Welcome back

Enter your API key to access your governance dashboard.

Lost your key? Send it to my email

Governance Dashboard

Total Calls
—
Allowed
—
Blocked
—
Pending Approval
—
Errors
—

Audit Log

Time Agent Tool Arguments Status
Loading...

Kill-Switch Rules

Loading...

AI-Powered Approval Rules

Loading...

How AI Rules Work

Write rules in plain English. TrustLoop uses AI to evaluate every tool call against your rules — no need for exact tool names.

EXAMPLE RULES
✅ "Any file deletion needs approval"
✅ "Block wire transfers over $5,000"
✅ "Flag any export containing PII data"
✅ "Route all database write operations for review"
RULE ACTIONS
Route for approval — sends notification to your team, pauses the agent until decided

Block immediately — rejects the action with no approval option

Pending Approvals

Actions waiting for your decision
Loading...

Decision History

Loading...

Notification Settings

Configure where TrustLoop sends approval requests when an AI agent needs human sign-off.

Approval request emails will be sent here with one-click Approve / Deny buttons.
Create an incoming webhook in your Slack workspace settings.
Create an incoming webhook connector in your Teams channel.
In your Discord channel settings → Integrations → Webhooks → New Webhook.
✓ Saved
PII Events Masked
—
phones, emails, IBANs, IDs
Secrets Redacted
—
API keys, tokens, passwords
High-Risk Actions
—
delete, wipe, drop operations
Total Scanned
—
tool calls audited

Global Mandate Coverage

Auto-updated as laws change
TrustLoop's architecture satisfies the following regulations through audit logging, human-in-the-loop controls, PII masking, data retention, and right-to-erasure endpoints.

Risk Distribution

How risk is scored
HIGH — delete, wipe, drop, purge, or credential-touching calls
MEDIUM — send, write, export, payment, or bulk data calls
LOW — read-only, query, list, or informational calls

Data Retention

Automatically purge audit logs older than a set number of days. Required under GDPR Art. 5(1)(e), CCPA, and most national data protection laws to avoid holding personal data longer than necessary.

Data Subject Access Request

Download a full structured export of all data TrustLoop holds for your account. Use this to respond to DSAR requests under GDPR Art. 15, CCPA §1798.110, India's DPDPA §11, or any equivalent legislation.

✅ Includes: all tool call logs, API key metadata, tenant record
✅ Format: JSON (machine-readable + human-readable)
✅ PII already masked in stored arguments

Connect your agent

Give your agent a name, pick your integration method, then paste the snippet into your agent code.

Use a unique name per agent — this is how it appears in your audit log dropdown.


          
        


        
        

          
          Waiting for first call… run your agent to see it appear here.
        


        
        

          
How it works

          
    
            
  1. Your agent calls POST /api/intercept before executing each tool.
    2. 
            
  2. TrustLoop checks your approval rules and returns allowed: true/false.
    3. 
            
  3. Your agent only runs the tool if TrustLoop says allowed — blocked calls never execute.
    4. 
            
  4. Every decision is logged and visible in your audit log.
    5.