Compliance, your way.
Don't want to wire up Microsoft 365 or Google Workspace? You don't have to. Every Custodia template below is a plain-English CSV your team can fill in once a year. Charlie reads them just the same as automated evidence.
- Download CSVAC.L1-3.1.1
Authorized Users Roster
Who can log into your systems? One row per person + system, with a join / leave date.
- Download CSVAC.L1-3.1.1 · AC.L1-3.1.2
Role Matrix
What each role is allowed to do (read, write, admin) across email, file storage, and any system handling federal info.
- Download CSVAC.L1-3.1.1 · IA.L1-3.5.1
Access Device Register
Every laptop, phone, and badge that touches the business, assigned to a person, status tracked.
- Download CSVAC.L1-3.1.20
External Systems Inventory
Every outside service (Dropbox, partner portal, personal Gmail) you use, and whether it's allowed to handle federal info.
- Download CSVAC.L1-3.1.22
Public Posting Acknowledgement
A short signed acknowledgement that public-posting reviewers understand they can't post federal-sensitive content.
- Download CSVSI.L1-3.14.1 · SI.L1-3.14.2 · SI.L1-3.14.4
Endpoint Antivirus / Patch Inventory
Every company laptop with antivirus status and last OS patch date. Built-in Windows Defender / macOS XProtect counts.
- Download CSVSI.L1-3.14.1
Patch Log
When you patched what, and where you got the update from. Keep it skeletal, auto-updates are the gold standard.
- Download CSVMP.L1-3.8.3
Media Disposal Log
When a laptop, drive, or USB stick is wiped or destroyed. Receipt from a shredding service is enough.
- Download CSVPE.L1-3.10.1
Physical Access Roster
Who has keys, codes, or badges to your office. Home office? List who has the door key.
- Download CSVPE.L1-3.10.3
Visitor Log
Date, name, who they visited, time in / out. A clipboard at reception is fine.
- Download CSVSC.L1-3.13.1 · SC.L1-3.13.5
Network Boundary Inventory
Every network entry point and the firewall that fronts it. The router in your office is the answer for most small companies.
Or skip the spreadsheets entirely.
Connect Microsoft 365 or Google Workspace and Charlie pulls the same evidence automatically, every quarter, forever. Manual is a backstop, not a chore.
Start 30 day free trial