Security and compliance posture
The mechanisms that actually exist, each named with the artefact that evidences it.
The four load-bearing claims
Row-level security
Tenant isolation is enforced by the database, not by application code remembering to filter. Every tenant table carries FORCED row-level security and every read runs inside a tenant-scoped transaction, so a query issued without a tenant context returns nothing rather than everything.
Hash-chained audit
Audit and ledger records each commit a SHA-256 over their predecessor. History cannot be edited quietly: a rewrite breaks the chain at the exact record it touched, and an independent verifier recomputes from origin and raises a fork as a blocking alarm.
POPIA
Personal information is collected against a declared purpose and a retention clock, data subjects get self-service access and erasure, logs and URLs are free of personal identifiers, and a discharged erasure destroys the per-subject key.
Two-eyes dual control
Money-adjacent and override actions require a second, distinct operator. The requester cannot approve their own request, the pending state is visible in the interface, and the grant of authority is itself recorded — the UI never implies an override is one click.
Control register
Page 3 of 4 · 30 controls. Wide rows scroll inside the table, not the page.
Across all 4 pages: ✓ Live 27 · ◐ In build 3. In-build controls are not load-bearing yet and a risk assessment should treat them as absent.
| Area | Control | How it is enforced | Status | Evidence |
|---|---|---|---|---|
| POPIA | No personal information in logs or URLs | Structured logging redacts identifiers and PAN-shaped values; identifiers travel in the body or the path as opaque ids, never as query strings. | ✓ Live | Gate G-REDACT |
| POPIA | Crypto-shredding on erasure | Per-subject keys are destroyed on a discharged erasure, rendering residual ciphertext in backups unreadable. | ◐ In build | ADR-S-0146 |
| Financial crime | KYC with a documented verification chain | Identity verification records its source, its timestamp and its operator; a manual override is a two-eyes event. | ✓ Live | ADR-S-0071 |
| Financial crime | KYB and beneficial-ownership capture | Entity onboarding resolves directors and ultimate beneficial owners against CIPC records held with their retrieval evidence. | ◐ In build | ADR-S-0121 |
| Financial crime | Sanctions, PEP and adverse-media screening | Screening holds are explicit states in the workflow; a held payment cannot be released by the operator who raised it. | ✓ Live | ADR-S-0118 |
| Financial crime | goAML regulatory reporting | STR and CTR packs generate from ledger facts and carry a submission lifecycle: draft, signed off, submitted, acknowledged. | ✓ Live | ADR-S-0133 |
| Regulatory | NCA affordability and cost-of-credit caps | Reg 42–44 caps are enforced in a Python kernel with a contract test against the TypeScript path; a breach refuses origination. | ✓ Live | Gate G-NCA |
| Regulatory | Reg 23A capital and Basel 3.1 treatment | Risk weights and capital consumption are computed per exposure and reconcile to the BA returns. | ✓ Live | ADR-S-0044 |
What we do not claim
- No control on this page is asserted as certified by a third party unless the evidence column names that certificate.
- Controls marked in build are not yet load-bearing in production and must not be relied on in a risk assessment.
- Controls marked mock driver exercise the interface, not the live counterparty integration.
- A penetration test by an independent firm has not been published. When one is, this page will name the firm and the report date; until then, treat the register as our own assessment.
Independent reviewers get the evidence pack — chain attestation, control register, exception log and the sampling workfile — rather than a slide deck. ✓ Live means the mechanism is in this codebase and on the gate board today.
Wynk Systems is a bank-grade core-banking platform. Registered in South Africa.
This site is informational: nothing on it constitutes an offer, a quotation, or credit advice.