Skip to authority console
ZAService ControlFaith Forge LabsOpen a work order

Authority console / source status is time-bound

An official source is a signal; an accountable reviewer decides the action.

Connect each source to a specific question, access date, applicable organisation and service, affected product behavior, required specialist, and next recheck.

ZA–A1 / INFORMATION

Information Regulator

Official starting point for POPIA and personal-information questions involving roles, processing, security, rights, direct marketing, operators, or transfers.

Open POPIA material
ZA–A2 / TAX

South African Revenue Service

The foreign electronic-services guide can frame questions about the actual supplier, intermediary, customer, service, registration, invoice, and VAT model.

Open the SARS guide
ZA–A3 / PAYMENTS

South African Reserve Bank

Use for institutional payments and settlement context. A provider must separately confirm current eligibility, currency, customer, and operational behavior.

Open payment and settlement material
ZA–A4 / CYBER

CyberSecurity Hub

Use the national CyberSecurity Hub as a starting point, then attach relevant guidance to a defined system, threat, control, owner, and incident route.

Open the CyberSecurity Hub

Console record

Source / question / applicability / action / authority / expiry.

Keep the source separate from provider documentation, client facts, adviser interpretation, and test evidence. They may all be required to turn a signal into a release condition.

Refresh the record when
  • The audience, service, or commercial model changes
  • A processor, provider, bank, or destination changes
  • The official page or relevant guidance changes
  • A professional reviewer changes the conclusion
  • The release alters the affected behavior

Enter the highest-risk unanswered question.

Recheck material sources before scope and again before release; do not let an old browser tab become policy.

Open the authority work orderReview the advice boundary