SOC 2 readiness
Control mapping
Security first, with availability, confidentiality, and privacy evidence mapped where Xaigh handles worker, employer, message, location, and pay-adjacent records.
Xaigh keeps security, privacy, workforce compliance, payments boundaries, audit evidence, and release approvals connected to durable records so buyers can review how the platform protects real work decisions.
Xaigh mirrors the employer posting, keeps local work rules, and closes stale jobs only when the client hiring feed proves they are gone.
Protected job fields
Source
Client hiring system
Stale check
24h watch
Apply mode
Redirect or forward
Review
Source details kept
Client system owns
Job details, open state, pay range, apply path
The employer system stays in charge of the posting. Xaigh will not overwrite it from the posting page.
Xaigh rules
Fill plan, matches, check-in, payroll handoff
Xaigh keeps the work rules in place: offers, site checks, documents, readiness, and worker audience.
Change trail
Created, changed, closed, and missing job events
Every change keeps provider, source file, status, and close rule details for review.
Client hiring system
Workday, Greenhouse, Lever, Ashby, iCIMS, or a custom feed sends the active roles.
One stable job record
Xaigh keeps title, pay, place, needs, apply link, job link, status, and requisition tied together.
Xaigh work layer
Matches, messages, fill, site checks, documents, worker audience, readiness, and payroll signals attach without rewriting the source job.
Missing from client feed
When the client feed no longer shows a role, Xaigh can close it locally and stop matching.
Live hiring status
Provider count, open and closed roles, stale feeds, and ownership rules feed the employer view.
Xaigh does not display SOC 2, ISO, HIPAA, or PCI badges until the matching audit, certification, contract, or provider scope is real. This page shows the control tracks we operate and the evidence buyers can request during security review.
Control mapping
Security first, with availability, confidentiality, and privacy evidence mapped where Xaigh handles worker, employer, message, location, and pay-adjacent records.
ISMS design
Risk register, asset ownership, policy review cadence, security roles, and corrective-action tracking for a formal information-security management system.
Provider-scoped
Card data is kept outside Xaigh application storage. Payment flows should stay tokenized through approved payment providers and reviewed before any direct card-data expansion.
Live controls + review
User data access, correction, deletion, account closure, age floor, telemetry minimization, and sensitive-media controls remain part of release review.
Not claimed
Xaigh should not claim HIPAA compliance unless a covered-entity or business-associate use case is contracted and a BAA, PHI data map, and Security Rule safeguards are approved.
Operational controls
Worker eligibility, screening, classification, payroll-adjacent records, insurance notes, dispute windows, and final-action review are tied to real operating records.
Enterprise security review should request the current control register, data inventory, subprocessors, incident process, insurance evidence, and any signed customer agreements.
Security approachXaigh standards, point defaults, suspension thresholds, appeal flags, and regulatory review markers are one policy. Mobile apps and employer dashboards show the same rule set.
Confirm early, arrive on time, clock in from the right place, and use the cancellation policy before the cutoff.
Accept only work you can complete, read the requirements, and arrive with required gear and documents.
Follow site instructions, protect property, keep time records accurate, and complete the assigned work.
Maintain a secure environment. Report hazards, follow site protocols, and prioritize the well-being of yourself and others.
Treat coworkers, customers, employers, and support with dignity. Communicate early and help recover the shift instead of disappearing.
Low-level attendance, quality, or professionalism events become visible worker coaching signals.
Work access pauses for the configured suspension window and payment holds stay in sync.
Safety, fraud, harassment, falsified records, or repeated breach patterns require trust review.
Permanent suspension is recorded only after review, required notices, and appeal handling.
XaıGH is built around a plain operating promise: people know the work, know the pay, know the standard, and know what happens when the standard is missed.
Reliability
Excellence
Integrity
Safety
Respect
Workers arrive prepared and employers fund the role before launch. Every shift is built around clear timing, clear pay, and clean handoff.
Unsafe conduct, falsified time, harassment, fraud, and site-risk reports go through review before access returns.
Workers are not anonymous labor and employers are not blank checks. XaıGH keeps communication, expectations, and records visible.
Warnings, holds, suspensions, and final account actions are tied to evidence, notices, appeal paths, and authorized review.
Treating warehouse workers or servers as 1099 independent contractors can create serious classification risk. Xaigh keeps the classification path visible before covered work is accepted.
Covered shifts keep the intended W-2/EOR path, payroll requirements, insurance scope, and approval records attached for review.
You retain liability for misclassification lawsuits and back-tax penalties.
Covered shifts keep the paycheck, payroll tax record, and work approval path attached to the EOR model.
Enterprise compliance isn’t a checkbox. It’s a living practice tracked through operating records.
Active shifts can be tied to occupational accident coverage requirements and incident records before claims handling reaches the employer team.
Data transmission, PII storage, and account access controls are documented for enterprise procurement review.
Background-check decisions stay attached to notice, report-copy, dispute-window, and final-action steps instead of becoming automatic breach points.
Move away from opaque temp-agency handling. Partner with a platform built for legal, finance, operations, and worker trust to read the same record.
Request enterprise review