Security
Your requests and files stay under your control
Your data stays in Europe, or on your own servers. Only requests within scope are handled. Every action of your workflows is logged, and you choose the AI model.
Today
Handing your admin processes to a tool is worrying. Rightly so.
- Contracts, invoices, ID documents, HR exchanges: your inboxes hold the most sensitive things your company has.
- Nobody knows where the data goes, or which AI model reads it.
- The day a GDPR question comes up, nobody can say what was processed.
With Loop & Roll
What protects you
-
Your data in Europe, or with you
Our cloud runs in Europe with OVHcloud, with a separate instance for each customer. Or everything is installed on your servers.
-
Only the scope is handled
HR, private or sensitive emails can be excluded. An excluded email never reaches the AI, or any workflow.
-
Everything is logged
Every run, every send and every access change is recorded in the log. You know what was done, when and by which workflow.
A concrete example
An HR email, set aside before any handling
At a manufacturing SME, the hr@ inbox stays out of scope.
- An email arrives hr@
- Scope checked company rule
- Excluded from handling never read by the AI
- Stays in the inbox untouched, for HR
- Decision recorded in the log
Without the jargon
How it works, in plain words
Security is set once, at company level. Every workflow runs inside it.
- Access to your inboxes and business tools is encrypted, with a key unique to your instance. Nobody can read it back.
- The scope applies as each request arrives, before any workflow and before the AI.
- Your AI model or ours: OpenAI, Mistral, Anthropic, or a local model that never leaves your servers.
Integrations
Works with your tools
Security and sovereignty
Your questions
Where is our data stored?
In our cloud, in Europe with OVHcloud, on an instance dedicated to your company: its own database, storage and encryption key. Or on your servers, if you prefer to keep everything in-house.
What about GDPR?
The product is designed with GDPR in mind: only useful requests are processed, histories have a limited retention period and data can be erased. Compliance remains your responsibility, and the product makes it easier.
Can our team review the code?
The product is under a fair-code licence: its source code is meant to be public, so your team or your provider can review it. Its publication is being prepared.
Can our data never leave our premises?
Yes. Install the product on your servers and pair it with a local AI model through Ollama. Your requests and documents are then read, processed and stored on your machines only.
Automate your processes without losing control of your data
While scoping your processes, we set the scope, the hosting and the AI model with you.