GDPR compliance
Personal data protection built into every layer of the platform.
Your debtors' data (IBAN, name, address, email) is personal data protected by the GDPR. Custodita implements encryption, minimization and access controls to ensure their protection.
Database encryption
IBAN, tax ID, email, address and BIC are stored with deterministic encryption. Sensitive data is never stored in plain text.
Data masking
IBANs are partially masked in the interface. They are only shown in full when strictly necessary.
Multi-tenant isolation
Each account's data is completely isolated. Queries are automatically filtered by account, with no cross-access possible.
Access traceability
Every action on personal data is recorded in the audit log with IP, timestamp and actor.
IBANs masked across the interface
IBANs are partially hidden in mandate lists and detail pages. They are only shown in full in contexts where strictly necessary, such as editing or signing.
- Format: ES** **** **** **** **** **95
- Only fully visible during editing and signing
- Data minimization per GDPR
Transparent database encryption
Sensitive fields are stored with Active Record deterministic encryption. The application decrypts them automatically when needed, with no impact on the user experience.
- Encrypted fields: IBAN, tax ID, email, address, BIC
- Deterministic encryption to allow searches
- Encryption keys managed outside the database
Complete access traceability
Every time a mandate is accessed, modified or signed, the action is recorded with IP, timestamp and actor. The audit log is immutable: it cannot be edited or deleted.
- Record of who accessed, when and from where
- Immutable log: entries cannot be deleted
- Metadata for each action (modified fields, reasons)
Your data and your clients' data, protected
Manage mandates with the peace of mind of full data protection compliance.
Get started free