Does Xoxoday have a Disaster Recovery Plan?

​

Xoxoday’s Approach to Disaster Recovery

Xoxoday treats disaster recovery as a foundational operational commitment, not an afterthought. The Disaster Recovery Plan (DRP) governs how Xoxoday responds to incidents that threaten the availability of its core platform services — including rewards distribution, recognition workflows, and loyalty program infrastructure. The plan covers the full spectrum of recovery scenarios: data centre outages, cloud infrastructure failures, application-layer disruptions, and network degradation events. Each scenario is mapped to defined recovery procedures with clear ownership across engineering, infrastructure, and security teams.

​

Recovery Objectives and Infrastructure Resilience

Xoxoday’s DRP establishes documented Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for critical systems. These objectives ensure that in the event of a disruption, services are restored within predictable timeframes and data loss is bounded to an acceptable minimum. Critical infrastructure components — including databases, APIs, and integration endpoints used by HR platforms such as Workday, SAP SuccessFactors, and Darwinbox — are covered under redundancy and failover configurations. For example, integrations that sync employee reward eligibility from Workday into Xoxoday are designed to resume automatically once systems recover, without requiring manual re-intervention by HR administrators.

​

Alignment with Security Standards

Xoxoday’s disaster recovery practices align with the requirements of ISO 27001 and SOC 2 Type II. Both frameworks mandate that organisations document, test, and continuously improve their business continuity and disaster recovery procedures. Xoxoday’s DRP is reviewed and updated as part of its ongoing compliance programme. SOC 2 Type II, in particular, evaluates whether controls operate effectively over a period of time — not just whether they exist on paper. Xoxoday’s DRP has been assessed under this standard, providing enterprise customers with independent assurance of its operational reliability.

​

Testing and Continuous Improvement

Xoxoday conducts regular disaster recovery exercises to validate that recovery procedures perform as documented. These exercises include simulated failure scenarios that test failover mechanisms, data restoration from backups, and cross-team coordination protocols. Findings from each test cycle feed directly into plan revisions. This continuous improvement loop ensures that the DRP remains current as Xoxoday’s infrastructure evolves — including as new integrations with tools like Slack and Microsoft Teams are introduced into notification and approval workflows.

​

What This Means for Enterprise Customers

Enterprise customers evaluating Xoxoday for large-scale reward and recognition programmes can rely on documented recovery capabilities. Xoxoday provides evidence of its DRP posture through security questionnaire responses and compliance documentation available upon request through the enterprise sales and security review process. Learn more: Xoxoday Help Centre — Disaster Recovery