Regional compliance

Built against the acts that govern your buildings.

Eleven full country compliance dossiers, eleven data-protection regimes, eleven tax-and-currency presets, one unified architecture. We don’t strap a “POPIA mode” on top of a North-American SaaS — the platform is wired for Southern & East African property, sectional-title, and tax law from the ground up.

Talk to our compliance lead → Privacy policy

Statutory Engine

11 Active Jurisdictions

Verified 2026

ZA SARS · POPIA · STSMA

BW BURS · DPA · Cap 33:04

NA NamRA · STA 2009

ZM ZRA · DPA 2021

ZW ZIMRA · CDPA

LS RSL · DPA · Land Act

SZ ERS · DPA · STA

MW MRA · DPA 2024

MU MRA · DPA 2017

TZ TRA · PDPA · UTA

SC SRC · DPA 2023

full country compliance dossiers

ZA · BW · NA · ZM · ZW · LS · SZ · MW · MU · TZ · SC

data-protection & tax regimes

POPIA · BW/ZM/ZW/LS/SZ/MW/MU/TZ/SC DPAs

100%

RLS-enforced workspace isolation

per company, per property, per portal

By market

Country-by-country — what\u2019s in the box.

Every market below ships a complete statutory compliance dossier and an in-app jurisdiction preset that configures VAT rates, Withholding Tax (WHT / TDS) rules, deposit regulations, sectional-title / condominium frameworks, and regulator-ready reporting exports.

South Africa

Revenue: SARS

Data protection

Protection of Personal Information Act 4 of 2013 (POPIA)

Regulator: Information Regulator (South Africa)

Data-subject access, correction, and deletion rights surfaced in-app. Info Officer email published on /privacy. 72-hour breach notification playbook in the admin console.

Tenancy law

Rental Housing Act 50 of 1999 (as amended) + CPA where applicable

Lease templates carry the mandatory disclosures. Deposit is held in a separate liability account per tenant and an interest-tracking journal runs monthly.

Tax

VAT · VAT 15% (standard rate). Zero-rated and exempt line-items supported per SARS VAT 404.

WHT · WHT on non-resident landlords: 7.5% default, override per lease. SARS tax-certificate export.

In the console

ZAR currency + 15% VAT preset
WHT non-resident landlord workflow
SARS-aligned VAT 201 CSV export
POPIA data-subject request console
Deposit interest schedule

Botswana

Revenue: BURS

Data protection

Data Protection Act, 2018 (Act No. 32 of 2018)

Regulator: Information & Data Protection Commission

Consent records stored per data subject with timestamps. Cross-border transfer log attached to every third-party sub-processor in /privacy.

Tenancy law

Landlord and Tenant (Transfer of Property) Proclamation + common law

Standard lease template aligned with typical BURS-accepted clauses; two-month deposit cap auto-enforced at onboarding.

Tax

VAT · VAT 14%. Commercial rent is standard-rated.

WHT · WHT 10% on rent to non-residents. Auto-deducted and BURS certificate generated on receipt.

In the console

BWP currency + 14% VAT preset
BURS certificate export for WHT
Standard-rated commercial-rent invoicing
Pula-native bank reconciliation

Namibia

Revenue: NamRA

Data protection

Draft Data Protection Bill (advanced) — POPIA-equivalent controls applied in advance of enactment

Regulator: Office of the Communications Regulatory Authority (interim)

We apply POPIA-grade controls by default; when the Namibian DPA is gazetted we’ll swap our market label without a data migration.

Tenancy law

Rent Ordinance + Rent Control regulations (where applicable)

Rent escalation caps (where a Rent Control order is in force) are enforceable as a lease-level flag that blocks over-escalation.

Tax

VAT · VAT 15%. Commercial rent is standard-rated.

WHT · WHT on services 10%; on rent to non-residents per NamRA rules.

In the console

NAD currency + 15% VAT preset
Rent Control escalation guard
NamRA WHT certificate fields

Zambia

Revenue: ZRA

Data protection

Data Protection Act, 2021 (Act No. 3 of 2021)

Regulator: Data Protection Commissioner

Local data residency option on request. Data Protection Officer contact published in every in-product compliance pack.

Tenancy law

Landlord and Tenant (Business Premises) Act + common law

Turnover-rent leases (common in Lusaka retail) are first-class in the rent-roll — declared turnover flows into monthly invoice generation.

Tax

VAT · VAT 16%. Standard-rated for commercial rent.

WHT · WHT 10% on rent. ZRA-aligned monthly return export.

In the console

ZMW currency + 16% VAT preset
Turnover-rent lease type
ZRA WHT monthly return export

Zimbabwe

Revenue: ZIMRA

Data protection

Data Protection Act, 2021 (Cyber and Data Protection Act [Chapter 12:07])

Regulator: Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)

Dual-currency lease + invoice support (USD + ZWL). Historical FX-applied amounts preserved in the ledger so audit trail survives re-denomination.

Tenancy law

Commercial Premises (Rent) Regulations + Housing and Building Act

Rent Board approval flow for contested escalations is tracked on the lease as a hold/release state.

Tax

VAT · VAT 15% (standard). Dual-currency invoicing supported.

WHT · WHT 10% on rent per ZIMRA schedules; automated per-invoice.

In the console

Dual-currency (USD + ZWL) lease and invoice
ZIMRA WHT schedule export
Rent Board hold state per lease

Lesotho

Revenue: RSL

Data protection

Data Protection Act, 2011 (Act No. 5 of 2011)

Regulator: Data Protection Commissioner (Lesotho)

Equivalent-jurisdiction cross-border transfer log auto-populated for SA-hosted data given CMA membership.

