Colossyan

AI video platform for corporate training and L&D with multilingual AI avatars

Loom AI

AI-powered async video messaging for teams

Colossyan

Moderate

16/25

Loom AI

Moderate

16/25

Score Breakdown

DimensionColossyanLoom AI

Data Residency

Where is your data stored and processed?

Colossyan: Hosted in Germany (EU) and UK. No customer-selectable EU-only residency option. UK hosting sits outside EU jurisdiction post-Brexit.

Loom AI: Loom hosts data primarily in the US with some EU hosting available. As part of Atlassian, data residency options may expand to align with Atlassian's broader infrastructure.

3/5

Hosted in Germany (EU) and UK. No customer-selectable EU-only residency option. UK hosting sits outside EU jurisdiction post-Brexit.

3/5

Loom hosts data primarily in the US with some EU hosting available. As part of Atlassian, data residency options may expand to align with Atlassian's broader infrastructure.

Legal Jurisdiction

Which laws govern the company and your data?

Colossyan: UK limited company. Post-Brexit UK is outside EEA but maintains a GDPR-equivalent regime (UK GDPR). Hungarian and US operational presence.

Loom AI: Atlassian is incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Atlassian offers Standard Contractual Clauses and Data Processing Agreements for GDPR compliance.

3/5

UK limited company. Post-Brexit UK is outside EEA but maintains a GDPR-equivalent regime (UK GDPR). Hungarian and US operational presence.

3/5

Atlassian is incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Atlassian offers Standard Contractual Clauses and Data Processing Agreements for GDPR compliance.

Data Retention & Training

Is your data used for model training?

Colossyan: Explicit policy: does not train on customer materials. Limited exception only for custom avatar recordings (used solely for that customer, deleted after termination).

Loom AI: Administrators can configure retention policies for team workspaces. Videos can be set to expire after a certain period. Users can delete individual recordings at any time.

4/5

Explicit policy: does not train on customer materials. Limited exception only for custom avatar recordings (used solely for that customer, deleted after termination).

3/5

Administrators can configure retention policies for team workspaces. Videos can be set to expire after a certain period. Users can delete individual recordings at any time.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Colossyan: SOC 2 referenced in official documentation (type not confirmed). ISO 27001 not publicly confirmed. Vanta-powered trust centre.

Loom AI: Benefits from Atlassian's certification portfolio including SOC 2 Type II and ISO 27001. Atlassian maintains a comprehensive trust and security program.

3/5

SOC 2 referenced in official documentation (type not confirmed). ISO 27001 not publicly confirmed. Vanta-powered trust centre.

4/5

Benefits from Atlassian's certification portfolio including SOC 2 Type II and ISO 27001. Atlassian maintains a comprehensive trust and security program.

Regulatory Fit

Suitability for regulated industries and professional services

Colossyan: GDPR compliant with SCCs for international transfers. Good for L&D and compliance training use cases but lacks EU-specific legal incorporation. Suitable for mid-market European enterprises.

Loom AI: Suitable for general business use with GDPR and CCPA compliance. Enterprise plan offers additional security controls. Not specifically certified for HIPAA or financial regulatory use.

3/5

GDPR compliant with SCCs for international transfers. Good for L&D and compliance training use cases but lacks EU-specific legal incorporation. Suitable for mid-market European enterprises.

3/5

Suitable for general business use with GDPR and CCPA compliance. Enterprise plan offers additional security controls. Not specifically certified for HIPAA or financial regulatory use.

Total Score

16/25

Best For

Colossyan

Best for privacy-conscious teams who need strong data retention controls.

Loom AI

Best for teams that prioritise certifications (scores 4/5) and need a bronze-tier tool.

Detailed Comparison

Colossyan vs Loom AI: Trust & Compliance Comparison

Colossyan (Colossyan, GB) scores 16/25 overall with a Bronze (Moderate) trust badge. AI video platform for corporate training and L&D with multilingual AI avatars. Loom AI (Atlassian, US) scores 16/25 with a Bronze (Moderate) trust badge. AI-powered async video messaging for teams.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 3/5.

●Colossyan (3/5): Hosted in Germany (EU) and UK. No customer-selectable EU-only residency option. UK hosting sits outside EU jurisdiction post-Brexit.

●Loom AI (3/5): Loom hosts data primarily in the US with some EU hosting available. As part of Atlassian, data residency options may expand to align with Atlassian's broader infrastructure.

#### Legal Jurisdiction

Both score equally at 3/5.

●Colossyan (3/5): UK limited company. Post-Brexit UK is outside EEA but maintains a GDPR-equivalent regime (UK GDPR). Hungarian and US operational presence.

●Loom AI (3/5): Atlassian is incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Atlassian offers Standard Contractual Clauses and Data Processing Agreements for GDPR compliance.

#### Data Retention & Training

Colossyan leads with 4/5 vs 3/5.

●Colossyan (4/5): Explicit policy: does not train on customer materials. Limited exception only for custom avatar recordings (used solely for that customer, deleted after termination).

●Loom AI (3/5): Administrators can configure retention policies for team workspaces. Videos can be set to expire after a certain period. Users can delete individual recordings at any time.

#### Certifications

Loom AI leads with 4/5 vs 3/5.

●Colossyan (3/5): SOC 2 referenced in official documentation (type not confirmed). ISO 27001 not publicly confirmed. Vanta-powered trust centre.

●Loom AI (4/5): Benefits from Atlassian's certification portfolio including SOC 2 Type II and ISO 27001. Atlassian maintains a comprehensive trust and security program.

#### Regulatory Fit

Both score equally at 3/5.

●Colossyan (3/5): GDPR compliant with SCCs for international transfers. Good for L&D and compliance training use cases but lacks EU-specific legal incorporation. Suitable for mid-market European enterprises.

●Loom AI (3/5): Suitable for general business use with GDPR and CCPA compliance. Enterprise plan offers additional security controls. Not specifically certified for HIPAA or financial regulatory use.

Certifications at a Glance

Certification	Colossyan	Loom AI
ISO 27001	No	Yes
SOC 2	Yes	No
SOC 2 Type II	No	Yes

Overall Verdict

Colossyan and Loom AI are closely matched on trust and compliance, with scores of 16/25 and 16/25 respectively. The right choice depends on your specific regulatory requirements and existing technology stack.

Frequently Asked Questions

Which is better for EU compliance, Colossyan or Loom AI?

Colossyan has a TrustKit score of 16/25 while Loom AI scores 16/25. Both tools are currently rated equally across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Colossyan and Loom AI compare on data residency?

Colossyan scores 3/5 for data residency (Hosted in Germany (EU) and UK. No customer-selectable EU-only residency option. UK hosting sits outside EU jurisdiction post-Brexit.), while Loom AI scores 3/5 (Loom hosts data primarily in the US with some EU hosting available. As part of Atlassian, data residency options may expand to align with Atlassian's broader infrastructure.).

Are Colossyan and Loom AI GDPR compliant?

Both tools are assessed across five compliance dimensions. Colossyan has a regulatory fit score of 3/5 and Loom AI scores 3/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool