AICPA SOC 2 Type II compliance logo for the ReactorCX platform by Loyalty Methods

ReactorCX completes its SOC 2® Audit! Security is our Top Priority.

SOC 2 Type II
Compliance Report

Security, availability, and confidentiality - independently audited to meet enterprise data protection standards.

SOC 2 Certified
Certified Loyalty Methods
SOC 2 Type II
Security Availability Confidentiality
View full report
  • Resources /
  • How to Choose an Enterprise Loyalty Platform: A 2026 Buyer’s Guide
Buyer's Guide · Enterprise Loyalty Platform · 2026

How to Choose an Enterprise Loyalty Platform: A 2026 Buyer's Guide

Feature lists demo well. What decides whether a loyalty platform survives production is whether it keeps the liability right, in real time, across every brand and funder you run — and that capacity is decided by seven criteria, not a feature count.

Loyalty Methods · ReactorCX
2026
Summary

Choosing an enterprise loyalty platform comes down to one question no feature list answers: can the platform keep the liability right, in real time, at your transaction volume, across every brand and funder you run? Seven criteria separate enterprise-grade platforms from tools that demo like them: real-time processing at transaction volume, multi-program and multi-currency depth, integration surface across point-of-sale, CRM, and marketing systems, migration safety, financial governance and auditability, security and compliance posture, and pricing that reflects deployment scope.

Most enterprise loyalty platform decisions are made on the wrong question. Buyers compare feature lists, and feature lists demo well. What decides whether the program survives contact with production is something a demo does not show: whether the platform can settle a financial liability correctly, in real time, across every brand, currency, and funder the business runs. Most platforms can support loyalty. Far fewer can run loyalty once the points balance stops being a marketing number and becomes a liability the finance team has to defend to an auditor. That capacity, not feature count, is what an enterprise buyer is actually evaluating.

ReactorCX, the enterprise loyalty platform from Loyalty Methods, runs all seven criteria at production scale. It processes more than 3 billion transactions a year across more than 350 million active members and over 30,000 locations, at sub-second response, with zero unplanned downtime across its production programs. It runs the loyalty system of record for 7-Eleven, MGM Resorts, Gap Inc., Speedway, and BP Earnify across retail and convenience, hospitality and gaming, and fuel. This guide covers each criterion, the questions to ask every vendor, and what enterprise loyalty looks like when it is actually running in production.

In production on ReactorCX
7-Eleven · MGM Resorts · Gap Inc. · Speedway · BP Earnify · TA · Stripes

Where does a standard loyalty tool stop being enough?

A single-program loyalty tool is sufficient until one of four things happens. Transaction volume crosses the point where batch processing introduces a lag a member can feel. A second brand or a second currency enters the program and balances have to reconcile across them cleanly enough that brand-level accounting holds. The loyalty liability grows large enough that finance needs to trace any balance back to the rule that created it. Or the program has to move off a legacy platform without going dark.

Each of these is a scale break. A tool built for one program rarely survives the first one. ReactorCX runs at the far side of all four, processing more than 3 billion transactions a year across more than 350 million active members and over 30,000 locations, at sub-second response. Gap Inc. runs four brands in a single instance on it. Those are not roadmap aspirations. They are operating facts.

What should enterprise buyers actually evaluate?

Seven criteria separate an enterprise loyalty platform from a tool that demos like one. They are the axes on which platforms actually diverge under load.