Tenancy law

Common law + Deeds Registry regulations

LSL / ZAR parity is encoded as a currency-equivalence flag — no FX rounding drift on South-African-denominated leases.

Tax

VAT · VAT 15%. Standard-rated on commercial rent.

WHT · WHT 10% non-resident.

In the console

LSL currency with ZAR parity handling
RSL filing-ready VAT export

eSwatini

Revenue: ERS

Data protection

Data Protection Act, 2022

Regulator: Eswatini Communications Commission (transitional)

Access + deletion requests routed through the in-app Compliance console regardless of the data subject’s market — one workflow covers every market we deploy in.

Tenancy law

Rent Restriction Act + common law

Rent Restriction Board caps enforced as escalation guards on covered tenancies.

Tax

VAT · VAT 15%. Commercial standard-rated.

WHT · WHT 10%.

In the console

SZL currency + 15% VAT preset
Rent Restriction escalation guard
ERS WHT export

Malawi

Revenue: MRA (Malawi)

Data protection

Data Protection Act, 2024 (Act No. 3 of 2024)

Regulator: Malawi Communications Regulatory Authority (MACRA)

Enforces explicit data-subject consent, breach notification, and cross-border transfer safeguards across landlord, tenant, and vendor records.

Tenancy law

Registered Land Act (Cap 58:01) + Land Act, 2016 + Sectional / Condominium Property rules

Supports both commercial GLA leases and residential bedroom-based tenancies with compact high-denomination MWK formatting.

Tax

VAT · VAT 16.5% (standard rate on commercial rentals; residential letting exempt).

WHT · WHT 15% on resident rental payments (above threshold) and 20% non-resident WHT per MRA schedules.

In the console

MWK high-denomination currency + 16.5% VAT preset
MRA resident (15%) & non-resident (20%) WHT register
MACRA Data Protection Act 2024 DSAR workflows

Mauritius

Revenue: MRA (Mauritius)

Data protection

Data Protection Act 2017 (Act No. 20 of 2017 — GDPR-aligned)

Regulator: Data Protection Office (Mauritius)

Full GDPR-grade controller/processor separation, right-to-erasure workflows, and encrypted document storage for KYC packs.

Tenancy law

Code Civil Mauricien (Copropriété / Syndic & Baux Commerciaux) + Landlord and Tenant Act

Supports both commercial/residential rental portfolios and Copropriété / Syndic levy administration by quote-part (PQ).

Tax

VAT · VAT 15% on commercial premises where landlord is VAT-registered.

WHT · Tax Deduction at Source (TDS) 7.5% on resident rent and 10% on non-resident rent per MRA rules.

In the console

MUR currency + 15% VAT preset
MRA TDS (7.5% / 10%) certificate tracking
Syndic / Copropriété quote-part levy engine

Tanzania

Revenue: TRA

Data protection

Personal Data Protection Act, 2022 (Act No. 11 of 2022)

Regulator: Personal Data Protection Commission (PDPC)

PDPC-aligned consent capture, data-subject access exports, and role-based access control for property teams.

Tenancy law

Land Act (Cap 113) + Unit Titles Act, 2008 (Act No. 16 of 2008)

Unit Titles Act fractional ownership (Sectional Title) and multi-month commercial/residential lease billing supported natively.

Tax

VAT · VAT 18% on commercial rent (residential dwellings exempt).

WHT · WHT 10% on rental payments deducted at source and evidenced by TRA withholding certificates.

In the console

TZS high-denomination currency + 18% VAT preset
TRA 10% Rental WHT certificate reconciliation
Unit Titles Act 2008 sectional scheme support

Seychelles

Revenue: SRC

Data protection

Data Protection Act, 2023 (Act No. 9 of 2023)

Regulator: Information Commission of Seychelles

Strict tenant & owner PII isolation, audit-logged document access, and automated retention sweeps.

Tenancy law

Control of Rent and Tenancy Agreements Act (Cap 47) + Condominium Property Act

Supports commercial hospitality/retail leases, residential tenancies, and Condominium Body Corporate reserve/admin levies.

Tax

VAT · VAT 15% on taxable commercial lettings.

WHT · WHT 15% on rental payments to non-residents per Seychelles Revenue Commission (SRC) schedules.

In the console

SCR currency + 15% VAT preset
SRC WHT tracking & multi-currency (SCR/USD/EUR) leases
Condominium Property Act levy & reserve fund books

How it\u2019s enforced

Compliance is a primitive, not a page.

The four primitives below live in the database and the audit layer. They\u2019re the reason a regulatory claim on this page ends up as a technical fact, not a checkbox.

Row-level isolation

Postgres RLS enforces tenant + property scoping at the database, not the application, layer. Policies are property-scoped so a centre manager on Property A literally cannot query Property B.

Tamper-evident audit log

Every sensitive action — receipts, permission changes, deposit refunds, period-close — is append-only-logged with actor, timestamp, IP and device. The log is writable by the database, not by users.

Data-subject primitives

Access, correction, export, and deletion requests are first-class: /compliance console, request → acknowledge → resolve state machine, and regulator-ready response packs.

Retention sweep

A scheduled anonymisation job clears PII from closed tenancies per your retention policy while preserving the ledger for statutory accounting retention.

Procurement-ready

Need our compliance pack?

Security questionnaire responses, sub-processor list, DPIA template, and regulator contacts. Drop us a line and we\u2019ll send the pack within a business day.

Request the pack → Read the privacy policy

Last reviewed: 25 April 2026