Skip to main content
Yes. Xoxoday complies with applicable legal, regulatory, and contractual requirements including GDPR (EU), CCPA/CPRA (California), HIPAA (US), and the India Digital Personal Data Protection (DPDP) Act, 2023. The platform is ISO 27001 certified and SOC 2 Type I and Type II attested.
Yes. Xoxoday complies with applicable legal, regulatory, and contractual requirements including GDPR (EU), CCPA/CPRA (California), HIPAA (US), and the India Digital Personal Data Protection (DPDP) Act, 2023. The platform is ISO 27001 certified and SOC 2 Type I and Type II attested. A dedicated Data Protection Officer (DPO) is appointed and can be reached at legal@xoxoday.com. Compliance documentation (DPIA, CCPA attestation report, HIPAA report) is available under NDA. Learn more: Xoxoday Help Centre

Xoxoday' With GDPR, ISO 27001, and Data Protection Laws

Xoxoday holds ISO 27001, SOC 2 Type II, HIPAA, GDPR, CCPA & CPRA, and ISO 14001 certifications, meeting global data protection and privacy standards.

How does Xoxoday support regulatory audits of employee data?

Xoxoday supports regulatory audits with ISO 27001 and SOC 2 Type II certifications, audit trails, and encryption to keep your organization compliant.