Controlled access
Role-based permissions keep workflow viewing, running, editing, deployment, and administration separate.
Security & Compliance
Finance automation with controls your auditors can inspect.
Loopfour runs repeatable finance work inside a governed workflow layer. Permissions, approvals, execution evidence, and exception routing are part of the system, so finance teams can automate without losing control of what changed, who approved it, or what ran.
Control surface
Security is not a checkbox. It is how the workflow runs.
Approval gates
Material workflow changes are reviewed before deploy, with maker-checker controls for finance operations.
Run evidence
Every workflow run records the trigger, actions, approvals, exceptions, outputs, and system writes.
Managed execution
Workflows run in a hosted, access-controlled environment, not on one analyst laptop or private script.
Secure integrations
Where APIs are available, Loopfour connects through secure authorization patterns and scoped access.
Exception visibility
Exceptions route to the right owner and remain attached to the run record for audit and review.
Audit posture
Built for finance teams that have to prove the work.
If you sign off on the numbers, automation that finishes is not enough. You need to know who touched it, what it wrote, what failed, and what evidence exists when audit asks for the run.
Loopfour is SOC 2 Type II certified. The examination covered February 1, 2025 to January 31, 2026, was performed by Percilchofe CPA LLC, and covered the Security, Availability and Confidentiality trust services criteria for the Loopfour and JustPaid products. Every control tested in the SOC 2 Type II examination was found operating effectively, with no exceptions noted. Reports are available under NDA through the Loopfour Trust Center.
Loopfour is SOC 1 Type I certified for the Loopfour platform as of June 15, 2026, by Assurion Services LLC, covering the design of controls relevant to customers' internal control over financial reporting.
A SOC 2 report is the result of an examination performed under AICPA attestation standards (opens in a new tab). A SOC 1 report covers controls relevant to financial reporting (opens in a new tab), and the AICPA publishes an overview of the SOC suite (opens in a new tab). For public companies, AS 2201, an audit of internal control over financial reporting (opens in a new tab) sets out how an audit of internal control over financial reporting is performed.
Loopfour signs Business Associate Agreements (BAAs) with customers. The HIPAA Security Rule (opens in a new tab) sets the safeguards that apply to electronic protected health information.
- SOC 2 Type II certifiedIncluded
- SOC 1 evidence captured on workflow runsIncluded
- SOC 1 Type I certifiedIncluded
- Role-based access controlIncluded
- Workflow version historyIncluded
- Approval records before deployIncluded
- Per-run audit trailIncluded
Request reports and agreements
- SOC 2 Type II report: request it under NDA in the Loopfour Trust Center.
- SOC 1 Type I report: request it under NDA in the Loopfour Trust Center.
- Business Associate Agreement: request one through our sales team.
AI and your data
Loopfour builds, runs and maintains your workflows as a managed service. Each workflow is deterministic: it runs the steps that were reviewed and approved, in the same order, every time. Outside agent steps, no finance action is selected by a model at runtime. A change to what a workflow does goes through the same approval path as the first version.
Data is encrypted at rest and in transit, credentials for connected integrations are stored outside workflow definitions, and customer data is never used to train models.
Bring the workflow you have to defend at audit.
We will show how access, approvals, audit evidence, and exception handling work on your stack before a workflow goes live.
Book a demo