Real-time processing at transaction volume
Real-time processing at transaction volume is the first. Real-time is the most abused word in loyalty procurement, because every vendor claims it and few define it. The honest test is latency under your peak, not your average. The expectation is not soft: McKinsey reports that 71% of consumers expect personalized interactions and 76% are frustrated when they do not get them [McKinsey, 2023], and recognition during a live transaction is exactly that kind of moment. 7-Eleven runs more than 25 million real-time API requests a day on ReactorCX, and has peaked above 3.36 million transactions in a single day, on 7-Eleven Day, with no degradation, because the platform scales up and back down on its own. Sub-second is the standard it holds at that volume, not a number it touches on a quiet afternoon. Many platforms describe sub-minute batch windows as real-time, which is too slow to publish an offer, read the response, and adjust during a live checkout.
Multi-program and multi-currency depth
Multi-program and multi-currency depth is the second. Running two programs is not running one program twice. Gap Inc. unified Old Navy, Gap, Banana Republic, and Athleta into one instance with one overarching tier structure and one balance, each brand keeping its own rules and earn rates. When a member buys across brands in a single cart, ReactorCX resolves the order at the line-item level, so each brand gets proper credit for its portion. The hard part is not supporting several currencies. It is reconciling them cleanly enough that finance trusts the numbers.
Integration surface across point-of-sale, CRM, and MarTech
Integration surface across point-of-sale, CRM, and MarTech is the third. An enterprise platform enters the stack rather than replacing it. ReactorCX integrates through real-time REST APIs, event streaming, and FeedXChange™ batch, and sits alongside point-of-sale, CRM, CDP, ESP, commerce, payments, and data-lake systems with partner-level configuration. The integration is graded on whether it carries the financial detail the rest of the stack needs, not on the number of connectors in a logo wall.
Migration safety
Migration safety is the fourth, and it is the one buyers scrutinize least despite it being the highest-risk moment in any platform decision. SafeSwitch™ runs the new program in parallel with the legacy platform and validates against live traffic before anything switches, so the cutover becomes a non-event rather than a cutover weekend. ThreadSync™ carries phased delivery and parity validation across the move. Gap Inc. migrated more than 100 million members and 700 million historical transactions across four brands, with the program itself being redesigned in flight, with zero downtime, on February 24, 2026.
Financial governance and auditability
Financial governance and auditability is the fifth. Loyalty liability is real money, and finance treats it that way even when the platform does not. The question that surfaces this is the disputed balance: when a member, or an auditor, challenges a number, can the platform trace that balance to the exact rule that produced it? ReactorCX carries source-tagged balances and accrual lineage back to the originating rule, and the Member Care Portal lets service and finance teams see and adjust accruals with that lineage intact. A platform that cannot show its work cannot make the liability defensible.
Security and compliance posture
Security and compliance posture is the sixth. Enterprise loyalty holds member identity and financial data, which puts it inside the same governance perimeter as the rest of the business. ReactorCX is SOC 2 Type II certified, encrypts data in transit and at rest, and enforces role-based access control with full audit logs, with brand isolation so one brand's data does not bleed into another's. For multi-region programs, that posture has to extend to jurisdiction-specific rules, not stop at the home market.
Pricing and total cost of ownership
Pricing and total cost of ownership is the seventh. Enterprise loyalty is not a per-seat product, and pricing it like one understates what the deployment actually involves. ReactorCX is scoped to engagement, reflecting deployment scope, integration complexity, and the migration itself, which is included rather than billed as a separate project. The model is worth understanding rather than deflecting, because total cost of ownership is decided by what the platform absorbs, not by the headline rate.

What questions separate an enterprise platform from one that only demos like one?

The fastest way to tell an enterprise platform from a tool is to ask the questions a tool cannot answer cleanly. Each of these surfaces something that only matters at scale. How do you define real-time, and what is the actual processing latency at our peak volume, not our average? Can you run our new program in parallel with our legacy platform, validated against live traffic, before we cut over? When our finance team audits a disputed balance, how does the platform trace that balance to the rule that created it? A member buys items from three of our brands in one transaction, so how does each brand get credited correctly? What happens to the program during the cutover itself, and what is the rollback path? How is partner-funded promotion settlement calculated and reconciled, and does that happen inside the platform or somewhere else? How does the platform isolate one brand's or one operator's data from another's while still recognizing a shared member? And what is included in the price, and what gets billed separately once we are live? If a vendor answers these with a roadmap, a professional-services quote, or a reframing of the question, that is the answer.

What does enterprise loyalty look like at production scale?

Three programs show the criteria operating at scale, each at a different kind of complexity.

1
7-Eleven

7-Eleven has run on ReactorCX since March 2020 with zero unplanned downtime since launch. The program clears more than 25 million real-time API requests on a normal day and absorbed more than 3.36 million transactions on a single peak day, 7-Eleven Day, without degradation. That is real-time at convenience-retail velocity, sustained for years.

2
MGM Resorts

MGM Resorts had loyalty siloed inside gaming, spread across three separate legacy systems. ReactorCX consolidated those three systems into one and brought hotel, dining, spa, retail, and entertainment into the same program, so a guest who never touches a casino floor is recognized as one member with one balance. Seventy-five million accounts moved with zero downtime. The hotel and gaming profile is one of the harder multi-program problems in loyalty, and it is in production.

3
Gap Inc.

Gap Inc. launched Encore in February 2026 across Old Navy, Gap, Banana Republic, and Athleta: four brands in one instance with one tier structure that rolls up across all four. More than 100 million members and 700 million historical transactions migrated with zero downtime, and the program was redesigned during the move rather than before or after it. The cutover was a non-event.

An enterprise loyalty platform is not a bigger loyalty tool. It is the system that keeps the liability right, in real time, across every brand and funder you run. That distinction is the whole decision. Evaluate on the seven criteria, ask the questions a tool cannot answer, and weigh the answers against programs already running in production rather than against a demo.

