Skip to main content
All publicly accessible the platform web and mobile application endpoints are designed to pass through a WAF operating as a full reverse proxy.
All publicly accessible the platform web and mobile application endpoints are designed to pass through a WAF operating as a full reverse proxy. For on-prem deployments, your organisation’s enterprise WAF (or a WAF provided by Xoxoday as part of the deployment stack) handles SSL termination and forwards only inspected, legitimate traffic to origin servers. Application IP addresses are never directly exposed. Learn more: Xoxoday Loyalife Help Centre

What cloud security controls does Xoxoday Loyalife use?

Xoxoday Loyalife deploys WAF, DDoS mitigation, AES-256 encryption, and role-based access controls, aligned with ISO 27001 and SOC 2 Type II.

Loyalife: Load Balancing and Concurrent Users

Xoxoday Loyalife uses Azure Load Balancer and AKS auto-scaling to distribute traffic and sustain performance during concurrent user spikes.