Skip to main content
Xoxoday maintains a documented breach notification process aligned with GDPR and DPDPA requirements. The process includes: (1) Rapid detection and assessment through continuous monitoring tools and automated alerting.
Xoxoday maintains a documented breach notification process aligned with GDPR and DPDPA requirements. The process includes: (1) Rapid detection and assessment through continuous monitoring tools and automated alerting. (2) Containment and immediate remediation to limit the impact. (3) Classification of the incident by severity and data impact. (4) Notification to the affected client within the agreed SLA timeline. (5) Notification to regulatory authorities where required under applicable law. (6) Detailed incident report including root cause analysis, scope of impact, and remediation measures. (7) Post-incident review and corrective action implementation. The process is governed by Xoxoday’s ISMS framework (ISO 27001:2022) and reviewed annually. Learn more: Xoxoday Plum Help Centre

What personal data does Xoxoday Plum collect and process?

Xoxoday Plum processes identity, transactional, and behavioral data with AES-256 encryption, role-based access controls, and geo-specific storage…

What is the data deletion process after contract termination?

Upon contract termination, the following data deletion process is executed: (1) All client data remains accessible within the system for a defined…