Loop is a protocol that provides privacy-preserving human-in-the-loop approvals for AI agents. It enables unphishable, auditable consent flows for agentic AI systems operating in enterprise environments.

How does Loop prevent phishing attacks?

Loop approvals are audience-bound (tied to a specific agent's DID) and action-bound (cryptographically hashed to specific actions). Combined with DIDComm authenticated messaging and out-of-band delivery through the user's device, phishing becomes mathematically impossible.

What is a Loop Proof?

A Loop Proof is a short-lived credential (≤5 minute TTL) that proves a human was present and consented to a specific action. It includes biometric attestation from device secure hardware, audience binding to the requesting agent, and action binding via cryptographic hash.

What standards does Loop use?

Loop is built on established W3C and DIF standards: ZCAP-LD for capability delegation, W3C DIDs for identity, Verifiable Credentials 2.0 for credential format, DIDComm v2 for secure transport, and OpenID4VP for presentation exchange.

Does Loop store biometric data?

No. Biometric templates never leave the device's secure hardware (Secure Enclave/TEE). Loop Wallet uses platform biometric APIs that only provide boolean success/failure signals. The biometric data itself is never exposed to applications.

What is a Loop Receipt?

A Receipt is a durable evidence record that captures what was consented to, what action was executed, and any third-party attestations. Receipts are tamper-evident and can be anchored to transparency logs for audit purposes.

What industries can use Loop?

Loop is designed for any industry deploying AI agents with high-stakes actions: finance (expense approvals, payments), DevOps (production deployments), healthcare (HIPAA-compliant record access), enterprise (customer service, data access), and more.

The trust layer for agentic AI

Consent Infrastructure for the AI Economy

AI agents need human oversight. We're building the infrastructure that makes enterprise-grade consent flows enterprise-ready in minutes, not months. loop turns scattered approval workflows into unified, auditable infrastructure.

Unphishable — approvals bound to specific agents and actions
Instant — biometric confirmation in 2-3 seconds
Auditable — verifiable receipts for every approval

Built for enterprise AI agents

Compliance ready
Enterprise security
Standards compliant

The trust layer AI agents need

Loop adds human-in-the-loop verification to existing capability standards. Agents can act autonomously within their scope—but critical actions require genuine human approval.

Unphishable Approvals

Every Loop Proof is bound to a specific agent and action. Attackers can't redirect approvals or spoof requests—phishing becomes mathematically impossible.

No more email link attacks

Instant Confirmation

Biometric approval in 2-3 seconds. No passwords, no codes, no email round-trips. As simple as unlocking your phone.

glance • swipe • go

Universal Compatibility

Works across any AI agent or tool via standard protocols. One approval flow for your entire AI stack—no fragmented workflows.

One protocol, all your agents

Verifiable Receipts

Every approval generates a tamper-evident Receipt. Cryptographic proof of who approved what, when, and why—no more screenshot audits.

Audit-ready by default

Privacy Preserving

Biometrics never leave your device. Pairwise DIDs prevent cross-service tracking. Full auditability without surveillance.

Your data stays yours

Transparent Audit Trail

Optional anchoring to transparency logs for compliance. Verifiable evidence without exposing personal information.

Compliance without compromise

How Loop works

Three steps that prove human oversight. No passwords, no email links, no fragmented workflows—just cryptographic proof that a real human approved.

Agent requests approval

Your AI agent needs to take a high-stakes action—transfer funds, deploy code, access data. It sends a request to your Loop Wallet with full context: who's asking, what they want, why.

Transparent intent

Human confirms with biometric

You see the request on your device. One glance at the context, one swipe with Face ID or Touch ID. The approval is bound to this specific agent and action—unforgeable and unphishable.

glance • swipe • go

Loop Proof + Receipt generated

A cryptographic Loop Proof is returned to the agent. After execution, a Receipt captures the full evidence chain—consent, action, result. Auditors can verify independently.

Verifiable forever

This is what AI trust looks like

Agents move at machine speed. Humans stay in the loop. Auditors get verifiable proof. That's the power of Loop—the trust layer for the AI economy.

2-3 seconds from request to approval