Skip to main content
Yes. API rate limiting is enforced at the API gateway and WAF level. Configurable thresholds for maximum connections, burst rates, and request frequency are set per client integration.
Yes. API rate limiting is enforced at the API gateway and WAF level. Configurable thresholds for maximum connections, burst rates, and request frequency are set per client integration. Input validation is enforced on all API endpoints, including parameterized queries to prevent injection attacks, payload size limits, and schema validation. Learn more: Xoxoday Loyalife Help Centre

Can loyalty points offset transaction fees in a mobile app?

Xoxoday Loyalife supports custom API integrations that link loyalty points to mobile payment flows, letting customers offset transaction fees.

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.