Xoxoday integrates selectively with trusted third-party services—Twilio SendGrid for email delivery, Google Firebase for push notifications, and Google Analytics and PostHog for analytics—each vetted for security, compliance, and performance before deployment.
Third-Party Integrations in Xoxoday’s Infrastructure
Xoxoday is built on a robust technology stack that combines purpose-built capabilities with carefully selected third-party services. Rather than reinventing commodity infrastructure, Xoxoday integrates with industry-leading providers where doing so improves reliability, security, and the end-user experience. Every third-party service undergoes rigorous vetting before it is adopted into production.Email Delivery
Xoxoday uses Twilio SendGrid for transactional and marketing email communication. SendGrid provides enterprise-grade deliverability, bounce management, and email authentication protocols—including DKIM and SPF—ensuring that reward notifications, payout confirmations, and account communications reach recipients securely and reliably. For organisations running large-scale incentive programmes, consistent email delivery is critical to participant engagement, and SendGrid’s infrastructure is built to support that at scale.Push Notifications
Real-time push notifications across web and mobile devices are powered by Google Firebase. When a recipient in your organisation redeems a reward or receives a recognition, Firebase ensures the notification is delivered instantly regardless of device or platform. This is particularly valuable for organisations using Xoxoday alongside workplace tools such as Slack or Microsoft Teams, where timely acknowledgement drives participation.Analytics and Performance Monitoring
Xoxoday integrates Google Analytics and PostHog to monitor user interactions, track feature performance, and support continuous product improvement. These tools provide behavioural and performance data that help Xoxoday’s engineering and product teams identify friction points, optimise workflows, and ensure the platform performs reliably under load. PostHog additionally supports product analytics with session recording and funnel analysis capabilities, offering deeper visibility into how administrators and end users interact with the platform.Security and Compliance Posture of Integrations
Each third-party integration is evaluated against Xoxoday’s security standards before being approved for use. Xoxoday operates under SOC 2 Type II and ISO 27001 frameworks, and vendor assessments align with these compliance requirements. Third-party providers are expected to maintain equivalent security controls, including data encryption in transit and at rest, access control policies, and incident response procedures. This ensures that Xoxoday’s overall security posture is not weakened by any external dependency. For enterprise deployments—such as those connected to HRIS platforms like Workday, SAP SuccessFactors, or Darwinbox—Xoxoday’s integration architecture is designed to minimise data exposure while maintaining the functionality your organisation needs. Learn more: Xoxoday Help Centre — Infrastructure Security (Protective Technology)How does Xoxoday handle data encryption?
Learn how Xoxoday encrypts data in transit and at rest across its infrastructure to protect sensitive reward and payout information.
Is Xoxoday SOC 2 and ISO 27001 certified?
Understand Xoxoday’s compliance certifications, audit scope, and what they mean for your organisation’s vendor security requirements.