Last updated October 21, 2026
These notes keep the Loopfour marketing site aligned with current compliance status and customer agreement language. Commercial terms, data processing terms, business associate terms, and security exhibits are governed by the signed customer agreement where one exists.
Loopfour is used for finance workflows that may touch invoices, payments, customer records, contracts, approvals, and operational evidence. Because those workflows vary by customer, the public site does not replace a signed order form, data processing addendum, business associate agreement, security exhibit, or other negotiated contract. Treat this page as a public summary of current positioning and verification status, not as a universal promise about every deployment.
Customers evaluating Loopfour should review both the standard product controls and the workflow-specific configuration they plan to deploy. Questions about retention, access, audit logs, approval ownership, protected health information, or regulated financial data should be resolved before production activation. Loopfour can support those reviews with current security materials and agreement-specific language.
If a statement on another page appears broader than these notes, these notes should be treated as the controlling public summary until the relevant agreement says otherwise.
Loopfour is SOC 2 Type II certified. The examination covered February 1, 2025 to January 31, 2026, was performed by Percilchofe CPA LLC, and covered the Security, Availability and Confidentiality trust services criteria for the Loopfour and JustPaid products. Every control tested in the SOC 2 Type II examination was found operating effectively, with no exceptions noted. Reports are available under NDA through the Loopfour Trust Center.
Loopfour is SOC 1 Type I certified for the Loopfour platform as of June 15, 2026, by Assurion Services LLC, covering the design of controls relevant to customers' internal control over financial reporting.
The SOC 1 Type II audit has not been completed. A Type II report is not currently available.
No blanket GDPR compliance claim is made. Data processing terms are handled through customer-specific agreements when applicable.
Loopfour signs Business Associate Agreements (BAAs) with customers.
For legal, privacy, or security review, contact sales@loopfour.ai. The review process can cover data handling, subprocessors, security documentation, deployment assumptions, and workflow-specific requirements before production use.
