Four regulators. One workspace.
The four modules, in detail.

POPIA Compliance

Monthly scan, alert, remediate.

For

Every SA business holding customer data. Foundational — runs on every tier.

What it does

Scans your domain monthly for privacy-policy completeness, cookie-consent posture, data-subject-request (DSR) mechanism, cross-border transfer flags, and form-data exposure. Findings are scored, severity-tagged, and tracked over time.

Pro wedge

Pro adds on-demand scans across up to 5 domains, one-click remediation artefact generation (privacy policy text, cookie banner code, DSR notice, Information Officer designation block), and SEO / generative-engine / security / performance / accessibility checks included in every Pro and Enterprise scan.

B-BBEE Scorecard

Verification-grade math, the gap analysis your verifier won't run.

For

QSE (R10M–R50M) and Generic (R50M+) entities preparing for SANAS-accredited (South Africa's national accreditation body) verification. EME affidavits auto-classified.

What it does

Auto-classifies you as EME / QSE / Generic by turnover, computes every scorecard element with priority sub-minimum knock-down, supports Modified Flow-Through ownership chains, and lets you run year-on-year period comparisons.

Pro wedge

Pro adds the gap analysis (cheapest cost-per-point lever to the next level), an indicative sector benchmark (13 sectors, from published B-BBEE Commission Status & Trends data, reviewed quarterly), a 3-year trajectory simulator, audit-ready PDF (7 pages), and a stakeholder share link with token-gated PDF download.

SARS Submissions

Catch the 2026 tax-reference-number (TRN) rejection rule before SARS does.

For

Businesses filing VAT201, EMP201, EMP501, IRP6, or ITR14 returns. Xero users get auto-sync.

What it does

Tracks every SARS deadline (including the IRP6 and ITR14 filing dates), holds your submission audit trail, computes readiness scores per submission, and runs IRP5 cross-validation that flags the 2026 TRN-rejection rule pre-submission.

Pro wedge

Pro adds Xero OAuth (VAT report + bank tx + invoices + contacts + payroll, daily sync), VAT refund auto-match with 30/60/90-day escalation thresholds (auto-drafts the SARS Complaint and Tax Ombud Form), the EMP501 reconciliation + IRP5 cross-validator, and the verification-response evidence bundler (21-day countdown).

FSCA Tracker

The audit-prep automation suite. Replaces the R5,000–R15,000/year external Compliance Officers typically charge on the Internal Compliance Monitoring Programme (ICMP) alone.

For

FSP-licensed Cat I, II, IIA, III, and IV financial advisor firms with 1–25 Key Individuals (KIs) and Representatives.

What it does

Per-KI / per-Rep CPD ledger against BN 194 § 12 cycle targets. Complaints register with a General Code of Conduct SLA clock excluding SA public holidays. Conflict-of-interest register. FAIS § 11 material change auto-detection with one-page PDF letter. Debarred-register check at every new KI / Rep hire.

Pro wedge

Pro adds the audit-prep automation suite: annual ICMP report generator (FAIS § 17(1)(d) compliant, 9-page React-PDF), FAIS Ombud response bundler with 6-week countdown, COI Management Policy generator (5 starter templates by FSP category), weekly debarred-register re-check with email alert on roster matches, Joint Standard 2 of 2024 cyber incident log.

FSCA is the wedge for FSP-licensed firms. External Compliance Officers typically charge R5,000–R15,000/year just for the annual ICMP report. Komply Pro at R3,500/mo covers the ICMP plus POPIA + B-BBEE + SARS.