- Home
- Cloud Encryption Software
- Kustodyan Data Protection Platform
Kustodyan Data Protection Platform
What it is
Kustodyan Data Protection Platform is a data-protection service for SaaS editors that transforms sensitive fields before they reach storage. A backend can call its API without a schema rewrite or a proxy in the critical path. The platform offers more than 70 transformation techniques, including format-preserving tokenization and encryption, deterministic encryption, masking, anonymization, and searchable encryption. Administrators configure rules in a portal, using evidence such as field name and caller role to determine which transformation applies. Developers use a single /transform endpoint for protect, reveal, and search operations, with OAuth 2.0 client-credentials authentication and short-lived tokens. Batch mode supports initial migrations and high-volume pipelines. Protect and reveal operations are logged with who, what, when, and the applicable rule. Kustodyan describes measures relevant to nFADP, GDPR, DORA, NIS2, and SOC 2 requirements. It says the service is hosted and operated in Switzerland, with encryption keys under the customer's control. Its operations run under an ISO 27001 certified information security management system with 24/7 monitoring of critical environments. Pricing is on request.
For and against
For
- Offers more than 70 transformation techniques
- Supports batch processing
- Logs protect and reveal operations
- Encryption keys remain under customer control
- Hosted and operated in Switzerland
Against
- Pricing is on request
- Backend integration requires API implementation
- Personalized demo must be requested
The verdict
Kustodyan combines API-based transformations, configurable policies, and operation logging for sensitive fields. Prospective customers can request a personalized demo and pricing information.
Who it suits
Kustodyan is presented for SaaS editors seeking to transform sensitive data before storage. Its underlying RegData Protection Suite has been deployed in banking, healthcare, trading, and public services.
On the record
- API authentication
- The site describes OAuth 2.0 client-credentials authentication with short-lived tokens.kustodyan.com · read 9 Oct 2026
- Audit logging
- The site says every protect and reveal operation is recorded, including who acted, what happened, when, and under which rule.kustodyan.com · read 9 Oct 2026
- Batch processing
- The API supports batch mode for initial migrations and high-volume pipelines.kustodyan.com · read 9 Oct 2026
- Certification and monitoring
- Kustodyan says its operations run under an ISO 27001 certified information security management system, with 24/7 monitoring of critical environments.kustodyan.com · read 9 Oct 2026
- Compliance frameworks
- The site describes support for nFADP, GDPR, DORA, NIS2, and SOC 2 requirements.kustodyan.com · read 4 Oct 2026
- Customer key control
- Kustodyan says encryption keys remain under the end customer's control.kustodyan.com · read 9 Oct 2026
- Data sovereignty
- The site says Kustodyan is hosted and operated in Switzerland and that encryption keys remain under the end customer's control.kustodyan.com · read 4 Oct 2026
- Developer access
- The site describes a single /transform endpoint for protect, reveal, and search operations, with OAuth 2.0 client-credentials authentication and short-lived tokens.kustodyan.com · read 4 Oct 2026
- Frameworks
- The site describes measures relevant to nFADP, GDPR, DORA, NIS2, and SOC 2.kustodyan.com · read 9 Oct 2026
- Hosting
- The service is hosted and operated in Switzerland, according to the site.kustodyan.com · read 9 Oct 2026
- Integration
- A backend can call the Kustodyan API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.kustodyan.com · read 9 Oct 2026
- Integration model
- A backend can call one API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.kustodyan.com · read 4 Oct 2026
- Intended users
- The site presents Kustodyan as a service for SaaS editors and says its underlying RegData Protection Suite has been deployed in banking, healthcare, trading, and public services.kustodyan.com · read 4 Oct 2026
- Policy controls
- Rules in the admin portal select transformations using evidence such as the field name and caller role.kustodyan.com · read 9 Oct 2026
- Protection options
- Listed techniques include format-preserving tokenization and encryption, deterministic encryption, data masking, anonymization, and searchable encryption.kustodyan.com · read 4 Oct 2026
- Provider
- The site identifies Kustodyan as a service by Kyos SA and RegData SA.kustodyan.com · read 4 Oct 2026
- Purpose
- Kustodyan describes its service as data protection for SaaS editors and businesses handling sensitive data.kustodyan.com · read 9 Oct 2026
- Sales
- The site invites prospective customers to book a personalized demo.kustodyan.com · read 9 Oct 2026
