POPIA Act No. 4 of 2013 · Compliance Platform

Make POPIA compliance part of how your business runs.

OmniZen brings your gap assessment, risk register, incident response, staff training, subject access requests and document vault into one platform, with a live compliance score that shows exactly where you stand.

Built for South African businesses Hosted in South Africa, on South African soil Aligned to POPIA Act No. 4 of 2013
app.omnizen.co.za/dashboard
Compliant
0% Score
12Open Risks
3Incidents
94%Trained
2SAR Open
Gap Assessment
Staff Training
Risk Register
Org Profile
Why it matters

Non-compliance with POPIA is not a paperwork problem

The Information Regulator has real enforcement powers under the Protection of Personal Information Act. The stakes are concrete.

R10 million Maximum fine for a serious contravention of POPIA.
10 years Maximum imprisonment for the most serious offences under the Act.
72 hours Notification window to report a security compromise to the Information Regulator.
8 conditions Lawful processing every responsible party must demonstrate compliance with.
Platform

One platform for your entire POPIA programme

Every module your business or compliance officer needs, built around the structure of the Act itself.

01

Compliance Dashboard

A live, weighted compliance score across seven key areas, with the alerts that matter most surfaced first.

02

Organisation Profile

Capture your registration details, Information Officer and a full data inventory in one guided profile, including cross-border transfers.

03

Gap Assessment

A structured questionnaire covering all eight conditions for lawful processing, tailored to your organisation.

04

Risk Register

Risks are generated automatically from your assessment gaps and scored by impact and likelihood.

05

Incident Register

Log and track data breaches from discovery to resolution, with the 72 hour Information Regulator notification clock built in.

06

Staff Training

Interactive POPIA awareness modules with quizzes, scoring and per-employee completion tracking, plus certificates on completion.

07

Subject Access Requests

Manage access, correction and deletion requests with deadline tracking and a full communication log.

08

DPIA Workflow

A guided seven step Data Protection Impact Assessment wizard for new projects and high-risk processing.

09

Operator Register

Track every third-party processor, their agreements, review dates and any outstanding addendums.

10

Document Vault

Versioned policies, electronic sign-off as POPIA section 19 evidence, and a library of ready-made document templates.

11

Audit Trail

Every action across the platform is logged, giving you the evidence trail POPIA's accountability provisions require.

Eleven modules, one source of truth. Everything connects. A gap in your assessment becomes a risk, a risk informs your score, and every step leaves an audit trail.

Book a demo
Getting started

From first login to audit ready

A guided path that takes your organisation from a blank slate to a measurable compliance posture.

STEP 01

Tell us about your organisation

Complete a short onboarding flow covering your registration details, Information Officer and the personal information you process.

STEP 02

Complete your gap assessment

Work through a guided questionnaire covering every condition for lawful processing under POPIA.

STEP 03

Get your compliance score

OmniZen scores your organisation across seven weighted areas and builds your risk register automatically.

STEP 04

Stay compliant, every day

Train your staff, manage incidents and requests, and keep a complete audit trail ready for the Information Regulator.

Compliance Score

One score. Seven areas. Total visibility.

Your OmniZen compliance score blends seven weighted areas of your POPIA programme into a single number from 0 to 100, so you always know exactly where to focus next.

Gap Assessment30% weight
Staff Training20% weight
Risk Register15% weight
Organisation Profile10% weight
Incident Response10% weight
Subject Access Requests10% weight
DPIA Workflow5% weight
0% Compliance Score
Security

Security and data sovereignty by design

Your data deserves the same protection you are working to provide your own customers.

Encrypted everywhere

Your data is encrypted both in transit and at rest, using industry standard protocols throughout.

Isolated by design

Every organisation's data is isolated at the database level, with role-based access control across the platform.

Hosted in South Africa

Your data stays on South African soil, hosted in Johannesburg, with encrypted backups.

Complete audit trail

Every action is logged and timestamped, giving you the evidence POPIA's accountability provisions require.

Partner Program

Built for consultants, auditors and MSPs

Already deliver POPIA services to your clients? The OmniZen Partner Program lets compliance consultants, auditors and managed service providers offer ongoing compliance to their own clients under their own brand, with OmniZen as the engine behind it.

Deliver it to your clients under your own brand
Manage every client engagement from one place
Add a recurring revenue stream to your practice
Learn about our Partner Program
For partners

Turn compliance into a service line

Onboard clients quickly, give each one their own live compliance score, and keep them audit ready year round, all from a single partner workspace. We handle the platform so you can focus on the advice only you can give.

Talk to our partner team
FAQ

POPIA compliance questions, answered

The questions South African businesses ask most about POPIA and how OmniZen helps.

What is a POPIA tool?

A POPIA tool is software that helps a South African business meet the Protection of Personal Information Act (Act No. 4 of 2013). OmniZen goes further than a checklist: it combines a gap assessment, risk register, incident response, staff training, subject access requests and a document vault into one platform, and rolls everything up into a single live compliance score so you always know where you stand.

Does OmniZen replace a POPIA consultant or advisor?

OmniZen works like having a POPIA professional and advisor built into one system. It is built first to make the Information Officer's job easier, and also to help non-specialists navigate the complexity of the Act, guiding you through every condition for lawful processing and showing what to fix next, ranked by urgency. Many businesses run it themselves, while consultants and auditors use the Partner Program to deliver POPIA services to their own clients.

Is OmniZen suitable for small South African businesses?

Yes. OmniZen is built for South African organisations of any size. The guided onboarding, gap assessment and compliance score are designed so that a business owner or Information Officer without legal training can become and stay POPIA compliant.

Where is my data hosted?

Your data stays on South African soil, hosted in Johannesburg, with encrypted backups. Data is encrypted in transit and at rest, every organisation's data is isolated, and every action is recorded in a complete, timestamped audit trail.

How does the OmniZen compliance score work?

The compliance score is a single number from 0 to 100 that blends seven weighted areas of your POPIA programme: Gap Assessment (30%), Staff Training (20%), Risk Register (15%), Organisation Profile (10%), Incident Response (10%), Subject Access Requests (10%) and DPIA Workflow (5%).

What are the penalties for not complying with POPIA?

A serious contravention of POPIA can carry a fine of up to R10 million and, for the most serious offences, imprisonment of up to 10 years. Security compromises must be reported to the Information Regulator within 72 hours of discovery.

How do I see OmniZen in action?

Get in touch and we will give you a guided walkthrough, then set you up with your own demo environment populated with realistic sample data, with no payment details required. We keep the full product tour off the public internet by design, so the demo is where you see everything working. Most enquiries get a demo within one business day.

Contact

See it working before you commit

We would rather show you the platform than describe it. Reach out on whichever channel suits you and we will walk you through OmniZen on your own screen, then set you up with a demo environment to explore in your own time.

  • 1 You get in touch. A one line message is enough. We reply within one business day.
  • 2 We give you a guided walkthrough. Twenty minutes, on a call, focused on how your business would use it.
  • 3 You explore a demo environment. Your own login, populated with realistic sample data, no payment details needed.

No call centre and no chatbot. You talk directly to the team that designs and builds OmniZen.