> ## Documentation Index
> Fetch the complete documentation index at: https://faqs.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Does Plum comply with regulatory recordkeeping requirements?

> Xoxoday Plum maintains full audit trails and exportable reports for every transaction to meet tax, financial, and internal audit requirements.

<Note>
  Xoxoday Plum maintains comprehensive audit trails, transaction logs, and on-demand exportable reports to satisfy global regulatory recordkeeping and reporting requirements.
</Note>

Regulatory compliance is a baseline expectation for any rewards programme operating at scale. Xoxoday Plum is built to meet that expectation directly, with audit-ready infrastructure covering every stage of the reward lifecycle—from issuance to redemption.

## Complete Audit Trails for Every Transaction

Xoxoday Plum logs every reward event with a timestamped, tamper-evident record. This includes who initiated the reward, the recipient, the reward type, the value, and the redemption status. Records are stored in a structured format that is retrievable and exportable at any point, without requiring manual data assembly.

Your compliance or finance team can access these logs directly through the Xoxoday Plum dashboard, making it straightforward to respond to internal audits, finance reviews, or third-party compliance assessments on short notice.

## Flexible Reporting for Tax and Financial Obligations

Xoxoday Plum generates exportable reports that can be scheduled on a recurring basis or pulled on-demand. Reports can be filtered by date range, department, reward type, or programme—giving finance and HR teams the precise data they need for quarterly tax filings, cost-centre reconciliation, or year-end audits.

For organisations running reward programmes through platforms such as Workday, SAP SuccessFactors, or Darwinbox, Xoxoday Plum syncs transaction data back into the parent system. This removes the need to maintain parallel records across disconnected tools.

## Supporting Internal Audit Policies

Many organisations require a clear chain of custody for any financial disbursement, including non-cash rewards. Xoxoday Plum supports this with role-based access controls, approval workflows, and a full activity log that captures every administrative action taken within the system.

Audit reports can be exported in standard formats and submitted directly to internal audit or legal teams without additional processing or manual reformatting.

## Certified to Global Security and Data Standards

Xoxoday Plum holds ISO 27001 and SOC 2 Type II certifications, confirming that its data management practices meet internationally recognised standards. These certifications validate not just data protection, but the integrity of the records and logs that compliance teams depend on.

Whether your organisation operates under local tax regulations or cross-border financial reporting requirements, Xoxoday Plum's recordkeeping infrastructure is structured to adapt to those obligations without requiring custom development work.

**Learn more:** [Xoxoday Plum Help Centre — Xoxo Link](https://help-plum.xoxoday.com/account-administration/reporting/faqs)

<CardGroup cols={2}>
  <Card title="Data Security and Certifications" href="/plum/security/what-is-the-data-security-practices-in-xoxoday">
    Learn how Xoxoday Plum's ISO 27001 and SOC 2 Type II certifications protect reward transaction data and support enterprise compliance requirements.
  </Card>

  <Card title="Generating Reward Reports and Exports" href="/plum/platform/are-all-transactions-reflected-within-each-ledgers-report-to-support-reconciliat">
    Find out how to schedule, filter, and export reward transaction reports from Xoxoday Plum for tax filings, cost-centre reviews, and audits.
  </Card>
</CardGroup>