What does DataTether do?

DataTether is a governed layer between AI and your ERP. Connect SAP, Odoo, Oracle, or Dynamics once and DataTether auto-generates the MCP tools, live dashboards, and human approval gates your team needs — with no custom server, no hosting, and no integration project.

Which ERPs does DataTether connect to?

DataTether connects to any OData-compatible ERP, including SAP, Odoo, Oracle, and Microsoft Dynamics.

Which AI clients does DataTether support?

DataTether works with any Model Context Protocol (MCP) compatible AI client, including ChatGPT, Claude, Claude Code, Manus, and custom agents. One connection serves them all — no rebuilding when you switch models.

How does DataTether keep AI actions safe?

Every AI-initiated write to the ERP is paused at the DataTether approval gate and waits for a named human to review and confirm. Reads flow through directly. Every action — identity, payload, approver, decision, and outcome — is recorded in a complete audit trail.

How long does setup take?

From connection to working AI tools usually takes the same hour. There are no custom MCP servers to build and no infrastructure to deploy — DataTether auto-discovers your ERP metadata and generates the tools, dashboards, and approval gates automatically.

Do I need developers to use DataTether?

No. DataTether needs zero engineers. Hiring one senior integration engineer is a six-figure decision before they ship anything; DataTether delivers AI tools, live dashboards, and approval gates without writing a single line of code.

ENTERPRISE SECURITY & COMPLIANCE GATEWAY·ZERO-TRUST PROXY

Security without compromise. AI without the risk.

Giving AI access to your core ERP shouldn't mean gambling with production data. DataTether enforces a zero-trust execution boundary: zero secrets in prompt memory, strict role-based isolation, and mandatory human sign-off on every mutation.

Start $0 Sandbox Trial Review Vault Architecture

Enforced in hardware and edge proxy architecture · Not system prompt instructions

0 Secrets

In Prompt Memory

Vault enclave isolation

100% Gated

Human-in-the-Loop

Zero unreviewed writes

mTLS 1.3

NetWeaver Pinning

Automated CSRF prefetch

SOX Ready

Immutable SIEM Export

SHA-256 HMAC hash chain

Security Gateway Cockpit · Active Interceptor

PROXY_ACTIVE

INTERCEPTED MUTATION CALLGATE ID: #GW-98214

POST /sap/opu/odata/sap/API_SALES_ORDER_SRV/A_SalesOrder('4500008123')

Staged Atomic $batch ChangesetAWAITING APPROVAL · 9m 42s TTL

+ DR 4,500.00 EURGL 110000 (Accounts Receivable)

- CR 4,500.00 EURGL 200000 (Revenue Clearing)

Authorized Operator: [email protected]

Vault: AES-256-GCM Enclave

SHA-256: 7f8a9e... Verified

ARCHITECTURAL COMMITMENTS

Four laws of enterprise AI safety.

These aren't soft guidelines or prompt instructions. They are hard architectural boundaries enforced at the proxy layer before any packet reaches your ERP.

01WRITE SAFETY

Atomic $batch Gate

No AI mutates production without human sign-off.

Mandatory human approval gate

The AI can analyze, query, and propose transactions, but it cannot commit them alone. Every write, update, or delete pauses for an authorized human to inspect and sign.

Target: SalesOrder(4500008123)10m TTL

+ BlockReason: [REMOVED]Status: APPROVED

Approver: [email protected] [SIGNED]

02VAULT ENCLAVE

AES-256-GCM Enclave

Passwords never touch the AI’s memory.

Hardware-encrypted vault isolation

ERP credentials live exclusively in hardware-encrypted vaults. No prompt, log, client app, or model runtime ever sees or stores your secrets.

Vault Instance ID:#vlt-7781-eu-central

Enclave State: AES-256-GCMISOLATED

LLM Context Leakage: 0 BYTES

03ACCESS CONTROL

Least Privilege

The AI has no more access than the human operating it.

Strict ERP role inheritance

An assistant operating for a sales rep can only access records permitted by that rep’s specific SAP PFCG role. Zero backdoor superuser privileges.

Mapped Principal:sales_rep_west

SAP Authorization: Z_SD_SALES_REPVERIFIED

Backdoor Escalation: BLOCKED (Least Privilege)

04COMPLIANCE

SHA-256 SIEM Chain

Every action leaves an immutable paper trail.

Cryptographic audit accountability

Every tool invocation, human decision, and atomic execution is cryptographically signed and streamed to your enterprise SIEM in real time.

SIEM Stream: Splunk · DatadogSYNCED

SHA-256 HMAC: e3b0c44298fc1c149afbf4c8996fb92427ae...

SOX Section 404 Audit State: 100% Deterministic

ZERO-TRUST INTERCEPTION PIPELINE

What happens between an AI prompt and your database.

Every AI request is intercepted by DataTether before your ERP receives it. Identity is verified, operation scope is checked, secrets are resolved, and mutations pause for human authorization.

0112ms

Authenticate

Validate caller identity, organization membership, and cryptographic token signature via OAuth 2.1.

0218ms

Authorize

Enforce tenant isolation boundaries and verify underlying ERP role allowances for the requesting user.

