Privacy Policy
CustodyTap records who handled a piece of equipment and when. This page explains what the service collects to do that, what it deliberately does not collect, and the choices you have.
Last updated 14 November 2026.
Who we are
CustodyTap is a service of Enthropic Data LLC ("we", "us"), a North Carolina limited liability company. You can reach us about privacy at dbrown@enthropicdata.com.
This policy covers two things: the public website at custodytap.com, and the CustodyTap application that your organization's people use to record custody by tapping NFC tags.
Who controls your data
CustodyTap is sold to organizations. When your organization uses CustodyTap, your organization decides what items are tracked, who has an account and how long records are kept. For the custody records and the accounts of its people, your organization is the data controller and we act on its behalf (a processor). Questions about data your employer holds in CustodyTap are best directed to your employer, who can also ask us to act.
For the public website, and for emails you send us about a pilot, we are the controller.
The website collects nothing
custodytap.com is a set of static pages. It runs no analytics, sets no cookies and loads nothing from third parties. The only way it sends anything anywhere is a link that opens your own email app addressed to us. Visiting these pages does not create a record with us beyond the ordinary server logs described under Technical records.
What the application records, and why
These are the kinds of data the CustodyTap application holds:
Your account
An email address, so you can sign in and receive notices. Optionally a phone number, the name of your company (for vendors and contractors) and your role in your organization. Your organization sets these up or asks you for them when you first join.
How you sign in
CustodyTap has no passwords. You sign in with a one-time link we email you, and then confirm actions with a passkey — your phone's fingerprint or face unlock. We store a one-way hash of each sign-in link (never the link itself) with a short expiry, and for each passkey we store the public key, a credential identifier and a usage counter that the WebAuthn standard provides. We never receive your fingerprint or face data; that stays on your device.
Identity photo (only if your organization turns it on)
Some organizations ask a new person to add a photo of an ID badge so an administrator can confirm who they are before approving the account. This is off by default and is chosen by your organization. When it is used, we store the photo and a SHA-256 fingerprint of it.
Custody records
The heart of the service: for each tagged item, a chained, append-only history of events — checked out, scanned, connected, handed off, checked in, sealed, destroyed. Each event records the item's internal asset code, who did it, who it was handed to, how the tap was verified and the time. If your organization enables it and your device offers it, an event may also record the coordinates where the tap happened. Destruction and sanitization events may include photographs, each stored with its SHA-256 fingerprint.
Technical records
When a tag is tapped, and when the system notices something unusual (an unsigned tag, a replayed counter), we record the IP address and browser user-agent of the request, along with the tag's tap counter. This is what lets CustodyTap tell a genuine tap from a copied link, and gives your security team a trail if a tag is cloned or abused.
What we deliberately do not collect
- The contents of any drive or device. CustodyTap tracks the item, never what is on it.
- BES Cyber System Information (BCSI) or protected health information (ePHI). Items are tracked by asset code and location code, and the free-text fields remind people to keep system names, network addresses and patient data out. Keeping that information out is a shared responsibility — see our Terms.
- Advertising or cross-site tracking data. There are no advertising cookies, no analytics trackers and no social-media pixels anywhere in CustodyTap.
Cookies
The website sets no cookies. The application sets only two, both strictly necessary: one to keep you signed in and one to protect forms against cross-site request forgery. There is no consent banner because there is nothing non-essential to consent to. Full detail is in the Cookie Policy.
We send sign-in links, the daily "chain head" digest that lets your administrators detect tampering, and notices about your account. These are sent through a third-party email delivery provider acting under contract on our behalf. We do not send marketing email to the people who use the application.
Who else sees it
We do not sell personal data and we do not share it for advertising. We use a small number of service providers who process data only to run CustodyTap under contract: our hosting provider (servers located in the United States) and the email delivery provider above. We will name our current providers on request. We disclose data otherwise only when the law requires it, and we will tell the affected organization unless we are legally prevented.
How long we keep it
Custody records are append-only and hash-chained on purpose: they are audit evidence, so they are not edited or quietly deleted. We keep them for as long as your organization needs them for its own recordkeeping and then delete them under our agreement with that organization. Account details are kept while the account is active. Sign-in links expire in minutes and are then useless. Security and tap logs are kept for a limited period for abuse detection and then removed.
Your choices and rights
Depending on where you live, you may have rights to see, correct, export or delete personal data about you, and to object to or restrict some processing. Because most data in CustodyTap is held on behalf of your organization, the quickest route is to ask your organization; we will help them act on your request. Where we are the controller, contact us directly at dbrown@enthropicdata.com and we will respond within the time the law allows.
One limit worth stating plainly: a completed custody event is audit evidence. Where law or our contract with your organization requires that evidence to be retained, we may keep it even after an erasure request, and will tell you why.
We do not sell or "share" personal information as those terms are used under US state privacy laws, and we do not use it for targeted advertising, so there is nothing to opt out of on that front.
How we protect it
All connections use HTTPS. Sign-in is passwordless and confirmed with a passkey. Sign-in links and session tokens are stored only as one-way hashes. Custody events are hash-chained so a change or deletion is detectable, and each export ships with a script that verifies the chain independently of us. Access to an organization's data is limited to that organization's own accounts.
Children
CustodyTap is a workplace tool and is not directed to children. We do not knowingly collect data from anyone under 16.
Where your data lives
CustodyTap is operated from the United States and your data is processed there.
Changes to this policy
If we change this policy we will update the date above and, for a material change affecting the application, tell your organization's administrators.
Contact
Enthropic Data LLC — dbrown@enthropicdata.com.