Short answer
Hosting region options are confirmed for each deployment and documented through FirstNet's security and compliance process. The Purple platform hosts data within defined geographic regions and is ISO 9001 and ISO 27001 certified.
In detail
Because the region is set per deployment rather than fixed, raise your requirements early. Points to confirm before rollout:
- Whether your organisation requires in-country (South African) hosting
- Any named certification your policies require
- Whether a security questionnaire must be completed
- Your retention period for guest data
- Which integrations, such as CRM or loyalty platforms, will receive the data
Platform assurance includes ISO 9001 and ISO 27001 certification, annual third-party audits, and ongoing vulnerability and penetration testing. Guest data is captured through consent-based login aligned to POPIA and GDPR, and your organisation remains the data controller for its guest dataset.
Hosting location matters because POPIA sets conditions for transferring personal information outside South Africa. Confirming the region at the discovery stage, before the pilot at one to four sites, avoids rework later.
Source: FirstNet Managed Guest Wi-Fi service page →
Didn’t answer your question?
