Loop is a protocol that provides privacy-preserving human-in-the-loop approvals for AI agents. It enables unphishable, auditable consent flows for agentic AI systems operating in enterprise environments.

How does Loop prevent phishing attacks?

Loop approvals are audience-bound (tied to a specific agent's DID) and action-bound (cryptographically hashed to specific actions). Combined with DIDComm authenticated messaging and out-of-band delivery through the user's device, phishing becomes mathematically impossible.

What is a Loop Proof?

A Loop Proof is a short-lived credential (≤5 minute TTL) that proves a human was present and consented to a specific action. It includes biometric attestation from device secure hardware, audience binding to the requesting agent, and action binding via cryptographic hash.

What standards does Loop use?

Loop is built on established W3C and DIF standards: ZCAP-LD for capability delegation, W3C DIDs for identity, Verifiable Credentials 2.0 for credential format, DIDComm v2 for secure transport, and OpenID4VP for presentation exchange.

Does Loop store biometric data?

No. Biometric templates never leave the device's secure hardware (Secure Enclave/TEE). Loop Wallet uses platform biometric APIs that only provide boolean success/failure signals. The biometric data itself is never exposed to applications.

What is a Loop Receipt?

A Receipt is a durable evidence record that captures what was consented to, what action was executed, and any third-party attestations. Receipts are tamper-evident and can be anchored to transparency logs for audit purposes.

What industries can use Loop?

Loop is designed for any industry deploying AI agents with high-stakes actions: finance (expense approvals, payments), DevOps (production deployments), healthcare (HIPAA-compliant record access), enterprise (customer service, data access), and more.

The Trust Layer for Agentic AI

loop Vision

Building the trust infrastructure that makes AI agents safe, auditable, and human-centered.

Our Vision

The Trust Layer for Agentic AI

AI agents are transforming work. They process expenses, deploy code, handle customer requests, and coordinate complex workflows—tasks that once required constant human attention.

But there's a problem: the trust bottleneck.

Every time an AI agent needs to do something important—move money, access sensitive data, push to production—it has to ask for human approval. And today's approval mechanisms are fundamentally broken. Email links get phished. Chat confirmations get spoofed. Manual review queues create bottlenecks.

The result: AI agents that could work at machine speed are stuck waiting for humans to click through insecure, fragmented approval flows.

What If It Could Be Different?

What if approving an AI action felt as simple and secure as unlocking your phone?

glance • swipe • go

One notification. One biometric confirmation. One verifiable, unphishable approval.

That's Loop.

What Changes

For AI Agents

No more waiting for email replies. No more fragmented approval flows. Loop Proofs are instant, portable across tools, and cryptographically verifiable. Agents can move at machine speed with human oversight built in.

For Organizations

No more screenshot audits. No more compliance anxiety. Every approval generates a Receipt—a tamper-evident record that proves who approved what, when, and why. Auditors can independently verify without trusting anyone's word.

For Users

No more password fatigue. No more wondering if that approval request is legitimate. Loop approvals are bound to specific agents and actions. Phishing becomes mathematically impossible.

Built on Standards

Loop isn't reinventing authorization. It's adding the missing piece.

ZCAP-LD handles capability delegation. DIDs provide identity. DIDComm ensures secure communication. These are proven standards from W3C and DIF.

Loop adds what they're missing: proof that a human was present and consented.

What We Believe

Autonomy requires trust. AI agents can only operate freely when there's a reliable way to verify human consent.

Standards beat silos. Building on existing standards means faster adoption and broader interoperability.

Privacy is non-negotiable. Biometric data never leaves the device. Audit trails don't expose personal information.

Simplicity wins. The best security is the security people actually use. glance • swipe • go.

The AI economy is waiting for trust infrastructure. Loop is building it.

Read the Whitepaper →