Frequently asked questions

How do I evaluate a loyalty platform vendor's real-time processing claims?
Ask for latency at your peak transaction volume, not your average, and ask whether that number is contractual. Many platforms describe batch processing windows of under a minute as real-time, which is too slow to recognize a member while they are still at the point of sale. The standard for enterprise-grade real-time is sub-second response at peak, sustained over time, not in a controlled demo environment. Request a proof-of-concept at your own peak volume before signing.
What should a loyalty platform RFP include for enterprise programs?
At minimum: peak transaction volume and expected growth over the contract period, the number of programs, brands, and currencies in scope, the integration surface across point-of-sale, CRM, CDP, and ecommerce, migration requirements and timeline, financial governance and audit requirements including accrual lineage, security certifications required, uptime expectations, and the post-launch support model. A vendor that cannot answer each of these in detail before contract is not operating at enterprise grade.
How long does a loyalty platform migration take, and what should we plan for?
Timeline depends on program complexity, the number of brands and currencies, the integration surface, and whether the vendor runs platforms in parallel rather than requiring a full cutover. A parallel-run migration using SafeSwitch™ validates parity against live traffic before switching, which removes the cutover-window risk but requires time for that validation. Planning should include a parallel run window, phased rollout for multi-brand programs, and a rollback path that stays open through cutover.
What security certifications should an enterprise loyalty platform hold?
At minimum: SOC 2 Type II for the platform itself, encryption for data in transit and at rest, role-based access control with audit logs, and brand isolation if the platform runs multiple programs or brands. For programs handling payment data, PCI DSS handling should be confirmed. For multi-region programs, data residency options and jurisdiction-specific compliance posture should be addressed before contract. ReactorCX holds SOC 2 Type II certification with role-based access control, full audit logging, and brand isolation across all instances.
How does a multi-brand retail company run one loyalty program across separate brand entities?
A multi-program, multi-currency platform runs distinct brand rule structures and point types in one instance while keeping brand-level accounting clean. Each brand maintains its own earn rules and rates, while the member sees one balance and one tier across the family. Line-item attribution at the transaction level means each brand gets credited correctly even when a member shops across brands in a single cart. Gap Inc. runs Old Navy, Gap, Banana Republic, and Athleta on this model with one tier structure that rolls up across all four brands.
At what point does a business need an enterprise loyalty platform rather than a standard tool?
The threshold is where any of four conditions become true: transaction volume makes batch processing lag visible to members; a second brand or currency requires reconciliation across programs; loyalty liability is large enough that finance needs accrual lineage for audits; or a live program has to migrate to a new platform without downtime. These are scale breaks, not size thresholds. A multi-brand company with any of these conditions active needs enterprise infrastructure sooner than it typically realizes.
What is included in enterprise loyalty platform pricing, and what gets billed separately?
Enterprise loyalty platforms are priced against deployment scope rather than a per-seat or per-member rate, because the cost is driven by transaction volume, the number of programs and currencies in the instance, the integration surface across point-of-sale and CRM, and whether the engagement includes migration. The question to ask any vendor is not the headline rate: it is what the total cost of ownership looks like once the platform is live and supported. ReactorCX includes the migration rather than billing it separately, which matters because migration is where post-contract surprises typically appear.
How does loyalty program liability affect the platform selection decision?
Loyalty liability is the financial obligation a brand carries for every point it has issued and not yet honored. It accumulates at the transaction level across millions of members, and a mispriced earning rule can compound it in hours at enterprise scale. A balance the platform cannot trace back to its originating rule cannot be defended to an auditor. Selection decisions that focus only on features and integration surface miss the liability question entirely. Before signing, confirm that the platform carries source-tagged accrual lineage and that operations, service, and finance teams can see that lineage at the transaction level.
What does parallel migration mean, and is it available from all vendors?
Parallel migration means running the incoming platform alongside the legacy platform, routing live production traffic to both, and comparing outputs until they match transaction for transaction before the cutover. This removes the cutover-window risk because the new platform proves itself against real traffic before becoming the system of record. Not all vendors offer this: many require the new platform to go live first and the legacy to be retired in a separate step. SafeSwitch™ is the ReactorCX implementation of parallel migration and includes rollback paths and parity validation as part of the standard migration engagement.
What happens to existing member balances and transaction history during a platform migration?
A modern enterprise migration carries both forward: current balances migrate with full lineage intact so each balance is defensible after the move, and historical transactions are reconciled so the program's record of member earning is complete. A cutover that drops transaction history or arrives with balance discrepancies is a public failure in front of the brand's most loyal customers. The standard SafeSwitch™ holds is that the member never notices the migration happened, which is the bar the Gap Inc. and MGM Resorts migrations were measured against.
How do we verify a platform will integrate with our existing point-of-sale and CRM systems before committing?
Ask the vendor to map your specific point-of-sale, CRM, CDP, and marketing systems to their integration model in writing, and to name the integration method for each: real-time API, event stream, or batch. A credible enterprise platform integrates through real-time REST APIs, event streaming, and batch feeds, and sits alongside the existing stack rather than requiring you to replace it. The test is whether the integration carries the financial detail each downstream system needs, not how many connectors appear on a logo wall. Request reference architectures from deployments with a stack similar to yours.
Sources

McKinsey & Company, "The value of getting personalization right (or wrong) is multiplying" and "What is personalization?" (2023): consumer expectations for personalized interactions (71% expect, 76% frustrated when absent) and personalization revenue findings.

Loyalty Methods, ReactorCX program data (2026): platform-wide transaction volume, active members, and locations; 7-Eleven, MGM Resorts, and Gap Inc. production and migration outcomes. loyaltymethods.com

Evaluate ReactorCX Against All Seven Criteria

See how ReactorCX handles real-time processing at your peak volume, multi-brand reconciliation, and zero-downtime migration — in production, not a demo.

Talk to an Expert