> Custody of the data remains with the customer

pinky promise?