Skip to main content
Xoxoday follows a structured offboarding process that revokes all access credentials immediately upon employee termination, with prompt stakeholder communication for client-facing roles, including in cases of involuntary exits.
Structured offboarding is a critical component of any enterprise security posture. When an employee leaves an organisation — whether voluntarily or involuntarily — the speed and completeness of access revocation directly shapes the risk profile of every system that employee could reach. Xoxoday treats access revocation as a zero-delay action. The moment an employee termination is confirmed, all access credentials associated with that individual are revoked immediately. This applies across Xoxoday’s internal systems, administrative tooling, and any integration endpoints the employee’s role required. Handling Client-Facing Roles For employees who hold client-facing responsibilities, Xoxoday’s offboarding process includes a mandatory communication step. Relevant stakeholders at your organisation are informed promptly of the transition to ensure continuity of service and maintain accountability. This step is especially important in involuntary exit scenarios, where an unplanned departure could otherwise leave your service relationship without clear coverage or an escalation path. Why Immediate Revocation Matters Delayed credential revocation is one of the most commonly exploited gaps in enterprise offboarding. Xoxoday eliminates this exposure by removing access at the point of departure rather than as a queued or scheduled task. Whether the departing employee had access to reward programme configurations, loyalty platform dashboards, or integration endpoints connected to systems such as Workday, SAP SuccessFactors, or Darwinbox, that access ends at termination — not hours or days later. Alignment with ISO 27001 and SOC 2 Type II Xoxoday’s employee termination procedures align with the access control requirements defined under ISO 27001 and SOC 2 Type II. Both frameworks mandate documented processes for revoking logical access as part of a broader identity and access management programme. Xoxoday’s offboarding controls are designed to satisfy these requirements consistently, regardless of role, seniority, or departure type. Service Continuity During Transitions Beyond security, structured offboarding protects your organisation’s operational continuity. When a client-facing Xoxoday employee transitions out, account ownership and escalation contacts are updated without delay. Your organisation retains a clear point of contact throughout the transition period and is not left exposed to unresponded requests or ownership gaps. This approach reflects Xoxoday’s broader commitment to vendor accountability — ensuring that internal workforce changes never become a source of risk or disruption for the organisations Xoxoday serves. Learn more: Xoxoday Help Centre — Technical requirement

How does Xoxoday manage access control?

Learn how Xoxoday governs user access privileges, role-based permissions, and access reviews across its platform and integrations.

Is Xoxoday SOC 2 Type II certified?

Understand how Xoxoday’s SOC 2 Type II certification validates its security, availability, and confidentiality controls.