Built to survive an inspection
The same evidence discipline your firm needs for a FIC inspector applies to how Lucere handles the data behind it.
Our role under POPIA
Your firm is the Data Controller, so you decide why client information is collected. Lucere acts as the Data Processor, handling that information only on your instruction and for the purpose you set it up for: client due diligence under FICA.
Encryption
Sensitive client information is encrypted at rest with AES-256-GCM. Traffic between your browser, your clients' devices, and Lucere is encrypted in transit. ID numbers are never stored in the clear. Only a one-way SHA-256 hash is kept, used to detect the same client across requests, and never to recover the original number.
Zero-persistence identity checks
A Home Affairs identity check needs the client's real ID number to run. Lucere never stores it: your officer re-enters it at the moment of the check, we confirm it matches the hash already on file, use it for that one lookup, and discard it. Only the hash and the check's result are kept.
An audit trail that cannot be edited
Every consent, document upload, verification run, and audit event is written once and never altered. This is enforced at the database level, not just in application code, so what an inspector sees in your audit pack is exactly what happened, in order.
Access control
Every table denies access by default. A firm's data is visible only to that firm's active members, and a client sees only their own documents and consent history. There is no shared pool of data across firms. Profiles are only linked across institutions when the same person's hashed ID number matches, and only for de-duplication.
Retention and deletion
FICA sets a five-year floor on client due diligence records from the end of the relationship. Lucere enforces that automatically and won't delete records early, even on request. Once a retention period lapses, deletion is itself a recorded, auditable event.
Found something that doesn't look right, or have a question about how a specific piece of client data is handled?
Report itFull data-processing and commercial terms are on our legal page.