How Loop keeps
your data safe.
Your data is encrypted and kept separate from other customers' data. It is never used to train AI models, and every important change is logged.
Encrypted in transit and at rest
Industry-standard encryption protects your data in transit and at rest, with sensitive credentials and tokens encrypted on top.
Your data is yours
We never train AI models on your content, and neither do our AI providers. They process your data under their commercial API terms to fulfill each request.
Granular access control
Role-based permissions from Owner to Visitor, MFA and directory provisioning via WorkOS, and multi-tenant isolation down to the teamspace level.
Comprehensive audit trail
Every meaningful change (settings, integrations, API keys, and admin actions) is logged, with automated retention.
We never train AI on your data.
Your documents, prompts, templates, and conversations are never used to train AI models, ours or anyone else's. AI providers process your data under their commercial API terms, which prohibit training on your content. Loop retains operation logs within your organization for quality monitoring.
- Zero training on customer content, ever
- Controls over AI features for each organization
- AI providers process your content under their commercial API terms, no training on it
- Some providers may briefly retain inputs for safety and abuse monitoring, per their published policies
Compliance & Certifications
Current and in-progress. We publish updates as we achieve them.
How Loop is secured
Loop runs on SOC 2-certified infrastructure, with a security model built so each organization's data stays separate.
Encryption
Your data is encrypted in transit and at rest, with sensitive credentials and tokens protected by industry-standard encryption.
Identity & Access
Authentication, MFA, and directory provisioning run on WorkOS, with role-based access control scoped from Owner down to the teamspace level.
Infrastructure
Loop runs on SOC 2-certified infrastructure with complete logical isolation between organizations and teamspaces, plus rate limiting and bot detection on AI endpoints.
Audit & Monitoring
Important account and organization changes are logged with automated retention, backed by real-time operational monitoring.
Data Control
Export your account data anytime, recover deleted files from a 30-day recycle bin, and request full account deletion, supporting your GDPR data rights.
Responsible Disclosure
Found a security issue? We take all reports seriously and respond as quickly as we can. We appreciate researchers who help us keep Loop safe.
security@loopllm.aiEnterprise Security Review
Need a security questionnaire completed or have enterprise procurement requirements? Our team works with enterprise procurement directly.
Talk to our team