Protecting Africa's digital infrastructure.

AVAV runs systems that hold payroll records, student information and customer conversations, so trust isn't optional. We provide secure engineering, POPIA-aligned data protection, encryption and strict access control to protect operations across the continent.

South African professionals monitoring a network operations center
POPIA AlignedTLS in TransitEncrypted at RestRole-Based AccessAudit TrailsRegular BackupsResponsible DisclosurePOPIA AlignedTLS in TransitEncrypted at RestRole-Based AccessAudit TrailsRegular BackupsResponsible Disclosure

Practical safeguards,
described honestly.

These are the controls we apply across our products and infrastructure builds. No invented certifications, just rigorous engineering.

Cybersecurity encryption in transit and at rest

Encrypted in transit and at rest

Information is protected both while it moves and while it is stored. Traffic between your browser and our servers is encrypted with TLS, and data stored in our hosting environment is encrypted at rest.

  • TLS encryption for data in transit
  • Encryption at rest in the hosting environment
  • Sensitive fields handled with care in application logic
Role-based access control

Role-based access control

People should only see what their job requires. Our products use role-based access control so permissions match responsibilities, and administrative access is limited to the team members who need it to run the service.

  • Permissions scoped to user roles
  • Administrative access strictly limited
  • Access to client data kept to what is necessary
Cybersecurity audit trails and logs

Audit trails

Key actions are recorded so that access and changes can be reviewed. Audit trails support accountability day to day and make it possible to investigate if something looks out of place.

  • Records of key actions and changes
  • Reviewable history for accountability
  • Supports investigation of unusual activity
System backups and availability

Backups & availability

We take regular backups so data can be restored, and host on infrastructure designed for reliable availability. We monitor the service and work to restore it quickly if an incident occurs.

  • Regular backups for restore and recovery
  • Hosting built for reliable availability
  • Monitoring and prompt incident response

Built for South Africa's
privacy law.

POPIA isn't a bolt-on for us. Because we build for South African organisations, protecting personal information is part of how the products are designed from day one.

Lawful, limited processing

We process personal information for a clear, lawful purpose, and limit what we collect and how long we keep it to what the purpose requires.

Operator agreements

Where AVAV acts as an operator processing personal information on a client's behalf, we put POPIA-compliant processing agreements in place setting out responsibilities and safeguards.

Security safeguards

We apply appropriate technical and organisational safeguards, encryption, access control, audit trails, to protect personal information against loss or unauthorised access.

Data subject respect

Our products are built to support the rights POPIA gives people over their information, and we help clients meet requests relating to the data they hold in our systems.

Security questions
before you commit?

Book a free discovery call. We'll walk your team through how AVAV protects your data, honestly.

Book a free discovery call

Response within 24 hours