Plain answers for procurement and IT.

Hosted locally.

Each deployment runs on dedicated infrastructure in your jurisdiction. The location and provider are agreed with you before anything is deployed. Client data is never pooled across clients.

Your data is yours.

Your data and the records built from it remain your property. We process it only to run the agreed services. On exit, it is returned in standard formats and deleted from our systems, with written confirmation.

POPIA.

Deployments are set up to support your obligations under the Protection of Personal Information Act, including purpose limits, access records and breach procedures. We sign an operator agreement with each client.

Access controls.

Role-based access, single sign-on where you use it, two-factor sign-in, and an audit log of every automated action and every sign-off.

If AEY stops operating.

Each client holds a current copy of the code and configuration for its deployment, with handover documentation so another team can run it. Your operations do not depend on us continuing.

Security pack.

On request: architecture overview, data flows, access policy and incident response procedure.

Request the security pack