Can we audit Loyalife ourselves?

Yes. Enterprise customers may run independent third-party penetration tests once per year. We share the SOC 2 report and ISO certificate under NDA on day one.

Does Co-pilot use our data to train models for other customers?

No. Co-pilot reads live data in your tenant only. No cross-customer training. Every suggestion is logged and auditable.

What languages and currencies are supported?

100+ languages and multiple currencies across 175+ countries. RTL support, locale-aware formatting, and region-specific reward catalogs.

How long is the API deprecation window?

12 months. Every breaking change is announced, documented, and the old version kept live for a full year. SDKs follow the same cadence.

How does fraud detection work?

Velocity checks, device fingerprinting, anomaly scoring on burn patterns, and a holdback queue for high-value redemptions. Fraud teams get a console with reason codes and reversibility.

Technology

Enterprise loyalty infrastructure built for scale.

Run complex loyalty programs on infrastructure your security, engineering, and operations teams can approve, extend, and govern.

Book a demo Explore the stack

~ POST /v2/rewards● connected

// Issue a reward on the live ledgerconst r = await loyalife.rewards.issue({

memberId: 'mem_8021',

points: 500,

idempotencyKey: 'ord_82c1',

});

201 Created · 38ms · r.id = rwd_82c1

Region status● 4/4 healthy

Ireland

38ms

Virginia

41ms

Mumbai

22ms

Singapore

56ms

Co-pilot · in-tenant

Technology stack

Every layer of the loyalty stack, engineered for enterprise

Seven systems engineered to work together. Click any pillar to explore.

1 of 7

01· Loyalty Co-pilot1 / 7

An AI partner that knows your program

Co-pilot reads live member, transaction, and reward data inside your tenant. It drafts campaigns, suggests segments, forecasts uplift, and answers plain-English questions about your program health.

How is the Diamond tier trending in EU this month?

Diamond tier in EU is up 18.4% month-over-month - driven by the Berlin and Amsterdam cohorts.

Diamond · EU · 30d▲ +18.4%

Audit log · auditable, in-tenant

14:02:31copilot.suggestDrafted Q4 win-back campaign4,210 members
14:02:28copilot.queryDiamond tier trend, EU+18.4% MoM
14:02:22copilot.forecastUplift projection · 7d+$2.3M revenue

Tenant-isolated · no cross-customer training

Data stays in your tenant. Trained on benchmark patterns, not cross-customer data. Every suggestion logged and auditable.

02· Infrastructure2 / 7

Deployment control for regulated loyalty programs

Deploy Loyalife on-premise when regulatory, data sovereignty, or infrastructure control requirements demand full ownership of critical data flows.

Live

Uptime99.994%

p99 issuance142 ms

Events/sec3,841

Regions4 · pinned

Idempotent ledger

replay · OpenTelemetry · SLA 99.99%

Use cloud deployment for scalable, resilient infrastructure with rapid expansion, high availability, security controls, and streamlined platform updates.

03· APIs & SDKs3 / 7

An API surface engineers want to build against

RESTful APIs connect Loyalife with CRM, POS, ERP, communication platforms, and custom systems to sync member data, rewards, and program insights.

~/loyalife · POST /v2/rewards

// 6 first-party SDKs · same versioning · 12mo deprecation

import { Loyalife } from 'loyalife';

// Issue a reward

const r = await loyalife.rewards.issue({

memberId: 'mem_8021',

points: 500,

idempotencyKey: 'ord_82c1',

});

✓ 201 Created · 38ms · r.id = rwd_82c1

Webhook deliveryHMAC · 30d retry

reward.issued20038ms
member.tier_changed20021ms
redemption.held20044ms
reward.issued20027ms

REST · GraphQL · Sandbox provisioned on signup

Developer SDKs and API documentation help teams tailor loyalty workflows, extend platform capabilities, and scale integrations without rebuilding core services.

04· Security4 / 7

Security your procurement team signs on the first call

SOC 2 Type II, ISO 27001, GDPR / CCPA / DPDP. End-to-end encryption with TLS 1.2+ in transit, AES-256 at rest, and optional BYOK for field-level encryption.

