compliance
POPIA and GDPR, built in
POPIA (sections 19 to 22) and the GDPR (article 32) both require reasonable technical and organisational measures to protect personal information. We build those measures into what we deliver, and apply them to our own work.
How we handle your data
- We only collect and keep what the project needs
- Encryption in transit and at rest on the systems we manage
- Access limited to the people doing the work, with MFA
- South African hosting when your data has to stay local
- NDAs and data processing agreements on request
- If something goes wrong, we tell you immediately, so you can meet your own notification duties
How we help you comply
- Map where personal information lives in your systems
- Review access control, encryption, logging and retention
- Fix the technical gaps we find
- Build consent, data-access and deletion requests into your apps
- Incident response plans and breach runbooks
We handle the technical side. Legal opinions should come from your attorney or compliance officer, and we're happy to work with them.
Tell us what you want to build.
A web app, a mobile app, a platform or an automation: send a few lines and an engineer will reply.