What the law asks of you, and what we’ll do about it.

Anti-Money Laundering

Some businesses are legally required to know exactly who their clients are, keep an eye on what they do, and tell the Financial Intelligence Centre when something looks wrong. FICA calls them accountable institutions — law firms, estate agents, credit providers and about twenty other kinds of business. If that's you, we build the programme those duties ask for, and build it so your team can actually run it.

• —Knowing who your clients are
• —Sanctions & PEP screening
• —Watching for odd transactions
• —goAML registration & upkeep

POPIA & PAIA Compliance

Two Acts, one Regulator. POPIA governs the personal details you hold — clients, staff, the people who fill in your contact form — and in practice that is nearly every business. PAIA governs what happens when somebody asks to see your records, and it requires a written manual saying how they go about it. The Information Regulator oversees both. We work out what you are holding, whether you are entitled to hold it, what your privacy policies should actually say, and get the PAIA manual done properly.

• —What you hold, and where
• —The eight things POPIA asks
• —Privacy policies and notices
• —Your section 51 PAIA manual

RMCP & Custom Policies

Every business FICA applies to needs a written plan for spotting dirty money: how you'd notice it, what you'd do next, and why your particular clients and products carry the risks they do. FICA calls it a Risk Management and Compliance Programme, or RMCP. It has to be specific to your business, and supervisors have said plainly that a template with a company name pasted on the front doesn't meet that.

• —Where your real risk sits
• —How criminals target your sector
• —Controls that match the risk
• —Sign-off that means something

Gap Analysis

A gap analysis — a compliance audit, if you prefer the formal name — tells you where you actually stand. We measure what you have against what the legislation asks for, then hand you a list of what to fix with the highest-risk items at the top. The point is to find the gaps while they're still cheap to fix.

• —Do the documents hold up
• —Does it happen in practice
• —Registrations & filings
• —A fix-it list, worst first

Staff Training

FICA says your staff must be trained. POPIA says they must understand what's expected of them. A slide deck once a year doesn't really do either. We run sessions built around the decisions your people actually face — the client who won't hand over an ID, the payment that arrives from somewhere odd — and leave the records behind to show it happened.

• —Built for the room
• —Scenarios from your sector
• —Plain language
• —Records for your file

Implementation Support

Most compliance failures aren't drafting failures. The programme is sound; the gap is what happens at four on a Tuesday when a client file needs opening and everyone is busy. We work alongside your team to close that gap.

• —Workflows people can follow
• —Checklists & registers
• —Handover, properly
• —Ongoing support