Skip to main content
Xoxoday performs regular off-site backups as part of its business continuity and disaster recovery strategy, ensuring all backup data is encrypted in transit and at rest using AES-256 and stored in geographically separate data centers.
Losing access to reward programme data, redemption records, or employee recognition histories during a regional outage can disrupt operations significantly. Xoxoday addresses this risk through a structured off-site backup framework designed to keep business-critical data protected and recoverable at all times.

​
Automated Daily Backups

Xoxoday runs automated backup transfers on a daily cadence. Data is moved to secure off-site storage over encrypted channels without manual intervention, reducing the risk of human error and ensuring consistency. This applies across the core Xoxoday platform, including reward catalogues, transaction histories, and programme configurations.

​
Geographic Redundancy

Off-site backup copies are stored in geographically separate, compliance-grade data centers. If a primary site experiences a failure—whether due to a natural disaster, infrastructure outage, or regional disruption—Xoxoday can recover operations from an independent location. This design is aligned with the geographic separation requirements referenced in frameworks such as ISO 27001 and SOC 2 Type II. For organisations running Xoxoday alongside HR platforms like Workday, SAP SuccessFactors, or Darwinbox, this means that integration-dependent data flows—such as employee milestones triggering automated rewards—remain restorable without relying solely on the primary environment.

​
Encryption at Every Stage

All data in transit to off-site backup locations and all data at rest within those locations is encrypted using AES-256. This standard applies uniformly, regardless of whether the data relates to reward transactions, user account details, or programme analytics.

​
Monitoring and Integrity Validation

Xoxoday monitors backup processes continuously and performs integrity checks to confirm that backed-up data can actually be restored. A backup that cannot be verified as restorable provides no real protection. Validation steps ensure that recovery objectives remain achievable when they are needed.

​
Retention and Rotation

Backup data is retained according to a defined schedule. Outdated versions are periodically purged in line with Xoxoday’s data retention policies. This keeps the backup environment clean, reduces unnecessary data exposure, and ensures that restoration draws from known-good, current copies rather than stale or redundant archives. For IT and security teams evaluating Xoxoday as part of a vendor due diligence process, documentation on backup scope, retention schedules, and recovery time objectives is available through your account representative. Learn more: Xoxoday Help Centre — Data, Policy & Privacy

How does Xoxoday encrypt data in transit and at rest?

Learn about the encryption standards Xoxoday applies across data in transit, at rest, and in backup storage, including AES-256 and TLS protocols.

What is Xoxoday's business continuity and disaster recovery policy?

Understand how Xoxoday maintains service availability and recovers operations during infrastructure failures or regional outages.