Brightloom

Brightloom is a San Francisco customer data and customer intelligence platform for restaurant and retail brands. It began as Eatsa, the automated quinoa-bowl restaurant chain, and rebranded to Brightloom in 2019 when Starbucks licensed select components of its Digital Flywheel customer engagement software to the company, took an equity stake and a board seat alongside a $30M round. The product unifies point-of-sale, loyalty, ecommerce and marketing data into a single customer view, reports on data health, runs AI-driven hyper-segmentation and anomaly detection over that data, and recommends the next campaign and audience a brand should target. Brightloom was sold as an end-user SaaS with prebuilt connectors to common POS, loyalty and marketing platforms rather than as a developer platform, and it published no public API reference, developer portal, SDK or machine-readable specification. The company now appears defunct: the last dated item on its own press page is December 2022, the entire operating estate it once held TLS certificates for is gone from DNS — api.brightloom.com, api-prd/api-dev, the cgp.brightloom.com application, its auth0-cgp Auth0 tenant, and the status, support and knowledgebase hosts all NXDOMAIN — brightloom.com publishes no MX record, and only the frozen marketing site remains, with its /about/ page defaced by injected search-spam.

Brightloom is profiled on the APIs.io network. Tagged areas include Company, Customer Data Platform, Customer Intelligence, Restaurants, and Retail.

5.0/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
0 APIs
CompanyCustomer Data PlatformCustomer IntelligenceRestaurantsRetailMarketingLoyaltySegmentationPoint of SaleAnalytics

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 5.0/100 · minimal
Contract Quality 0.0 / 25
Developer Ergonomics 0.0 / 20
Commercial Clarity 0.0 / 20
Operational Transparency 0.0 / 13
Governance 0.0 / 12
Discoverability 5.0 / 10
Agent readiness — 0/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/brightloom: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Resources

Access & Security 1

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Company 5

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: brightloom
name: Brightloom
description: 'Brightloom is a San Francisco customer data and customer intelligence platform for restaurant and retail brands.
  It began as Eatsa, the automated quinoa-bowl restaurant chain, and rebranded to Brightloom in 2019 when Starbucks licensed
  select components of its Digital Flywheel customer engagement software to the company, took an equity stake and a board
  seat alongside a $30M round. The product unifies point-of-sale, loyalty, ecommerce and marketing data into a single customer
  view, reports on data health, runs AI-driven hyper-segmentation and anomaly detection over that data, and recommends the
  next campaign and audience a brand should target. Brightloom was sold as an end-user SaaS with prebuilt connectors to common
  POS, loyalty and marketing platforms rather than as a developer platform, and it published no public API reference, developer
  portal, SDK or machine-readable specification. The company now appears defunct: the last dated item on its own press page
  is December 2022, the entire operating estate it once held TLS certificates for is gone from DNS — api.brightloom.com, api-prd/api-dev,
  the cgp.brightloom.com application, its auth0-cgp Auth0 tenant, and the status, support and knowledgebase hosts all NXDOMAIN
  — brightloom.com publishes no MX record, and only the frozen marketing site remains, with its /about/ page defaced by injected
  search-spam.'
url: https://raw.githubusercontent.com/api-evangelist/brightloom/refs/heads/main/apis.yml
image: https://www.brightloom.com/assets/components/axl.theme/site/media/fav/apple-touch-icon_v-2.2.png
x-type: company
x-source: harvest:secondary-market
x-tier: stub
x-tier-reason: harvest
specificationVersion: '0.20'
created: '2026-08-08'
modified: '2026-08-14'
tags:
- Company
- Customer Data Platform
- Customer Intelligence
- Restaurants
- Retail
- Marketing
- Loyalty
- Segmentation
- Point of Sale
- Analytics
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/brightloom-domain-security.yml
- type: Website
  url: https://www.brightloom.com/
- type: Press
  url: https://www.brightloom.com/press/
- type: Careers
  url: https://www.brightloom.com/careers/
- type: ContactUs
  url: https://www.brightloom.com/contact/
- type: LinkedIn
  url: https://www.linkedin.com/company/brightloom
- type: Twitter
  url: https://twitter.com/Brightloom
x-enrichment:
  date: '2026-08-14'
  status: minimal
  artifacts_added: 0
  pass: local-v1
x-coverage:
  state: none
  reason: defunct
  detail: Brightloom's operating estate has been decommissioned — Certificate Transparency shows it ran api.brightloom.com,
    api-prd/api-dev, the cgp.brightloom.com Customer Growth Platform app, an auth0-cgp Auth0 tenant, and status/support/knowledgebase
    hosts, and all sixteen of those hostnames now return NXDOMAIN while brightloom.com carries no MX record, leaving only
    a marketing site frozen at its December 2022 press release whose own nav links (/how-it-works/, /integrations/, /sign-up/)
    404 and whose /about/ page serves injected Indonesian gambling search-spam.
  evidence:
  - url: https://www.brightloom.com/
    status: 200
  - url: https://www.brightloom.com/integrations/
    status: 404
  - url: https://www.brightloom.com/sign-up/
    status: 404
  - url: https://www.brightloom.com/openapi.json
    status: 404
  - url: https://www.brightloom.com/graphql
    status: 404
  - url: https://www.brightloom.com/.well-known/agent-card.json
    status: 404
  - url: https://www.brightloom.com/.well-known/api-catalog
    status: 404
  - url: https://api.brightloom.com/openapi.json
    status: 0
    note: status 0 = no HTTP response at all; curl exits 6 (could not resolve host) because api.brightloom.com is NXDOMAIN.
      Not a 404 — the host itself is gone.
  - url: https://crt.sh/?q=%25.brightloom.com
    status: 200
  checked: '2026-08-14'