Trust, security and legal. In one place, in plain words.
How TapPass protects your data, where we stand on security and certification, who helps us run the service, and every legal document your procurement team will ask for.
✓DPA on request · ISO 27001 in progress
- Hosting
- EU, Belgium
- Data protection
- GDPR (Regulation 2016/679)
- AI regulation
- Built for the EU AI Act
- Certification
- ISO 27001 in progress
- Legal entity
- Cogniqor BV, Antwerp
- VAT / KBO
- BE 1033.796.306
- Service status
- status.tappass.ai
- Data protection officer
- [email protected]
- Security contact
- [email protected]
What we can show you today. And what we will not claim.
A hostile instruction can change what an agent wants. It cannot change what the agent is allowed to do.
We do not claim a certification we do not have. The controls behind it are described here and in our security documentation, which we share on request, usually under a mutual NDA.
Six controls on every call, from least privilege to signed images for on-premises releases.
Read more Data and sovereigntyEU routing for personal data, what the record keeps, and where TapPass can run.
Read more Service statusLive uptime and incident history for the TapPass platform.
status.tappass.ai Report a vulnerabilityFound a security issue? Tell us and we will respond quickly.
[email protected]Your data stays yours. We process it to run and secure the service. We never sell it.
TapPass sits between your AI agents and the models and tools they use. It checks every request against your rules before anything happens, and screens it for personal data and secrets.
Two ways it runs. With the Verdict API, TapPass only returns the decision and your own systems talk to the model, so TapPass never sees the content. With the gateway, TapPass passes the approved request to the model on your behalf, using your own account with that provider, and checks the answer before it is returned.
What leaves the EU. TapPass itself runs in the EU and your organisation is set to the EU region by default. The only point where information can leave is the model, and only if you choose one hosted outside the EU. Your rules can enforce EU-only models.
For legal bases, retention, transfers and your rights, see the Privacy Policy. Data processing terms are in our DPA, on request from [email protected].
Who helps us run TapPass. And where.
We give advance notice before adding a new subprocessor. Each link opens that provider’s data processing terms.
| Provider | Purpose | Region | Terms |
|---|---|---|---|
| Google Cloud | Application hosting and database | EU (Belgium) | DPA |
| Cloudflare | DNS | Global | DPA |
| Resend | Transactional email | United States | DPA |
| PostHog | Product analytics | EU | DPA |
| Sentry | Error monitoring | EU | DPA |
| OpenAI | Powers the in-product assistant (Jorge), which you can turn off | United States | DPA |
| Google (sign-in) | Single sign-on, when you enable it | Global | Terms |
| Microsoft (sign-in) | Single sign-on, when you enable it | Global | DPA |
| Model providers below are engaged only when you enable that model with your own key (BYOK). | |||
| Anthropic | Model inference, on activation | United States | Terms |
| Google Gemini | Model inference, on activation | United States | Terms |
| Mistral AI | Model inference, on activation | EU (France) | Terms |
| Groq | Model inference, on activation | United States | Terms |
| DeepSeek | Model inference, on activation | China | Site |
| Moonshot (Kimi) | Model inference, on activation | China | Site |
| MiniMax | Model inference, on activation | China | Site |
| Alibaba (Qwen) | Model inference, on activation | China | Terms |
Tools we use to run our own business, such as code hosting, CRM and monitoring, process our data, not the data you put into TapPass. They are described in the Privacy Policy.
Read them now. Or ask, and we send them quickly.
The agreement that governs access to and use of TapPass.
Read LegalPrivacy PolicyWhat personal data we process, why, how long we keep it, and your rights under the GDPR.
Read LegalCookie PolicyThe cookies we use, what they do and how to manage your choice.
ReadCookie settings LegalImprintCompany identification and legal notices, as Belgian law requires.
Read On requestData Processing AgreementA signed DPA (Article 28 GDPR) for your procurement and security review.
Request via [email protected] On request, under NDASecurity documentationSecurity overview and questionnaire responses. Certifications once we hold them.
Request via [email protected]The frameworks we build around. Not certificates we claim.
How does TapPass handle the information our agents send?
TapPass checks every request against your rules before anything happens, and allows, holds or blocks it. It screens each request for personal data and secrets in memory. If your rules cannot be loaded, the request is blocked: nothing passes unchecked.
Does TapPass see our content in every setup?
No. With the Verdict API, TapPass only returns the decision and your own systems talk to the model. With the gateway, TapPass passes the approved request to the model on your behalf, with your own provider account, and checks the answer before it is returned.
What does TapPass keep?
A record of every decision: what was allowed, held or blocked and why, the model, the cost, and which agent, person and organisation were involved. The record keeps redacted content and metadata; raw sensitive data is never persisted. You can switch content off so only the decision record is kept.
Where is our data stored, and for how long?
In a database in the EU, in Belgium, with encrypted backups. You choose the retention period. When a record reaches it, TapPass deletes it completely, content included.
Can you erase someone on request?
Yes. An erasure request removes that person’s information across the platform, including the text of their requests and responses, while the audit trail stays verifiable. Backups clear on their normal cycle.
Who can see our data?
Only your organisation. Separation between customers is enforced in two independent ways. Inside your organisation, everyone sees summaries and administrators see detail. TapPass staff cannot change your data; in rare support cases an administrator can open a read-only view of your workspace for at most 30 minutes, and that view is written to the same tamper-evident record.
Does any data leave the EU?
TapPass itself runs in the EU and your organisation is set to the EU region by default. Information leaves the EU only if you choose a model hosted outside it, and your rules can enforce EU-only models. The built-in assistant uses a US-based model and can be turned off.
Trust is a record, not a promise.
Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.
✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request