Does Xoxoday schedule backups and store them securely?

​

Backup Schedule and Storage at Xoxoday

Xoxoday maintains a rigorous, predefined backup strategy designed to protect your organisation’s data against loss, corruption, or unexpected system failures. Two complementary schedules run continuously: incremental backups every four hours and a complete full backup once every day. The incremental backup cycle captures all data changes made since the previous backup, running automatically every four hours throughout the day. This means that in the event of an incident, your organisation’s maximum data exposure window is capped at four hours. For enterprises running high-frequency reward and recognition programmes on Xoxoday, this frequency ensures near-continuous data protection without relying solely on a single end-of-day snapshot. The daily full backup creates a complete copy of all stored data, providing a reliable and self-contained restoration point regardless of the state of incremental files. Together, these two schedules form an interlocking safety net that balances storage efficiency with comprehensive recovery coverage.

​

Replicated Cloud Storage for Redundancy

All backup copies are stored in replicated cloud storage, meaning each backup exists across multiple geographically distributed storage nodes simultaneously. If one storage location becomes unavailable — due to hardware failure, a regional outage, or any other cause — Xoxoday’s backup data remains accessible and intact from the remaining replicas. This architecture supports the high-availability expectations of enterprise customers integrating Xoxoday with workforce platforms such as Workday, SAP SuccessFactors, or Darwinbox. Critical programme data — points balances, redemption histories, milestone records — is preserved and recoverable even in a worst-case scenario.

​

Security Controls on Stored Backups

Xoxoday applies established security rules to all backup storage operations. These controls govern who can access backup files, how those files are transmitted and stored, and under what conditions a restoration can be initiated. Access to backup repositories is tightly restricted and subject to the same authentication and authorisation standards applied to production systems. This approach aligns with the requirements of internationally recognised frameworks including ISO 27001 and SOC 2 Type II, both of which mandate that organisations demonstrate documented, tested, and enforced backup and recovery procedures. Xoxoday’s backup practices are designed to satisfy these requirements as part of a broader compliance posture.

​

Recovery Readiness and Business Continuity

Xoxoday’s backup strategy is not only about storing data — it ensures that data can be restored reliably within acceptable timeframes when needed. Backup integrity is validated as part of Xoxoday’s broader business continuity and disaster recovery programme, so your organisation can have confidence that backup copies are not only made but are genuinely usable when it matters most. Learn more: Xoxoday Help Centre — Data, Policy & Privacy