What Fintegris is designed to do, how it protects your data, and how to get involved.
What is Fintegris?
Fintegris is an AI-native compliance platform being built for South African accountable institutions. It is designed to keep your RMCP current and provable: each requirement linked to the controls that run it and the evidence they produce, across your identity, screening and monitoring providers, with regulatory reporting under the FIC Act, FAIS and POPIA.
Which regulations and obligations is it designed to cover?
FIC Act: customer due diligence (
ss.21–21H), the RMCP (
s.42), and suspicious, cash threshold and terrorist property reports to the FIC (
ss.29, 28, 28A). It follows FIC Guidance Note 7B and the relevant FIC directives and PCCs.
FAIS: representatives and debarment (
ss.13–14), compliance reporting (
s.17), the General Code of Conduct (including suitability and record of advice,
ss.8–9) and the Fit and Proper Requirements.
POPIA: data protection, including cross-border transfers (
s.72) and automated decision-making (
s.71).
The full list is on the
regulatory framework section of the home page. Coverage is delivered progressively as the platform moves through development and the IFWG Sandbox.
Is Fintegris available now?
Fintegris is a working MVP, open to design partners on synthetic data. It is not yet available for commercial deployment. An IFWG Regulatory Sandbox application was submitted in July 2026 and a determination is pending. Accountable institutions can register interest to be considered as design partners.
Who is Fintegris for?
Accountable institutions under the FIC Act with real onboarding and transaction volumes: crypto asset service providers, credit providers, investment platforms and asset managers, typically running more than one compliance provider. Firms with a dedicated compliance function benefit most.
Where is my data hosted, and is it secure?
The platform and its data stores are designed to run on AWS in the Cape Town region (af-south-1), with encryption in transit and at rest, role-based access control and a tamper-evident audit trail. Client identifiers are masked before storage and are never sent to the AI models. Sanctions and PEP screening is designed to use a South African provider, processed in South Africa. Adverse-media screening and transaction monitoring use an offshore provider, so those calls are cross-border transfers made with minimised fields under a documented POPIA s.72 basis. These controls are being implemented and validated through development and the Sandbox process.
Does the AI make compliance decisions on its own?
No. The AI drafts, scores and explains, but a named officer authorises every material decision, consistent with POPIA s.71 on automated decision-making and the institution's own accountability under the FIC Act and FAIS. Every AI-drafted RMCP section shows its sources, and an explainable risk model with SHAP attributions is planned. Accountability remains with the institution and its officers.
How are identity verification and screening handled?
Through specialist providers. Identity verification for SA clients (Home Affairs checks, face-match and liveness, company data) and sanctions and PEP screening are designed to use a South African provider, processed in South Africa; adverse-media screening uses an offshore specialist provider. Sanctions screening covers UN Security Council targeted financial sanctions as published on the FIC TFS list (FIC Act ss.26A–26C) Coverage of further international lists is confirmed with each institution against its own risk assessment. Fintegris is being built to keep each result as its own record with the list version and time, and combines the signals in its own risk engine under a human review gate. If you already use your own providers, you can keep them.
Do I need technical skills to get started?
No. Onboarding is designed to be Didusec-led, so you don't need in-house IT, and technical support is provided. Connections to the identity, screening and monitoring providers you already use are set up with you.
How do I buy Fintegris, and can my compliance consultant be involved?
You contract directly with Didusec, or through an AWS Marketplace private offer. There is no reseller or referral layer. If you use an external compliance consultant or reviewer, they can work alongside your team in your workspace with your consent.
Will it replace my compliance officer?
No. Fintegris is designed to support the compliance function by reducing manual effort and improving evidence and consistency. It does not replace your compliance officer or remove human accountability. Nothing it produces is compliance or legal advice.
How do I get access or join the pilot?
Register your interest below or contact
[email protected]. Design partners are being identified for the IFWG Sandbox testing period. To see the platform first,
request a demo: access to the demonstration environment (synthetic data only) is arranged after a short call.
Fintegris is a working MVP developed by Didusec (Pty) Ltd. An IFWG Regulatory Sandbox application has been submitted (July 2026) and a determination is pending; the platform is not yet available for commercial deployment. Nothing here is compliance, legal or financial advice.