All data in transit, including API calls, web portal traffic, mobile SDK communications, and SFTP file transfers, is secured via TLS 1.2+. HTTP traffic is automatically redirected to HTTPS. The HSTS header enforces HTTPS connections on all browsers.
What cloud security controls does Xoxoday Loyalife use?
Xoxoday Loyalife deploys WAF, DDoS mitigation, AES-256 encryption, and role-based access controls, aligned with ISO 27001 and SOC 2 Type II.
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.