Xoxoday's SOC 2 Type II report, audited by Intercert, covers all five Trust Service Criteria - Security, Availability, Confidentiality, Processing Integrity, and Privacy. This report provides independent, third-party validation that Xoxoday's controls are not only well-designed but operating effectively over time. All Xoxoday products are in scope, giving you assurance that the platforms you rely on are held to the highest standards for protecting your data.

Xoxoday is committed to compliance with the General Data Protection Regulation (GDPR), ensuring that personal data of individuals in the European Union is collected, processed, and stored lawfully and transparently. We have a designated Data Protection Officer (DPO) who oversees our data protection strategy and ensures ongoing compliance with GDPR requirements. Our privacy practices are built on the core principles of GDPR: purpose limitation, data minimization, storage limits, and individual rights, so you can trust that your data and your users' data is handled with care.