SOC 2 Type II

Annual · audited

ISO 27001

Certificate · NDA

GDPR · DPDP

EU + India · enforced

AES-256 · TLS 1.2+ · BYOK

card: 4242

→

7fa9c21e8b3d0465

SSO · SAML 2.0 / OIDCSCIM provisioningMFA enforcedIP allowlisting

Audit log · immutablestreaming

14:02:31jane.k@acmerewards.issue52.40.x.x
14:02:29ops.svctenant.config.read10.0.x.x
14:02:27admin@acmesso.config.update203.0.x.x

Every call · every actor · every reason - replayable.

RBAC with SSO (SAML 2.0 / OIDC), SCIM provisioning, MFA, and IP allowlisting. Every API call, admin action, and data access logged with actor, timestamp, IP, and rationale.

05· Whitelabelling5 / 7

Your brand, your domain, your member experience

Custom domains, branded microsites, iOS and Android apps with your logo, colors, and typography. Role-based journeys for enroll, earn, redeem, and support.

●https://loyalty.orbitair.com

◐Orbit Air

Gold tier

Points balance

12,480

1,520 to Platinum▲ +320 this week

Reward 1

500 pts

Reward 2

500 pts

Reward 3

500 pts

Theme · live preview

◐

Orbit Air

Points

12,480

Full CSS and layout control over the redemption catalog, member portal, and communication templates. No Loyalife branding visible to your members.

06· Internationalization6 / 7

One platform, every language, every currency

100+ languages with RTL support, locale-aware number and date formatting, multi-currency ledgers, and region-specific reward catalogs - all from one tenant.

Locale

100+ languages · 175+ countries

Currency · locked at config

£€$¥₹R$ر.س元

🇬🇧en · UTC+0

Welcome back, Alex

Points balance

12,480

☕

Coffee voucher

500 pts

£ 5.00

Locale-aware dates · numbers · RTLOne tenant · every market

Members see the program in their language. Rewards are localized by country. Currency conversion locked at configuration time for financial predictability.

07· Fraud & Risks7 / 7

Catch fraud before it costs you

AI-powered risk assessment detects anomalies in transactions and user behavior, flags suspicious actions in real time, and protects genuine member experiences.

Burn-rate anomaly · 24h

spike@14:02

+427% vs baseline

Velocity (member)

Velocity (device)

WARN

Impossible travel

BLOCK

Burn anomaly

BLOCK

Holdback queue

3 held

rwd_4f2a · AED 3,400BLOCKED
reason: impossible-travel · 2 cities · 4min
rwd_91bc · $1,700
reason: velocity (device) ×7 in 60s
rwd_2d10 · SAR 1,100REVIEW
reason: burn anomaly score 0.91

Idempotent ledger · reason codes · reversible by ops

Customizable risk settings, real-time alerts, detailed reporting, velocity checks, device fingerprinting, holdback queues, and reversible ledger actions protect every reward event.

How is the Diamond tier trending in EU this month?

Diamond tier in EU is up 18.4% month-over-month - driven by the Berlin and Amsterdam cohorts.

Diamond · EU · 30d▲ +18.4%

Audit log · auditable, in-tenant

14:02:31copilot.suggestDrafted Q4 win-back campaign4,210 members
14:02:28copilot.queryDiamond tier trend, EU+18.4% MoM
14:02:22copilot.forecastUplift projection · 7d+$2.3M revenue

Tenant-isolated · no cross-customer training

An AI partner that knows your program

Co-pilot reads live member, transaction, and reward data inside your tenant. It drafts campaigns, suggests segments, forecasts uplift, and answers plain-English questions about your program health.

Data stays in your tenant. Trained on benchmark patterns, not cross-customer data. Every suggestion logged and auditable.

FAQs

Common questions about Loyalife technology

Loyalife supports deployment models based on your data-control requirements, including on-premise environments for full infrastructure ownership and cloud deployments for scalable, resilient operations. Data movement is governed by your configured deployment and access policies.