Industries · SaaS and technology

Ship AI features without shipping your customers’ data.

Your customers want AI features, and they do not want their data flowing to models. TapPass keeps tenant isolation intact, governs what your agents may reach on a customer’s behalf, and gives you the evidence that gets AI features through enterprise security review.

✓Free for one person · No credit card needed

Agent actions · livetenant t-1042
13:01allowSummarise open tickets for tenant t-1042
13:07redactCustomer email and API key removed
13:12blockQuery reaches data of tenant t-2210
13:19blockEnd user prompt asks for other users’ data
13:25capTenant t-1042 at 80% of its AI budget
What you must proveon the record
SOC 2Evidence for your auditevidence
Tenant isolationPer customerevidence
GDPRProcessor dutiesevidence
EU AI ActIf your feature is high-riskevidence
01What agents do in SaaS

AI is now part of your product. Every tenant is in the prompt.

Three agents SaaS teams ship, and what TapPass watches on each.

In-app assistantAnswers your users with their own data.

Every query, record entry and rule is scoped per tenant, so one customer’s data never shapes another’s answer.

Support copilotDrafts replies from tickets and logs.

Personal data, secrets and proprietary data are removed before the model.

Workflow agentActs in your product on a customer’s behalf.

It reaches only the tools that tenant allows, inside that tenant’s budget.

02Where it goes wrong

The AI feature dilemma. Every deal stalls at security review.

You need AI to compete. Your enterprise customers need governance to approve it.

Cross-tenant data leakageYour AI feature runs customer A and customer B through the same model. One customer’s data influences another’s output.tenancy
Security questionnaires block dealsEvery enterprise asks where data goes and how it is logged. Without governance, the AI feature fails security review.security review
Prompt injection from end usersA customer’s end user types malicious input, and the AI feature leaks other users’ data. You are liable.injection
Costs blowing out per tenantOne power user triggers thousands of model calls. Without per-tenant budgets, margins evaporate.margins
Building governance from scratchYour engineers spend months on PII detection, audit logging and access control, while competitors ship.build vs buy
No view of AI behaviourThe feature makes decisions you cannot explain, runs up costs you cannot attribute, and processes data you cannot trace.observability
03The rules that matter

Your tenancy model, enforced on every call.

Engineering, finance, security and the DPO each say what must hold. TapPass makes it a rule.

The CTO says“A tenant’s data never leaves its tenant.”
TapPass runsSCOPE every call to its tenant WHEN data belongs to another tenant THEN block, alert engineering
What happensQuery from t-1042 reaches t-2210 recordsBlocked
04What TapPass does

Ship governed AI features, with drop-in integration.

Stop building governance. Start shipping features, and pass the security review.

Multi-tenant isolationEvery customer is an isolated organisation: queries, record entries and rules scoped per tenant. Session isolation with taint tracking, dedicated deployment for enterprise.per tenanttaint tracking
Evidence for your SOC 2 auditHash-chained, tamper-evident logs show your auditor the full data flow, input to AI output. Trust attestation with signed JWTs, OpenTelemetry and Prometheus metrics.signed JWTsOpenTelemetry
Drop-in integrationMinimal code changes for full governance: an OpenAI-compatible API, Python and TypeScript SDKs, and support for LangChain, CrewAI and LlamaIndex.PythonTypeScript
Per-tenant cost controlBudgets per organisation, per agent and per user, with rate limiting, hard caps, alerts, token usage per tenant and anomaly detection.budgetsrate limits
Customer data protectionFinds and redacts personal data, secrets and proprietary data before the model, with per-customer configuration, per-request classification and watching mode to test rules.watching mode
Fleet observabilityHealth scores per agent, drift detection and canary tests across every agent, with behavioural pacts that keep each one in scope. Catch problems before customers report them.health scorescanaries
05Regulation

What security review asks. Answered from the record.

What each rule asks of you, and the part of the answer TapPass gives you.

RegulationWhat it asksWhat TapPass gives you
SOC 2Your auditEvidence that your controls work, over time.A tamper-evident record of every AI call and decision, and the data flow from input to output.
Tenant isolationCustomer contractsOne customer’s data never reaches another customer.Every call scoped to its tenant, cross-tenant attempts blocked and recorded.
GDPRProcessor dutiesProcess customer personal data only as instructed, with safeguards.Redaction in transit, EU-hosted routing per tenant, and a record of processing.
Security questionnairesEnterprise procurementWhere data goes, how it is logged, who can see it.A Trust Center page to share with prospects, and answers backed by the record.
EU AI ActIf your feature is high-riskRecord keeping and human oversight.Signed, replayable decisions and approval gates where your product needs a person.

No feature guarantees a compliance outcome. TapPass gives you the controls and the evidence that make your own answer defensible.

06Proof

Proof you can check. Not logos you have to trust.

We do not put customer names on a page unless we can show you the work. Here is what you can verify yourself, on your own agents.

Free for one personWatch your own traffic

Connect one agent in watching mode. TapPass records what it would have allowed, held, redacted or blocked, and nothing is blocked while you learn.

ReplayReplay any decision

The same rule and the same call give the same verdict, every time. Replay a decision for your auditor, or a draft rule over last week’s traffic.

Trust CenterRead the paperwork

Security controls, subprocessors, and a DPA on request. Hosted in the EU, built in Belgium.

!
ISO 27001 certification is in progress. We do not hold SOC 2 or ISO 27001 yet.

What we can show you today is the product on your own agents, the documentation behind every control in the Trust Center, and a team that answers your security questionnaire itself.

Next: Financial servicesYour agents handle customer money. Govern them like it.
Questions

SaaS, in plain answers.

Something else on your mind? Talk to our team.

Does TapPass make us SOC 2 compliant?

No tool does that on its own. TapPass gives you evidence for your audit: a tamper-evident record of what your AI features did with customer data. TapPass itself does not hold SOC 2; ISO 27001 certification is in progress.

How much code do we have to change?

Very little. Point your OpenAI-compatible client at TapPass, or use the Python or TypeScript SDK. LangChain, CrewAI and LlamaIndex work as they are.

Can each tenant have its own rules and budget?

Yes. Rules, budgets and the record are scoped per tenant, and enterprise customers can get a dedicated deployment.

What do we show prospects in security review?

A Trust Center page you can share, the data flow from the record, and trust attestation with signed JWTs.

Ship AI features that enterprise customers approve.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request