> For the complete documentation index, see [llms.txt](https://docs.cortex.aic.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cortex.aic.io/workflow-guides/assurance/custody-transfer.md).

# Custody Transfer

**Open this area:** In the CORTEX menu, select **Assurance & governance → Custody transfers**.

Prepare reviewed business snapshots, obtain an independent custody offer, and record the named recipient's explicit acceptance of both hashes.

**Who uses this:** Analyst, Reviewer, Recipient, Administrator.\
**Open in CORTEX:** `/governance/custody`.\
**In-app guide:** `/help?topic=custody-transfer`.

{% hint style="info" %}
**Expected result:** An attributable receipt binds the exact ZIP and manifest; sender disposal remains a separate decision.
{% endhint %}

## Before you start

* Choose the correct workspace and obtain the actual authority to transfer the listed records. Custody read, preparation, independent offer and receipt are separately granted permissions.
* Obtain one to four exact current independently reviewed Transfer appraisals. The record, approved schedule and profile must still match their pinned references.
* Identify three separate people: preparer, independent offering custodian and named recipient. Person selection grants no access.

## What to do

{% stepper %}
{% step %}

## Prepare the reviewed scope

From a Transfer appraisal choose Prepare custody transfer, or use the transfer register.

The prerequisite panel shows preparation access, selected reviewed Transfer appraisals and the separate people still needed. Work through Reviewed scope, Authority and people, then Review; required fields, missing inputs and step colors update as values change.

Select up to four different business snapshots, enter the purpose shared with the recipient, actual destination and authority references, named people, UTC deadline, coverage review and rationale. Explicitly review the exclusions.

The deadline must fit each appraisal follow-up and schedule/profile effective period.
{% endstep %}

{% step %}

## Inspect and independently offer

The named custodian opens the prepared record, downloads the ZIP for review and compares the exact manifest, snapshots and exclusions.

Record the actual authority/coverage evidence and choose Offer. The service repeats current source, appraisal, schedule, profile and recipient-access checks.

A stale scope needs a fresh appraisal or replacement transfer; it is never silently updated.
{% endstep %}

{% step %}

## Inspect the recipient offer

Open Received custody offers in the same workspace.

Only the named person with receipt permission and full handling access can see the minimal manifest and receive the offered ZIP. The private preparation review and live parent records are not granted by receipt permission.

The browser verifies the ZIP length and SHA-256 before saving it.
{% endstep %}

{% step %}

## Record actual acceptance or refusal

A prepared download is only an attempt.

After receiving and inspecting the exact ZIP and manifest, choose Accept, enter both SHA-256 values, actual receipt/custody evidence and rationale, and explicitly confirm the manifest and exclusions.

Alternatively record refusal and follow-up.

The receipt binds the recipient, operation, time and both hashes.
{% endstep %}

{% step %}

## Recover or withdraw

Refresh after a conflict without losing entered notes. Retry an uncertain response with unchanged values on the same page to avoid duplicate events.

An independent custodian may withdraw an unaccepted offer.

Accepted, declined and withdrawn decisions remain terminal history; start a separately reviewed replacement when necessary.
{% endstep %}
{% endstepper %}

## Check the result

* Are the selected appraisals current Transfer decisions?
* Do the exact ZIP and manifest match what the recipient inspected?
* Are the included records and exclusions understood?
* Have actual authority, access and preservation duties been reviewed?
* Was receipt explicitly recorded by the named person?

## If you get stuck

<details>

<summary>Does a download establish custody?</summary>

No. The attempt is retained separately. Explicit recipient acceptance binds the exact package and manifest hashes, actual evidence and time.

</details>

<details>

<summary>Can I receive everything linked to a record?</summary>

Only listed current business snapshots are transferred. Inspect the manifest and exclusions; no complete graph, raw file set or backup custody is implied.

</details>

<details>

<summary>Can I amend a prepared offer?</summary>

Its scope and artifact are immutable. Withdraw an unaccepted transfer and prepare a separately reviewed replacement. Earlier artifacts and decisions remain attributable.

</details>

## Responsibility and limits

* The ZIP contains `manifest.json` and one current business snapshot JSON per listed record. Original attachments, complete revision histories, unlisted dependencies/derivatives/indexes/recipient copies, backups, encryption keys and restore state are excluded.
* Acceptance never deletes sender content, clears a hold, claims dependency-wide coverage or proves secure custody outside the application. Sender disposal requires its separate approved workflow.
* Downloads stop at the offer deadline or withdrawal/decision. A recipient can still record actual receipt of an earlier downloaded package after the deadline while the offer remains open and current access permits it. Withdrawal cannot erase copies already downloaded.
* Each transfer is bounded to four snapshots, one MiB per snapshot, a two-MiB ZIP and 64 retained events. Bounds fail without pruning history. Access loss clears page data; request access review rather than bypassing the named-recipient check.

## Reference and scope

F15-R06. Actual transfer authority, records/legal decisions and preservation duties must be supplied by the responsible people.

## Related workflows

* [Review retention and appraise records](broken://pages/3d17697c81a4cc506636fb159b561576def51390)
* [Preserve an exact revision and manage holds](broken://pages/0185ca5a2331760fb4c59665b8dde7f4d80e0fc6)
* [Manage accounts, grants and workspace membership](broken://pages/99c8701bc497eefb32769b668198b1f9f5fc6a93)
* [Receive UK packages and act on notices](file:///7397340/product/domestic-delivery.md)