Skip to main content
Client secrets and API access tokens follow a defined rotation policy under Xoxoday’s ISO 27001:2022 ISMS. Automated rotation is implemented for internal service credentials. For your organisation-facing credentials, rotation procedures and notification timelines will be agreed and scheduled during implementation.
Client secrets and API access tokens follow a defined rotation policy under Xoxoday’s ISO 27001:2022 ISMS. Automated rotation is implemented for internal service credentials. For your organisation-facing credentials, rotation procedures and notification timelines will be agreed and scheduled during implementation. Learn more: Xoxoday Loyalife Help Centre

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.

Is loyalty program data encrypted in Xoxoday Loyalife?

Yes. Xoxoday Loyalife encrypts all data at rest with AES-256 and in transit with TLS 1.2+, meeting ISO 27001 and SOC 2 Type II requirements.