Custara may
- Prepare and preserve evidence records.
- Show what is present, needs source or missing.
- Export controlled packs for reviewer workflows.
Home > Trust
Boundary and handlingClear boundaries by design: Custara prepares the evidence record, reviewers make the decisions.
Custara prepares the evidence record. It does not assess, score, classify, certify, rate, advise or recommend.
Custara processes your evidence on your instructions. We act as a data processor for you.
Ownership. You retain all rights in the data and content you provide. Evidence records generated from your data are yours. We retain intellectual property rights in our platform, templates and underlying technology.
No model training. Your evidence is not used to train models or create benchmarks. We only access evidence content when needed to provide the service, respond to support requests, maintain security or comply with law.
Access control. You configure role-based access controls and choose who can access your workspace. Exports are scoped to what you authorise.
Encryption. Data is encrypted in transit and at rest.
Retention. On termination, you can retrieve your data within 30 days. After that retrieval period, we delete data from active systems within a further 30 days, unless retention is required by law.
Third parties. We use service providers, including hosting, email and payment processing, who process data on our behalf under contractual protections. We do not share evidence content with third parties except at your direction or where required by law.
Breach notification. If we become aware of an eligible data breach likely to cause serious harm, we will notify the Australian Information Commissioner and affected individuals under Part IIIC of the Privacy Act 1988.
For full detail, see our Terms of use and Privacy Policy.
Custara helps organisations prepare, preserve and export governance evidence records. It organises the evidence you provide so internal teams, boards, regulators and insurers can review quickly and make decisions on their own terms.
No. Custara does not assess, score, classify, certify, rate, advise or recommend. It prepares and preserves evidence records so reviewers can make their own decisions with a clear audit trail.
Any status indicators, such as completeness markers, show what has been captured, not whether your governance is good enough.
You and your reviewers do. Custara prepares the evidence record, while customers, insurers, boards, regulators and independent reviewers interpret it and make their own determinations.
Preparing or holding a record does not, by itself, prove legal compliance, regulatory approval, insurability, creditworthiness, certification, endorsement, approval or discharge of duty.
You retain all rights in the data and content you provide. Evidence records generated from your data are yours. You grant us a limited licence to host, store and process your content only to provide the service, as set out in our Terms of use.
We keep the intellectual property rights in our platform, templates and underlying technology. We may use aggregated and de-identified service data to operate and improve the service, but it never includes your evidence content.
Custara processes evidence on your instructions and acts as a data processor for you. Your evidence is not used to train models. Data is encrypted in transit and at rest. You control role-based access and export permissions.
On termination, you can retrieve your data within 30 days. We use service providers under contractual protections, and we do not share evidence content with third parties except at your direction or where required by law.
For full details, see our Privacy Policy and Terms of use.
If we become aware of a data breach likely to cause serious harm, we will notify the Australian Information Commissioner and affected individuals under the Privacy Act 1988. We will also notify you directly so you can assess the impact on your organisation.
To report a security concern: security@custara.ai.
We use service providers, such as hosting and email providers, who process data on our behalf under contractual protections. We do not share your evidence content with third parties except at your direction, for example when you export an evidence pack for review, or where required by law.
Aggregated and de-identified data that does not identify you and does not include evidence content may be shared within our group to operate and improve the service.
You can request access to the personal information we hold about you, ask us to correct it, or request deletion. On termination, you can retrieve your data within 30 days.
For full details, including rights for EU and EEA individuals, see our Privacy Policy.
Pricing is scoped to your use case. Share your requirements via register interest and our team will follow up with a fit-for-purpose proposal.