Trust Center

Welcome to the Infinity Loop Trust Center. Infinity Loop provides a Software as a Service (SaaS) System. This Trust Center is designed to provide you with a clear and accessible overview of our security and trust practices, demonstrating our commitment to protecting your data and maintaining the reliability of our services.

At Infinity Loop, we understand the importance of trust in the digital landscape. We are dedicated to upholding the highest standards of security, availability, and confidentiality for our Software as a Service System. Our commitment is evidenced by our successful completion of a SOC 2 Type 2 attestation, covering the period of April 1, 2026, to June 30, 2026. This independent examination confirms the suitability of the design and operating effectiveness of our controls based on the AICPA's Trust Services Criteria for Security, Availability, and Confidentiality.

Our robust security posture is built upon a foundation of carefully designed and implemented controls within our system. We utilize a range of secure cloud computing, storage, and networking services, including Amazon Elastic Container Service (ECS), AWS Lambda, Amazon RDS, Amazon DynamoDB, Amazon Simple Storage Service (S3), AWS Web Application Firewall, AWS CloudFront, and AWS Certificate Manager. We also employ monitoring and management services like AWS CloudWatch and automated vulnerability management with Amazon Inspector.

Furthermore, Infinity Loop emphasizes a strong internal culture of security. We have established training programs around information security, requiring all full-time employees to complete annual training to ensure they understand their obligations and responsibilities. Our formal Code of Conduct, approved by management and accessible to all employees, reinforces our commitment to ethical practices, and all employees must accept it upon hire. Management also defines clear roles and responsibilities to oversee the implementation of our Information Security Policy across the organization.

While we are responsible for our service commitments and system requirements, and for designing, implementing, and operating effective controls within our system, we also acknowledge the role of subservice organizations and user entities. This Trust Center provides detailed information on these practices, offering transparency into how we safeguard your information and maintain the integrity of our services.