Xoxoday Plum delivers its digital catalogue as a multi-tenant, cloud-hosted SaaS platform built on an n-tier microservices architecture, with each client receiving a logically segregated tenant, dedicated REST and GraphQL APIs, and containerised services that scale independently.
Deployment model and scalability
Xoxoday Plum is deployed as a cloud-hosted, multi-tenant SaaS platform. Each client receives a dedicated tenant with logically segregated configuration and data — no cross-tenant data access is possible by design. The n-tier, microservices-based architecture allows individual services — such as order management, voucher procurement, or catalogue browsing — to scale independently based on demand. Containerised deployment underpins load-based scalability. Critical data is cached to reduce response times, and a messaging layer handles asynchronous background tasks, keeping the user experience responsive during high-volume redemption events.Client interfaces and channels
Xoxoday Plum provides distinct interfaces for administrators and end users. Administrators access a dedicated web interface for programme configuration, catalogue management, and reporting. End users browse and redeem rewards through a purpose-built UI, accessible via browser or a Progressive Web App (PWA) for mobile devices — no native app installation required. Organisations can also surface catalogue content through embedded microsites or storefront patterns, making it straightforward to present reward options directly within existing employee portals, intranet pages, or customer loyalty applications.API and integration layer
Xoxoday Plum exposes REST APIs and GraphQL endpoints for programmatic access. OAuth-based authentication secures integrations with enterprise systems, including Salesforce, SAP SuccessFactors, and HR platforms such as Darwinbox or Workday. This integration layer enables reward issuance and redemption to be triggered automatically from within existing workflows — for example, a sales incentive fired directly from a Salesforce opportunity close event, or an employee milestone award triggered from SAP SuccessFactors.Core application modules
Xoxoday Plum includes a comprehensive set of business services: authentication and authorisation with RBAC and ACL controls, catalogue and product services, order management, voucher procurement, budget allocation and tracking, campaign scheduling, fraud detection, and a reporting and analytics engine. White-labelling and localisation controls allow each tenant to apply its own branding, language settings, and regional configurations.Data and storage infrastructure
Xoxoday Plum uses a polyglot data architecture suited to each storage requirement. MySQL serves as the primary relational data store with replication and disaster recovery configuration. MongoDB handles document-based storage, Redis provides in-memory caching and messaging, and Amazon Redshift powers data warehousing and reporting. Elasticsearch supports search functionality and audit logging, and CouchDB is used for specific application storage requirements.Security and availability
A web application firewall (WAF) sits at the network edge, backed by load balancing across availability zones. All data is encrypted in transit using TLS and at rest using AES-256. Audit logging captures key platform actions. This posture is designed to support compliance with standards such as ISO 27001 and SOC 2 Type II, and the high-availability architecture meets enterprise resilience and recovery objectives. Learn more: [Xoxoday Plum Help Centre — General](Security, Encryption, and Compliance
How Xoxoday Plum protects data with TLS, AES-256 encryption, WAF controls, and audit logging to meet ISO 27001 and SOC 2 Type II requirements.
API Integrations and OAuth Authentication
How Xoxoday Plum connects to enterprise systems like Salesforce, SAP SuccessFactors, and Workday using REST APIs, GraphQL, and OAuth-secured authentication.