Cloud loyalty program software in India: what to check before you buy
Almost every loyalty platform sold in India today is cloud software, so the word cloud on a brochure tells you little. What matters is what the cloud model changes for your program and what you should check about the specific vendor's cloud. This guide covers both, from the perspective of a vendor that runs one.
A cloud loyalty program is one run on software hosted and operated by the vendor and accessed over the internet, rather than installed on the brand's own servers. For an Indian channel program the practical differences are launch speed (a sandbox in days rather than a project in months), cost (subscription instead of licence plus hardware plus maintenance), continuous updates, uptime managed by the vendor, and security that is the vendor's responsibility to demonstrate. The questions to settle before buying are where the data is stored (Indian data centres are available from all major providers), how it is encrypted, who can access it, how payouts and personal data are protected under the DPDP Act principles, and what happens to your data if you leave.
Cloud vs on-premise for a channel loyalty program
| Cloud loyalty platform | On-premise or self-hosted | |
|---|---|---|
| Time to first program | Days to a sandbox; four to eight weeks to launch | Months: procurement, hardware, installation, integration |
| Cost model | Monthly subscription by active members | Licence, servers, database, security, staff, upgrades |
| Updates | Continuous; new scheme types and integrations arrive without a project | Versioned upgrades, each a project |
| Uptime and scaling | Vendor-managed; scales for a festive scan spike | Your IT team's capacity and hardware |
| Security | Vendor responsibility, demonstrated by certifications and audits | Your responsibility, with your controls |
| Data residency | Choose an Indian region; confirm in contract | Your data centre |
| Integration with ERP and DMS | APIs and connectors maintained by the vendor | Built and maintained by you |
| Exit | Data export in agreed formats; confirm before signing | You own everything, including the problem |
What cloud changes for the program, not the IT team
The benefits that matter to a channel program are operational. A scheme change is made on a screen and reaches every member's WhatsApp the same day. A Diwali multiplier that triples scan volume for three weeks is absorbed without anyone provisioning a server. A new integration, say a DMS the brand adopts next year, arrives as a connector rather than a project. And support for members happens in the vendor's helpdesk, in regional languages, which no on-premise deployment ever included. The build vs buy post sets out why the visible app is under a fifth of the platform; cloud delivery is how the other four-fifths reach you.
Security questions to ask any cloud loyalty vendor
Where is the data stored?
Ask for the region and the provider, and have Indian data residency written into the contract. Every major cloud provider offers Indian regions; a vendor that cannot commit to one has a reason.
How is data encrypted?
In transit with TLS, at rest with provider-managed or customer-managed keys. Ask specifically about member phone numbers, bank details and KYC documents, which are the sensitive fields in a channel program.
Who can access what?
Role-based access control for your users and the vendor's: the field team sees its territory, finance sees payouts, nobody sees bank details they do not need. Ask how vendor staff access is logged and approved.
Is there an audit log?
Every configuration change, payout approval and data export should be logged with the user, time and before-and-after values, and the log should be available to you.
How are payouts protected?
Maker-checker approval on payout files, limits per batch, reconciliation against the bank, and alerts on unusual patterns. Payouts are where a security failure becomes a financial one.
What certifications and tests?
Ask for the vendor's security posture statement, penetration test frequency and any certifications, and read them rather than the logo.
What happens when you leave?
Data export formats, timelines and deletion confirmation, in the contract.
Unotag's own answers to these are on the security page; treat it as the standard to hold any vendor to, including us.
DPDP Act principles, briefly
The Digital Personal Data Protection Act 2023 sets out principles that apply to member data in a loyalty program: collect personal data for a specified purpose with notice and consent, use it only for that purpose, keep it accurate and secure, retain it only as long as needed, and give the individual the right to access and erase it. A channel program holds phone numbers, names, bank or UPI details and sometimes identity documents for KYC, so the brand as the data fiduciary and the platform as the processor both have obligations. Confirm your consent wording, retention periods and the processor agreement with your counsel; this paragraph states the principles, not legal advice. The legal compliance guide goes further.
