Security

Security and privacy

Custodia handles sensitive information about your company. This is how we protect it, without embellishment.

Architecture

The journey of your data

Follow the path your data takes from the moment you sign in until it is stored. Move forward by scrolling, or tap a stop.

Your browser

Every connection to Custodia leaves your browser encrypted by HTTPS/TLS. Nothing travels in plain text, neither your data nor your session.

Live

Security questionnaire, answered live

The questions a procurement or legal team usually asks before approving a vendor. Tap one to see the answer.

Need these answers in writing for your purchasing process? Write to us — with the Advanced plan or above, Custodia also generates this documentation automatically.

Who we share data with

We use a small number of providers, all as data processors under their own safeguards: Supabase (database and authentication), Vercel (application hosting), Stripe (payments) and Resend (sending transactional emails, such as invitations or assigned training). We don't sell or share your data with third parties for advertising. More detail in our Privacy Policy.