# Identity infrastructure for regulated deployments.

When your AI agents operate in finance, healthcare, defense, or legal — “the AI did it” is not an acceptable answer. Loomal gives every agent a verifiable, auditable identity that satisfies the regulators you answer to.

## Maps to the frameworks your auditors require.

### Finance

- FINRA · SEC · SOX  
  Delegation chains satisfy communication attribution requirements. Every agent email is DKIM-signed with sender identity headers auditors can verify.

### Healthcare

- HIPAA · 21 CFR Part 11  
  Unique identity per agent satisfies HIPAA's entity identification mandate. Vault encryption meets technical safeguard requirements for ePHI access.

### Defense

- CMMC · NIST 800-171  
  Fine-grained permission scopes enforce least-privilege access. Audit trails log every credential access and email action with delegation context.

### Legal

- FRCP · FRE 502  
  Tamper-evident delegation chains provide the provenance trail e-discovery demands. Every agent action is attributable to the authorizing human.

## Enterprise features

### Everything your security team will ask about.

- **BYOK encryption**  
  Bring your own encryption keys. Vault credentials are encrypted with your KMS-managed keys — we never see plaintext.

- **SSO / SAML**  
  Single sign-on with your identity provider. Okta, Azure AD, Google Workspace — connect once, enforce everywhere.

- **Delegation chains**  
  Every agent action traces back to the human who authorized it. Cryptographically verifiable via DKIM. Revoke the human, everything downstream stops.

- **Audit logs**  
  Every email, credential access, and TOTP generation is logged with identity, timestamp, and delegation context. Export to your SIEM.

- **99.99% SLA**  
  Enterprise-grade uptime guarantee. Dedicated infrastructure available for organizations that require isolation.

- **Custom domains & data residency**  
  Agents send from your domain. Choose where your data lives. Meet sovereignty requirements without compromise.

## Let's talk about your requirements.

30 minutes. We'll cover compliance needs, agent fleet size, deployment timeline, and the questions your security team asked us to answer.