Skip to content
SPECIFICTION
Get listed

Kustodyan Data Protection Platform

kustodyan.com

WebAPI
Visit kustodyan.com
Spec score 7.2 #16 of 23 in Cloud Encryption Software

What it is

Kustodyan Data Protection Platform is a SaaS data protection service for editors that transforms sensitive fields before storage. A backend can call its API without changing the database schema or adding a proxy in the critical path. Administrators set rules in a portal, using evidence such as field names and caller roles to select the transformation. More than 70 techniques are listed, including tokenization, format-preserving encryption, deterministic encryption, masking, anonymization, and searchable encryption. One /transform endpoint handles protect, reveal, and search operations through OAuth 2.0 client-credentials authentication with short-lived tokens. Batch mode supports migrations and high-volume pipelines. Protect and reveal actions are logged with who, what, when, and the applicable rule. The service describes support for nFADP, GDPR, DORA, NIS2, and SOC 2 requirements. It is hosted and operated in Switzerland, with customer-controlled encryption keys, ISO 27001-certified information security management, and 24/7 critical-environment monitoring. Pricing is on request.

Spec sheet

Purpose
Kustodyan describes its service as data protection for SaaS editors and businesses handling sensitive data.Read 9 Oct 2026 · kustodyan.com
Intended users
The site presents Kustodyan as a service for SaaS editors and says its underlying RegData Protection Suite has been deployed in banking, healthcare, trading, and public services.Read 4 Oct 2026 · kustodyan.com
API authentication
The site describes OAuth 2.0 client-credentials authentication with short-lived tokens.Read 9 Oct 2026 · kustodyan.com
Audit logging
The site says every protect and reveal operation is recorded, including who acted, what happened, when, and under which rule.Read 9 Oct 2026 · kustodyan.com
Batch processing
The API supports batch mode for initial migrations and high-volume pipelines.Read 9 Oct 2026 · kustodyan.com
Certification and monitoring
Kustodyan says its operations run under an ISO 27001 certified information security management system, with 24/7 monitoring of critical environments.Read 9 Oct 2026 · kustodyan.com
Compliance frameworks
The site describes support for nFADP, GDPR, DORA, NIS2, and SOC 2 requirements.Read 4 Oct 2026 · kustodyan.com
Customer key control
Kustodyan says encryption keys remain under the end customer's control.Read 9 Oct 2026 · kustodyan.com
Data sovereignty
The site says Kustodyan is hosted and operated in Switzerland and that encryption keys remain under the end customer's control.Read 4 Oct 2026 · kustodyan.com
Developer access
The site describes a single /transform endpoint for protect, reveal, and search operations, with OAuth 2.0 client-credentials authentication and short-lived tokens.Read 4 Oct 2026 · kustodyan.com
Frameworks
The site describes measures relevant to nFADP, GDPR, DORA, NIS2, and SOC 2.Read 9 Oct 2026 · kustodyan.com
Hosting
The service is hosted and operated in Switzerland, according to the site.Read 9 Oct 2026 · kustodyan.com
Integration
A backend can call the Kustodyan API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.Read 9 Oct 2026 · kustodyan.com
Integration model
A backend can call one API before sensitive fields reach storage, without a schema rewrite or a proxy in the critical path.Read 4 Oct 2026 · kustodyan.com
Policy controls
Rules in the admin portal select transformations using evidence such as the field name and caller role.Read 9 Oct 2026 · kustodyan.com
Protection options
Listed techniques include format-preserving tokenization and encryption, deterministic encryption, data masking, anonymization, and searchable encryption.Read 4 Oct 2026 · kustodyan.com
Provider
The site identifies Kustodyan as a service by Kyos SA and RegData SA.Read 4 Oct 2026 · kustodyan.com
Sales
The site invites prospective customers to book a personalized demo.Read 9 Oct 2026 · kustodyan.com
Sales and support
The site invites prospective customers to request a personalized demo and lists offices in Geneva, Lausanne, and St. Gallen, Switzerland.Read 4 Oct 2026 · kustodyan.com
Transformation techniques
The platform offers more than 70 composable techniques, including tokenization, encryption, masking, anonymization, and searchable encryption.Read 9 Oct 2026 · kustodyan.com
Underlying engine
The site says the platform is built on the RegData Protection Suite, deployed in banking, healthcare, trading, and public services.Read 9 Oct 2026 · kustodyan.com

Strong points and limits

Strong points

  • More than 70 listed transformation techniques
  • Single endpoint handles protect, reveal, and search
  • Batch mode supports migrations and high-volume pipelines
  • Customer controls encryption keys
  • Cloud-agnostic SaaS deployment

Limits

  • Pricing is available only on request
  • API integration requires backend development
  • Only web and API platforms are listed

Who it suits

It suits SaaS editors needing API-based protection for multiple sensitive data types. The service is also presented for organisations concerned with Swiss hosting, customer key control, and listed compliance frameworks.

Verdict

Kustodyan combines policy-driven field transformation, audit records, batch processing, and a single authenticated endpoint. Its Swiss operation and customer-held keys are clearly specified, while pricing requires a sales request.

Where Specifiction places it

Alternatives to Kustodyan Data Protection PlatformAll alternatives →

Acra From $833.33/mo · Free plan 9.5 Visit