POPIA, FICA, and Companies Act compliance — without the consultant retainer.
Khanyitas handles your data register, DSAR requests, breach response and beneficial-ownership filings, so your small business stays compliant while you stay in business.
No card required for the free tool. Made in South Africa by Navrix Solutions (Pty) Ltd.
Free, no signup, five minutes
Generate a POPIA-compliant privacy notice right now.
Tell us about your business and how you handle personal information. We'll render a complete notice that mirrors the Information Regulator's published guidance — POPIA section 18 disclosures, lawful-basis tagging, the section 72 cross-border disclosure, and section 23 data-subject rights. Save it as a PDF, paste it on your website, or upgrade to a full account to keep it in sync with your data register.
SA breach score
The 72-hour clock, watched.
POPIA section 22 gives a responsible party no specific number of hours to notify the Information Regulator — only “as soon as reasonably possible”. The Regulator's own guidance treats anything beyond 72 hours as requiring justification. Khanyitas tracks both clocks for every customer and surfaces the aggregate live below.
Open across Khanyitas
—
Calibrating. Live counts populate as customers declare incidents through the breach workflow.
Incidents detected · last 12 months
The bar chart fills in as customers run their breach workflows through Khanyitas. We never seed it with synthetic data.
Aggregated counts only. Khanyitas never discloses which customer had which incident, when, or affecting whom.
What you get on day one
A complete compliance pack assembles itself.
One onboarding flow seeds the four foundational artefacts. Khanyitas keeps them in sync as your data register evolves and regulatory changes land.
Data register
Every processing activity, lawful basis, retention period, and operator dependency in one auditable list.
Privacy notice
POPIA-anchored, hosted at a stable URL, kept in sync as your data register evolves.
DSAR workflow
Intake form, ID verification, response drafting, and the 30-day clock — all instrumented.
Breach playbook
The 72-hour Regulator clock plus the Cybercrimes Act SAPS clock, with evidence pack and notice templates pre-staged.
Why it matters
POPIA enforcement is live.
These aren't projections — they're what the law says. Khanyitas keeps you on the right side of them.
R10m
Maximum administrative fine the Information Regulator can impose.
POPIA s109
10 yrs
Maximum imprisonment for the most serious POPIA offences.
POPIA s107
72 hrs
Beyond this, the Regulator expects you to justify a delayed breach report.
POPIA s22 guidance
1 Jul 2021
POPIA in full force — enforcement is live, not theoretical.
Commencement
Source: Protection of Personal Information Act 4 of 2013 (POPIA). Informational, not legal advice.
Reviews
What customers say.
Khanyitas is newly launched. As founding members put it to work, their verified reviews will appear here — and only ever real ones. We don't invent testimonials, the same way we never fabricate the numbers on your dashboard.
Start free. Upgrade to run your compliance.
The free tier lets you see where you stand and generate your core policies. The paid plans add the operations layer — monitoring alerts, DSAR workflow, auto-updating policies, the verifiable trail, and more. South African Rand, cancellable any time.
Free
See where you stand and generate your core policies.
R0
- Compliance assessment + posture score
- 3 core policy generations (yours to keep — no watermark)
- Read-only regulatory feed (shared monitoring)
- Single POPIA breach clock
No card required. Upgrade any time to run your compliance — monitoring alerts, DSAR workflow, auto-updating policies, and more.
Or go paid to run your compliance:
Starter
R350/mo
POPIA essentials for sole proprietors and small teams.
- Data register & privacy notice
- DSAR intake & response workflow
- POPIA breach playbook
- Monthly compliance digest
Growth
R750/mo
Everything in Starter plus FICA workflows and beneficial-ownership filings.
- Everything in Starter
- FICA risk-based onboarding workflows
- Beneficial-ownership register & filings
- Quarterly board-ready compliance report
- Priority response within one business day
Scale
R1 500/mo
Verifiable trail, auto-regenerated policies, sectoral RoPA templates, same-business-day breach support.
- Everything in Growth
- Verifiable compliance trail (share with procurement, insurers, auditors)
- Auto-regenerated policies on regulatory change
- Sector-specific RoPA templates
- Same-business-day breach-response support
Billed in South African Rand. Annual plans are 12 months for the price of 11; cancel any time and unused full months are refunded pro-rata.