Compliance
Platform Extension PackRegulator-ready registers, requests and evidence
POPIA requests, breaches, legal holds and the deposit register run as tracked workflows with deadlines, and the evidence an auditor or regulator asks for is a report, not a project.
Compliance
Open requests
5
Due this week
2
Legal holds
1
Access request · POPIA
Former resident · Arcadia House · day 12 of 30
Deletion request
Lease #A-1877 · under legal hold
Deposit register
September · 2,912 deposits · refunds on time
Fire certificate
Kloof Street Lofts · expired 3 days ago
01
Requests with deadlines
POPIA requests and breaches run as tracked workflows, so nothing sits in an inbox past its deadline.
02
Registers kept for you
The deposit register, legal holds and building compliance stay current from the records you already keep.
03
Evidence on demand
When an auditor or the regulator asks, the answer is a report from live data, not a reconstruction.
Capabilities
What's in the box
Data requests
Access, correction and deletion requests with 30-day deadlines, automatic acknowledgement and one-step export.
Breach register
Personal data breaches logged, with a workflow for notifying the people affected and the Information Regulator.
Legal holds
Records frozen for disputes and investigations, with deletion requests deferred until the hold lifts.
Deposit register
A Rental Housing Act deposit register and refund report, kept current from the leases.
Building compliance
Certificate status across the portfolio, with expiries and outstanding inspections in view.
Security controls
Session limits, IP allow-lists and alerts on suspicious activity, managed in one place.
Features
Key features
Hover over or tap any feature for a short explanation.
POPIA and data rights
- Access, correction and deletion requests logged with their 30-day deadline, acknowledged automatically and exported in one step.
- Residents submit access or deletion requests from their app instead of emailing the office.
- Consent recorded by purpose and channel, so you can show the lawful basis for each use of personal data.
- Personal data breaches logged, with a workflow for telling the people affected and the Information Regulator.
- Where your data is held, and the basis for it, documented for your POPIA records.
Registers and evidence
- Open requests, approaching deadlines, expiring certificates and consent gaps in one view.
- A Rental Housing Act deposit register and refund report, kept current from the leases.
- Records frozen for a dispute or investigation, with deletion requests deferred until the hold lifts.
- A focused evidence pack for a tenant, property or period, ready to hand to an auditor or regulator.
- Certificates and statutory inspections across the portfolio, with anything overdue flagged.
Security and governance
- Session limits, idle timeouts and IP allow-lists per role, managed from one screen.
- Unusual sign-ins and bulk data exports detected and contained automatically.
- Personal details masked in exports, screens and the API unless a person's role needs them.
- Alerts on risky changes, such as back-dated leases, large rent cuts or refunds without an inspection.
- A quarterly score across POPIA deadlines, FICA coverage, audit alerts and retention, for your audit committee.
Fully API-exposed. Like every Atrium capability, Compliance ships with versioned endpoints, webhook events and OpenAPI docs - so it plugs into your stack, your warehouse and your AI.
Integrations & API →Works with
Accounting & Trust
Every charge, payment and allocation lands in a double-sided operational ledger - with trust accounting, statements and owner payouts designed in from the first schema, not bolted on.
Access & Safety
Access follows the lease, visitors and contractors are logged at the gate, and incidents, certificates and insurance sit on the record of the building they belong to.
Integrations & API
Atrium is API-first from the first migration. Every capability ships with its endpoint, webhook event and OpenAPI doc, so it can sit alongside your existing systems or take over from them at your pace.
FAQ
Compliance - common questions
The baseline is part of Core: role-based access, an audit log of changes to sensitive records, and personal information handled to POPIA standards. The Compliance pack adds the workbench: requests, registers, holds, security controls and reporting.
See Compliance in action
A 30-minute walkthrough with your own scenarios - beds, funders, intakes and all.