Skip to main content
Data shared with sub-processors is strictly limited to what is necessary for service delivery: (1) AWS receives and stores encrypted production data (database records, application logs, backups) as the infrastructure provider.
Data shared with sub-processors is strictly limited to what is necessary for service delivery: (1) AWS receives and stores encrypted production data (database records, application logs, backups) as the infrastructure provider. (2) Gift card brand partners receive only the minimum data required for voucher issuance and fulfillment (e.g., recipient email, voucher type, denomination); no employee identity data beyond the delivery email is shared. (3) Communication service providers receive email addresses and notification content for transactional communications only. (4) Cloudflare processes web traffic metadata for security filtering. (5) The EDR platform processes endpoint telemetry data for threat detection. No sub-processor receives the complete employee dataset, and data sharing follows the principle of data minimization. Learn more: Xoxoday Plum Help Centre

What specific employee data fields are shared between Keka and XOXODAY?

The integration between Keka (the client’s HRIS) and Xoxoday’s rewards and voucher issuance platform is designed to exchange only the minimum…

Where is employee data stored and processed?

For customers of the rewards marketplace platform, employee data is stored and processed within India…