Compliance

Regulatory Compliance

FinVeil's regulatory posture across South African financial services law.

For institutional buyers — full technical & compliance dossier →

POPIA (Protection of Personal Information Act)

Responsible party designated. Information Officer designated per POPIA Section 55, registration in progress. Contact: privacy@finveil.money. Consent management is built into the platform — every employee's consent status is tracked, versioned, and auditable. For full details, see our POPIA Compliance page.

NCR (National Credit Regulator)

NCR registration in progress for credit-related services. FinVeil does not originate credit agreements — earned-wage advances route through registered credit providers who hold the necessary NCR licences.

FSCA (Financial Sector Conduct Authority)

No FSP licence is currently required for the read-only advisory scope of the platform. FSCA licensing is not yet required. A Category I FSP filing is planned when the product mix expands to include personalised financial advice or intermediary services.

SARS eFiling

IRP5 data extraction and tax estimation capabilities are planned. Full SARS eFiling integration is on the roadmap to streamline employer tax reporting workflows.

Audit trail

Every action is logged with user identity, IP address, timestamp, and action type. Audit logs are exportable for external audit purposes. Minimum retention period is 12 months.