0324ms

Resolve

Fetch connection secrets on-demand from encrypted vault enclave inside protected Edge Functions with zero memory caching.

048ms

Classify

Tag requested operation as safe deterministic read, gated atomic mutation, or multi-step workflow.

05Human TTL

Gate & Review

Pause mutating calls; present visual confirmation diff card to authorized human approver before execution.

0632ms

Atomic Audit

Execute atomic $batch changeset with automatic rollback and stream cryptographically signed audit log to SIEM.

The Proxy Invariant: AI models never obtain direct ODBC, RFC, or unrestricted database credentials. By routing all interactions through DataTether’s proxy edge, every interaction produces an auditable SHA-256 HMAC event before execution.

HARDWARE ENCLAVE & IDENTITY FEDERATION

Zero passwords in prompt memory. Period.

Zero ERP secrets in prompt context or client devices. Full identity federation with your existing corporate Okta or Entra ID tenant.

Credential Storage & Vault Pattern

AES-256-GCM Hardware Encryption

Secrets are stored in hardware-encrypted Supabase Vault tables. DataTether instances only retain opaque vault reference IDs. Credentials resolve solely inside protected Edge Functions at request time and are never written to disk or logs.

Encrypted at rest with AES-256-GCM hardware keys

Opaque secret reference IDs on client instances

Zero process-level memory caching of passwords

Automatic field redaction from all debug logs

Instant one-click vault key rotation & revocation

Zero secret transmission into AI model context

Authentication & Identity Modes

Okta, Entra ID, & OAuth 2.1

DataTether integrates directly into enterprise identity architectures to ensure every AI invocation carries an authenticated, auditable principal.

OAuth 2.1 Bearer Token

RFC 6749 · 8414

Standards-compliant enterprise MCP authentication with scoped role claims and cryptographically signed JWTs.

Corporate SSO & JWT Mapping

SAML · OIDC

Reuses your existing enterprise identity provider (Okta, Microsoft Entra ID) to enforce individual user authorizations.

Basic Auth with Vault Isolation

Hardware Enclave

Safely maps legacy NetWeaver credentials through hardware vault resolution without runtime or log exposure.

Scoped Machine Tokens

mTLS Pinning

Cryptographically bounded machine tokens with granular entity allowances, rate limiting, and instant kill-switch revocation.

SECURITY ARCHITECTURE · DIRECT VS GOVERNED

Two ways to connect AI to ERP. Only one survives an audit.

The difference between an enterprise-grade AI architecture that passes SOC 2 and SOX compliance audits, versus a dangerous unmonitored backdoor into your ERP.

OPERATIONAL CHALLENGE

DIRECT UN-GOVERNED AI

WITH DATATETHER SECURITY GATEWAY

01ERP Credential Storage

Direct Un-Governed:Hardcoded in plaintext .env files or agent memory, risking catastrophic leakage in prompt transcripts or git repositories.

With DataTether:Hardware-isolated Supabase Vault enclave with opaque reference IDs. Edge Functions decrypt on-demand with zero caching.

02Write Transaction Safety

Direct Un-Governed:AI agents make direct, unmonitored API calls to SAP, risking partial writes, dangling ledger entries, and inventory corruptions.

With DataTether:Every write requires verified human sign-off via interactive diff cards. Mutations execute in atomic $batch units with automatic rollback.

03User Role Respect

Direct Un-Governed:Connected via a shared superuser service account, giving every AI user unrestricted access to all company records.

With DataTether:Principle of least privilege. DataTether maps each request to the caller’s actual SAP/ERP authorization profile via SSO & OAuth 2.1.

04Compliance & Audit Trail

Direct Un-Governed:Disjointed application console logs that cannot prove who approved a transaction, triggering immediate SOX compliance failures.

With DataTether:Immutable cryptographically chained event log (SHA-256 HMAC) streaming directly to enterprise SIEM platforms (Splunk, Datadog).

05Prompt Leakage & Privacy

Direct Un-Governed:Raw ERP tables dumped into third-party AI completion contexts, exposing confidential customer margins to model training memory.

With DataTether:Client-side sandboxed MCP apps and dynamic edge PII redaction shield sensitive records completely from model training data.

CISO & AUDIT FAQS

What your CISO is actually thinking.

Technical answers for infosec teams evaluating zero-trust Model Context Protocol deployment on SAP.

Schedule Technical Security Review

Harden your first connection

Don’t wait for an audit to fix AI security. Test in fifteen minutes.

Hardware-encrypted isolation. Strict role inheritance. Zero blind writes.

We will help you turn a real read or approval workflow into governed AI actions, reviewable UI, reusable prompts, and confirmation gates before any sensitive write can run.

Request guided access

A good first step is small: one service, one user outcome, one visible control boundary.

Months of dev time eliminated

Auto-generated tools replace weeks of custom MCP server development.

No infrastructure to run

Fully managed. Nothing to install, host, or maintain.

Instant dashboards and UI

Live tables, KPIs, and review screens — no frontend developer needed.

One setup, every AI client

ChatGPT, Claude, Manus, custom agents — all from the same connection.

EXPLORE THE PLATFORM

Security is not a feature. It is the platform.

01 The Engine