Skip to main content
Xoxoday Plum maintains a formally documented Disaster Recovery Plan (DRP) with defined ownership under the Information Security team, tested on a regular cadence to validate recovery procedures across all major product lines.
Xoxoday Plum maintains a corporate Disaster Recovery Plan that governs how infrastructure, data, and services are restored following any unplanned disruption. The DRP is owned by the Information Security team and is tested regularly to confirm that recovery procedures remain accurate, executable, and aligned with defined Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). Test outcomes are documented and available to enterprise customers as part of formal vendor due-diligence reviews. A tested DRP is a standard expectation in enterprise procurement. Organisations assessing Xoxoday Plum against security frameworks such as ISO 27001 or SOC 2 Type II can request evidence of the plan and its most recent test results as part of third-party audits or internal compliance programmes. Rewards Marketplace and Payout Platform The DRP covers Xoxoday Plum’s global rewards marketplace end to end. Recovery procedures prioritise the restoration of transaction processing, reward catalog services, and payment integrations, keeping disruption to a minimum for employees redeeming rewards and administrators managing bulk payouts. Employee Recognition and Engagement For organisations running recognition programmes, peer-to-peer awards, or continuous listening surveys, the DRP ensures that recognition records, points histories, and engagement analytics are recovered promptly. This matters especially for enterprises where Xoxoday Plum is integrated with HRIS platforms such as Workday, SAP SuccessFactors, or Darwinbox, and where recognition events are tied to automated workflows or anniversary milestones. Sales Incentives and Commission Management Commission plans, sales performance data, and payout schedules are treated as high-priority recovery targets within the DRP. Recovery procedures are designed so that sales operations resume accurately and that incentive payouts are not delayed or miscalculated following an incident. Customer Loyalty and Merchant Promotions Loyalty member accounts, points balances, and redemption histories are covered under the recovery plan. Merchant campaign configurations, offer rules, and promotion data for organisations running merchant-funded offer programmes are also included, with recovery procedures scoped to defined RPO windows to limit reconciliation issues and member-facing downtime. The DRP is a living document. Xoxoday Plum reviews and updates it to reflect infrastructure changes, new product capabilities, and evolving risk profiles, ensuring that the plan remains current and that test results remain meaningful rather than theoretical. Learn more: [Xoxoday Plum Help Centre — Technical requirement](

What security certifications does Xoxoday Plum hold?

Details on Xoxoday Plum’s ISO 27001 and SOC 2 Type II certifications and what they cover.

Does Xoxoday Plum have a business continuity plan?

How Xoxoday Plum ensures service continuity during disruptions beyond standard disaster recovery.