Runs in Europe · AI agent governance · GDPR and EU AI Act

Agents run your business. Your rules run the agents.

✓No credit card needed·Or try it in your browser →

TapPass rule composer: For Procurement agent, Require a human to approve, at any time, then hold it for approval

Finance sets the rule: payments by the procurement agent need a person to approve.

Works with every model and every MCP server.One base URL. No agent rebuilt.
OpenAIAnthropicMistralGoogle GeminiAzure OpenAIAWS BedrockMeta LlamaDeepSeekxAI GrokKimiPerplexityCoCohereHugging FaceOllamaOpenRouterLiteLLMPortkeyYOYour own models
Claude CodeOpenAI CodexGitHub CopilotCursorVS CodeWindsurfJetBrainsReplitLaLangChainCrCrewAIOpenAI Agents SDKAMAny MCP serverGitHubSlackNotionGmailGoogle DriveMicrosoft 365JiraLinearFigmaObsidianStripeMailchimpSplunkKongMuleSoftSaSalesforceHuHubSpotZeZendesk

Give agents real work. Keep the authority with your people.

RulesWrite rules the way you talkSay what worries you. TapPass understands it and writes the rules. “Pay the wrong supplier”Hold · new IBAN ApprovalsPeople sign what mattersOn their own phone, after confirming exactly what they approve. €1,840.00 · Verpakking Gent✓ Signed with Touch ID RoutingEvery prompt to the right modelPersonal data stays in the EU. Everything else goes to the cheapest model that is good enough. Personal dataMistral Large · EU MCPConnect any tool, safelyEvery MCP tool understood by intent. Each agent sees only what its job needs. 24 tools4 for Procurement agent AI copilotAn AI that keeps it tightIt watches how agents behave, cleans up what nobody uses and proposes what to change. 17 unused toolsRemoved, with your OK SkillsOne skills library for every teamThe best way to do a task, shared once, approved every version. Invoice match v2v3 approved
One authority layer, from the service desk to the plant floor.
IT operationsAgents on tickets, cloud and code, with only the access each job needs.
OT operationsAdvisory agents above the control loop. Nothing reaches equipment without a person.
Business teamsFinance, sales and service agents that move money and customer data.
01Concerns

Say what worries you. TapPass knows what to do about it.

Try one:
Our agents could leak customer data.
TapPass understands
DLKData leaving the company
Customer data reaching a model, a mailbox or a system outside Vandaele.
Who could cause it today
CCCustomer care
Sends email to customers
SOSales outreach
Mails people outside
The rules it proposes
RedactStrip personal data before any prompt reaches a model
HoldMessages with customer data to outside addresses wait for a person
Starts in watching mode. Nothing is blocked while you learn.
Add concern
02Human approval

A person signs what matters. Knowing exactly what they sign.

SSlack · #finance-approvals
Procurement agent wants to pay €1,840.00 to Verpakking Gent NV.
TTeams · Finance
1 payment held by PUR-1 · Review
@Email
Waiting on you: Purchase approvals
TapPass approval on a phone: Procurement agent wants to pay 1,840 euro to Verpakking Gent NV
Before you approve Type the amount
€1,840.00
What happens next?
The invoice is only recorded
€1,840.00 leaves the KBC account
✓ Signed
Lies Peeters, with a passkey“Known supplier, matches PO-4471.”
On the record · chain verified
Learned
Exception added to PUR-1Invoices from Verpakking Gent NV up to €2,500 pass from now on.
Sign in with your identity provider OOkta EMicrosoft Entra ID GGoogle Workspace iitsmesoon ⌘Any SAML 2.0 Nobody approves their own request.
03Deterministic and replayable

Your rules decide, not a model. Replay any decision, get the same answer.

Same input, same rule, same outcome. Replay any call on the record, or test a new rule on last month’s traffic before it touches anything.

Replay a decision
10:07Procurement agentPay €1,840.00 to Verpakking Gent NVHeld · approved
Rule PUR-1 · v4Input a91f…07e2
Replay the decision Replaying under the policy in force… ✓ Same decision. Held for a person, under PUR-1.
On the recordHold · ask a person
Replayed nowHold · ask a person
Test before you switch it on
Draft ruleHold payments to a new beneficiary
Replayed over the last 30 days · 128 payments
Would pass125
Would hold3
Would block0
Read only. Nothing changes until you switch it on.

Rules, not guesses

The verdict comes from your rules, evaluated the same way every time. No model gets to change its mind.

Proof on demand

Replay one call or a whole session. If a replay ever disagrees with the record, you see it.

No surprises in production

See what a rule would have held or stopped on your real traffic, before it runs.

04AI governance copilot

You set the basis. Our AI keeps it tight.

Jorge, the AI inside TapPass, reads every decision on the record. It does the housekeeping nobody has time for and comes to you with proposals. It proposes, you decide.

HousekeepingRemoves what nobody usesIdle tools, rules that never fire, access granted but never called.
AuthorityMoves agents up, or backProposes enforcing when an agent has earned it, holding when it drifts.
BehaviorSpots the rule you are missingLearns from how agents really work and drafts the rule, watching first.
SpendCatches the bill before it landsFlags spikes and proposes a cap or a cheaper route.
Jorge · your TapPass copilotWatching 5 agents · 4 proposals this week
HOUSEKEEPING17 connected tools have not been called in 30 days. Remove them from the agents that never use them?Review 17 toolsKeep✓ 17 tools removed
AUTHORITYSales outreach has run clean in watching for 30 days. Move it to enforcing?EnforceNot yet
BEHAVIORProcurement agent only pays suppliers it has paid before. Hold payments to a new beneficiary?Apply, watching firstDismiss
SPENDSpend on Sales outreach is up 64% this month. Cap it at €200?Set the capSnooze 30 days
05EU routing

Every prompt to the right model. Safe first, then smart.

