At Looki, we’re pleased to share that we have completed our System and Organization Controls 2, or SOC 2 Type I, audit.
Looki L1, a life memory camera, is designed to help people capture everyday moments hands-free and turn them into useful memories, stories, and insights. Because those moments can be deeply personal, privacy and security have to be part of how the product works and how the company operates behind the scenes.
What SOC 2 Type I means
SOC 2 is a recognized framework for assessing how a company manages customer data and protects the systems that support its services.
A SOC 2 Type I audit looks at whether a company’s system description and controls are suitably designed at a specific point in time, meaning it helps answer whether the right policies, systems, and processes are in place to protect customer data.
A SOC 2 Type II audit goes further by reviewing whether those controls operate effectively over time.
For users, the simplest way to understand SOC 2 Type I is this: we have taken an important step by putting a stronger security foundation in place and having that foundation reviewed by an independent auditor.
What was reviewed
As part of the SOC 2 Type I audit process, we worked with Johanson Group LLP to review internal controls related to information security.
The review covered areas such as security policies, procedures, infrastructure, data security, logical access, change management, backup management, business continuity, disaster recovery, incident response, and other critical parts of our operations.
These areas may not always be visible inside the product, but they matter. They help shape how access is managed, how systems are changed, how data is handled, how incidents are addressed, and how security practices improve over time.
Why this matters for a personal AI wearable
Looki L1 is a personal AI wearable. That makes trust especially important.
When you use Looki, you may be capturing parts of real life: family time, travel, routines, conversations, reminders, and moments you want to remember later.
Those moments are not just files. They are personal.
That is why our privacy and security work is built around a few clear principles:
-
You should understand when Looki is active.
-
You should control when content is uploaded.
-
You should be able to review and delete your content.
-
Your personal data should not be used to train public AI models.
-
Security should support the experience quietly in the background.
SOC 2 Type I supports this broader commitment by strengthening the internal systems that underpin the product experience.
How we approach privacy at Looki
SOC 2 is one part of our broader privacy and security program. The product itself is designed to give users more control over their data.
Content stays local by default. By default, captured content is stored locally on the device. We do not believe every personal moment should automatically become cloud data.
Cloud AI is user-controlled. When cloud-based AI analysis is needed, users choose when to upload content for processing. Uploads happen with user permission.
Personal data is not used to train public AI models. Your family moments, conversations, routines, and personal experiences are not used to train public AI models.
Users can review, manage, and delete content. Privacy should be something users can act on directly. Through the Looki app, users can review, manage, and delete captured content.
Looki includes visible and physical privacy cues. Looki uses visible indicators and system sounds to help make device activity clearer. When the camera is intentionally covered or facing inward, visual AI functions automatically stop.
For a personal AI product, these details matter. Users should understand what stays local, what gets uploaded, what can be deleted, and how the product behaves in real life.
One step in a growing security program
Completing SOC 2 Type I is an important step and part of a larger privacy and security program we will continue to improve.
As Looki grows, we will keep strengthening our internal controls, reviewing our systems, and making our data practices easier for users and partners to understand.
Personal AI should help people remember more of life.
It should also respect the trust those memories deserve.
Completing our SOC 2 Type I audit is another step toward that standard.
0 comments