Logo of European Union
New
Product Catalog: Reward members who buy specific products or bundles
Learn more

Loyalty platform migration checklist: Zero points lost

A step-by-step checklist for moving your loyalty program to a new platform with every points balance, tier, and redemption record intact, from the first data audit to finance sign-off.

Most loyalty platform migrations that go wrong lose data in the handoff: points balances, tier history, or redemption records. Members usually spot the gap before your team does. The risk is the same whether you're leaving a rules engine, a legacy SaaS vendor, or an in-house build, and data integrity decides the outcome more than feature parity does.

The checklist below is the one we use in our own migrations: audit, data mapping, phased cutover, rollback criteria, and post-migration validation. For a broader look at how other loyalty programs handle integration problems, see our loyalty integration report.

What has to move: The migration data checklist

Five data sets decide whether members trust the new platform on day one. Miss one and members notice within days, through a missing tier, a stale reward, or a balance that no longer matches the old app.

In order of migration risk, check:

  • Points balance reconciliation - every member's current balance, the source-of-truth ledger, and any pending or expiring points.
  • Tier status and history - current tier, qualification dates, and the rolling transaction history that determines the next tier move.
  • Redemption history - past reward claims, so the new platform doesn't re-offer or re-charge for something already redeemed.
  • Member profiles - identity records, contact preferences, and linked accounts across channels.
  • Active promotions and campaigns - anything live or scheduled that must survive cutover without a gap in eligibility.

In our work migrating loyalty programs across single-market and multi-country rollouts alike, the failure we see most often is unreconciled tier thresholds at cutover. Lost points balances are far less common.

Legacy systems and new platforms rarely calculate tier status the same way, and members fall through that gap. How your tech stack integrates with these data sets often determines whether the migration surfaces these gaps early or lets them slip through unnoticed.

Finance has its own stake. Under International Financial Reporting Standard 15 (IFRS 15) and Accounting Standards Codification 606 (ASC 606), unredeemed points sit on the balance sheet as deferred revenue, so the pre-migration and post-migration balance totals need to match to the transaction.

Expiration adds a second risk: if unredeemed points expire on a schedule the new platform doesn't replicate exactly, liability figures drift even when every record migrated correctly.

If you're still comparing loyalty software vendors before committing to a migration, start with our loyalty software comparison guide.

Warning signs it's time to migrate off your current platform

Migration becomes urgent once the platform starts limiting what the business can do. 

Three root causes account for most of it: a rigid rules engine that needs a vendor ticket for every new tier or challenge, a legacy SaaS vendor that stopped shipping the roadmap features your customer relationship management (CRM) team asks for, or an in-house build that has outgrown the one or two engineers who understand it.

Understanding how loyalty points are structured often clarifies why these limitations surface in the first place.

Typical vendor checklists focus on slow support, rising fees, and a dated user interface (UI). The test we find most useful is narrower: can your team ship a new reward, tier, or referral mechanic without a code release or a change request? If every campaign idea becomes a backlog ticket, the constraint sits in the architecture.

Each platform type breaks in a different place:

  • A rules engine breaks first on flexibility. Promotions are static conditions, so pairing a tier upgrade with a time-boxed challenge means writing a new rule set.
  • A legacy SaaS vendor breaks down on data portability. Getting clean exports of redemption history and member identity records is often what blocks the exit.
  • An in-house build carries maintenance risk. Point balance logic, tier thresholds, and transaction history share one codebase, and no vendor is accountable for uptime or security patches.

An API-first engine, built on an application programming interface (API), addresses all three by separating program logic from program design, so new mechanics ship as configuration. Evaluate one once any of these signals shows up twice in a quarter. Understanding how loyalty points are structured often clarifies why these limitations surface in the first place.

How to audit your current loyalty program before migrating

The audit pulls every source of member data into one place and checks it for accuracy, duplicates, and completeness before anyone touches the new platform. Discrepancies you skip here surface after cutover, when they are far harder to trace. 

