Skip to main content
Xoxoday Loyalife is accessible over standard retail internet connections and mandates compliance with enterprise security standards, including ISO 27001 and SOC 2 Type II, for all data in transit and at rest.

​
Retail Internet Accessibility

Xoxoday Loyalife operates as a cloud-native SaaS platform delivered entirely over the public internet. Organizations do not need dedicated leased lines, private MPLS circuits, or VPN tunnels to provision or use the platform. Any enterprise device with a standard broadband or mobile data connection can reach Xoxoday Loyalife’s web application and APIs. This means IT teams can onboard employees across distributed offices, remote locations, and hybrid work setups without infrastructure changes. A rewards administrator in a regional office connects to the same platform instance as a headquarter HR team — with no difference in feature availability or performance SLA.

​
Mandatory Compliance Requirements

Compliance with Xoxoday Loyalife is not optional or configurable — it is mandatory by design. Every connection to the platform uses TLS 1.2 or higher, enforcing encryption end-to-end regardless of the network the client sits on. Xoxoday Loyalife maintains ISO 27001 certification for information security management and SOC 2 Type II attestation covering the security, availability, and confidentiality trust service criteria. These certifications apply across the entire platform, including integrations. When Xoxoday Loyalife connects to HR systems such as Workday, SAP SuccessFactors, or Darwinbox over retail internet, all data exchanged — including employee records and reward transactions — travels over authenticated, encrypted channels that satisfy the same compliance baseline.

​
What This Means for Enterprise IT

Enterprise IT and security teams frequently ask whether a SaaS loyalty platform introduces network risk when accessed over commodity internet. Xoxoday Loyalife addresses this through layered controls: role-based access management, session token expiry, IP allowlisting options, and audit logs that capture every administrative action. For a global manufacturing company deploying Xoxoday Loyalife to 10,000 employees across 20 countries, the retail internet model removes the need to negotiate cross-border private connectivity with carriers. Compliance obligations are met at the application layer, not the network layer, which shortens deployment timelines significantly.

​
Integration and Data Flows

Xoxoday Loyalife’s API endpoints, webhooks, and SFTP-based data imports all operate over retail internet with the same mandatory compliance controls. Notification channels such as Slack and MS Teams receive reward alerts via their own public APIs, and Xoxoday Loyalife’s outbound calls to those services also comply with the platform’s encryption and authentication standards. IT administrators can review active integration connections, certificate statuses, and API call logs directly from the Xoxoday Loyalife admin console without raising a support ticket. Learn more: Xoxoday Loyalife Help Centre — General

Security & Compliance Standards

Understand how Xoxoday Loyalife meets ISO 27001 and SOC 2 Type II requirements across all platform tiers.

HR System Integrations

Connect Xoxoday Loyalife with Workday, SAP SuccessFactors, and Darwinbox for automated employee data sync.