Skip to main content
The platform enforces TLS 1.2 as the minimum supported version for all external communications, with TLS 1.3 preferred where the connecting system supports it. All API endpoints, web portal traffic, and SDK communications are served exclusively over HTTPS with TLS.
The platform enforces TLS 1.2 as the minimum supported version for all external communications, with TLS 1.3 preferred where the connecting system supports it. All API endpoints, web portal traffic, and SDK communications are served exclusively over HTTPS with TLS. Weak protocol versions (SSLv3, TLS 1.0, TLS 1.1) and weak cipher suites are disabled. TLS configuration is validated during VAPT assessments. Learn more: Xoxoday Loyalife Help Centre

Does Xoxoday Loyalife encrypt PII and sensitive data?

Xoxoday Loyalife encrypts all PII and sensitive data at rest and in transit using AES-256 and TLS 1.2+, meeting ISO 27001 and SOC 2 Type II standards.

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.