Trust · Sovereignty

Your data stays in Europe. And in your hands.

TapPass is EU hosted by design. Sensitive content is redacted in transit, raw data is never stored, and your model keys never leave your control. For the strictest environments, it runs on your own servers.

✓DPA on request

How your data is handledVandaele Logistics
Where TapPass runsHosted in the EUEU region
Personal data in promptsRouted only to EU-hosted modelsstays in the EU
Sensitive contentRemoved before it movesredacted
Raw dataThe record keeps redacted content and metadatanot stored
Model keysEncrypted, in your vaultyours
This week 79% of model calls stayed in the EU 0 calls with personal data left the EU
01How your data is handled

Governed. Not hoarded.

Hosted in the EUThe governance runtime runs in a European region. No transatlantic hop for your traffic.EU region
Routed by your rulesPrompts with personal data go only to EU-hosted models. If none is available, the call is blocked, never sent elsewhere.EU routingfallback: block
Redacted, not retainedThe record keeps redacted content and metadata. Raw sensitive data is never persisted.never stored
Your keys, your vaultBring your own model keys, and see which providers keep nothing.BYOKzero retention
European, end to endBuilt in Belgium by Cogniqor BV, under EU law, with a clear GDPR processor boundary.Antwerp
Yours to take with youExport the full record at any time. If you leave, you keep what happened.export
02Where it runs

Three ways to deploy. One rulebook.

TapPass cloudEU hosted, live in minutes

We run it for you in a European region. The fastest start, with a DPA on request.

Your tenancyInside your own cloud

For Enterprise: TapPass runs in your own environment, under your own controls.

On-premisesOn your own servers

Signed images and a signed licence. Air-gapped deployments on request, with our team.

03Regulation

Ready for the questions you will be asked.

The evidence auditors, clients and regulators ask for, on demand.

Clear GDPR processor boundaryData-handling mapDPA on requestRecords of processing, GDPR Art. 30Record keeping, EU AI Act Art. 12Human oversight, EU AI Act Art. 14
Questions

Sovereignty, in plain answers.

Something else on your mind? Talk to our team.

Where is TapPass hosted?

In the EU. Enterprise customers can also run it in their own tenancy or on their own servers.

Can personal data reach a model outside the EU?

Not if your rules say so. Prompts with personal data are routed only to EU-hosted models, and if none is available the call is blocked.

What does TapPass store?

Redacted content and metadata for the record. Raw sensitive data is never persisted.

Do you sign a DPA?

Yes, on request, with a clear GDPR processor boundary.

Keep your data in Europe. Keep your agents useful.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request