Compliance
DSAR workflow: meeting the 21-business-day deadline
When a data subject asks what personal information you hold on them, POPIA gives you 21 business days to respond. For a lender running on spreadsheets, assembling that answer is a scramble — if it's even possible.
The deadline is the test
The DSAR deadline is where compliance becomes operational. Miss it, and you've both failed the data subject and exposed the gaps in your data map.
What a tracked workflow does
A DSAR arrives, gets logged, assigned and tracked against the 21-business-day SLA. Reminders fire as the deadline approaches. Nothing is assembled on demand from inboxes.
The trail that comes with it
Field-level access logging means you can show exactly what you hold, who accessed it, when and why — the evidence a DSAR response needs, ready before the request.
Run the 12-point readiness check
A scored report naming your compliance gaps — and the control that closes each.
Common questions
Asked straight.
Yes — the DSAR workflow runs with a 21-business-day SLA and SLA tracking.
Keep reading
Compliance
POPIA compliance checklist for South African lenders
POPIA applies to every business that processes personal information in South Africa — and for lenders, the exposure is concentrated: client financial data, credit records, KYC documents. Penalties run to R10 million per infringement, with criminal prosecution possible in severe cases.
Compliance
NCA affordability assessment: what South African credit providers must document
Under the National Credit Act, a credit provider must genuinely assess whether a consumer can afford the credit before granting it. Courts have been clear: the affordability assessment is a substantive obligation, not paperwork.
The category
What is a capital intermediary platform?
The lender industry built software for the lender that funds its own book. It never built software for the company that sources the deal and funds it with someone else's capital. That company is a capital intermediary — and the gap in software is exactly what Apex was built to fill.