The POPIA control plane for any AI workload
Custodian is the control plane that sits over any AI workload and answers the one question every regulator asks first: where did the personal information actually go? It maps data movement through storage, embeddings, prompt history, and inference state, and produces the residency and access audit trail legal and the regulator need.
Click each layer of an AI workload to see what personal information passes through it, and where the sovereignty boundary really sits. This is what Custodian maps, continuously.
Select a layer
Most teams have mapped storage and stopped there. Personal information keeps moving long after it leaves the database. Tap a layer above.
Data residency tells you where the disk sits. It does not tell you where personal information travelled during inference, who could access it, or under whose jurisdiction. That gap is where POPIA exposure lives, and almost no tool covers it. Custodian is the productised version of the Readiness Assessment: continuous, evidence-generating, and built to be handed to legal and the Information Regulator.
Custodian instruments every AI workload and traces personal data through each layer it touches.
It monitors access and data paths continuously, not just at a point-in-time audit.
Any movement that crosses a jurisdictional or policy boundary is surfaced immediately.
It generates the residency and access record a CIO can hand to legal or the regulator.
Regulatory frame
Custodian is being built with design partners. If this is your problem, help shape it.
