Loom Analytics UK LTD

Public Safety (Police / Intelligence)

We capture, transcribe, and analyze evidence from interviews, body cameras, and surveillance at scale in real time. Automatically trigger on keywords and phrases, redact sensitive information, and extract structured data across all content. Supports real-time collaboration, multi-language translation, and secure evidence management workflows.

Features

• Live transcription and translation (35 languages) of audio and video
• Capturing and storing audio and video content at scale
• Single transcription request, editing, production and release workflow
• Collaboration portal with access controls to edit media and transcripts
• Scheduling and managing transcriptionists, analysts and other staff
• Auto redaction of sensitive information from transcripts
• Live monitoring for flagging keywords and phrases in 50 languages
• Automatically pull structured data (names, dates, case numbers) from documents
• Automatically categorize documents by content using AI classification

Benefits

• Produce real time automated transcription and translation at scale
• Reduce transcription and translation costs with AI-powered tools
• Protect sensitive information automatically across all documents
• Streamline transcription production and analysis with digital workflow management
• Manage and collaborate with large teams with ease
• Unified workflow for staff management, capture, and production of transcripts
• Seamless integration into existing customer workflows and systems
• Instantly flag keywords and phrases at scale without human intervention

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@loomanalytics.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

632349275763787

Contact

Mona Datt
+16472513614‬
procurement@loomanalytics.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Capture
  • Document
  • EDiscovery and forensics

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • Chrome, Edge or Safari browsers
  • Windows or Linux or MacOS operating System

User support

• Email or online ticketing support: Yes
• Support response times: Response time same for weekday and weekends.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: The web chat is available on the brochure page as well the application portal. On the brochure site, the users can make general enquiries. And on the application portal, the users can ask any questions relevant to the application use, or suggest improvements or request for new features.
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: 24/7 support through web chats, phone or email. Our support staff is available at all times to address queries and escalate them to the relevant staff as needed. Support is provided free of charge, however, on-site support is available for extra cost. Yes, we provide technical account manager or cloud support engineer on request.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: We have extensive user documentation available publicly to help onboard new users. We regularly host webinars on how to use our application. For enterprise level clients, we can do virtual, hands-on onboarding on request.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Users can extract their data on request. Data will be emailed to the user as a compressed file.
• End-of-contract process: At the end of contract, if the user chooses to close their account, they would have to put in a request to delete their account. On termination, all user data will be erased from the system permanently. Contact information and payment history (not including payment information) will be saved for accounting purposes. This process is free of cost.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: They are available in plain text format and as publicly accessible web pages.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
  • Other
• Application to install: Yes
• Compatible operating systems:
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Some advanced features are only accessible on the desktop. The user interface for the desktop and mobile applications may vary.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Users have access to a ticketing dashboard where they can create service tickets for issues with the application or billing, bugs or feature requests.
• Accessibility standards: None or don’t know
• Description of accessibility: Users cannot change font or theme settings of the application user interface. Users can create service tickets for issues with the application or billing, bugs or feature requests.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: There is detailed documentation on how users can connect to the service via APIs. ; Users can upload media files, submit requests for transcription and get transcripts for historical requests via APIs. Users cannot make any other changes via APIs, for all other actions they have to use the web interface.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
  • Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: We can build custom workflows to enterprise level customers to fit their needs at an additional cost. The client would need to describe their customisation requirements via formal request.

Scaling

• Independence of resources: We have policies set in place for horizontal and vertical scaling of our cloud servers that ensure that our services are highly available and robust. We can provide on-demand resources, allowing our services to easily scale up or down based on your needs. This elasticity is especially to ensure your turnaround times are not impacted during peak workload periods. Our cloud platform is fully scalable and capable of processing thousands of jobs in parallel.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide metrics for turn-around-time for a transcript to get generated, number of transcript requests submitted, number of successful or failed transcriptions, usage metrics
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Data at rest is stored on severs on a Virtual Private Cloud, inaccessible from external networks. Data at rest is always encrypted.
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: If users need to access their data for export this would be sent via compress files to their email on request. ; Users can download transcripts of media they submitted or usage reports through their dashboard.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats: Zip
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats: Json

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Our internal networks are on a private VPC, inaccessible from outside network.

