Trust Center
We show our posture and our promises. We show exactly who handles your data.

We store secrets in a vault. We rotate keys.
We apply Row-Level Security to every table. Your data is never visible to another organization.
Our open-source tools send no telemetry. Your data stays on your machine.
We are a 100% black-owned EME. South African buyers get maximum procurement recognition.
Report a vulnerability. Send it to security@enternovate.co.za or via our /.well-known/security.txt. We triage reports within 72 hours. We do not pursue good-faith researchers. We credit you when we fix the issue.
We minimise the data we collect. We honour data-subject requests for export and delete. We keep consent records. We process data lawfully under POPIA and GDPR. We offer data residency options for enterprise.
The hosted Security Cloud platform is in development. These are the vendors we plan to use when it launches. Each vendor has a signed DPA. The current marketing site is static and runs on Vercel.
We show verified registration details. We submit the same facts for every tender and supplier database.
Supplier registrations: CSD (Central Supplier Database) registered 25 August · supplier record available on request · SITA supplier database in progress · CIPC eServices active.