Skip to main content
All API communications are transmitted exclusively over HTTPS with TLS 1.2+, ensuring payload encryption in transit. No API calls are accepted over unencrypted (HTTP) channels. TLS certificate validity is monitored and renewed before expiry.
All API communications are transmitted exclusively over HTTPS with TLS 1.2+, ensuring payload encryption in transit. No API calls are accepted over unencrypted (HTTP) channels. TLS certificate validity is monitored and renewed before expiry. Learn more: Xoxoday Loyalife Help Centre

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.

Is loyalty program data encrypted in Xoxoday Loyalife?

Yes. Xoxoday Loyalife encrypts all data at rest with AES-256 and in transit with TLS 1.2+, meeting ISO 27001 and SOC 2 Type II requirements.