HMAC-based message authentication is applied to API communications to verify data integrity. TLS’s built-in MAC mechanisms (AEAD ciphers) prevent any tampering with data in transit. Any modification to a message in transit is detected and the connection is rejected.
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.
What security certifications does Xoxoday Loyalife hold?
Xoxoday Loyalife holds SOC 2 Type II and ISO/IEC 27001:2022 certifications and secures all customer data with AES-256 encryption at rest and TLS 1.2…