Kustodyan Data Protection Platform
Kustodyan Data Protection Platform is a data protection service for SaaS editors that transforms sensitive fields before they reach storage.
What Kustodyan Data Protection Platform is
Kustodyan Data Protection Platform is a data protection service for SaaS editors that transforms sensitive fields before they reach storage. A backend can call its API without a schema rewrite or a proxy in the critical path. The platform offers more than 70 techniques, including tokenization, format-preserving and deterministic encryption, masking, anonymization, and searchable encryption. Administrators configure rules in a portal, selecting a transformation based on evidence such as a field name and caller role. Developers use a single /transform endpoint for protect, reveal, and search operations, with OAuth 2.0 client-credentials authentication and short-lived tokens. Batch mode supports initial migrations and high-volume pipelines. The platform records protect and reveal operations with who, what, when, and the applicable rule. Kustodyan describes support for nFADP, GDPR, DORA, NIS2, and SOC 2 requirements. It says it is hosted and operated in Switzerland, with encryption keys under the customer's control. Its operations run under an ISO 27001-certified information security management system, with 24/7 monitoring of critical environments. Pricing is available on request.
Good
- More than 70 transformation techniques
- One endpoint supports protect, reveal, and search
- Batch mode supports migrations and high-volume pipelines
- Encryption keys remain under customer control
- Operations have 24/7 monitoring of critical environments
Watch out
- Pricing is available on request
- Designed as a service for SaaS editors
- No free plan or trial details are listed
Who it suits
Kustodyan is presented for SaaS editors handling sensitive fields and seeking data transformations before storage. The underlying suite has also been deployed in banking, healthcare, trading, and public services.
Verdict
Kustodyan offers configurable data transformations, batch processing, and operation logging through an API. Prospective customers need to request pricing and assess its fit for their backend and compliance requirements.
The facts
Each one read from Kustodyan Data Protection Platform's own pages, with the date it was checked.
What it does
- API authentication
- The site describes OAuth 2.0 client-credentials authentication with short-lived tokens.checked 9 Oct 2026
- Audit logging
- The site says every protect and reveal operation is recorded, including who acted, what happened, when, and under which rule.checked 9 Oct 2026
- Batch processing
- The API supports batch mode for initial migrations and high-volume pipelines.checked 9 Oct 2026
- Certification and monitoring
- Kustodyan says its operations run under an ISO 27001 certified information security management system, with 24/7 monitoring of critical environments.checked 9 Oct 2026
- Compliance frameworks
- The site describes support for nFADP, GDPR, DORA, NIS2, and SOC 2 requirements.checked 4 Oct 2026
- Customer key control
- Kustodyan says encryption keys remain under the end customer's control.checked 9 Oct 2026
- Data sovereignty
- The site says Kustodyan is hosted and operated in Switzerland and that encryption keys remain under the end customer's control.checked 4 Oct 2026
- Developer access
- The site describes a single /transform endpoint for protect, reveal, and search operations, with OAuth 2.0 client-credentials authentication and short-lived tokens.checked 4 Oct 2026
- Frameworks
- The site describes measures relevant to nFADP, GDPR, DORA, NIS2, and SOC 2.checked 9 Oct 2026
- Hosting
- The service is hosted and operated in Switzerland, according to the site.checked 9 Oct 2026
- Integration
- A backend can call the Kustodyan API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.checked 9 Oct 2026
- Integration model
- A backend can call one API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.checked 4 Oct 2026
- Intended users
- The site presents Kustodyan as a service for SaaS editors and says its underlying RegData Protection Suite has been deployed in banking, healthcare, trading, and public services.checked 4 Oct 2026
- Policy controls
- Rules in the admin portal select transformations using evidence such as the field name and caller role.checked 9 Oct 2026
- Protection options
- Listed techniques include format-preserving tokenization and encryption, deterministic encryption, data masking, anonymization, and searchable encryption.checked 4 Oct 2026
- Provider
- The site identifies Kustodyan as a service by Kyos SA and RegData SA.checked 4 Oct 2026
- Purpose
- Kustodyan describes its service as data protection for SaaS editors and businesses handling sensitive data.checked 9 Oct 2026
- Sales
- The site invites prospective customers to book a personalized demo.checked 9 Oct 2026
- Sales and support
- The site invites prospective customers to request a personalized demo and lists offices in Geneva, Lausanne, and St. Gallen, Switzerland.checked 4 Oct 2026
- Transformation techniques
- The platform offers more than 70 composable techniques, including tokenization, encryption, masking, anonymization, and searchable encryption.checked 9 Oct 2026
- Underlying engine
- The site says the platform is built on the RegData Protection Suite, deployed in banking, healthcare, trading, and public services.checked 9 Oct 2026
Alternatives to Kustodyan Data Protection Platform
- 1
Acra
Free planOpen sourceAndroidiOSAPILinux8.2From $10,000 a year - 2
MySQL
Free planAPILinuxmacOSSelf-hosted7.9Free plan - 3
Cryptomator
Free planAndroidiOSWebLinux7.5From €10,000 a year - 4
Virtru Data Security Platform
AndroidiOSWebAPI7.5From $119 a month - 5
Cosmian Data Protection Suite
Free planWebAPIExtensionLinux7.1Free plan - 6
Evervault
AndroidiOSWebAPI6.8From $995 a month