The prompt
“Remind Jan Peeters that invoice 0912 is due. IBAN BE71 0961 2345 6769.”Customer care agent
1 · Your rules
Personal dataEU-hosted models onlyFallback: block, never leaves
2 · Smart routing
The model
Mistral LargeEU · never leaves
79%of model calls stay in the EU
€612saved this week by smart routing
0routes without a planned fallback
ShadowSee the savings before it routes a single call

Decided per request

Routes match on what the prompt contains or which agent sends it. The agent cannot override them.

Cheaper where it is safe

Optimise for cost, speed or quality. Start in shadow mode and see what you would save.

Never somewhere unplanned

Primary model down? It takes the fallback you chose, or it blocks.

Your keys, your jurisdiction

Bring your own model keys and see which providers keep nothing.

06MCP servers

Connect any MCP server. Give each agent only what its job needs.

EoExact Online9 tools · classified204 calls
KbKBC Business5 tools · classified28 calls
M3Microsoft 365 Mail5 tools · 1 changed, in review227 calls
ZeZendesk5 tools · classified193 calls
VProcurement tools/mcp/v/procurement
Get invoice
Exact Onlineread invoice
Look up supplier
Exact Onlineread records
Create payment
KBC Businessmove money
Send mail
Microsoft 365 Mailsend email
PAGranted to Procurement agent · 4 of 24 tools

Connect it your way

From the catalog, the MCP registry, any MCP address, or an internal REST API through its OpenAPI spec.

Classified by intent

Rules are written on what a tool does, not its name. A new server needs no new policy.

Virtual servers

Pick tools from several servers and expose only those, as one server. Each tool keeps its own rules.

No silent changes

When a server changes a tool, it waits for review before any agent uses it.

07Skills

One skills library for every team. Better with every version.

FFinanceInvoice clerk, Procurement agent
CCustomer careCustomer care agent
SSalesSales outreach
OOperationsOps copilot
Vandaele skills 8 approved
Answer a shipment question v3Customer care
Invoice three-way match v2v3Finance
Verify supplier bank change v1Finance
Customs declaration check v2Operations
Prospect follow-up v1Sales
1Used 1,240 times this month. Blocked 3 times for a missing grant.
2Improved by its owner, An Claes, as version 3.
3Checked for prompt injection and new capabilities.
4Approved, and every agent loads v3 from now on.
Reports

Answers for the board. Evidence for the auditor.

Adoption
214 people use AI through TapPass
59%
of the team · 7 of 9 teams · 96 on a working day
Up 18% on last month. Use outside TapPass is not counted.
Identity and authority

Every agent action carries a passport. Who did it, and on whose authority.

Identity tells you who. Authority tells you what they may do. TapPass signs both into every action, so your auditor today, and your partners’ agents tomorrow, can trust it.

Identitywho is acting
PersonSigned in through Okta, Entra ID or Google
AgentIts own signing key, rotated whenever you want
DeviceA passkey on the approver’s own phone or laptop
Authoritywhat they may do
MandateOnly the tools and capabilities its job needs
RulesYour concerns, checked before the action runs
SignatureA named person approves what matters
Action passport
Vandaele Logistics · 13 Oct 2026, 10:07evt 9f2c4e1a
ActionPay €1,840.00 to Verpakking Gent NVvia KBC Banking · invoice INV-2026-0912
Asked byPieter VosSigned in with Entra ID
Done byProcurement agentSigned with its own key
Under rulePUR-1 · Purchase approvalsPayments over €1,000 need a person
Approved byLies PeetersPasskey · Touch ID · after checking the amount
Signed and chained to the decision before it. Replays to the same outcome. Verifiable by anyone you share it with.
Questions

What teams ask before they start.

Something else on your mind? Talk to our team.

What is TapPass?

TapPass is the authority layer for agentic AI. It sits between your AI agents and the models, tools and data they use, and decides what each agent may do. Sensitive actions wait for a person, and every decision is signed on the record.

Do we have to rebuild our agents?

No. Point your agents at one TapPass base URL and they keep working as before. If you would rather not route traffic through a gateway, call the Verdict API before each action instead.

Where is our data processed?

TapPass runs in the EU. Your rules decide which models may see personal data, and you can bring your own model keys. Details are in the Trust Center.

Is a decision made by an AI model?

No. The verdict comes from your rules, the same way every time. You can replay any decision on the record and get the same outcome, or test a new rule on past traffic before it goes live.

How do people approve an action?

The approver gets a notification in Slack, Teams or email, reviews the request in TapPass and signs it with a passkey on their own phone or laptop. The person who asked can never approve their own request.

Which models and MCP servers work with TapPass?

Any of them. OpenAI, Anthropic, Mistral, Gemini, Llama, your own models, and any MCP server. TapPass classifies each tool by what it does, so your rules keep working when you add one.

Is TapPass really free?

Yes, for one person, with no time limit and no credit card. Start in watching mode: TapPass shows what it would have held or stopped, without blocking anything. When colleagues join, talk to us about Team.

Start free. Watch your agents. Then decide what they may do.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request