The Platform · How It Works

Loyalty, explained.
Then wired into your stack.

If you're evaluating loyalty infrastructure for the first time — or explaining it to the person who signs it off — start here: what a loyalty programme really is, why it's harder than it looks, and how VariaOS runs one end to end.

First Principles

What a loyalty programme actually is.

Strip away the marketing and a loyalty programme is a simple promise: spend with us, and we'll owe you something back. Customers earn points on orders, climb tiers that improve their rate, and redeem value — often as spendable store credit. The catch is in the word owe: every point you issue is a small financial liability with a real monetary value. Multiply it by a million members and loyalty stops being a marketing gimmick and becomes a balance your finance team owns, your auditors will test, and your customers will notice the moment it's wrong.

That's the lens VariaOS is built through. A loyalty platform isn't primarily a points widget — it's the system of record for a liability, plus the rules that grow it and the redemption paths that settle it.

The Hard Parts

Why it's harder than it looks.

It's a ledger, not a counter

The naive build stores a balance field and mutates it. Under concurrency, retries, and refunds, mutable balances silently lose or double-count points — and there's no history to prove what happened. The correct build is an append-only ledger where the balance is derived, every change is an auditable entry, and corrections are new entries, never edits.

Privacy fights auditability

GDPR's right to erasure says delete the customer; your auditors say never touch the history. The resolution is cryptographic: encrypt each customer's personal data under its own key, and honour erasure by destroying the key. The person becomes unrecoverable; the financial record stays intact.

It touches everything

Orders arrive from a storefront, an OMS, or both — with duplicates, cancellations, and partial refunds. Members expect to see points in your app, not ours. Marketing wants the data downstream. Most of the real cost of loyalty is integration, which is why VariaOS is headless and API-first rather than another front-end to adopt.

End to End

How VariaOS runs a programme.

One canonical path, six stages. Everything below is live in the private beta except where marked.

1. Orders arrive. From the Shopify, Salesforce OMS, or SFCC connectors — or straight into the ingestion API. Your field-mapping template normalises each payload to the canonical order, and ingestion is idempotent by order id, so webhook redeliveries and retries can never double-count. Bringing history from an old programme? The auditable import API loads past orders and opening balances, then reconciles declared-vs-actual totals.

2. Rules decide. Accrual logic lives in a human-readable, governed DSL your team edits — not a ticket queue. Rules run in a sandboxed evaluator with a strict time and complexity budget, campaigns can multiply earnings for a window, and every rule set can be dry-run simulated and A/B split before it touches production.

3. The ledger records. The result is written as append-only entries grouped in atomic transactions; balances come from snapshots, never a mutable field. Cancellations and refunds post as first-class reversals keyed to the original order. This is the audit-grade core everything else leans on.

4. Tiers and credit follow. Activity drives tier auto-qualification; crossing a configured threshold converts points into spendable store credit — typed, expiry-aware, consumed first-expiring-first. Redemptions respect a floor and a reversal window, and finance gets the liability view: outstanding credit, aging, breakage.

5. Members see it. Drop our open-source web-component widgets into your site (balance, tier, credit, redeem, history — safe, scoped tokens), or build your own experience on the GraphQL API with real-time subscriptions. Your brand, your front-end; we stay invisible.

6. The business proves it. An append-only audit log with PII redaction, finance analytics for the CFO, consent-gated outbound sync to Segment, Klaviyo, Iterable, and Salesforce Marketing Cloud — and HMAC-signed webhooks for everything else. (Native warehouse CDC sync is on the roadmap; historical data moves through the import API today.)
Positioning

What VariaOS is — and is not.

It is

Infrastructure

A headless, API-first loyalty engine: the ledger, the rules, the credit lifecycle, and the reporting — run correctly so you don't spend six months building them and the next six proving they're right.

It is not

By design

Not a point-and-click campaign builder with a bundled front-end, not a CDP, not a CRM, and not a Salesforce add-on. You keep your customer experience and your stack; we run the hard parts underneath.

Start from

Your choice

Our open-source widgets for a working member view in an afternoon, the REST API for ingestion, or GraphQL for reporting. The build-vs-buy analysis covers when you shouldn't buy at all.

Glossary

Loyalty, translated.

Accrual

Earning points from an order, computed by your rules at ingestion.

Redemption

Spending earned value — here, store credit — against a purchase.

Ledger

The append-only record of every point and credit movement. Never edited, only added to.

Balance snapshot

The derived current balance, maintained transactionally with its entries — fast to read, provable from history.

Points liability

The monetary value of everything you've promised and members haven't spent. Finance owns this number.

Breakage

Value that expires unredeemed. Healthy programmes measure it; ours reports it by age cohort.

Tier

A status level (Bronze/Silver/Gold…) that changes earn rates. Auto-qualified from activity here.

Store credit

Points converted into spendable currency-denominated value, with type and expiry.

FEFO

First-expiring, first-out — spending the credit that dies soonest, so members lose the least.

Idempotency

Sending the same order twice changes nothing. The property that makes integrations safe.

Cryptographic erasure

Honouring GDPR deletion by destroying a customer's encryption key — PII gone, ledger intact.

Headless

No bundled front-end. APIs and widgets instead — your experience, our engine.

Ready to go a level deeper?

The features page covers each capability in detail, the beta-status page says plainly what's live and what's on the roadmap, and the sandbox waitlist gets you hands-on.

Explore the features → Beta status Join the waitlist