DiscoveryHQ
Loading…
DiscoveryHQ
Loading…
Trust
Here is exactly where we stand today, with nothing rounded up. DiscoveryHQ is operated by a small independent company, and we hold no security or privacy certifications at this time.
Effective 2 August 2026 · Loom Labs AI LLC
DiscoveryHQ is developed and operated by Loom Labs AI LLC. It is a small, independent company — not a large one with a compliance department. We hold no security or privacy certifications. We are not SOC 2 audited, not ISO 27001 certified, and we have not been penetration tested by an outside team. Anyone telling you a young product already has all of that is usually describing an intention.
What we do have is written down and checkable: how the product handles your data is on the Privacy Policy, and how it is built and protected is on the Security page. The register below tracks every framework people ask us about, one row each.
The register
Nine rows. In progress means we are part-way through and you can rely on the described behaviour today. Planned means it has not started.
In progress
We collect only what a check-up needs, use it only for the reasons we listed, and act on requests to see, correct, export or delete it. That is us following the principles. It is not a certification. Nobody has audited us against GDPR or UK GDPR, and no such thing as a GDPR certificate exists for a company like ours to hold.
In progress
If you live in California you can ask what we hold about you, ask for a copy, ask us to delete it, and tell us not to sell or share it — we do not sell or share it in the first place. Today these requests are handled by a person reading email, not by a form on the site.
Planned
There is no DPA you can sign yet. If your company needs one on file before it can use DiscoveryHQ, email us and say so — that is the thing that will move this row.
In progress
The list is on the Privacy Policy, written by the job each company does: AI providers (OpenAI and Google), our database and sign-in provider, our hosting provider, our email provider, a website-crawling provider and a search-results provider. Keeping it current is a standing job rather than a finished one, so it sits here as in progress.
Planned
Not started. No auditor is engaged, no audit window has run, and there is no report we can send you. We intend to do this as the company grows. Until the report exists, this row will keep saying planned.
Planned
Not started either. No certificate, and no certification work under way. Same promise as above: this changes on the day it is genuinely true, and not before.
Not applicable
HIPAA does not apply to us — we do not handle health records. For PCI DSS, card details are entered on Stripe’s own payment pages and never touch our servers or database, which puts us in the smallest scope there is (SAQ A). Stripe, not us, holds the card data and its own PCI certification.
Planned
No outside security team has tried to break the product yet. We plan to have one do it and to say here when it has happened. We are not going to describe our own testing as if someone independent had done it.
Planned
We publish no uptime promise and no response-time promise, because we have nothing to back one with. DiscoveryHQ is hosted on Vercel, and a check-up runs when you press the button — nothing here runs on a schedule.
Available now
You do not need a certificate from us to exercise these. One email to support starts any of them, and none of them costs anything.
Write to support@dicoveryhq.com from the address on your account and say plainly which of the four you want. We check it really is you before we act.
The Privacy Policy covers what we collect and who else sees it. The Security page covers how it is kept, including the parts we have not built yet.
Loom Labs AI LLC
30 N Gould St Ste R, Sheridan, WY 82801, United States
Keeping it honest
Not before, and not in the hopeful direction.
We update this page as each item moves, and we would rather say “not yet” than write a sentence that lets you assume otherwise. A row goes from planned to in progress when the work has actually started, and to live when it is finished and there is something we can show you.
If you find anything anywhere on this site that suggests a certification, an audit or a guarantee we do not have, tell us at support@dicoveryhq.com and we will correct it. Being wrong about this is worse for us than being small.
A free check-up takes a minute or two. No account needed to run it, and a free account saves the report.