Pricing models for loyalty software in India
- Subscription by monthly active members. The usual cloud model; Unotag runs from roughly ₹30,000 to ₹3 lakh a month by active members, set out on the pricing page. Rewards budget is separate and yours.
- Per-user licence. Typical of enterprise suites; scales with your staff, not your channel.
- Percentage of reward value. Offered by some platforms; check the incentive it creates.
- Transaction fees. Per scan, per payout or per message; ask for the all-in monthly figure at your expected volumes.
- Implementation fee. Small or nil for platforms that configure from a sandbox; large for suites that need partners.
Whatever the model, ask for a three-year total including integration, WhatsApp conversation costs and payout rails. The cost calculator gives a structure, and channel loyalty program software in India compares the platform categories.
Uptime, incidents and what to put in the contract
A channel program has two moments when downtime costs money: the last three days of a scheme period, when partners are scanning and uploading to reach a slab, and payout day, when a delayed UPI transfer becomes a support call from every member at once. Ask the vendor for its uptime record over the past twelve months, its incident communication process, and how a scan or upload that fails during an outage is recovered afterwards; queued scans that credit once the service returns are the right answer. Put a service level into the contract with a stated uptime, a support response time in business hours and out of hours, and a named escalation path. Also ask what the vendor does when a scheme period ends on a Sunday and the settlement file is due Monday morning, because the answer tells you whether the operations team has run programs or only built software.
When on-premise still comes up
Some large groups have an IT policy that prefers self-hosting. The honest trade is that a self-hosted loyalty platform will lag the vendor's cloud version, cost more to operate, and still depend on the vendor for updates. If the policy is about data residency and access control, a cloud deployment in an Indian region with contractual controls usually satisfies it. If it is about control of the payout process, maker-checker approval and bank reconciliation inside the platform usually satisfy that too. Ask the policy owner which risk they are managing before ruling out cloud. The loyalty program software page describes how Unotag is deployed.
Key takeaways
- Cloud changes launch speed, cost model, updates and uptime; the visible app is the same either way.
- Check data residency in India, encryption, role-based access, audit logs, payout controls, certifications and exit terms, in the contract.
- The DPDP Act principles apply to member phone numbers, bank details and KYC documents; confirm consent and retention wording with counsel.
- Pricing is usually by monthly active members; compare three-year totals including integration, messaging and payouts.
Frequently asked questions
What is a cloud loyalty program?
A loyalty program run on software hosted and operated by the vendor and accessed over the internet, rather than installed on the brand's own servers. Members, scans, points, schemes and payouts all run in the vendor's cloud, and the brand pays a subscription.
Is cloud loyalty program software secure enough for member bank details?
It can be, and you should verify it: Indian data residency in the contract, encryption in transit and at rest, role-based access, audit logs, maker-checker payout approval and regular penetration testing. Ask for the vendor's security statement and read it.
Which loyalty software in India stores data in Indian data centres?
Any vendor deploying on a major cloud provider can choose an Indian region. Ask for the region and provider, and have Indian data residency written into the agreement rather than taking it from a brochure.
How much does loyalty program software cost in India?
Cloud platforms usually price by monthly active members; Unotag runs from roughly ₹30,000 to ₹3 lakh a month. Enterprise suites price per user with implementation fees. Compare three-year totals including integration, WhatsApp costs and payout fees.
Does the DPDP Act apply to loyalty program data?
Yes. Member names, phone numbers, bank or UPI details and KYC documents are personal data. The brand is the data fiduciary and the platform the processor, with obligations on consent, purpose, security, retention and individual rights. Confirm the specifics with your counsel.
What is the difference between cloud and on-premise loyalty software?
Cloud is hosted, updated and secured by the vendor and paid by subscription, launching in weeks. On-premise runs on your servers, needs your IT team for uptime and upgrades, costs more to operate and typically lags the vendor's cloud version.
Can a cloud loyalty platform integrate with an on-premise ERP?
Yes. Connectors for SAP, Tally and other ERPs exchange invoices and credit note files over secure APIs or file transfer, and the ERP stays where it is. The ERP integration guide on this site covers the patterns.