Skip to main content
Xoxoday Loyalife records every point expiry event against the issuing member’s account and surfaces the aggregated balance as a tracked liability line for audit and compliance reporting.
When loyalty points expire, the business impact goes beyond a simple account deduction. Outstanding unspent points represent a financial liability on the issuer’s books, and regulators increasingly expect programs to demonstrate they can account for that liability at any given moment. Xoxoday Loyalife addresses this by treating point expiry as a first-class compliance event, not just a housekeeping action. How point expiry works in Xoxoday Loyalife Xoxoday Loyalife allows program administrators to configure expiry rules at the tier, campaign, or transaction level — rolling windows, fixed calendar dates, or inactivity-based thresholds all qualify. When a batch of points reaches its expiry date, the platform processes the deduction, writes an immutable audit entry to the member’s transaction ledger, and simultaneously updates the program’s aggregate liability register. This means finance teams always have a reconcilable view: total points issued, total points redeemed, total points expired, and the residual outstanding balance. That residual figure is the compliance liability number. For companies integrated with financial systems such as SAP SuccessFactors or Workday, Xoxoday Loyalife exposes this data via API and scheduled exports so the liability figure can flow directly into general ledger entries without manual intervention. Why liability tracking matters for compliance Many jurisdictions require loyalty program operators — particularly in financial services, insurance, and retail — to disclose the estimated redemption liability associated with outstanding points. Even where there is no hard statutory requirement, internal audit teams and external auditors routinely test whether expired-points entries are complete and traceable. A missing or inconsistently stamped expiry record creates audit findings. Xoxoday Loyalife maintains a full chain of custody for every point lifecycle event. Each expiry record carries a timestamp, the originating issuance transaction ID, the applicable expiry rule that triggered it, and the member reference. This granularity supports both SOC 2 Type II control evidence and ISO 27001 data-integrity audits, where reviewers need to confirm that records cannot be retroactively altered. A practical example Consider a B2B incentives program running annual point budgets that reset on 31 December. At year-end, any unspent balance expires per program rules. Xoxoday Loyalife processes the expiry batch overnight, marks each affected account, and publishes an updated liability summary. The finance team receives an automated report showing the exact value of points expired versus points redeemed that quarter — ready to attach to a board-level compliance pack or share with an external auditor. Administrators can also configure expiry warning notifications delivered through connected channels such as Slack or MS Teams, prompting members to redeem before the cutoff and reducing the volume of points that reach expiry altogether. Learn more: Xoxoday Loyalife Help Centre — General

How to configure point expiry rules

Set rolling, fixed-date, or inactivity-based expiry policies at the tier or campaign level.

Loyalty program audit and compliance reporting

Export transaction ledgers and liability summaries to support SOC 2 and ISO 27001 audits.