Scored. Tracked. Alerted.
Every month.

The four modules — POPIA, B-BBEE, SARS, and FSCA — are live. Komply is onboarding the first 25 pilot tenants free: join the waitlist and we'll invite you in order. Standard pricing applies after the pilot; the R5,000 setup fee is waived for pilot tenants.

Privacy policy presence and accessibility, cookie consent semantics, data-subject rights notice, Information Officer designation, mail-server DNS hygiene (SPF / DKIM / DMARC), TLS configuration, server response headers, and third-party tracker enumeration. Findings cite POPIA section numbers and link to the Information Regulator's published guidance.

SEO (meta tags, structured data, sitemap), GEO (Generative Engine Optimisation — JSON-LD and AI-agent crawlability), Security (headers, exposed files, server hygiene), Performance (HTTP/2, response time, render-blocking scripts), and Accessibility (alt text, form labels, heading hierarchy, language declaration). These checks are included in every Pro and Enterprise scan.

Pro and Enterprise tenants can generate ready-to-paste remediation artefacts directly from each finding card — privacy-policy section text, cookie-consent banner code, data-subject-rights notice, and Information Officer designation block. Each artefact is a deterministic template citing the Information Regulator's Code of Conduct; review with your legal advisor before publishing. Enterprise additionally surfaces a "Book a CA(SA) remediation session" deep-link for hands-on review.

Continuous Professional Development (BN 194 § 12), complaints management (GCC § 19 — 5 working days to acknowledge, 20 to resolve), conflicts of interest (GCC § 3A) including the parent COI Management Policy, fit-and-proper file currency (BN 194 §§ 6, 11), cyber incident logging per Joint Standard 2 of 2024, the FAIS § 11 material change notification (15 calendar days), the FSCA debarred-persons register check at every hire, the annual ICMP report (FAIS § 17(1)(d) + Conduct Standard 4/2024), and the FAIS Ombud response package (6-week deadline). Out of scope in v2.0: suitability assessment record-keeping (GCC § 8), the Representative Register XML helper (v2.1), and the cyber prescribed-window timer (v2.1, when the Determination on Notification Requirements is gazetted).

Pro tenants get a Komply-drafted Internal Compliance Monitoring Programme report covering the prior 12 months across CPD, complaints, COI, fit-and-proper, and cyber. Each section is composed from the live register data; with ANTHROPIC_API_KEY configured, narrative paragraphs are LLM-drafted in a restrained junior-compliance-analyst voice (Claude Haiku 4.5) — without the key, deterministic templates ship. You edit every section before sign-off; the FSP principal owns the submitted document. External COs charge R5,000-R15,000/year for the same artefact.

Yes — Pro tenants get a one-click "Generate Ombud response" inline on any escalated complaint. Komply composes a 6-page package: chronology from the existing register, FSP narrative (LLM-augmented or deterministic), supporting-evidence list (the rep's CPD records, prior complaints touching the same KI, COI disclosures), and a Komply audit-trail certificate. The 6-week submission window counts down on the response detail page. You review, edit, and submit to the FAIS Ombud — Komply doesn't auto-submit.

Yes — on every new Key Individual or Representative you add via /dashboard/fsca/key-individuals/new. Komply mirrors the FSCA debarred register weekly and fuzzy-matches the candidate name + (optional) SA-ID last 4. Strong matches (same name + same ID4) block creation unless you tick the override box and provide a written reason. Possible matches (name only, no ID confirmation) surface for review but don't auto-block — common surname duplicates would otherwise create false rejections. Pro tenants additionally get a weekly re-check across the active roster with an email alert when a new match surfaces.

No. The FSCA's submission surfaces (FAIS Online, SmartReg, the Representative Register XML upload) are FSP-credentialed — there's no third-party API. Komply keeps your CPD ledger, complaints register, COI matrix and fit-and-proper file current, generates the audit-ready PDF, and surfaces deadlines. You still upload to the FSCA portals yourself.

Moonstone is consulting + training + tooling bundled. Komply is the tool — a continuous readiness dashboard you keep current between Moonstone's audits or your in-house Compliance Officer's reviews. Komply scores your readiness against published obligations; it doesn't replace the Compliance Officer's professional judgment.

Built for SA businesses from ~R10M revenue: Starter suits sub-R20M, Pro and Enterprise scale with you. The fit is strongest where there's government procurement exposure, regulated-industry status (financial services, health, telecoms, education), or significant personally-identifiable customer data. Decision-makers are CFOs, COOs, Compliance Officers, or owner-operators.

Single tenant dashboard, single subscription, single login. Each module is monitored continuously and reported monthly. Cross-module flags surface where one regulator's finding affects another — a POPIA cookie violation that affects a BEE submission, a SARS anomaly that ties to a FSCA disclosure. One source of truth for your compliance posture.

Komply replaces fragmented per-regulator tooling with one platform. Enterprise onboarding includes an audit of your existing compliance stack to identify consolidation opportunities. We don't ask you to throw away what works — we ask you to stop maintaining five separate tools and twenty separate logins.

Yes. Per-tenant Row-Level Security on every table. Encryption at rest and in transit. POPIA-compliant Data Processing Agreement signed at onboarding. Compliance evidence stored under per-tenant Supabase Storage buckets with RLS policies.

Consultants are excellent for one-off audits, regulatory opinions, and complex remediation. Komply is built for the other 50 weeks of the year — continuous monitoring at a price and frequency human consultants cannot match. Most tenants run both: Komply for monitoring, a consultant for the heavy lifts.