Is Xoxoday deployed on a shared or dedicated environment?

​

Deployment Model

Xoxoday uses a SaaS-based multi-tenant deployment model hosted across industry-leading cloud providers including Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud. This architecture delivers enterprise-grade performance, high availability, and continuous updates without placing infrastructure maintenance burdens on your IT team. While multiple organisations share the underlying infrastructure, no client ever shares data with another. Xoxoday enforces strict logical isolation between tenants, ensuring that your rewards, recognition, and loyalty data remains entirely within your own boundary at all times.

​

Data Confidentiality and Integrity

Each client’s data is encrypted using unique per-tenant encryption keys. Even within the shared infrastructure layer, one organisation’s data cannot be accessed, read, or inferred by another. Encryption is applied both at rest and in transit, so sensitive employee and programme data — from redemption histories in Plum to recognition milestones in Empuls — stays protected end to end. For organisations integrating Xoxoday with systems like Workday, SAP SuccessFactors, or Darwinbox, data exchanged over API connections is secured using TLS encryption and authenticated via OAuth or API key mechanisms. This maintains data integrity across the full pipeline, from HR system to Xoxoday and back.

​

Compliance and Enterprise Security Standards

Xoxoday’s multi-tenant environment is built to satisfy enterprise-grade compliance requirements. Xoxoday holds certifications including ISO 27001 and SOC 2 Type II, which independently verify that security controls around confidentiality, availability, and integrity are operational and effective. These certifications reflect the controls Xoxoday maintains across every tenant — from role-based access management and audit logging to incident response procedures — not just for dedicated clients but across the entire shared infrastructure.

​

Dedicated Environments

For organisations with specific regulatory, data residency, or internal governance requirements, Xoxoday provides dedicated environment options. In a dedicated setup, your organisation’s instance runs on separate infrastructure, providing an additional layer of physical and logical separation beyond what the standard multi-tenant model already delivers. Enterprises that have deployed Xoxoday alongside tools like Slack or Microsoft Teams for recognition notifications find that dedicated environments align comfortably with strict internal IT policies, without any compromise to integrations or the employee experience.

​

Scalability Without Compromise

The SaaS deployment model ensures Xoxoday scales as your workforce grows. Whether your organisation expands from 500 to 50,000 employees, Xoxoday’s infrastructure scales automatically — without downtime, manual reprovisioning, or service disruptions. Operational efficiency is maintained at every stage of growth. Learn more: Xoxoday Help Centre — Application Security (Confidentiality, Integrity)