Signing that meets the residency requirement, because it never leaves.
Government procurement requires citizens’ data to stay in South Africa. That one rule removes every offshore signing platform before anyone compares features. Vumasign is operated by a South African company and hosted in Johannesburg — for every account, on every plan.
Residency is the door that keeps the global platforms out. We are on the right side of it.
An offshore platform processes every envelope outside the country. For a department that is not a POPIA s72 question to answer; it is a procurement rule it cannot get past. Vumasign’s data — documents, fields, audit trails, backups — sits in Google Cloudafrica-south1, Johannesburg. There is nothing to justify and nothing to except.
| Requirement | Vumasign | Offshore platform | Paper |
|---|---|---|---|
| Data resides in South Africa | Yes — every account | No — excluded | Yes, in a filing cabinet |
| South African operator with an operator agreement | Yes | Foreign entity | — |
| Tamper-evident record, verifiable without the vendor | PAdES seal, any reader | Varies | No |
| Published price, no negotiation | Yes | “Contact sales” | Printing, couriers, storage |
| Valid under ECTA for ordinary signatures | Yes, s13(2)–(3) | Yes | Yes |
Where a specific statute prescribes a particular signature type for a particular document, that is a question for the department’s legal adviser — on every platform.Is it legal?
Ready for the supply chain unit.
The documents a supply chain unit asks for, stated plainly. Where something is in progress we say so rather than leaving it to be discovered at evaluation.
- Tax clearance
- Valid — PIN on request
- B-BBEE
- Level 4 · certificate
- Company registration
- 2026/654873/07
- Data location
- Google Cloud africa-south1, Johannesburg
Bracketed entries are being finalised and are shown as gaps rather than filled with placeholders.
Talk to us about procurement.
We will send the residency statement, the operator agreement and the security summary a supply chain unit needs, without a discovery call first.