CUCU

Custody infrastructure.
In your own AWS

Keys in KMS HSMs. Deployed by Terraform. Operated 24/7.

custody-prod / your-aws-accountCONNECTED
us-east-1 · 3 AZsigner: kms · hsm0 keys in memory

Built on

Platform

Three layers. One operator.

aws kms · custody-signer

hsm · non-exportable

  • ✓sign trf_01JB7Q3M
  • ✓sign trf_01JB7Q4A
  • ✓sign trf_01JB7Q5F
  • ✓sign trf_01JB7Q6C
  • ✓sign trf_01JB7Q3M
  • ✓sign trf_01JB7Q4A
  • ✓sign trf_01JB7Q5F
  • ✓sign trf_01JB7Q6C

Custody

Keys in AWS KMS HSMs. One isolated signer.

  • HSM · FIPS 140-3 L3
  • Multisig treasury
  • Per-customer addresses

Foundation

Multi-account landing zone, encrypted and audited.

  • Landing zone
  • RDS · PITR
  • Immutable logs
p99 latency · 24hlive
  • argocdcustody-prod synced · 3a91f2e
  • watchertron block 68,412,990 · 0 lag
  • signerhealth ok · kms latency 38ms
  • rdssnapshot ok · pitr window 35d
  • ai-opanomaly scan clean · 5m
  • watcherbase block 36,118,204 · 0 lag
  • apip99 112ms · 0 errors
  • backupceremony vault verified
  • argocdcustody-prod synced · 3a91f2e
  • watchertron block 68,412,990 · 0 lag
  • signerhealth ok · kms latency 38ms
  • rdssnapshot ok · pitr window 35d
  • ai-opanomaly scan clean · 5m
  • watcherbase block 36,118,204 · 0 lag
  • apip99 112ms · 0 errors
  • backupceremony vault verified

Operations

GitOps on EKS. Watched 24/7.

  • EKS
  • Terraform
  • Argo CD
  • Engineer on call

Architecture

Your AWS account is the boundary.

One API in. Policy decides, KMS signs, the ledger settles.

  1. Your app
    request
  2. AWSYour account
    Custody API
    check
  3. Policy engine
    approve
  4. Signer
    sign in KMS
  5. AWSKMS · HSM
    broadcast
  6. Blockchains
    observe
  7. Chain watcher
    settle
  8. PostgreSQLLedger
  9. balance
  • TRON
    USDT
  • Base
    USDC
  • EVM chains
    on request

How it works

Deploy. Ceremony. Operate.

  1. TerraformAWS
    01

    Deploy

    Terraform into your AWS.

  2. AWS KMS
    02

    Key ceremony

    Keys born offline, sealed in KMS.

  3. Argo CDKubernetes
    03

    Operate

    Monthly fee. You keep root.

Talk to an engineer.

No sales deck. One conversation.