Availability and resilience

• Guaranteed availability: Our Service Level Agreements (SLAs) often require us to maintain 99% uptime, measured monthly, excluding scheduled maintenance. If Customer requests maintenance during these excluded hours, any uptime or downtime calculation will exclude periods affected by such maintenance. Further, any downtime resulting from outages of third party connections or utilities or other reasons beyond Company’s reasonable control will also be excluded from any such calculation. ; ; Users are only charged based on their usage. If the user cannot use the services due to downtime, the user will not incur any charges.
• Approach to resilience: Our data centers are hosted and managed by Amazon Web Services (AWS) and Google Cloud. Further information is available on request.
• Outage reporting: Customers are informed about outages via email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Only Team level admins can access management interfaces for enterprise level clients. Support channels within the application are only accessible by registered users.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We follow information security policies and processes as prescribed by ISO27001 and SOC2 Type 2. These include, data management, access controls, data encryption, incident and disaster management, vendor risk management, and comprehensive security policies. ; ; We have a dedicated Security Officer, and Privacy and Compliance Officer. We have a ISMS Governance Council which oversees our Security and Privacy Programs. This Governance Council directly reports to the Board of Directors.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes are formally documented and aligned with ISO 27001 and SOC 2 Type 2 controls. All service components (infrastructure, applications, and configurations) are tracked throughout their lifecycle using centralized asset inventories, version control systems, and change logs. Changes are initiated through a controlled request process, reviewed and approved by authorized personnel, and tested in non-production environments prior to deployment. Each change undergoes a documented risk and security impact assessment to evaluate potential effects on confidentiality, integrity, and availability. Approved changes are implemented, monitored, and recorded, with rollback procedures in place.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process is aligned with ISO 27001 and SOC 2 Type 2 requirements and is integrated into our overall risk management program. We assess potential threats through regular vulnerability scanning, configuration reviews, penetration testing, and ongoing risk assessments. ; ; Identified vulnerabilities are prioritized based on severity, exploitability, and business impact. Security patches and remediations are deployed according to defined SLAs, with critical vulnerabilities addressed on an expedited basis. ; ; Threat intelligence is sourced from vendor advisories, security monitoring tools, and industry and regulatory security alerts, newsletters and subscriptions.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes are aligned with ISO 27001 and SOC2 Type 2 requirements, providing continuous oversight of our systems and services. We identify potential compromises through centralized log collection, penetration testing, security information and event management (SIEM), anomaly detection, automated alerts and by employees themselves. All alerts are triaged by our Security Officer to assess potential impact and severity. ; ; Confirmed incidents trigger our documented Incident Response Plan, including containment, eradication, and recovery. Critical incidents are addressed immediately, with non-critical issues prioritized based on risk. All incidents are logged, investigated, and reported, and reviews are conducted to strengthen preventive controls.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our incident management processes comply with ISO 27001 and SOC 2 Type2 standards and are formally documented in our Incident Response Plan. We maintain predefined procedures for common events, and more serious ones. We conduct regular incident tabletop exercises. ; ; Users report incidents through dedicated channels to the Security Officer. All reported incidents are logged, categorized, and prioritized based on impact and severity. Our security team investigates and manages incidents following a structured response workflow, including containment, resolution, and recovery. ; ; After closure, we provide detailed incident reports to stakeholders, including root cause analysis, actions taken, and recommendations to prevent recurrence.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We provide trial credits to users to test the system when they signup for an account. These credits are valid for 3 months.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 15%
• Between £1,000,001 and £2,500,000: 25%
• Between £2,500,001 and £5,000,000: 30%
• Over £5,000,001: 40%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@loomanalytics.com. Tell them what format you need. It will help if you say what assistive technology you use.