Controlled access
Role-based permissions keep workflow viewing, running, editing, deployment, and administration separate.
Security & Compliance
Finance automation with controls your auditors can inspect.
Loopfour runs repeatable finance work inside a governed workflow layer. Permissions, approvals, execution evidence, and exception routing are part of the system, so finance teams can automate without losing control of what changed, who approved it, or what ran.
Control surface
Security is not a checkbox. It is how the workflow runs.
Approval gates
Material workflow changes are reviewed before deploy, with maker-checker controls for finance operations.
Run evidence
Every workflow run records the trigger, actions, approvals, exceptions, outputs, and system writes.
Managed execution
Workflows run in a hosted, access-controlled environment, not on one analyst laptop or private script.
Secure integrations
Where APIs are available, Loopfour connects through secure authorization patterns and scoped access.
Exception visibility
Exceptions route to the right owner and remain attached to the run record for audit and review.
Audit posture
Built for finance teams that have to prove the work.
If you sign off on the numbers, automation that finishes is not enough. You need to know who touched it, what it wrote, what failed, and what evidence exists when audit asks for the run.
Loopfour completed a SOC 2 Type II examination covering February 1, 2025 to January 31, 2026, performed by Percilchofe CPA LLC. The examination covered the Security, Availability and Confidentiality trust services criteria for the Loopfour and JustPaid products. Every control tested in the SOC 2 Type II examination was found operating effectively, with no exceptions noted. Reports are available under NDA through the Loopfour Trust Center.
A SOC 2 report is the result of an examination performed under AICPA attestation standards (opens in a new tab). A SOC 1 report covers controls relevant to financial reporting (opens in a new tab), and the AICPA publishes an overview of the SOC suite (opens in a new tab). For public companies, AS 2201, an audit of internal control over financial reporting (opens in a new tab) sets out how an audit of internal control over financial reporting is performed.
Loopfour supports HIPAA compliance and signs Business Associate Agreements. The HIPAA Security Rule (opens in a new tab) sets the safeguards that apply to electronic protected health information.
- SOC 2 Type IIIncluded
- SOC 1 evidence captured on workflow runsIncluded
- SOC 1 Type IIncluded
- Role-based access controlIncluded
- Workflow version historyIncluded
- Approval records before deployIncluded
- Per-run audit trailIncluded
Bring the workflow you have to defend at audit.
We will show how access, approvals, audit evidence, and exception handling work on your stack before a workflow goes live.
Book a demo