AI productivity. Designed for regulatory requirements.
Research summaries, client communication and internal documentation with AI, on infrastructure designed for use in regulated institutions.
Innovation meets supervision.
Realising the benefits of AI without building up new compliance risk: that's what this is about.
Regulatory guardrails
Regulatory outsourcing requirements (the EBA guidelines and MaRisk in Germany, FMA requirements in Austria, FINMA circulars in Switzerland), along with banking secrecy and internal directives set narrow limits for new tools.
Risk of data leaving the institution
Client-identifying data in public AI tools is a compliance incident, and shadow IT can't be explained to any regulator.
Documentation duties
Anyone deploying AI has to make that use traceable: without an audit trail, every review becomes a risk.
What financial services firms get done with Custodos.
Six tasks from daily practice, plus everything every company has to do: correspondence, minutes and research.
01Research summaries
Condense market reports, studies and internal analyses, as a basis for the investment committee and client advisory.
02Client communication
Reports, cover letters and draft replies in the institution's tone, multilingual and consistent.
03Internal directives
Query internal directives and regulations instead of searching them: answers reference the documents you've added.
04Minutes & file notes
Turn meeting notes into structured minutes and action lists, formatted ready for the next meeting.
05Onboarding documents
Assemble documentation and form packages per client type and check them for completeness.
06Specialist translation
Move fact sheets and correspondence between German, French, Italian and English, within your workspace.
- Documentation for outsourcing reviewsWe supply the details on hosting, subprocessors and data flows that your compliance function needs to assess an outsourcing arrangement.
- FoundationDesigned for the GDPR and the revFADP: your data is stored in Switzerland, AI processing runs in the EU or in Switzerland, as you choose. Inputs and documents are never used to train AI models.
- Activity logAdmin actions and exports are logged, without the content of requests; usage is visible per person.
Custodos provides the technical preconditions for handling your data confidentially. The legal assessment in each individual case remains with your organisation.
How your institution gets started.
- 01
Review & DPA
Documentation for your compliance review, data processing agreement included.
- 02
Define access
Roles, permissions and SSO, aligned with your internal directives.
- 03
Start a pilot
Begin with one team and clear use cases, then roll out in a controlled way.