Start free
Security and compliance

Enterprise-grade security. Built into every conversation.

Loop is engineered from the ground up to protect your company's institutional knowledge. With ISO 27001 certification, centralised admin controls and complete audit logging, your team gets real-time collaboration without giving up governance or data sovereignty.

Request security packet Contact security team
Audit log Live
Northwind Studio · Admin console
Export
TLS 1.3 in transit AES-256 at rest SSO enforced
Sarah Dlamini signed in with SSO
196.25.14.8 · Johannesburg
Sign-in
09:44:49
Jonathan Moyo restricted sign-up to @northwind.studio
Domain setting
Domain
09:44:12
Priya Naidoo viewed Launch-plan.pdf
File access · # hl-rollout
Guest
09:43:35
Michael Botha locked # finance
Channel lock
Permission
09:42:58
Jonathan Moyo exported audit records
Legal hold · # board
Export
09:42:21
Unknown user failed sign-in, rate limited
41.13.88.201 · 5 attempts
Blocked
09:41:44
Conversations in this workspace never train external AI models.
ISO 27001 certified
Information Security Management System (ISMS), independently audited.
AES-256 and TLS 1.3
Data encrypted at rest and in transit.
Zero LLM training
Your private conversations never train external AI models.
Full audit visibility
Granular admin logs and multi-tenant access controls.
01 — Certified baseline

ISO 27001 certified security.

Loop is developed and operated by Rysis Software, an ISO/IEC 27001:2022 certified organisation. Our ISMS is audited by an independent third party.

ISO/IEC 27001:2022
Rysis Software · audited annually
Rigorous risk management
Proactive threat monitoring, vulnerability scanning and risk mitigation protocols.
Operational control
Strict policies for code deployment, system infrastructure and employee access.
Continuous compliance
Independent annual audits confirm our controls keep pace with emerging threats.
Need our certificate or security documentation for a vendor review? Request our security packet →
02 — Governance

You decide who's in, and what they see.

Administrative governance and granular permissions keep you in charge of your digital workspace.

Domain verification and identity control
Limit access to verified company email domains, or enforce single sign-on (SSO).
Role-based access control
Owner, Admin, Member and Guest roles control channel creation, task execution and system settings.
Controlled multi-organisation access
Work in external channels without switching tenants. Guests never see your internal directory or private channels.
Admin invite approvals
Require admin approval before guests or new users join sensitive project channels.
How guest isolation works
Guests see one channel. Nothing else.
Northwind StudioYour organisation
# generalHidden from guests
# financeHidden from guests
Company directoryHidden from guests
# hl-rolloutShared
Priya NaidooGuest
Harbour Logistics. Invited to one channel, approved by an admin.
# hl-rolloutOnly access
03 — Audit and compliance

Every admin action, on the record.

Exportable, structured audit logs mean you never lose track of an admin action or configuration change.

Authentication logs
Sign-ins, IP addresses, failed login attempts and password resets.
Permission changes
Role updates, admin grants, channel locks and domain setting changes.
Guest and external activity
See when guests join or leave channels, view files or submit forms.
eDiscovery ready
Export complete activity records for internal investigations, legal holds or compliance reviews.
04 — Encryption and privacy

Your data is yours. Full stop.

Every message, file and recording is protected with industry-leading cryptography.

Zero AI data mining
Your messages, transcripts and calls are never used to train public AI models.
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest, across every storage volume and database.
Data leak and exfiltration safeguards
Policies stop credentials, API keys or financial data being shared across organisation boundaries.
Private AI on Loop Pro
Meeting summaries, transcription and action items run on your data without feeding public models.
Secure Capture recordings
Chronodesk Capture recordings live in secure cloud storage, with token-based links and permission-restricted playback.
High availability

Built to stay up.

99.9%
Cloud infrastructure
Highly redundant cloud data centres with automated failover and a 99.9% uptime architecture.
Regional cloud deployment and data sovereignty
Host your organisation's data in the cloud region that meets your residency and sovereignty requirements.
Continuous monitoring
24/7 uptime and anomaly detection, with automated rate limiting against DDoS and brute-force attempts.
For IT and procurement

Security questions, answered.

How does ISO 27001 compare to SOC 2?

ISO 27001 is the internationally recognised benchmark for information security management systems. Like SOC 2 Type II, it proves through independent third-party audits that an organisation actively manages data security, access control, risk and operational safety.

Can external guests see my internal team directory?

No. Guests invited to a channel only see the members and context inside that channel. They can't view your internal channels, direct message rosters or company directory.

Are conversations and AI meeting transcripts stored securely?

Yes. Messages, attachments, AI transcripts and meeting summaries are encrypted with AES-256 at rest. Access follows your organisation's role-based permissions.

Does Loop support custom data retention schedules?

Loop Free keeps unlimited history with no forced expiry. On Loop Pro, admins can set compliance retention rules or place legal holds when required.

Ready to review our full security posture?

Download our ISO 27001 overview, request a Data Processing Agreement (DPA), or speak directly with our security team.

Request security packet Contact security team
Read privacy policy → Read terms of service → Start using Loop →