Understanding emerging loyalty software trends can help teams anticipate which data structures and integrations will matter most before starting the audit.

Start with member identity. Legacy programs often hold duplicate or fragmented profiles across the loyalty database, the CRM, and the customer data platform (CDP), so one shopper can carry three different member IDs. Resolve duplicates and remove inactive or fraudulent accounts before mapping begins, since the migration maps identities along with balances.

With identities unified, revisit how you're segmenting members by behavior, because deduplicated profiles make post-migration segmentation more accurate. Then export four data domains for line-by-line review:

  • Member identity records – canonical ID, contact data, consent status, and linked accounts
  • Points balances and transaction history – every earn and burn event, beyond current totals
  • Tier status and history – current tier, qualification date, and the rolling window behind it
  • Redemption history – reward stock-keeping units (SKUs), dates, and any pending redemptions

Compare the export with CRM and CDP records side by side. In our migrations, mismatches between the points a member earned in the loyalty engine and their last transaction in the CRM cause more disputes than any other issue. Check at the same time that data handling and transfers meet your privacy requirements.

In our experience, finance approval is the audit step teams skip most often. Under IFRS 15, unredeemed points stay on the balance sheet as deferred revenue until redemption or expiry, so an undercounted liability at export creates a discrepancy finance has to explain later. Bring finance in before the audit closes.

We recommend closing the audit with a signed-off report covering balances, tier history, redemption history, and the liability total. The loyalty team and finance both approve it before mapping starts, and it becomes the reconciliation baseline for every step that follows.

Data mapping and validation: Reconciling points and tiers

Reconcile every member record, on the full file, before cutover. Each member's legacy closing balance becomes their opening balance on the new platform, and from there every balance has to hold up against the ledger:

Closing balance = Opening balance + Points earned − Points redeemed − Points expired

Adjust for any pending transaction still in flight at the audit cutoff. Run that formula against every member record before cutover, not a sample.

In our migrations, timestamp mismatches break points reconciliation more often than calculation errors do. 

An event logged at 11:58 pm in the legacy system's time zone can land on the other side of the cutoff in the new platform and shift that member's balance. Set a buffer window around the cutoff and hold those transactions for manual review.

Tier status needs the same treatment with a longer lookback. 

Map the exact spend or points threshold that triggered each tier upgrade, the qualifying window (rolling 12 months, calendar year, or anniversary date), and the tier's expiry logic, so no member loses a tier on day one of the new program. In our experience, a threshold migrated without its qualifying window is one of the most frequent causes of complaints after cutover.

A canonical member ID, resolved before mapping, is the join key for both reconciliations. Without it, your team has no way to match a balance against redemption history spread across a legacy database, a CRM, and a point-of-sale (POS) system. Keep member records and related loyalty data encrypted in transit and at rest through mapping and validation.

The reconciled balance also needs finance sign-off before go-live, because it sets the opening liability on the new platform. We reconcile member by member because spot-check samples have repeatedly missed edge cases in our migrations, and those cases surfaced only once members started redeeming.

Choosing your cutover approach: Big-bang vs parallel run vs phased pilot

The right cutover model depends on how much risk your balance and tier data can absorb during the switch. A big-bang cutover moves every member in one weekend, while a parallel run operates both platforms side by side and reconciles balances daily. A phased pilot moves a test cohort first.

Approach Timeline Member risk Best fit
Big-bang one cutover event High: no fallback if data mapping breaks Small programs, clean legacy data
Parallel run 2–6 weeks dual-running Low: balances cross-checked daily Complex tier logic, high transaction volume
Phased pilot Test cohort first, then full rollout Medium: limited blast radius Multi-country or omnichannel programs

We recommend combining the parallel run and the phased pilot, in that order. Start dual running, move 2–5% of active members onto the new platform once daily reconciliation is clean, and test the full member journey, exception paths included, before cutting over everyone else. In our experience, the projects that find data gaps after launch are usually the ones that skipped parallel validation.

