Brightloom website screenshot

Brightloom

Brightloom is a San Francisco customer data and customer intelligence platform for restaurant and retail brands. It began as Eatsa, the automated quinoa-bowl restaurant chain, and rebranded to Brightloom in 2019 when Starbucks licensed select components of its Digital Flywheel customer engagement software to the company, took an equity stake and a board seat alongside a $30M round. The product unifies point-of-sale, loyalty, ecommerce and marketing data into a single customer view, reports on data health, runs AI-driven hyper-segmentation and anomaly detection over that data, and recommends the next campaign and audience a brand should target. Brightloom was sold as an end-user SaaS with prebuilt connectors to common POS, loyalty and marketing platforms rather than as a developer platform, and it published no public API reference, developer portal, SDK or machine-readable specification. The company now appears defunct: the last dated item on its own press page is December 2022, the entire operating estate it once held TLS certificates for is gone from DNS — api.brightloom.com, api-prd/api-dev, the cgp.brightloom.com application, its auth0-cgp Auth0 tenant, and the status, support and knowledgebase hosts all NXDOMAIN — brightloom.com publishes no MX record, and only the frozen marketing site remains, with its /about/ page defaced by injected search-spam.

Brightloom is profiled on the APIs.io network. Tagged areas include Company, Customer Data Platform, Customer Intelligence, Restaurant, and Retail.

5.0/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0
0 APIs
CompanyCustomer Data PlatformCustomer IntelligenceRestaurantRetailMarketingLoyaltySegmentationPoint-of-SaleAnalytics

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/brightloom: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Resources

Access & Security 1

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Company 5

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: brightloom
name: Brightloom
description: 'Brightloom is a San Francisco customer data and customer intelligence platform for restaurant and retail brands.
  It began as Eatsa, the automated quinoa-bowl restaurant chain, and rebranded to Brightloom in 2019 when Starbucks licensed
  select components of its Digital Flywheel customer engagement software to the company, took an equity stake and a board
  seat alongside a $30M round. The product unifies point-of-sale, loyalty, ecommerce and marketing data into a single customer
  view, reports on data health, runs AI-driven hyper-segmentation and anomaly detection over that data, and recommends the
  next campaign and audience a brand should target. Brightloom was sold as an end-user SaaS with prebuilt connectors to common
  POS, loyalty and marketing platforms rather than as a developer platform, and it published no public API reference, developer
  portal, SDK or machine-readable specification. The company now appears defunct: the last dated item on its own press page
  is December 2022, the entire operating estate it once held TLS certificates for is gone from DNS — api.brightloom.com, api-prd/api-dev,
  the cgp.brightloom.com application, its auth0-cgp Auth0 tenant, and the status, support and knowledgebase hosts all NXDOMAIN
  — brightloom.com publishes no MX record, and only the frozen marketing site remains, with its /about/ page defaced by injected
  search-spam.'
url: https://raw.githubusercontent.com/api-evangelist/brightloom/refs/heads/main/apis.yml
deliveryModel:
  model: unknown
  open_source: false
  commercial: false
  callable_host: false
  label: Delivery model not determined — needs a product licence on record
  confidence: low
  source:
  - none
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - security
  generated: '2026-09-02'
  method: derived
image: https://www.brightloom.com/assets/components/axl.theme/site/media/fav/apple-touch-icon_v-2.2.png
x-type: company
x-source: harvest:secondary-market
x-tier: stub
x-tier-reason: harvest
specificationVersion: '0.23'
created: '2026-08-08'
modified: '2026-08-14'
tags:
- Company
- Customer Data Platform
- Customer Intelligence
- Restaurant
- Retail
- Marketing
- Loyalty
- Segmentation
- Point-of-Sale
- Analytics
tags_raw:
- Company
- Customer Data Platform
- Customer Intelligence
- Restaurants
- Retail
- Marketing
- Loyalty
- Segmentation
- Point of Sale
- Analytics
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/brightloom-domain-security.yml
- type: Website
  url: https://www.brightloom.com/
- type: Press
  url: https://www.brightloom.com/press/
- type: Careers
  url: https://www.brightloom.com/careers/
- type: ContactUs
  url: https://www.brightloom.com/contact/
- type: LinkedIn
  url: https://www.linkedin.com/company/brightloom
- type: Twitter
  url: https://twitter.com/Brightloom
x-enrichment:
  date: '2026-08-14'
  status: minimal
  artifacts_added: 0
  pass: local-v1
x-coverage:
  state: none
  reason: defunct
  detail: Brightloom's operating estate has been decommissioned — Certificate Transparency shows it ran api.brightloom.com,
    api-prd/api-dev, the cgp.brightloom.com Customer Growth Platform app, an auth0-cgp Auth0 tenant, and status/support/knowledgebase
    hosts, and all sixteen of those hostnames now return NXDOMAIN while brightloom.com carries no MX record, leaving only
    a marketing site frozen at its December 2022 press release whose own nav links (/how-it-works/, /integrations/, /sign-up/)
    404 and whose /about/ page serves injected Indonesian gambling search-spam.
  evidence:
  - url: https://www.brightloom.com/
    status: 200
  - url: https://www.brightloom.com/integrations/
    status: 404
  - url: https://www.brightloom.com/sign-up/
    status: 404
  - url: https://www.brightloom.com/openapi.json
    status: 404
  - url: https://www.brightloom.com/graphql
    status: 404
  - url: https://www.brightloom.com/.well-known/agent-card.json
    status: 404
  - url: https://www.brightloom.com/.well-known/api-catalog
    status: 404
  - url: https://api.brightloom.com/openapi.json
    status: 0
    note: status 0 = no HTTP response at all; curl exits 6 (could not resolve host) because api.brightloom.com is NXDOMAIN.
      Not a 404 — the host itself is gone.
  - url: https://crt.sh/?q=%25.brightloom.com
    status: 200
  checked: '2026-08-14'

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/brightloom"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/brightloom/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/brightloom/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.