Skip to main content
The annual review includes all partners and third-party providers upon which the information supply chain depends. Vendors undergo information security risk assessments based on ISO 27001 standards during onboarding and periodically according to their risk classification.
The annual review includes all partners and third-party providers upon which the information supply chain depends. Vendors undergo information security risk assessments based on ISO 27001 standards during onboarding and periodically according to their risk classification. Annual security assessments cover all sub-processors, including AWS (cloud infrastructure), payment processing partners, and reward fulfillment vendors. Contracts with all vendors include right-to-audit provisions, and vendor compliance status is reviewed as part of the ISO 27001 ISMS management review cycle. Learn more: Xoxoday Help Centre — Technical requirement

Does Xoxoday Undergo Third-Party Security Assessments?

Yes. Xoxoday completes regular third-party VAPT as part of ISO 27001 and SOC 2 Type 2 compliance, with all findings independently reviewed and…

Has Xoxoday undergone a third-party security audit?

Xoxoday is actively engaging independent security auditors to conduct a formal review of its platform and working toward audit completion…