Security is paramount at Capisol. We provide:

• Secure, encrypted cloud-based document storage
• Security on all hyperlinks to prevent unauthorised access
• SSL certificate encryption for all data channels
• User-controlled access at document level
• Full audit tracking of all document interactions
• Compliant with data protection guidelines and POPI Act requirements
• 5-year secure document retention
• Encrypted distribution of all documents
• Automatic reconciliation to identify any missing documents

Yes. Capisol adopts best practices for data protection and is fully compliant with data protection laws, including South Africa’s Protection of Personal Information (POPI) Act. We ensure secure document distribution, encrypted channels, controlled access, and comprehensive audit trails.

Capisol has implemented a comprehensive AI Use Policy that governs all artificial intelligence technologies within our platform. Our AI-first approach is built on strict security controls including:

• Human oversight and accountability – All AI systems operate under human supervision with validation of outputs before use in critical business processes
• Data protection – We never input client data, personally identifiable information (PII), or confidential information into public or unapproved AI platforms
• Encryption and access controls – AI systems processing personal or customer data comply with POPIA and GDPR, with data encrypted in transit and at rest
• Security assessments – All AI systems undergo Security and Privacy Impact Assessments prior to deployment
• Continuous monitoring – AI environments are subject to standard logging, monitoring, and audit controls with any incidents reported immediately
• Approved tools only – Only AI tools and services approved by Capisol may be used for business activities
• Third-party vetting – All third-party AI providers are assessed under our vendor and cloud security controls

Our AI governance aligns with ISO/IEC 27001 and NIST security principles, ensuring we leverage AI innovation while maintaining the highest standards of data security and client trust.

Capisol has a formal Incident Response Plan with strict resolution timelines based on severity. All incidents are logged, analyzed, and corrected to prevent recurrence. For breaches involving personal information, we follow all POPIA and GDPR notification requirements and work with affected parties to resolve the issue promptly.

Our cloud-based infrastructure includes automatic backups with zone replication and documented recovery procedures. This ensures business operations can be maintained or quickly restored following any disruption, minimizing impact on your services.

Access is strictly controlled on a “need-to-know” basis with unique user IDs and multi-factor authentication. Access rights are reviewed annually, privileged access requires special approval, and all activities are logged. When employees leave or change roles, access is revoked within 24 hours.

Yes. Our Information Security Policy is based on ISO/IEC 27001:2022 and NIST Cybersecurity Framework standards. We undergo independent security reviews at least annually and maintain comprehensive documentation for all security controls and procedures.

All company devices are encrypted, and remote network access requires VPN with multi-factor authentication. Devices must meet strict security configurations including automatic locks and current security patches. Lost or stolen devices can be remotely wiped to protect your data.

Documents are securely stored in the cloud for 5 years in compliance with regulatory requirements. We follow strict retention policies, and when documents are no longer needed, they are securely deleted. Custom retention periods can be arranged based on your specific requirements.

All documents are stored securely in the cloud using Azure services and can be accessed from anywhere on any device. Documents are retained for 5 years in compliance with tax and storage regulations. The cloud storage ensures your documentation is backed up and protected against physical damage or loss.

You maintain complete control over document access. Capisol provides user-controlled access at the document level, ensuring only authorized personnel can view specific documents. All access is tracked and logged for audit purposes.