The API gateway enforces strict authentication (OAuth 2.0 bearer tokens) and tenant-scoped authorization for every request, even in shared gateway configurations. Tenant identifiers are validated in the authentication token for each API call, preventing cross-tenant data leakage.
Loyalife: Compliance Across Its Platform Modules
Xoxoday Loyalife enforces compliance across every module—rewards, points, tiers, and payment gateways—through built-in controls aligned to ISO 27001…
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.