Skipping the parallel-validation stage is the single most common reason a replatforming project discovers data-integrity gaps after launch instead of before it.

A phased plan can still move fast, as the ALDO Group example below shows. Whichever model you choose, set rollback triggers before the soft launch starts.

The phased migration timeline: From parallel run to full cutover

A phased migration runs in four stages, each gated on the one before it. ALDO Group followed this sequence across a global omnichannel program and completed the migration in three months, including multi-country tier logic and redemption history.

  • Parallel run. Post every transaction to both platforms so balances stay reconcilable, and compare balances and tier status daily.
  • Soft launch. Once daily reconciliation matches, route 2–5% of members, mixed across tiers and markets, onto the new platform for live transactions. Watch redemptions and reward catalog performance for one to two weeks, and brief support teams beforehand so they can answer member questions.
  • Full cutover. Schedule the switch for a low-traffic window, freeze writes on the legacy platform, migrate the remaining members, and confirm identity records deduplicated correctly.
  • Validation sign-off. Work through the checklist below before you call the migration done:
    • Points balances match legacy totals for every member
    • Tier status and history reflect correct thresholds and anniversary dates
    • Redemption history and transaction logs carried over without gaps
    • Active promotions and campaign rules replicate on the new system
    • Finance signs off on points liability accounting treatment for the closing balance

Rollback planning: Triggers and safe execution

Write rollback triggers down before cutover starts, so nobody has to decide under pressure. We recommend three:

  • A points-balance discrepancy rate above 0.5% of active members
  • A tier misassignment affecting more than a handful of high-value members
  • Transaction latency that breaks redemption at checkout

If any trigger fires during soft launch or full cutover, the rollback runs on those pre-agreed criteria.

A safe rollback restores the legacy ledger as the source of truth, and switching traffic back is only one part of that. Because the parallel run kept both systems posting every transaction, legacy balances, tiers, and redemption history are still current. The rollback re-anchors member identity records to that ledger, so no member lands on the wrong account or loses history.

Finance needs a reconciled balance at the exact rollback timestamp before the rollback counts as complete. Planned this way, a rollback is a controlled return to a known-good ledger that keeps member data intact.

Post-migration validation: Confirming every balance and tier

The migration is complete once every member's balance and tier history match the legacy system record by record. Aggregate totals can look correct while individual records are wrong, so validation has to work at the member level.

Run a full-file comparison of old and new balances and flag every account with a nonzero delta. Do the same for tier status and history: current tier, qualification date, and the transactions that earned it. 

A member two purchases away from Gold should still be two purchases away on the new platform. High-value members are usually the first to check their account after migration, so review their balances and tier data first.

Sign-off runs through three checkpoints:

  • Engineering confirms the migration ran without errors, then monitors error logs and API response times after launch.
  • The loyalty or CRM owner reviews high-value accounts first, since those members usually check their accounts earliest.
  • Finance confirms the migrated liability ties back to the deferred-revenue figures on the books.

USSF's API-integrated fan engagement program shows this validation at scale, with more than 60 million points issued and every transaction reconciled against the source system. Decommission the legacy platform only after all three checkpoints clear, and keep it in read-only mode for at least one billing cycle as a fallback reference.

Member communication timeline: Pre-cutover, cutover day, post-launch

Members need to hear from you at three points: before cutover, on cutover day, and after launch. Those who hear nothing at one of these stages are left to discover the changes on their own.

Pre-cutover

Start at least two weeks ahead, during the parallel run. Tell members their balance, tier status, and redemption history move to a new platform on a fixed date, and that nothing will be lost. Call out active promotions explicitly, because in our experience a live reward that stops working during the soft launch generates more complaints than a delayed points post.

Keep active campaigns running through the whole migration, soft launch included, and pause earning and redemption only for the short final cutover freeze. A promotion that disappears mid-redemption looks broken to the members using it.

