Free for one. Quoted for the rest.
One person can run TapPass for nothing, today, with the real policy engine and the full record behind it. When governing agents becomes a team’s job, or the whole organisation’s, tell us what you are running and we will put a number on it.
No feature ladder. The whole product, from the free plan up.
The policy engine, human approvals, per-tool permissioning, the tamper-evident record and EU hosting are in the free plan exactly as they are in Enterprise. We do not hold the audit trail back to sell you an upgrade, because the audit trail is the part that makes everything else defensible. Paywalling it would mean selling governance that cannot be proven.
Three plans, one rulebook.
Free
For one person. Point your agents at TapPass, watch every call they make, and write your first rules against real traffic. Observe-before-enforce is how every sane rollout starts, and it should not cost anything.
Free. No card.
Team
For a team. Enforcement on, approvals routed to Slack or email, per-tool permissioning across your MCP servers, and every decision streaming to the SIEM you already run. Shared policies, shared record, one place to answer “who allowed that”.
Ask for a quote.
Enterprise
For the whole organisation. Run TapPass in your own tenancy, bring your own model keys, whitelist the models you will accept, and get the DPA, security review and support commitments procurement will ask for before anything is signed.
Ask for a quote.
Pick by who is answerable, not by a feature list.
“It is just me so far.”
You are experimenting, or you are the one person who noticed the agents needed governing. Start free. Nothing is time-limited and nothing is withheld, so what you learn on the free plan still holds later.
“My team ships this to production.”
Several people write rules, someone has to approve the risky calls, and the record needs to reach your existing tooling. That is Team. Tell us what you are running and we will quote it.
“Security and procurement are involved.”
There is a questionnaire, a DPA, an opinion about where data may live, and a signature that is not yours. That is Enterprise, and the quote covers the deployment and the paperwork, not just the software.
The record, and the right to leave. Both are yours.
Every plan gets the full tamper-evident record, not a sampled or truncated one, because an audit trail with a paywall in the middle is not evidence. And every plan can export it. If you stop paying us, you keep what happened. Governance you cannot take with you is just another lock-in, and we are not going to sell you that.
If none of the three fit.
Startups
Building an AI product that enterprises are asking to audit? The startup programme is white-label, with revenue share or per-seat licensing and no upfront platform fee for early stage.
See the programme →Regulated industries
If DORA, Solvency II, GDPR Article 9 or NIS2 decides your architecture, start from the industry pages. The constraints shape the deployment, and the deployment shapes the quote.
By industry →