FICA, KYC & AML controls
Identity verification, beneficial-owner checks, risk classification, PEP/sanctions screening and evidence workflows support applicable FICA and AML/CFT obligations.
Compliance & assurance
Controls, evidence and responsible operations
Asonge Sonke treats compliance as an operating discipline spanning financial integrity, member protection, privacy, security, responsible credit, technology governance and operational resilience.
Assurance statement: This page describes control objectives, implemented capabilities and readiness/alignment efforts. It does not by itself represent independent certification, regulator registration, legal advice or a guarantee that every framework applies to every service.
Enterprise control framework
Compliance domains built into the operating model
Detailed evidence is restricted to authorised governance, risk, compliance and audit reviewers. Applicability depends on the service, transaction type, jurisdiction and role performed by Asonge Sonke.
Responsible credit
Loan workflows support affordability and eligibility checks, controlled approval, repayment evidence, interest review and responsible-credit controls where the National Credit Act applies.
Financial reporting integrity
Reconciliation, double-entry evidence, traceable transactions, impairment and interest controls support reliable accounting and IFRS/IFRS 9-oriented reporting processes.
Information security
Role-based access, MFA, encryption, audit evidence, vulnerability controls and security monitoring support an ISO/IEC 27001 and SOC 2-oriented control environment.
Payment-card security
Payment-card handling is designed to minimise cardholder-data exposure and support PCI DSS control requirements where card data enters system scope.
Quality governance
Documented change control, production gates, incident management, corrective actions and evidence reviews support ISO 9001-oriented quality practices.
AI governance
AI-assisted features operate with data minimisation, human review, restricted actions and auditable approval boundaries intended to support ISO/IEC 42001-aligned governance.
Electronic transactions
Electronic records, notices, consent and online transaction processes are structured with South Africa’s electronic-transactions framework in mind.
Consumer & member protection
Clear records, complaint channels, consent controls, accessible statements and governed service changes support fair and transparent member treatment.
Conditional health-information scope
HIPAA safeguards are relevant only if Asonge Sonke acts in a covered-entity or business-associate context involving regulated electronic health information.
Accessibility
Responsive interaction, keyboard-friendly controls, semantic structure and readable content support WCAG-oriented accessibility improvement.
Business continuity & resilience
Backup, restore, recovery testing, incident readiness and disaster-recovery evidence support operational resilience and continuity planning.
Legal information
Privacy and service terms
Read how personal information is handled and the rules governing use of the Asonge Sonke digital service.