Welcome back

Enter your API key to access your governance dashboard.

Lost your key? Send it to my email

Governance Dashboard

Total Calls
—
Allowed
—
Blocked
—
Pending Approval
—
Errors
—

Audit Log

Time Agent Tool Arguments Status
Loading...

Kill-Switch Rules

Loading...

AI-Powered Approval Rules

Loading...

How AI Rules Work

Write rules in plain English. TrustLoop uses AI to evaluate every tool call against your rules — no need for exact tool names.

EXAMPLE RULES
"Any file deletion needs approval" "Block wire transfers over $5,000" "Flag any export containing PII data" "Route all database write operations for review"
RULE ACTIONS
Route for approval — sends notification to your team, pauses the agent until decided

Block immediately — rejects the action with no approval option

Pending Approvals

Actions waiting for your decision
Loading...

Decision History

Loading...

Notification Settings

Configure where TrustLoop sends approval requests when an AI agent needs human sign-off.

Approval request emails will be sent here with one-click Approve / Deny buttons.
Create an incoming webhook in your Slack workspace settings.
Create an incoming webhook connector in your Teams channel.
In your Discord channel settings → Integrations → Webhooks → New Webhook.
✓ Saved

TrustLoop Verified Badge

Add this badge to your product or website to show your users that your AI actions are monitored, governed, and independently verifiable.

Click the code to select all, then copy. Place it anywhere on your website or app.
View verification page →
PII Events Masked
—
phones, emails, IBANs, IDs
Secrets Redacted
—
API keys, tokens, passwords
High-Risk Actions
—
delete, wipe, drop operations
Total Scanned
—
tool calls audited

Global Mandate Coverage

Auto-updated as laws change
TrustLoop's architecture satisfies the following regulations through audit logging, human-in-the-loop controls, PII masking, data retention, and right-to-erasure endpoints.

Risk Distribution

How risk is scored
HIGH — delete, wipe, drop, purge, or credential-touching calls
MEDIUM — send, write, export, payment, or bulk data calls
LOW — read-only, query, list, or informational calls

Data Retention

Automatically purge audit logs older than a set number of days. Required under GDPR Art. 5(1)(e), CCPA, and most national data protection laws to avoid holding personal data longer than necessary.

Data Subject Access Request

Download a full structured export of all data TrustLoop holds for your account. Use this to respond to DSAR requests under GDPR Art. 15, CCPA §1798.110, India's DPDPA §11, or any equivalent legislation.

Includes: all tool call logs, API key metadata, tenant record Format: JSON (machine-readable + human-readable) PII already masked in stored arguments

Policy Desk

Upload your existing AI policy document. TrustLoop will read it and propose governance rules — you review and approve before anything goes live.

📄
Drop your policy document here
PDF, Word (.docx), or plain text — up to 10MB
or
Previous uploads
No documents uploaded yet

Compliance Reports

Generate a compliance report for any date range. Download as PDF, Word (.docx), CSV, or an evidence pack (ZIP with PDF + CSV + blockchain verification).

Generate new report
Date range
Report template
The report includes an executive summary tailored to the selected compliance framework, ready to share with an auditor or compliance officer.
Notes for auditor (optional)
Previous reports

Tool Registry

Register the tools your agents use. TrustLoop's MCP server will expose them dynamically. Store credentials here so your agents never hold dangerous API keys directly.

Register a tool
Loading…

Connect your agent

Give your agent a name, pick your integration method, then paste the snippet into your agent code.

Use a unique name per agent — this is how it appears in your audit log dropdown.


          
        


        
        

          
          Waiting for first call… run your agent to see it appear here.
        


        
        

          
How it works

          
    
            
  1. Your agent calls POST /api/intercept before executing each tool.
    2. 
            
  2. TrustLoop checks your approval rules and returns allowed: true/false.
    3. 
            
  3. Your agent only runs the tool if TrustLoop says allowed — blocked calls never execute.
    4. 
            
  4. Every decision is logged and visible in your audit log.
    5.