Encryption keys are managed via AWS Secrets Manager and AWS KMS. Key lifecycle management covers: generation (FIPS 140-2 validated random number generation), storage (vault with restricted access), rotation (automated, policy-driven), and revocation (immediate upon compromise). All key operations are fully audited.
Does Xoxoday Loyalife use secure keys and compliant hosting?
Xoxoday Loyalife uses encrypted, secure API keys and is hosted on enterprise-grade compliant cloud infrastructure meeting ISO 27001 and SOC 2 Type II…
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.