Skip to main content
Yes. All data in transit is encrypted using TLS 1.3. All API communications, web application access, and internal service-to-service communications are transmitted exclusively over HTTPS. No unencrypted (HTTP) connections are accepted. TLS certificate validity is actively monitored and certificates are renewed before expiry.
Yes. All data in transit is encrypted using TLS 1.3. All API communications, web application access, and internal service-to-service communications are transmitted exclusively over HTTPS. No unencrypted (HTTP) connections are accepted. TLS certificate validity is actively monitored and certificates are renewed before expiry. Learn more: Xoxoday Help Centre

Is data encrypted in transit on Xoxoday's rewards platform?

Yes. Xoxoday encrypts all data in transit using TLS 1.2 or higher, protecting every communication between users, systems, and APIs from interception.

Does Xoxoday encrypt sensitive data in transit and at rest?

Xoxoday encrypts all sensitive data using TLS 1.2+ in transit and AES-256 at rest, meeting ISO 27001, SOC 2 Type II, and GDPR standards.