Looom embeds artificial intelligence across every module of the audit lifecycle – planning, fieldwork, review, and reporting – in a single secure environment where client data is never used to train AI models. Built in Africa, aligned to ISA 315 (Revised 2019), King IV, and POPIA.
Documentation is where audit teams lose the most time. Findings get drafted, rewritten in review, reformatted for the file, and reworked for the final report. The people doing this work are the same people you need for judgement calls – risk assessment, control design, management conversations – that no tool can do for them.
Looom is designed to reduce drafting time by up to 80% in early deployments and to cut review cycles by up to 60%. Not a draft that needs to be rewritten – audit-ready output, first time.
83% of audit departments are piloting or actively using AI tools (Gartner, 2026). The question is whether the tool you choose was built for audit – or adapted to it.
Looom organises twelve AI-integrated modules into three product lines. All three run in the same secure environment and share the same intelligence layer.
IT Audit, Internal Audit, Compliance Management, Risk Management, Combined Assurance, Exception Register, Audit Readiness, Engagement Management, and RFI. Nine modules powered by the same domain-trained intelligence layer.
Full-population testing, built with dashboards designed for auditors rather than data scientists. Configurable fraud-risk criteria, drill-down by account class, and findings that flow directly into Looom AI working papers.
Knowledge Management and Surveys & Self-Assessments. The methodology layer your firm relies on – searchable, version-controlled, and shared across every engagement.
All figures carry qualification language until a verified case study is published.
Every major AI audit platform is built in the United States or Europe and adapted for other regions after the fact. Looom is the opposite. Designed in South Africa, for auditors operating under South African and African regulatory conditions – and the architecture travels.
Designed around the 2025 amendments – 48-hour breach reporting window.
Principle 15 combined assurance, IIA International Professional Practices Framework, and IRBA standards.
The basis for documentation templates, risk identification schemas, and working-paper structure.
Middle East and Africa auditing services (Mordor Intelligence, 2025) – served by tools designed elsewhere.
25–29 May 2026 · CTICC, Cape Town. Join 2,700+ delegates from the African internal audit profession – and see the platform live at our stand.
Looom is live in production across government and private practice.
Government internal audit units running the full audit lifecycle on Looom.
Production deployments across engagements at chartered accountancy firms.
A policy says what a vendor promises to do. An architecture decides what a vendor can do. Looom is built so that client data cannot leave the client's environment and cannot be used to train AI models.
Full security architecture →Each client in a separate secure environment. No shared data pool; no cross-client inference.
Client data never used to train or refine AI models.
AES-256 at rest, TLS 1.2+ in transit, MFA and RBAC at every entry point.
A 30-minute walkthrough with a member of our team, scheduled to fit around your audit calendar. We show you how the platform handles one of your own engagement types – not a generic demo.