How we handle your information

Sorora is a product of KASIG (Pty) Ltd (trading as Briggi Tech), based in Midrand, Johannesburg, South Africa.

Information Officer: [Information Officer Name]
The MD will appoint and confirm the Information Officer in writing before the production launch.

• Business name and registration details
• User name and email address
• Customer contact details (name, email, phone, address, VAT number)
• Financial transaction data (invoice amounts, payment records)
• Login credentials — passwords are stored as a bcrypt hash and are never readable in plain text
• Usage data (audit logs of document actions)

• To provide the Sorora document management service
• To generate legally compliant tax invoices and business documents
• To enable financial reporting and VAT compliance for SARS submissions
• To maintain an audit trail as required by South African accounting standards

• All data is stored on servers located in South Africa
• Passwords are hashed using bcrypt (a minimum of 12 rounds) — they are never stored in plain text
• Data in transit is encrypted via HTTPS (SSL/TLS)
• Access is restricted to authenticated users within their own organisation only
• An audit log is maintained for all data changes

We do not sell your data to third parties. The only operational processors we use are:

• Email delivery: Resend (resend.com) — recipient email addresses only
• Payment processing: PayFast — transaction amounts only. Sorora does not store card data.
• No other third-party data sharing

• Right to access your personal information
• Right to correct inaccurate information
• Right to request deletion of your data
• Right to object to processing
• Right to lodge a complaint with the Information Regulator: inforegulator.org.za · complaints.IR@justice.gov.za

To exercise your rights, email: [privacy@sorora.co.za — placeholder]
The MD will configure this address once the production domain is live.

• Business documents: retained for 5 years (SARS requirement for financial records).
• User accounts: retained while your subscription is active, deleted on written request — subject to the 5-year document retention rule above.

We will notify registered users of material changes via email at least 14 days before they take effect.

24 June 2026