Yes. Xoxoday maintains a documented Data Retention and Disposal Policy. Data retention periods are configurable per tenant and aligned to the client’s policies and applicable legal requirements. On contract termination, client data is retained for the contractually agreed period and then securely deleted with certification.
What is Xoxoday's data purge policy?
Xoxoday retains personal data only as long as necessary and securely deletes it upon request or contract end, compliant with GDPR and ISO/IEC 27001.
Does Xoxoday store personal data and comply with GDPR?
Xoxoday stores personal data under GDPR, ISO 27001, and SOC 2 Type II, with role-based access controls and a formal 7-year retention policy.