Industries · Legal

Privilege ends when client data hits a model. Unless something stops it first.

Law firms and legal departments use agents for contract review, case research and drafting. TapPass makes sure confidential client data never reaches a model unprotected, enforces matter-level separation at the tool boundary, and keeps a per-matter record of every AI touch.

✓Free for one person · No credit card needed

Agent actions · livematter 2026-114
10:02redactShare purchase agreement · party names removed
10:09allowResearch agent · case law search
10:15blockOpposing counsel’s PDF hides an instruction
10:21blockSession pulls files from matter 2026-087
10:30holdDraft filing · for the responsible partner
What you must proveon the record
PrivilegeClient data kept confidentialevidence
Chinese wallsMatter-level separationevidence
GDPRPersonal data in case filesevidence
EU AI ActRecords of AI useevidence
01What agents do in legal

Agents already read your files. Every one of them is privileged.

Three agents firms and legal teams run, and what TapPass watches on each.

Contract review agentReads agreements, flags risky clauses and compares them with your playbook.

Client names, case numbers, party names and deal terms are redacted before the model, with the document structure kept.

Research agentSearches case law and drafts memos.

Each matter is its own session, so research for one client never informs another.

Drafting assistantPrepares briefs and filings.

Filings wait for a lawyer, and the record shows what the AI contributed and whether review happened.

02Where it goes wrong

The risks of ungoverned AI in legal practice. Confidentiality is absolute.

One leaked client name in a prompt can lead to a malpractice claim.

Privileged information in promptsA contract review agent sends client agreements, party names and deal terms included, to an external model. Privilege may be waived.privilege
Cross-client contaminationAn associate uses the same AI tool for client A, the buyer, and client B, the target. The context window carries deal information between adverse parties.Chinese walls
Injection from opposing counselA document from opposing counsel hides instructions that steer your contract analysis, and favourable terms get flagged as risky.indirect injection
No record of AI-assisted workCourts increasingly ask for disclosure of AI use. Without a log, you cannot show what the AI contributed to a brief.disclosure
Associates on consumer AIJunior associates paste client documents into ChatGPT. No policy, no enforcement, and no way to know it happened.shadow AI
AI costs per matter, unboundedAgents make hundreds of model calls per case with no budget. Client billing disputes follow.billing
03The rules that matter

Your professional rules, enforced at the tool boundary.

The risk partner, the conflicts team and finance each say what must hold. TapPass makes it a rule.

The risk partner says“Client and party names never reach a model.”
TapPass runsWHEN prompt contains client or party names THEN redact, keep document structure KEEP redacted text on the record
What happensReview of a share purchase agreementNames redacted, sent on
04What TapPass does

Runtime governance for legal AI. Per matter, per attorney.

Protect privileged information, keep client matters apart and record every AI interaction.

Client data protectionFinds and redacts client names, case numbers, party names and financial terms before they reach a model. Tokenisation keeps the document structure, secret scanning catches credentials.per practice group
Matter-level isolationSession-scoped taint tracking keeps client A’s data out of client B’s session. Per-matter agent boundaries, Chinese walls by rule, conflict check integration.Chinese walls
A record of AI useHash-chained, tamper-evident logs of every AI interaction. Show what the AI contributed and whether human review happened, exported per matter.court-readyper matter
Firm-wide governanceRoute every AI tool through one layer. Associates keep using Copilot or ChatGPT through your firm’s API access, with per-attorney keys, and every call is governed.watching modeper-attorney keys
Document injection defenceIncoming documents are scanned for hidden instructions before your agent reads them, with tool result scanning, taint labels on external data and exfiltration path detection.indirect injection
Per-matter cost trackingAI costs per agent, per matter and per attorney, with hard budget caps, alerts, anomaly detection and token usage per matter for billing.budgetsbilling
05Regulation

Privilege, walls and disclosure. With evidence.

What each rule asks of you, and the part of the answer TapPass gives you.

RegulationWhat it asksWhat TapPass gives you
Professional secrecyPrivilege and confidentialityClient information stays confidential, wherever the work is done.Client and party names redacted before any model, and a record of exactly what left the firm.
Conflicts rulesChinese wallsInformation from one client never informs work for an adverse party.Per-matter sessions and walls enforced at the tool boundary, with every blocked attempt on the record.
Court disclosureAI-assisted workIncreasingly, disclosure of how AI contributed to a filing.A per-matter export of every AI interaction and of the human review that followed.
GDPRPersonal data in case filesLawful, minimal processing of the personal data in your files.Redaction in transit, EU-hosted routing and a record of processing taken from observed traffic.
EU AI ActRecords of AI useLogs and human oversight where AI supports decisions.A tamper-evident record, and approval gates on filings and anything you choose.

No feature guarantees a compliance outcome. TapPass gives you the controls and the evidence that make your own answer defensible.

06Proof

Proof you can check. Not logos you have to trust.

We do not put customer names on a page unless we can show you the work. Here is what you can verify yourself, on your own agents.

Free for one personWatch your own traffic

Connect one agent in watching mode. TapPass records what it would have allowed, held, redacted or blocked, and nothing is blocked while you learn.

ReplayReplay any decision

The same rule and the same call give the same verdict, every time. Replay a decision for your auditor, or a draft rule over last week’s traffic.

Trust CenterRead the paperwork

Security controls, subprocessors, and a DPA on request. Hosted in the EU, built in Belgium.

!
ISO 27001 certification is in progress. We do not hold SOC 2 or ISO 27001 yet.

What we can show you today is the product on your own agents, the documentation behind every control in the Trust Center, and a team that answers your security questionnaire itself.

Next: Government and public sectorCitizen data needs sovereign governance. So do the agents that touch it.
Questions

Legal, in plain answers.

Something else on your mind? Talk to our team.

Does using AI waive privilege?

That is a legal question for your firm, not for software. What TapPass controls is the technical side: client and party names are redacted before a model sees them, and the record shows exactly what left the firm.

Can we enforce Chinese walls for agents?

Yes. Each matter gets its own agent boundary and session. When a session tries to touch a walled matter, the call is blocked and the conflicts team is told.

Can associates keep using Copilot or ChatGPT?

Yes, through your firm’s API access routed through TapPass. Each attorney gets their own key, every call is governed and recorded, and you can start in watching mode without blocking anything.

Can we bill AI costs per matter?

Yes. TapPass tracks token usage and cost per agent, per matter and per attorney, with budget caps and alerts.

Privilege is not just a doctrine. It is a technical requirement.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request