Privacy Policy

This policy explains how Azure Audit ("Azure", "we") processes personal information in terms of the Protection of Personal Information Act 4 of 2013 (POPIA). It applies to our website and the Azure audit platform.

1. Responsible party and Information Officer

Azure Audit, Johannesburg, South Africa. Information Officer: contact info@azureaudit.online or +27 (0) 62 354 4077.

2. Our role

For audit files that audit firms load onto Azure (trial balances, owner and trustee details, supporting documents), the audit firm is the responsible party and Azure acts as an operator processing that information only on the firm's instructions. For website visitors, demo requests and account holders, Azure is the responsible party.

3. Information we collect

• Account details: name, email address, firm, role and sign-in records
• Demo and contact requests: name, email, firm, phone number and message
• Audit data uploaded by firms and their clients, including documents and financial records
• Technical data: IP address, browser type and activity logs used for security and audit trails

4. Why we process it

• To provide, secure and support the platform
• To keep an audit trail of who changed or signed what, as required by auditing standards
• To respond to demo requests and send service emails, such as document requests and portal invitations
• To meet legal obligations

We do not sell personal information and do not use audit data for marketing.

5. Sharing and cross-border transfers

We use trusted service providers for hosting, database storage and email delivery. Some of these providers store data outside South Africa. Where this happens we rely on providers bound by data protection laws or agreements that give a level of protection substantially similar to POPIA (section 72).

6. Security

Data is encrypted in transit, access is restricted per firm and per engagement, sign-offs are locked, and all changes are logged. If we become aware of a security compromise affecting personal information, we will notify the Information Regulator and affected parties as required by section 22 of POPIA.

7. Retention

Audit files are kept for as long as the audit firm requires, in line with its professional record-keeping obligations, and then deleted or returned. Demo request details are kept for up to 12 months.

8. Your rights

You may ask to access, correct or delete your personal information, or object to its processing, by emailing info@azureaudit.online. If your information sits in an audit file, we will refer your request to the audit firm concerned. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

9. Cookies

We only use storage that is needed to keep you signed in and the platform working. We do not use advertising cookies.

10. Changes

We may update this policy. The date at the top shows the latest version.