diff --git a/internal/core/orgs.go b/internal/core/orgs.go
index 5b56d18..13ffaaf 100644
--- a/internal/core/orgs.go
+++ b/internal/core/orgs.go
@@ -129,15 +129,8 @@ func (s *Handlers) pageOrg(w http.ResponseWriter, r *http.Request) {
 		"Self":          uid,
 		"Error":         r.URL.Query().Get("error"),
 	}
-	if isAdmin {
-		domains, err := s.Store.ListOrgDomains(r.Context(), id)
-		if err != nil {
-			http.Error(w, "could not load domains", http.StatusInternalServerError)
-			return
-		}
-		data["Domains"] = domains
-		data["TXTName"] = txtRecordPrefix // org appends its hostname for the full record name
-	}
+	// Custom domains are hidden for now (infrastructure not in place); the
+	// org.html card and the /domains routes are disabled, so don't load them.
 	s.Render(w, r, "org.html", data)
 }
 
diff --git a/internal/core/templates/org.html b/internal/core/templates/org.html
index 11ae04b..9ab958c 100644
--- a/internal/core/templates/org.html
+++ b/internal/core/templates/org.html
@@ -190,6 +190,9 @@
       </div>
     </div>
 
+    {{/* Custom domains — hidden for now; the hosting/TLS infrastructure isn't in
+         place yet. Re-enable this card (plus the domains data in pageOrg and the
+         /domains routes in web.go) once it is.
     <div class="card mt-3">
       <div class="card-header"><h3 class="card-title">Custom domains</h3></div>
       <div class="card-body">
@@ -238,6 +241,7 @@
         </form>
       </div>
     </div>
+    */}}
     {{end}}
   </div>
 </div>
diff --git a/internal/core/web.go b/internal/core/web.go
index 12f77b6..6f64cac 100644
--- a/internal/core/web.go
+++ b/internal/core/web.go
@@ -154,9 +154,11 @@ func (s *Handlers) appRouter() chi.Router {
 		r.Post("/orgs/{id}/members/{userID}", s.handleSetOrgMember)
 		r.Get("/orgs/{id}/permissions", s.pageOrgPermissions)
 		r.Post("/orgs/{id}/permissions", s.handleSaveOrgPermissions)
-		r.Post("/orgs/{id}/domains", s.handleAddOrgDomain)
-		r.Post("/orgs/{id}/domains/verify", s.handleVerifyOrgDomain)
-		r.Post("/orgs/{id}/domains/delete", s.handleDeleteOrgDomain)
+		// Custom org domains are hidden for now — the hosting/TLS infrastructure
+		// isn't in place yet. Leave the handlers in tree but don't expose them.
+		// r.Post("/orgs/{id}/domains", s.handleAddOrgDomain)
+		// r.Post("/orgs/{id}/domains/verify", s.handleVerifyOrgDomain)
+		// r.Post("/orgs/{id}/domains/delete", s.handleDeleteOrgDomain)
 
 		r.Route("/admin", func(r chi.Router) {
 			r.With(s.requireCap(capAny)).Get("/", s.pageAdmin)