Let’s do the compliance. You do the business.
Thirty years of FICA, POPIA and the acronyms in between. We translate the legislation into something practical: a system your business can actually use, and keep using, once we have handed it over.
What we do
Anti-Money Laundering
FICA and AML programmes for the businesses the Act applies to (accountable institutions) — knowing who your clients really are, screening them against sanctions lists, watching transactions and reporting what looks wrong.
02POPIA & PAIA Compliance
Privacy policies, your section 51 PAIA manual, Information Officer registration and a gap assessment against POPIA. One Regulator oversees both Acts, and between them they reach almost every business.
03RMCP & Custom Policies
A custom-made RMCP aligned to your business risks and your sector's risk assessment — your written plan for spotting dirty money, never a downloaded template.
04Gap Analysis
An independent gap analysis that shows where your compliance programme falls short of what regulators expect — while the gaps are still cheap to fix.
05Staff Training
Compliance training in plain language, built around the decisions your staff and managers actually make — and recorded, so you can show it happened.
06Implementation Support
Hands-on help turning a compliance programme into something your team actually does — workflows, checklists, registers and support while it beds in.
The best compliance programme is the one your team actually uses.
Programmes rarely fail on the drafting. They fail on a Tuesday afternoon, when a new client file needs opening and nobody’s quite sure whose job the checks are.
They fail again when a regulator arrives for an inspection and asks you to prove what you have been doing all along. In that moment, policies sitting in a folder are not enough. You need records, evidence and a system that shows compliance actually happened — not just that it was written down.
Written for your business, not in general
We start with how criminals actually target your line of work (your industry’s sectoral risk assessment), and with where the risk sits in your own business.
A fix-it list, worst first
The gaps come back ranked by what carries the most risk, not listed alphabetically — so the time you can spare goes where it counts.
Ready if someone asks
The people who approved the programme can say what is in it, the annual review actually happens, and the current version sits where an inspector would look for it.
It lives in the business, not on a shelf
We hand each job to the person who’ll be doing it, then stay close through the first few months — when a new routine is at its most fragile.
The four we sort out most often
Not one of them is a missing document. Each is a gap between what a programme says and what you could actually put in front of someone — and each is straightforward to close.
You did the checks. Can you prove it?
The work gets done. What goes missing is the trail that shows it — and the trail is the only part anyone else can see.
You screened them once, on day one.
Sanctions lists change. Someone who was clean when they signed up may not be a year later, and a single check at the start doesn’t cover that.
You trained the team. Nobody wrote it down.
An inspection asks who came, what was covered and when. Training nobody recorded looks much like training that never happened.
Someone left. The paperwork still has their name on it.
Your registration with the Financial Intelligence Centre (goAML) and your registered Information Officer and Deputy — whoever is answerable for personal data — all go quietly out of date. Each one is quick for a supervisor to check.
Where things stand right now
Read insights →South Africa came off the FATF grey list. That changed the country’s standing, not what is asked of you.
The next Mutual Evaluation runs to October 2027. It looks at how controls work in practice, not at what the policy says.
R50m
The maximum administrative penalty for serious non-compliance.
R10m
For failing to comply with an enforcement notice — or imprisonment.
In our clients’ words
Attorneys, estate agents, accountants, healthcare practices and more — from single practices to multi-branch groups.
“LetsComply’s expertise and proactive guidance gave us confidence from day one. They helped us close key gaps and ensure full compliance with privacy laws.”
“Knowledgeable, approachable, and always willing to go the extra mile. Thanks to LetsComply, we now have a strong framework to manage privacy risks.”
“Professional, practical, and precise. Their training was clear, relevant, and easy to follow. Our team left with confidence in our responsibilities.”
“A clear needs analysis that highlighted our compliance gaps and delivered fit-for-purpose training. Our team is now far better equipped to manage compliance.”
Let’s start with a free consultation.
It works out what actually applies to your business and where you stand right now. Nothing else follows from it unless you want it to — and finding a gap yourself beats having someone else find it for you.