The product
One pass through the conduit.
Point your retriever or API client at Custosa. Every record runs the conduit, inspect, decide, redact, seal, before the model ever sees it. Provider-agnostic, deterministic, fail-closed.
Inspect, decide, redact, seal.
Inspect
Inspects every field and chunk. Provider-agnostic, structured records or free text.
Decide
Deterministic, role-aware policy. No model guessing; fail-closed by default.
Redact
PASS or REDACT per field. HIPAA, SOC 2, and SOC 1 enforced in one pass.
Seal
The verdict is signed and hash-chained; the record itself is dropped.
Drop it in front of the model.
Gateway or SDK. Custosa sits between your data and any provider, so the control point is one place, not scattered across every prompt.
Gateway or SDK
Reverse-proxy the model endpoint, or call the SDK inline. REST, gRPC, and streaming.
Provider-agnostic
OpenAI, Anthropic, Google Gemini, or your own. The conduit doesn't care who is downstream.
Role-aware
API keys, mTLS, or OIDC. The caller's role decides what each field resolves to.
Built for the hot path.
Inline on every request. The budget is latency, not a nightly batch window.
