Yes. Xoxoday supports periodic security reviews by the client or the client’s designated auditors. This includes the sharing of updated compliance certificates, VAPT reports, and SOC 2 audit reports on an annual basis. The right to audit is available as a contractual provision in the DPA/MSA.
What audit and compliance certificates does Xoxoday provide?
Xoxoday provides ISO 27001:2023 and SOC 2 Type II audit certificates, plus a 2024 VAPT certificate, as evidence for compliance reviews.
Does Xoxoday keep client data confidential?
Xoxoday processes client data exclusively at approved locations with zero unauthorized disclosure, aligned to ISO 27001, SOC 2 Type II, and GDPR.