Skip to main content
Application secrets, API keys, and access credentials are stored in AWS Secrets Manager / HashiCorp Vault with automated rotation policies. Access to secrets is restricted to authorized roles with full audit logging. Rotation frequencies align to Xoxoday’s ISO 27001:2022 ISMS.
Application secrets, API keys, and access credentials are stored in AWS Secrets Manager / HashiCorp Vault with automated rotation policies. Access to secrets is restricted to authorized roles with full audit logging. Rotation frequencies align to Xoxoday’s ISO 27001:2022 ISMS. Learn more: Xoxoday Loyalife Help Centre

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.

Does Xoxoday Loyalife use secure keys and compliant hosting?

Xoxoday Loyalife uses encrypted, secure API keys and is hosted on enterprise-grade compliant cloud infrastructure meeting ISO 27001 and SOC 2 Type II…