# Custosa

**Canonical:** https://apis.io/providers/custosa-com/  
**Website:** https://custosa.com/  
**APIs profiled:** 1

Custosa provides a runtime data‑control plane for enterprise AI, inspecting every record before it reaches the model, redacting by role, and sealing each decision as verifiable evidence. It supports HIPAA‑compliant AI, financial‑services safeguards, and permission‑aware retrieval, helping organisations govern AI data securely and transparently.

## Kin Score — 26.7 / 100 (thin)

Scored 2026-11-06 under rubric 0.27.0.

| Facet | Score |
|---|---|
| Discoverability | 57.1 |
| Contract Quality | 0.0 |
| Contract Governance | 18.2 |
| Operational Transparency | 15.8 |
| Developer Ergonomics | 26.2 |
| Access Clarity | 50.0 |

Regulatory layer — **Health**: 22.1 (matched via tags).

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | na |
| Operation Distinctiveness | na |
| MCP Tool Quality | na |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (1)

- **Custosa API** — API for Custosa runtime data‑control plane

## Security (3)

- **Custosa Com Domain Security** — TLSv1.3
- **Custosa Com Vulnerability Disclosure** — security.txt · contact published
- **Custosa Com Trust Center** — SOC 2, ISO 27001, HIPAA, FedRAMP

## Tags

Artificial Intelligence, Data Governance, Security, Healthcare, Finance

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/custosa-com/). Scores are computed from the provider's own public artifacts under a published rubric.