Company · Built in Antwerp

We kept running into the same problem. So we built the layer that was missing.

We spent years deploying AI agents for enterprises, and the same governance gaps showed up on every project, for every client. TapPass is the authority layer we needed ourselves.

Company
Cogniqor BV
Headquarters
Antwerp, Belgium
Hosting
EU region
Backed by
Start it @KBC · VLAIO
Founders
Jens Bontinck · Jonathan Berte
Focus
The authority layer for agentic AI
01Built from real deployments

Not proofs of concept. Production, in regulated industries.

What if the agent reads data it should not? How do we prove to the auditor what it did? What if it runs away and burns the budget overnight?

We built and deployed automation agents, data pipelines and customer-facing assistants for enterprises, in banking, insurance and professional services. The same questions came back every single time.

They were not hypothetical. An agent looped for hours because nobody had set a budget limit. A customer service bot surfaced internal pricing data. An operations agent ran for six months before anyone in security knew it existed.

So we kept building the same guardrails from scratch: custom logging, manual budget checks, ad hoc access controls. It worked, but it did not scale, and it would not have survived an audit.

  • 01VisibilitySecurity did not know how many agents were running, or what data they touched.
  • 02IdentityShared API keys. You could not tell agents apart, scope their permissions, or revoke one without breaking the rest.
  • 03EnforcementPolicies on paper, with nothing at run time to enforce what agents were allowed to do.
  • 04Audit trailLogs caught prompts but missed tool calls, data flows and the chain of decisions.
  • 05ProportionalityBlock everything, or allow everything. No way to size governance to each agent.
02So we built it

We set out to stop rebuilding guardrails. Every enterprise needed the same thing.

TapPass began as a proxy between our own agents and the model providers. Every request checked against our rules, every action on the record.

RuntimeNot documentation

Controls that enforce, not guidelines that suggest.

ProportionalNot binary

Governance that fits each agent, from watching to a person on every payment.

EvidenceNot assertions

A tamper-evident record, not a developer’s recollection.

EnablementNot prevention

More agents with confidence, not fewer agents out of fear.

03What we believe

We are not building TapPass because AI is dangerous. We are building it because AI is valuable, and that value is at risk without governance.

The answer is not to avoid the technology. It is to govern it well enough that the CISO can say yes.

Every CISO who blocks AI because the risk cannot be measured is making a rational decision. The cost of standing still is real too.

We want to take an active part in AI innovation, in a governed way. That is not a contradiction. It is the whole point.

04Why Europe

Built in Belgium, on European infrastructure. A choice, not an accident.

European companies run AI under GDPR, DORA, NIS2 and the EU AI Act at the same time. Governance that holds up here holds up everywhere.

Cogniqor BV, AntwerpHosted in the EUPersonal data routed only to EU modelsClear GDPR processor boundaryDPA on requestYour own model keys
05Team

The people behind TapPass. Innovation and governance, together.

Jens Bontinck
Jens BontinckCo-founder and CEO

Engineer turned founder. Formerly in the Office of the CTO at ML6, where he spent years building and deploying AI systems for enterprises in banking, insurance and professional services. He saw teams ship agents quickly, then scramble when security, compliance or legal asked what those agents were doing. He leads product, engineering and architecture.

LinkedIn
Jonathan Berte
Jonathan BerteCo-founder

More than a decade where AI meets enterprise strategy. As CEO of Robovision he scaled an AI vision platform across manufacturing, logistics and retail. He knows what it takes to sell AI into regulated environments, and how governance becomes the enabler of adoption. He drives strategy, partnerships and go to market.

LinkedIn
Start it @KBCBacked by Belgium’s largest startup accelerator.
VLAIOSupported by Flanders’ agency for innovation and entrepreneurship.
06How we work

Six commitments that shape the product.

Honest about the problemAI governance is hard. We say what works, what does not, and what we are still figuring out.
Built from deploymentEvery feature exists because we needed it in production, not because it looked good in a demo.
Partners, not vendorsWe work with security teams, not around them, and fit into the infrastructure you already run.
European by convictionData residency, regulatory proximity and accountability, built for the European reality.
Governance enables speedWith the rules in place, teams can go faster, not slower.
Proportional, alwaysNot every agent needs the same controls. Watch the low risk, enforce on the high risk.

Govern your agents well enough that your CISO can say yes.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request