All data in transit is encrypted using TLS 1.2 (minimum) with TLS 1.3 preferred. All API calls, web portal traffic, and SDK communications are served exclusively over HTTPS. HTTP requests are automatically redirected to HTTPS. Weak cipher suites (RC4, DES, export-grade) are disabled.
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.
What cloud security controls does Xoxoday Loyalife use?
Xoxoday Loyalife deploys WAF, DDoS mitigation, AES-256 encryption, and role-based access controls, aligned with ISO 27001 and SOC 2 Type II.