Built to be inspected
A supervisor should be able to disprove our claims from the artefacts rather than accept them from a presentation. These are the regimes the platform carries and what it produces for each.
Regime by regime
| Regulator | Instrument | What the platform does | Status |
|---|---|---|---|
| National Credit Regulator | National Credit Act 34 of 2005 | Affordability assessment, Reg 42–44 cost-of-credit caps, debt-review status gating, and the NCR statistical returns. | ✓ Live |
| SARB Prudential Authority | Banks Act 94 of 1990, Reg 23A | BA 100/120/125/200/900 returns generated from ledger facts, with Basel 3.1 risk weights and CET1 capital computed per exposure. | ✓ Live |
| Financial Intelligence Centre | FIC Act 38 of 2001 | KYC and KYB with a documented verification chain, sanctions/PEP/adverse-media screening as explicit workflow holds, and goAML STR and CTR packs with a full submission lifecycle. | ✓ Live |
| Information Regulator | POPIA 4 of 2013 | Purpose-bound collection with a retention clock, self-service data-subject access and erasure, no personal information in logs or URLs, and crypto-shredding on a discharged erasure. | ✓ Live |
| FSCA | FAIS 37 of 2002, COFI (pending) | Conduct records for advised sales, complaint registers and the FSCA conduct returns. | ◐ In build |
| CIPC | Companies Act 71 of 2008 | Annual returns, beneficial-ownership register capture and the retrieval evidence behind each lookup. | ◐ In build |
| SARS | Income Tax Act 58 of 1962, VAT Act 89 of 1991 | VAT treatment on fee and interest lines, deferred tax from permanent and temporary differences, and SA payroll. | ✓ Live |
What a supervisor is actually given
A dedicated inspection environment
A supervisor gets their own read surface with its own credentials and its own audit trail — inspection is a first-class role, not a shared admin login someone lends out for a week.
Zero-knowledge prudential disclosure
Concentration and liquidity positions can be disclosed to a regulator as a proof over committed values, so a supervisor verifies a threshold is met without the underlying counterparty book being handed over.
An independent review pack
The evidence an external reviewer asks for — chain attestation, control register, exception log, sampling workfile — is generated from the platform rather than assembled by hand the week before.
Human-in-the-loop where judgement belongs
Anomaly triage, manual entry, override and reasoning-trace review are explicit queues with named reviewers. An automated classification a human overrode records both the machine view and the human one.
POPIA in the product, not in a policy document
- Minimisation — a field with no declared purpose is not collected. This site's own contact form is built the same way, and its retention clock is a database column rather than a paragraph.
- Access — a data subject exports their own bundle from the client portal, machine-readable, without asking anyone.
- Erasure — a discharged erasure destroys the per-subject key. Legal holds interlock and are named when they refuse.
- Logs and URLs — identifiers travel in the body or the path as opaque ids. Structured logging redacts identifiers and card-shaped values before they are written.
- Operator access — a staff member reading a customer record leaves an audit event. Reading is an action, not a non-event.
Wynk Systems is a bank-grade core-banking platform. Registered in South Africa.
This site is informational: nothing on it constitutes an offer, a quotation, or credit advice.