Short answer
FirstNet Private Cloud runs under ISO 27001 and ISO 9001 certified management systems and hosts workloads in South Africa. But POPIA compliance is shared, so your own settings, data classification and governance also shape the outcome.
In detail
What FirstNet provides:
- Local hosting in FirstNet data centres in Durban, Johannesburg and Cape Town. This helps keep your data in South Africa.
- ISO 27001 governance: security risk management, change control, monitoring and incident response, all under audit.
- Platform controls: role-based access control, MFA, encryption at rest and in transit, and central logging.
- A recommended baseline: a virtual firewall to split up your network, and Veeam backups that cannot be changed (immutable).
What stays with you: under POPIA, your business is the responsible party. You decide what personal information you process, how it is classified, who can access it and how long you keep it. Those choices, and how you set up your virtual machines and apps, decide whether your processing meets the Act.
Before it commits anything in writing, FirstNet reviews any specific compliance wording or residency clauses. The same goes for security questionnaires and certification evidence. Raise them early in discovery to keep your project on schedule.
Source: FirstNet Private Cloud Hosting & Management service page →
Didn’t answer your question?