Secure Intake

Indaba Forensic Services

Protection of Personal Information (POPIA) Policy

Introduction and Scope 

Indaba Forensic Services is committed to maintaining absolute confidentiality and uncompromising data security. This policy outlines our obligations under the Protection of Personal Information Act 4 (POPIA) of South Africa regarding the collection, processing, and storage of sensitive financial and legal data during forensic analysis and litigation support.

Information Collection and Ingestion

We process highly sensitive information derived from comprehensive High Court discovery and disclosure procedures. This includes, but is not limited to: General Discovery (Rule 35(1)), Production of Documents in Pleadings (Rule 35(12)), Inspection and Copying (Rule 35(6)), Notices to Produce at Hearing (Rule 35(10)), Medical and Expert Examinations (Rule 36), the Authentication of Documents executed outside the Republic (Rule 63), and specialized Financial Disclosure Forms (FDF) mandated by High Court Practice Directives for Rule 43 interim relief applications, financial statements, corporate registry details, and digital communications. Data is collected exclusively through our encrypted Microsoft Azure-hosted portal, following explicit mandate authorization by the instructing attorney or client.

Purpose of Data Processing

Data is processed strictly for the purpose of forensic discrepancy detection, chronological money trail mapping, and the generation of litigation deliverables such as the Evidence Matrix and Joinder Master Lists.

Enterprise-Grade Data Integrity & AI Architecture

Indaba Forensic Services employs a proprietary data architecture, IndabaOne, built upon Microsoft Azure infrastructure.

  • Deterministic Workflows: Our AI integration utilizes deterministic structuring. It does not extrapolate, invent, or “hallucinate” financial figures. It strictly parses the factual data provided in the uploaded documents.

  • Chain of Custody: All data remains within a localized, highly secure cloud environment that adheres to South Africa’s strict data privacy parameters, maintaining an unassailable digital chain of custody.

Third-Party Access and Confidentiality

All data processed by Indaba Forensic Services remains strictly confidential and is protected under applicable litigation privilege. We do not sell, distribute, or share raw discovery data with external third parties unless legally compelled by a competent South African court or explicitly authorized by the instructing counsel for specialized external transcription services.

Data Retention and Destruction

Upon the conclusion of the mandate or the finalization of the litigation proceedings, all digital and physical data tied to the respective Case No. and Client Ref. No. will be securely archived or destroyed in accordance with POPIA regulations and the specific retention directives of the instructing attorney.

Client Rights

Under POPIA, authorized clients and instructing attorneys possess the right to request access to, correction of, or deletion of the personal information held within our secure environment, provided such requests do not contravene active litigation privilege or High Court discovery rules.