Custodian

Custodian

Give an AI agent the data it needs to do real work, without giving it the values a breach would cost you.

Custodian lets an organisation hand an AI agent the customer data it needs to do clerical work — filling forms, drafting correspondence, reconciling accounts — without ever handing it an identity number, a tax number or a bank account number.

The agent works with tokens. A separate program, with no language model in it, substitutes the real values at the last possible moment, on a machine you control. When an agent's transcript leaks, the leak is a list of tokens.

These pages are being written

Custodian is not finished, and this site describes only what you can actually use today. Pages appear here as the capability behind them ships, so anything you read on this site works right now — nothing here is a plan.

If something you need is missing, it is missing because it is not ready yet.

On this page