Security & Trust

# How Loop keeps
your data safe.

Your data is encrypted and kept separate from other customers' data. It is never used to train AI models, and every important change is logged.

### Encrypted in transit and at rest

Industry-standard encryption protects your data in transit and at rest, with sensitive credentials and tokens encrypted on top.

### Your data is yours

We never train AI models on your content, and neither do our AI providers. They process your data under their commercial API terms to fulfill each request.

### Granular access control

Role-based permissions from Owner to Visitor, MFA and directory provisioning via WorkOS, and multi-tenant isolation down to the teamspace level.

### Comprehensive audit trail

Every meaningful change (settings, integrations, API keys, and admin actions) is logged, with automated retention.

AI Data Practices

## We never train AI on your data.

Your documents, prompts, templates, and conversations are never used to train AI models, ours or anyone else's. AI providers process your data under their commercial API terms, which prohibit training on your content. Loop retains operation logs within your organization for quality monitoring.

- Zero training on customer content, ever
- Controls over AI features for each organization
- AI providers process your content under their commercial API terms, no training on it
- Some providers may briefly retain inputs for safety and abuse monitoring, per their published policies

## Compliance & Certifications

Current and in-progress. We publish updates as we achieve them.

SOC 2 (Infra): Via Convex & Vercel

TLS 1.2+: All data in transit

Encryption at rest: SOC 2 infrastructure

GDPR Ready: Data rights features

CCPA Ready: Data rights features

SOC 2 Type II Loop, in progress Coming Soon

## How Loop is secured

Loop runs on SOC 2-certified infrastructure, with a security model built so each organization's data stays separate.

### Encryption

Your data is encrypted in transit and at rest, with sensitive credentials and tokens protected by industry-standard encryption.

### Identity & Access

Authentication, MFA, and directory provisioning run on WorkOS, with role-based access control scoped from Owner down to the teamspace level.

### Infrastructure

Loop runs on SOC 2-certified infrastructure with complete logical isolation between organizations and teamspaces, plus rate limiting and bot detection on AI endpoints.

### Audit & Monitoring

Important account and organization changes are logged with automated retention, backed by real-time operational monitoring.

### Data Control

Export your account data anytime, recover deleted files from a 30-day recycle bin, and request full account deletion, supporting your GDPR data rights.

### Responsible Disclosure

Found a security issue? We take all reports seriously and respond as quickly as we can. We appreciate researchers who help us keep Loop safe.

[security@loopllm.ai](mailto:security@loopllm.ai)

### Enterprise Security Review

Need a security questionnaire completed or have enterprise procurement requirements? Our team works with enterprise procurement directly.

[Talk to our team](https://loopllm.ai/contact)

Governed by Delaware law

· [Privacy Policy](https://loopllm.ai/privacy) · [Terms of Service](https://loopllm.ai/terms) · [security@loopllm.ai](mailto:security@loopllm.ai)

---

Source: https://loopllm.ai/security