AI for SA business

POPIA-compliant AI tools for South African business

Written by Chad Etkind Co-founder of Zaiq. Works on data, automation and search.

9 June 2026 · updated 28 September 2026

You can use AI on customer work without breaking POPIA, and the difference is almost entirely the plan you choose and how you set it up. There is no such thing as a POPIA-certified AI tool, so POPIA-compliant AI tools are really well-configured business plans with the right contract behind them. Here is what to demand, how the main vendors compare, and how to vet one in a few minutes.

What makes POPIA-compliant AI tools

POPIA never approves a product. Compliance comes from the contract and controls around the tool, so check each of these before personal information goes near it.

What to demand	Why POPIA cares
A signed data processing agreement, with the vendor as your operator	Sections 20 and 21: an operator may process only with your authorisation, must keep the data confidential, and must be bound by a written contract to maintain proper security
No training on your inputs	Keeps customer data out of a model you cannot control or delete from
Retention and deletion you control	Supports the security and minimality duties
Access control and logging	Section 19 requires appropriate, reasonable technical and organisational measures
A lawful basis for data leaving South Africa	Section 72: adequate protection through law or agreement, consent, or contractual necessity
Breach notification terms	Section 22: you must notify the Regulator and affected people, and your vendor must tell you first
A record you keep	Accountability: show what the tool touches, why and on what basis

One extra rule matters for sensitive data. Section 57 requires the Information Regulator’s prior authorisation before you transfer special personal information, such as health or biometric data, or children’s information, to a third party in a country without adequate protection.

Free vs business plans: the difference that matters

The gap between a free app and a business plan is not mainly features. It is what happens to your data, and whether there is a contract behind it.

The realistic options for a South African business

Option	What the vendor says	The POPIA catch
ChatGPT Business, Enterprise or the API	No training by default; you own inputs and outputs; data processing agreement available; Enterprise controls retention	Data is processed outside South Africa, so rely on the agreement for section 72 and sign it
Microsoft Copilot for work accounts	Covered by Microsoft’s Data Protection Addendum, Microsoft acts as processor, and prompts are not used to train foundation models	Web searches go to Bing under separate terms, with Microsoft as an independent controller, so decide whether to allow web grounding
Gemini in Google Workspace	Prompts are customer data under Google’s Cloud Data Processing Addendum, not used for training or human review outside your domain without permission	Use a Workspace account, not a personal Gmail account
Claude for Work or the API	Anthropic says it does not use commercial inputs or outputs for training by default	Feedback you submit can be used, so set a staff rule on that
Perplexity Enterprise	Perplexity says Enterprise data is never used for training, and uploaded files are kept for seven days	Consumer Perplexity has training switched on by default
Private or self-hosted models	Data stays in an environment you control	More setup and cost, but no cross-border question

Microsoft now calls its work product Microsoft Copilot, previously Microsoft 365 Copilot; our guide to Microsoft Copilot in South Africa explains the versions and rand prices.

Tools to keep away from customer data

Some tools are fine for personal use but a poor fit for anything involving customers. DeepSeek’s privacy policy says it stores personal data in China and uses it to train its models unless you email to opt out; see DeepSeek in South Africa. Consumer Gemini lets human reviewers read some chats while Keep Activity is on. Personal ChatGPT accounts train on content unless you opt out, as ChatGPT free vs paid explains. None of these come with the operator contract section 21 requires.

Read the data terms in the vendor’s own words, not a reseller’s summary.
Confirm no training, and that the setting cannot be switched back on by an individual user.
Get the data processing agreement, and keep a signed copy with your POPIA records.
Check retention: how long prompts and files are kept, and whether you can delete them.
Check sub-processors and location, so your section 72 basis holds.
Check breach terms: the vendor must notify you quickly, so you can notify the Regulator.

For work that genuinely needs real personal information, anonymise it first where you can, and read can you put customer data into ChatGPT for the ChatGPT specifics. For the wider legal picture, see AI regulation in South Africa.

If you need an AI system built around your own data with these controls in place, that is the kind of work Zaiq’s AI engineering covers. This is general information, not legal advice; for a high-risk or consequential decision, confirm with a POPIA practitioner.

Questions people ask

What makes an AI tool POPIA-compliant?

There is no POPIA certification, so it is the setup, not a logo. A defensible setup has a written contract that makes the vendor your operator and binds it to proper security (sections 20 and 21), no training on your inputs, retention and deletion you control, access control, a lawful basis for any transfer outside South Africa (section 72), and a record of what the tool processes and why.

Is free ChatGPT or ChatGPT Enterprise better for POPIA?

Enterprise, or ChatGPT Business, for any work touching personal information. OpenAI's pricing page says content on consumer plans is used for training unless you opt out, while OpenAI says it does not train on Business, Enterprise or API data by default and will sign a data processing agreement for them. Enterprise also lets you control how long data is kept.

What is a data processing agreement and do I need one?

It is the contract that makes the vendor your operator under POPIA and sets out security, retention, sub-processors and transfer safeguards. Section 21 requires a written contract that makes an operator maintain the security measures section 19 describes. If a tool processes personal information for you, especially outside South Africa, you need one.

Are Microsoft Copilot and Gemini for business POPIA-friendly?

Their work versions are built for it. Microsoft says Copilot for organisations is covered by its Data Protection Addendum with Microsoft as processor, and prompts are not used to train foundation models. Google says Gemini prompts in Workspace are customer data under its Cloud Data Processing Addendum and are not used for training without permission. Free personal versions work differently.

Do I have to keep AI data inside South Africa?

No. POPIA does not require data to stay in the country. Section 72 lets personal information leave South Africa if the recipient is bound by adequate protection, the person consents, or it is necessary for a contract with or for them. The exception is special personal information or children's information sent to a country without adequate protection, which needs the Regulator's prior authorisation under section 57.

Can a small business afford a POPIA-compliant AI setup?

Yes. The cheapest route costs nothing extra: use AI only on information with the personal details removed. Beyond that, business plans with a data processing agreement are within reach of most businesses, and many already pay for Microsoft 365 or Google Workspace. Private deployments are only needed for genuinely sensitive work.

Sources

Checked September 2026. Prices and features change, so confirm on the official site before you buy.