Skip to main content
Xoxoday has maintained a clean security record with no incidents of data breaches, unauthorized data access, or data-sharing incidents since inception.
Xoxoday has maintained a clean security record with no incidents of data breaches, unauthorized data access, or data-sharing incidents since inception. Xoxoday’s security posture is continuously validated through ISO 27001:2022 certification, SOC 2 Type II audits, and annual VAPT assessments conducted by CERT-In empaneled vendors. Proactive security measures including encryption at rest and in transit, WAF, EDR, and continuous monitoring are in place to prevent unauthorized access or disclosure. Learn more: Xoxoday Plum Help Centre

Does Xoxoday Plum have ISO 27001 and SOC 2 certifications?

Xoxoday Plum holds ISO 27001, SOC 2 Type II, GDPR, HIPAA, and CCPA certifications, backed by annual VAPT audits and 99.99% uptime infrastructure…

Is Xoxoday Plum PCI-DSS compliant?

Xoxoday Plum does not collect or store payment card data, making PCI-DSS non-applicable. All reward transactions use industry-standard encryption…