A limited cohort · Governance in a box

Governance in a box. On your own metal.

The authority layer for agentic AI, as a sealed appliance you rack yourself. A local server, an open-weight model running on it, and the record of every action — all inside your walls. No API key to a foreign cloud. Nothing leaves the building.

You would meet both founders. This cohort is small on purpose, and we choose it by hand.

Your hardware · your walls · open-weight model · air-gap ready

Why a box at all

The record of what your agents did cannot live somewhere you don't control.

Most AI governance ships as a service: you send your prompts, your agents' actions and your evidence to someone else's cloud, and you trust the paperwork that says it's fine. For a lot of organisations that is a workable trade. For some, it is not a trade they are allowed to make.

If you are bound by data-residency law, run classified or citizen data, or simply cannot accept that your governance layer phones home, the answer is not a better contract. It is a different shape. The authority layer, the model that reads each action, and the ledger that keeps it — all on hardware you own, in a room you control. That is what the box is.

If it leaves the building, it isn't sovereign.

Your agents act inside your walls. So should the layer that decides what they're allowed to do, and the record that proves what they did.

What's in the box

The whole authority layer, sealed and self-contained.

A local server

A single appliance you rack in your own datacentre. It runs on your metal, on your network, under your change control. No dependency on a vendor cloud staying up, or staying yours.

An open-weight model

The model that reads each agent action is open-weight and runs on the box itself. No inference leaves for a foreign API, and you can see exactly which weights you're trusting.

Your ledger

Every action an agent takes, granted or refused, is written to a record that stays on the box. Queryable, exportable on your terms, and never shared with us or anyone else.

Air-gap ready

The box runs with no route to the internet at all. Updates arrive the way the rest of your secure estate gets them — reviewed, signed, and carried in, not pulled from a CDN.

Who it's for

Organisations that can't send their governance somewhere else.

If any of these describe you, the box exists because the hosted product was never going to clear your review.

Public sector

Government and defence-adjacent bodies where citizen and classified data may not leave national infrastructure, and a foreign inference call is a non-starter.

Regulated & residency-bound

Banks, health, and critical infrastructure under strict data-residency rules, who need agent governance without adding another cross-border processor.

Sovereignty-first

Groups that have simply decided their governance layer will not phone home — and want the model, the decisions and the record all under one roof they own.

We're opening a list of candidates

A small first cohort, chosen by hand.

We are not selling the box to everyone at once. We're taking on a limited group of first sites, working with each one directly to stand the appliance up, and shaping what ships from what those rooms actually need. Tell us who you are and we'll come back to you.

Who you'd meet

Both founders. There is no sales engineer to hand you off to.

What we bring

The appliance, stood up with you, and the model running on your metal.

Why it's limited

A handful of first sites so we can go deep, not wide, on each.

What stays yours

Your hardware, your keys, your ledger. Nothing routes back to us.

Apply for a place

Tell us about your constraints. If the box is a fit, we'll set up a call.

Verify you're human (required)

EU based · no marketing email · we reply within 48h from [email protected]

TapPass.ai · the authority layer for agentic AI