No sensitive data leaves uncontrolled.
Paste a data flow or export. CUSTODIAN classifies sensitivity (PII / PCI / MNPI), detects egress past the perimeter, and refuses an uncontrolled export — no encryption, no need-to-know, no residency. Privacy enforced, not assumed.
Deterministic gate onlineNo sensitive data leaves uncontrolled
Deterministic — the same packet returns the same verdict and hash, every run. Your result appears on the right →
Blocked. The runner found release-breaking evidence gaps or unsafe behavior.
Highest sensitivity detected
Movement past the firm boundary
Refuse · Hold · Classify · Clear
The flow contains PII, PCI, MNPI, or other regulated data.
Sensitive-data class detected.Tag the data tier explicitly and apply the controls that tier requires before any movement.
The flow moves data past the firm's boundary to an external destination.
Egress / external-transfer signal detected.Treat as egress: require encryption, need-to-know, and an approved recipient before it leaves.
Sensitive data is leaving with no encryption, tokenization, redaction, or need-to-know control.
No egress-control signal found.Block until encryption-in-transit, minimization, and an approved, need-to-know recipient are in place.
Engineering suite deterministic rule corpus
Input packet hash
CUSTODIAN classify gate
3 finding(s), score 32