The Platform
A custody layer engineered for the questions your auditors and regulators ask.
EpositBox doesn't replace your applications or your cloud. It strengthens control over the data itself — exactly where integrity, traceability, recoverability, and access discipline matter most.
Control Model
Six controls. Mapped directly to third-party risk review.
Each control answers one of the questions banks and regulated firms ask most often: how is sensitive data protected, how is access restricted, how can records be shown not to have been altered, and how can recovery be trusted if primary systems are ever in doubt.
Encryption at rest and in transit
All sensitive data is encrypted end-to-end using modern, quantum-resistant primitives.
Dedicated custody layer
Sensitive fields live in a separately governed environment, isolated from your application database and data lakes.
Mutual TLS on every connection
Every API connection requires mTLS — both client and server cryptographically authenticated.
Service identity, not user credentials
Machine-to-machine only. Fine-grained service identity policies. No shared credentials. No standing privileges.
Tamper-evident audit
Activity is captured through immutable audit records with timestamps, identity, and operational context.
Disciplined key management
Dedicated keys per tenant, rotation policies, and strong custody controls — designed around the questions auditors ask first.
Architecture
Pointers in your apps. Regulated values in custody.
A breach in your systems exposes references — not the underlying regulated data.
┌──────────────────────┐ mTLS ┌────────────────────────────┐
│ Your Application │ ───────────────────▶ │ EpositBox Custody API │
│ (stores pointers) │ ◀─────────────────── │ · Service identity policy │
└──────────────────────┘ │ · Per-tenant key custody │
│ └─────────────┬──────────────┘
│ pointers │
▼ ▼
┌──────────────────────┐ ┌────────────────────────────┐
│ Data Lake / DB │ │ Immutable Custody Layer │
│ (no regulated data) │ │ Hyperledger · Enterprise │
└──────────────────────┘ └─────────────┬──────────────┘
│
▼
┌────────────────────────────┐
│ Tamper-evident Audit Log │
│ (read · write · delete) │
└────────────────────────────┘Quantum-resistant by design
Forward-secure cryptography for tomorrow's threat model.
API speed, blockchain proof
Proprietary indexing keeps queries at traditional database latency.
Financial-services aligned
Built on infrastructure that meets the most demanding financial-services requirements.
Ready to put your most sensitive data into evidentiary custody?
Talk to our team about pilot scope, integration, and how EpositBox aligns with your control framework.