Loom AI

Data-handling profile

Trains on input

No — does not train on customer inputs

Retention

User-controlled; videos and all associated AI-generated data (such as transcripts and summaries) are retained as long as the video exists in the user's active library. Deleting a video moves it to the Trash, where it is permanently deleted after 30 days (or sooner if the Trash is manually emptied).

Data region

United States (hosted on Amazon Web Services)

Certifications

SOC 2 Type IIISO/IEC 27001GDPRCCPA

DPA available

Yes

Breach history

In June 2020, a CDN caching misconfiguration briefly exposed some user dashboards and video thumbnails to other logged-in users. The issue was resolved within hours; no underlying databases or video files were compromised.

EU AI Act

Loom AI acts as a general-purpose AI (GPAI) tool for video transcription, translation, and text summarization. It does not fall into any banned or high-risk categories under the EU AI Act, meaning its obligations are limited to transparency and technical documentation.

Sources

• https://support.loom.com/hc/en-us/articles/14757366367389-Loom-AI-Privacy-and-Security
• https://www.loom.com/privacy
• https://www.loom.com/security
• https://www.loom.com/terms

Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.

Change history

No material changes recorded since monitoring began.