PAIA manual
Who to contact, what records Leverpoint holds, and how to request access under the Promotion of Access to Information Act.
PAIA Manual of Leverpoint (Pty) Ltd. Prepared under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) and following the Information Regulator’s template for private bodies (template). Date of compilation: 16 October 2026. Date of revision: 16 October 2026 (first version).
1. List of acronyms and abbreviations
“CEO” Chief Executive Officer; “DIO” Deputy Information Officer; “IO” Information Officer; “Minister” Minister of Justice and Constitutional Development; “PAIA” Promotion of Access to Information Act 2 of 2000; “POPIA” Protection of Personal Information Act 4 of 2013; “Regulator” Information Regulator.
2. Purpose of this manual
This manual helps the public to: check which categories of records Leverpoint holds and which are available without a request; understand how to request access; find the contact details of the Information Officer; learn the grounds for refusal and the remedies available; and find a description of Leverpoint’s processing of personal information.
3. Key contact details for access to information
3.1 Information Officer: Siphosethu Magubane, Director – Information Officer (head of the private body). Tel: none; contact by email. Email: hello@leverpoint.co.za.
3.2 Deputy Information Officer: none designated.
3.3 General contacts: email hello@leverpoint.co.za.
3.4 National or head office: Postal: 63 Boeren Street, Vryheid, KwaZulu-Natal, 3100. Physical: 63 Boeren Street, Vryheid, KwaZulu-Natal, 3100. Tel: none; contact by email. Email: hello@leverpoint.co.za. Website: www.leverpoint.co.za.
4. Guide on how to use PAIA
4.1 The Regulator has updated and published the Guide on how to use PAIA.
4.2 The Guide is available in each official language and explains how to exercise rights under PAIA and POPIA.
4.3 It can be inspected at Leverpoint’s office and at the Regulator’s office during normal working hours.
4.4 It can be obtained from the Information Officer on request, or from the Regulator’s website (PAIA Guide).
4.5 The Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; tel 010 023 5200; enquiries@inforegulator.org.za (Regulator PAIA page).
5. Categories of records available without a request
No notice under PAIA s52 has been published. The following are available without a request: the Privacy Notice, this manual and the Website Terms, on the website.
6. Records available under other legislation
| CATEGORY | LEGISLATION |
|---|---|
| Company records, MOI, securities register | Companies Act 71 of 2008 |
| Tax records | Tax Administration Act 28 of 2011; Income Tax Act 58 of 1962; Value-Added Tax Act 89 of 1991 (if registered) |
| Personal information records | POPIA |
| Electronic transaction records | ECTA |
| Consumer records | CPA 68 of 2008 |
| Labour records (once employees are engaged) | BCEA 75 of 1997; LRA 66 of 1995; Employment Equity Act 55 of 1998; UIF Act 63 of 2001 |
7. Subjects and categories of records held
| SUBJECT | CATEGORIES |
|---|---|
| Corporate | MOI, registration certificate, director register, board resolutions, securities register, beneficial ownership filings |
| Finance and tax | Accounting records, invoices, bank statements, tax returns, annual financial statements |
| Clients and prospects | Enquiries, qualification forms, proposals, MSAs, SOWs, Change Requests, Acceptance Certificates, weekly notes, hours logs, runbooks |
| Client data processed as operator | Held for clients; requests are referred to the relevant client as responsible party |
| Suppliers | Service agreements, provider DPAs, transfer assessments |
| Compliance | Privacy and security policies, records of processing, incident register, AI risk assessments |
| Marketing | Consent records, opt-out list |
| IT | Access logs, system configurations |
8. Processing of personal information
8.1 Purpose of processing. Responding to enquiries; qualifying prospects; performing and administering contracts; billing; complying with the law; marketing with consent; securing systems; and, as an operator, providing services to clients.
8.2 Data subjects and categories of personal information.
| DATA SUBJECTS | CATEGORIES |
|---|---|
| Prospects and client contacts | Name, contact details, role, firm, correspondence, qualification answers |
| Client signatories | Name, role, signature |
| Suppliers | Contact and banking details |
| Website visitors | IP address, device and usage data |
| Individuals in client data (as operator) | As determined by the client |
| Director | Identity, contact and statutory details |
8.3 Recipients. Service providers acting as operators (section 8.4); professional advisers; banks; SARS, CIPC and other authorities as required by law.
8.4 Planned transborder flows. Information may be transferred outside South Africa to: Supabase (EU, Frankfurt); Formspree; Google (Workspace); Anthropic; and Vercel. Each transfer is assessed under POPIA s72. Locations: Supabase – Germany; Formspree – United States; Google – United States and other Google data-centre locations; Anthropic – United States; Vercel – United States and its global edge network.
8.5 Security measures. Access controls with multi-factor authentication, encryption, least-privilege access, logging, backups, provider assessments and incident response. Each measure is recorded as it is implemented (see Operator Agreement Annex 1).
9. Availability of this manual
This manual is available on the website at www.leverpoint.co.za/paia; at the head office for inspection during business hours; to any person on request, on payment of a reasonable amount; and to the Regulator on request.
10. Updating
The Information Officer will review this manual at least every 12 months.
Annex A – Access procedure
1. Form. Use Form 2, “Request for Access to Record” (Regulator PAIA page). Send it to the Information Officer by email, post or hand delivery.
2. Contents. Give enough detail to identify the record and yourself, state the form of access you want, and identify the right you want to exercise or protect, explaining why the record is required for that.
3. Proof of identity. Attach proof of identity. If you act for someone else, attach proof of authority.
4. Fees. A request fee (currently stated as R140 for private bodies; confirm against the PAIA Regulations, Annexure B) is payable before the request is processed. This does not apply to personal requesters seeking their own records. An access fee may be payable for search, preparation and copies. A deposit may be required where the search will take more than 6 hours. Exemptions apply to qualifying requesters. Confirm all amounts against the current fee schedule.
5. Decision. The Information Officer will decide within 30 days. That period may be extended once by up to 30 days, with notice and reasons. If no decision is made in time, the request is deemed refused.
6. Grounds for refusal. These include protection of third-party personal information, commercial information, confidential information, safety, privileged records and research. Access must be granted where public interest override applies.
7. Third parties. Leverpoint will notify affected third parties where required.
8. Remedies. There is no internal appeal for private bodies. You may complain to the Regulator on Form 5 within 180 days, or apply to court.
Last updated 16 October 2026.