Skip to main content
Yes. APIs are secured using OAuth 2.0 authentication with bearer tokens. Each API client is issued a unique Client ID and Secret ID pair, which are exchanged for an access token (with refresh token support).
Yes. APIs are secured using OAuth 2.0 authentication with bearer tokens. Each API client is issued a unique Client ID and Secret ID pair, which are exchanged for an access token (with refresh token support). API authorization is enforced through RBAC with tenant-level isolation, ensuring that each API call is validated against the authenticated tenant’s permissions. Learn more: Xoxoday Help Centre

How Does Xoxoday Secure API Access for Enterprise...

Xoxoday secures enterprise API integrations with OAuth 2.0, JWT authentication, TLS 1.2/1.3 encryption, and rate limiting to prevent abuse.

Is Xoxoday deployed on a shared or dedicated environment?

Xoxoday runs on a secure multi-tenant cloud environment with logical data isolation per client. Dedicated environments are available on request.