Cutover day

Send a short, factual message such as "Your account is being updated. Expect a brief pause." Leave out technical details about data migration. If a rollback trigger fires, tell members about the delay before they notice a stalled balance.

Post-launch

Confirm to each member that their balance and tier carried over from the legacy platform, by email and with an in-app banner, so nobody misses it. Log the same confirmation for finance, since deferred-revenue reporting under IFRS 15 relies on the balances members are checking.

Migrating from legacy SaaS or a rules engine to an API-first platform

Moving to an API-first engine differs from a like-for-like platform swap, because the main constraint is what the old system exposes through its API.

Rules engines built for simple points-per-dollar logic often store tier status and history as computed fields with no persisted record. That data won't export cleanly, so it has to be rebuilt from transaction history before loading. 

Legacy SaaS vendors have the opposite problem: the data exists, but contract terms or rate-limited APIs restrict how fast you can pull it, so budget extra weeks of parallel run if your vendor caps bulk exports.

On an API-first engine, your team can rerun balance and identity validation against source data throughout the parallel run. Repeatable API calls replace one-off scripts, which is the main cost and integration advantage over a rules engine.

If you're moving from a specific rules-engine vendor, check our technical migration guides that map that platform's API and data model to Open Loyalty's. For general selection criteria, see our loyalty software comparison guide and our breakdown of what a reward management system needs to handle at scale.

FAQ: Points loss, re-enrollment, freezing, and legacy rules

Will migrating loyalty platforms cause members to lose points?

Members keep their points when balances are reconciled before cutover. Match every member's transaction history and current balance line by line between systems, then resolve and sign off on each discrepancy. Skipped reconciliation shows up as missing balances within days, followed by support tickets and churn.

Do members need to re-enroll after a loyalty platform migration?

No. A well-run migration carries identity records, balances, and tier status forward automatically. A forced re-enrollment tells members the migration went wrong.

Should you freeze the loyalty program during migration?

Yes, but only for the final cutover window. A short freeze on point-earning and redemption prevents new transactions from landing in the old system after reconciliation locks. Tell members in advance when they can earn and redeem again. Keep the window short, because an early or long freeze reads as an outage.

Can old loyalty program rules be ported to a new platform?

Most mechanics port directly. Rules stored as computed fields have to be rebuilt, and legacy rules engines rarely expose full history through their API. Audit the reward logic and what's exportable before you plan a one-to-one transfer.

How long does a loyalty platform migration take?

In our experience, a well-scoped migration takes 8–12 weeks, including discovery, the parallel run, soft launch, and user acceptance testing (UAT). Data quality and program complexity drive the timeline more than scope, and manual reconciliation of redemption history or tier thresholds adds time.

Do existing POS and eCommerce integrations carry over after migration?

Each POS and eCommerce integration needs remapping and testing against the new platform's API before cutover, since legacy connectors rarely translate directly. Include operations and marketing teams in integration testing, because they depend on those live connections after launch. Treat integration testing as part of the cutover validation checklist.

‍

Book a migration readiness review

A cutover validation checklist holds up best once someone with migration experience has stress-tested it against your data model, tier logic, and rollback triggers. Our team reviews your migration plan, reconciliation approach, and parallel-run design, then flags the gaps most programs miss on their first pass.

Schedule your readiness review

Logo of company Open Loyalty

API-first loyalty and gamification engine

Purple gradient banner promoting Open Loyalty product sheet with download button and woman checking phone.
Weekly tips to build & grow gamified loyalty programs
Join Loyalty Builders
About the authors
Kacper is an expert senior marketer with over 10 years of experience driving demand generation and data analytics across B2B and B2C enterprise sectors.
Join the community
of 4,000 Loyalty Builders!

Get a weekly dose of actionable tips on how to build and grow gamified successful loyalty programs!

Disney logo - blackMcDonald's logo - black

Customer loyalty know-how

Leverage resources from Open Loyalty’s gamification and loyalty experts to start smooth and move in the right direction