Skip to main content

Governance & Change Management

Automation your controller approves, before it ever runs.

Most teams stall on AI in finance for the same reason: not capability, but control. Who can change a workflow? Who approved it? What does it touch? Loopfour answers all three by default. Every workflow is permissioned, reviewed, and logged, so the people who sign the numbers stay in control of how they are produced.

Book a demo

The real blocker

The question is not "can AI do it." It is "who is accountable when it does."

A workflow that anyone can edit and anyone can deploy is not automation. It is an unreviewed change to your financial close. The moment finance work runs without permissions, approvals, and an audit trail, you have traded manual effort for audit risk. Governance is what makes automation safe enough to actually use.

What you get

Control at every layer of the workflow.

1. Role-based permissions

Every user gets a role, and roles map to exactly what they can touch: view, run, edit, or administer. A finance analyst can run an approved workflow without the ability to change what it does. Only designated editors can modify logic; only admins can manage permissions.

2. Approval before deploy

No workflow goes live on someone's say-so. A change is proposed, reviewed by a second authorized person, and only deployed once approved. Maker and checker are never the same person. The clerk who builds a workflow cannot be the one who ships it.

3. Impact analysis on every change

Each proposed workflow or edit arrives with a plain-language summary: which systems it touches, what actions it takes, what data it writes, and what changes from the version before it. Reviewers approve with the full picture, not a leap of faith.

4. Change history & versioning

Every version is retained. See who changed what, when, and why, then roll back to any prior version. Your workflows have a paper trail the way your ledger does.

5. A complete audit trail

Every run, every action, every exception, and every approval is logged and timestamped. Filter by workflow, date, amount, entity, or person. Hand your auditors a record, not a story.

6. Hosted and controlled

Workflows run in a managed, access-controlled environment under SOC 1 and SOC 2, never on an analyst's laptop or in a personal project. Nothing changes without an approval, and nothing disappears when someone leaves.

Who can do what

Permissions that match how finance actually delegates.

Finance workflow permission matrix
CapabilityViewerOperatorEditorAdmin
View workflows & run historyYesYesYesYes
Run an approved workflowNoYesYesYes
Build or edit workflow logicNoNoYesYes
Submit a change for approvalNoNoYesYes
Approve & deploy a changeNoNoNoYes
Manage users & permissionsNoNoNoYes

Roles are configured to your org. Approval authority can require more than one approver for higher-impact workflows.

How a change ships

Every change follows the same controlled path.

  1. 1

    Proposed.

    An editor builds or modifies a workflow in a draft state. Nothing is live.

  2. 2

    Impact analysis.

    Loopfour generates a summary of what the change touches and what it will do.

  3. 3

    Reviewed.

    A separate authorized approver inspects the change and its impact analysis.

  4. 4

    Approved & deployed.

    Only after sign-off does the workflow go live. The approval is recorded.

  5. 5

    Monitored.

    Every run is logged. Exceptions surface to the right person. Repeated exceptions flag that a rule should change, which starts the cycle again, under the same controls.

Show your auditors how it works. We will show you on your stack.

Bring the workflow your team is nervous to automate. We will walk through exactly how it is permissioned, approved, and logged, end to end.