Compliance Overview

POPIA (South Africa)

Magoven acts as responsible party for direct account relationships and as operator when processing on behalf of enterprise customers. We support data subject requests, breach notification, and cross-border transfer safeguards.

GDPR & UK GDPR

DPA with SCCs available. Subprocessor transparency. 72-hour breach notification assistance. Data Protection Impact Assessment support materials available for enterprise.

PAIA

Manual for access to information available on request for South African public bodies interacting with Magoven.

Sector guidance

• Financial services: customers must assess whether use meets FSCA/POPIA outsourcing requirements.
• Healthcare: not intended for primary PHI processing without BAA-equivalent agreements.
• Education: FERPA/POPIA parental consent considerations apply to schools.

Certifications roadmap

ISO 27001 and SOC 2 Type II certifications are on our enterprise roadmap. Contact [email protected] for current status.