Frequently asked questions

Everything we get asked – answered directly.

If your question is not answered here, contact the team. Every enquiry is answered by a member of the Looom team – not a chatbot, not a routing system.

Platform & product Privacy & security Deployment & pricing AFIIA 2026

Platform & product

Looom is an AI-native audit intelligence platform. It organises twelve modules into three product lines – Looom (audit execution and documentation), Aura (analytics and reporting), and Innsyte (knowledge and compliance intelligence) – in a single secure environment. AI is embedded across every module, not bolted on after the fact.

It means the platform was designed from the first module outward with artificial intelligence as a core architectural component – not an add-on feature layered onto an existing workflow tool. Risk identification, documentation generation, review workflows, and reporting all have AI embedded at the architecture layer.

The platform is aligned to ISA 315 (Revised 2019), King IV, COBIT 2019, IFRS, and the IIA International Professional Practices Framework. Documentation templates, risk identification schemas, and working-paper structures are designed around these standards. See the Privacy & Security page for the full regulatory alignment table.

No. Looom serves both internal audit departments and external audit / chartered accountancy practices. The two production deployments currently live on the platform are one government internal audit unit and one chartered accountancy practice. The module set covers the shared audit lifecycle that applies to both.

Looom is designed as a full-lifecycle platform – planning, fieldwork, review, and reporting – so it can replace fragmented toolsets. That said, the platform is also modular: firms can adopt specific product lines (Looom, Aura, or Innsyte) independently if a phased transition suits them better. The demo is the best way to map your current stack against the module set.

Privacy & security

No. Client data is never used to train or refine AI models. This is an architectural constraint, not a policy promise. The intelligence layer trains on domain data the firm owns – not on engagement files from other clients. See Privacy & Security for the full technical explanation.

Each client operates in a separate, isolated environment. There is no shared pool of client data and no cross-client inference. Encryption is AES-256 at rest and TLS 1.2+ in transit. Data residency details – including jurisdiction – are covered during the security briefing and tailored to your firm's requirements.

Looom is POPIA-native – designed around the 2025 amendments from the start, including the 48-hour breach reporting window. We use "native" rather than "compliant" because compliance is assessed in context; the architecture is built so that POPIA requirements are met by design, not by policy overlay.

Not without risk. A public AI tool processes whatever is pasted into it; the provider may use that content to train its models; and client data outside the firm's control is a notification event under POPIA. Looom keeps the data inside your environment, does not use it to train anyone's model, and produces outputs that are audit-ready against the frameworks your firm already follows.

Deployment & pricing

Deployment timelines depend on the scope and the modules adopted. A typical onboarding for a mid-size firm – environment provisioning, user setup, methodology configuration, and initial training – is measured in weeks, not months. The demo is the best place to get a scoping conversation started.

Pricing is discussed during the demo conversation and depends on the number of users, the modules adopted, and the deployment scope. We do not publish a rate card because audit environments vary significantly. What we can say: the platform is priced for firms operating in Africa and the Middle East, not adapted from a US or European price point.

Yes. The three product lines – Looom, Aura, and Innsyte – can be adopted independently. All three run in the same secure environment and share the same intelligence layer, so expanding from one to another is seamless. Many firms start with Looom (audit execution) and add Aura (analytics) when they are ready for full-population testing.

Bespoke Solutech (Pty) Ltd holds all contracting and licensing relationships. Looom is the customer-facing brand: the platform you use, the team you engage with, and the name on the stand at AFIIA. Bespoke Solutech is a South African technology company and the developer and operator of the platform.

AFIIA 2026

We run live demos every day of the conference at our stand. Private 30-minute slots can be booked in advance – these fill early, so we recommend booking before you arrive. Drop-in sessions are also available throughout the programme. Stand number and scheduled demo times will be published on the AFIIA 2026 page once confirmed.

We run the same 30-minute walkthrough remotely for audit teams who will not be at the conference. Same platform, same demo. Book a remote walkthrough and we will schedule it around your audit calendar.

Still have a question?

Every enquiry is handled by a member of the Looom team. The conversation starts here.