Skip to main content
Xoxoday maintains a documented encryption key management process covering key generation, distribution, storage, rotation, and revocation, audited as part of the ISO 27001:2022 ISMS. The process and accepted mechanisms will be reviewed and formally agreed with your organisation’s security team.
Xoxoday maintains a documented encryption key management process covering key generation, distribution, storage, rotation, and revocation, audited as part of the ISO 27001:2022 ISMS. The process and accepted mechanisms will be reviewed and formally agreed with your organisation’s security team. Learn more: Xoxoday Loyalife Help Centre

Does Xoxoday Loyalife use secure keys and compliant hosting?

Xoxoday Loyalife uses encrypted, secure API keys and is hosted on enterprise-grade compliant cloud infrastructure meeting ISO 27001 and SOC 2 Type II…

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.