Skip to main content
The identity of all personnel with network access is managed and stored, including their level of access. Network access is controlled through IAM policies with the principle of least privilege. All network-level access requires VPN with MFA for infrastructure components.
The identity of all personnel with network access is managed and stored, including their level of access. Network access is controlled through IAM policies with the principle of least privilege. All network-level access requires VPN with MFA for infrastructure components. Access levels are documented, reviewed periodically, and revoked promptly upon role change or separation. Learn more: Xoxoday Help Centre — Technical requirement

Does Xoxoday have a cryptographic key management process?

Xoxoday implements a documented cryptographic key management process covering generation, storage, exchange, and rotation for all system components…

Administrative accounts shall be separate from standard user accounts

Yes. Administrative accounts are maintained separately from standard user accounts. Administrative access is restricted to authorized personnel…