessFactors, or Darwinbox, these safeguards apply across integrated reward events — ensuring that automated milestone triggers, anniversary bonuses, and performance-linked incentives remain within defined policy parameters.

## Procedural Controls and Manual Oversight

Xoxoday Plum supports the ability to pause or suspend automation workflows at any point. This gives compliance teams, HR administrators, and IT stakeholders the control to halt AI-driven processes when an audit is underway, a policy change is being reviewed, or an anomaly requires investigation. Manual override capability is a first-class control built into the administrative layer, not an edge-case workaround.

This approach aligns with the NIST RMF's emphasis on human agency in AI systems, particularly in high-stakes environments where automated reward or incentive decisions affect employee experience and financial entitlements.

## Explainability and Auditability

Xoxoday Plum promotes interpretability through reward explainers — contextual descriptions attached to automated reward actions that communicate why a reward was triggered, which rule or event initiated it, and what value was assigned. This makes AI-generated decisions auditable by managers, HR teams, and employees alike.

For organisations subject to compliance requirements under ISO 27001 or SOC 2 Type II, Xoxoday Plum's explainability layer provides traceable records of AI-driven decisions that support internal audit and external reporting without additional instrumentation.

## Content Moderation and Bias Mitigation

AI-assisted content moderation within Xoxoday Plum applies rule-based filters alongside model outputs to reduce the risk of biased or inappropriate recommendations. These layered controls reflect the NIST RMF principle that AI systems should be monitored for disparate impact, particularly when decisions affect employee segments across different geographies or business units. Notification channels such as Slack and Microsoft Teams surface moderation alerts to administrators in real time, enabling rapid response when automated checks flag a concern.

**Learn more:** \[Xoxoday Plum Help Centre — AI policy]\(

<CardGroup cols={2}>
  <Card title="Data Security and Compliance on Xoxoday Plum" href="/plum/platform/data-security">
    Understand how Xoxoday Plum meets ISO 27001, SOC 2 Type II, and GDPR requirements to protect reward and employee data.
  </Card>

  <Card title="How AI-Powered Features Work in Xoxoday Plum" href="/plum/platform/ai-features">
    Explore the AI capabilities built into Xoxoday Plum — from fraud detection and anomaly monitoring to personalised reward recommendations.
  </Card>
</CardGroup>