Deis GovernIQ is governance, risk and compliance software built around South African law, for risk and compliance teams in regulated financial services: it links every risk to its controls, tests and evidence, and covers an RMCP under FIC Directive 12, FIC Directive 8 employee screening, goAML reporting and FAIS fit-and-proper. It runs in Deis cloud (Azure South Africa North), on Deis infrastructure or in your own environment.
Compliance fails in the gaps between the spreadsheets
Where the time goes
A risk lives in one workbook, the control that mitigates it in another, the test result in an inbox and the evidence in a folder nobody can find at audit.
The RMCP sits in Word, and the obligations register was last reviewed two cycles ago.
Reports such as goAML submissions are assembled by hand each cycle.
How GovernIQ solves it
One connected record, with a hash-chained audit trail
Risks, controls, tests, evidence, incidents, obligations and cases reference each other in one system.
An RMCP structured into the nine areas of Directive 12, drafted, approved, versioned and attested by staff.
goAML XML produced in the FIC’s own schema, ready to upload to the FIC portal.
Modules switched on per organisation, so you start with what you need.
What your compliance team gets
Five domains in one system
Risk, compliance, financial crime, conduct and people share one organisation record, one obligation set and one evidence trail.
Risk register, KRIs, risk appetite, heat maps and controls testing with evidence requests
Obligations register, compliance calendar, policy library and attestations
UBO determination, AML cases with four-eyes control, goAML reports and SARB FinSurv
FAIS representative register, fit and proper, CPD and declarations
FIC Directive 8 employee screening with sweeps and rescreening
Illustrative visual. Figures are not from a real client.
Illustrative example of a GovernIQ residual-risk heat map next to a list of control tests and their status.
Residual risk
243211
Control testing
Access reviews: quarterlyEffective
Vendor due diligenceEvidence due
POPIA breach registerEffective
Change managementFailed test
Illustrative · sample data
How it works
Your first ninety days, in four steps
1 · Organisation profile
Tell GovernIQ who you are and how you are regulated, then choose the modules you need.
2 · Roles and users
Invite your team with built-in or custom roles. Two-factor sign-in is enforced by default.
3 · Obligations and policies
Load your obligations, then generate and approve policies and run attestation campaigns.
4 · Go live
Start testing controls, collecting evidence and filing returns, with a full audit trail behind every decision.
Integration and hosting
Your registers and evidence, under your control
Per-tenant AES-256-GCM encryption with Azure Key Vault, Microsoft Entra SSO and two-factor sign-in by default. A partner API with scoped keys and outbound webhooks connects GovernIQ to your other systems.
Maker-checker applies to AML dispositions, alert closure, Directive 8 assessments and policy approval. Runs in Deis cloud (Azure South Africa North), on Deis infrastructure, or in your own environment. Live checks still call the official sources.
Pricing
Priced to your modules and users
GovernIQ is priced to the modules and users you need. Tell us which domains you want to run and we will confirm a quote after a short scoping call.
What a customer due diligence flow needs to capture, verify and keep, and how to build it so the evidence is there when the auditor asks.
FAQ
Questions about governance, risk and compliance
Does GovernIQ support an RMCP under Directive 12?
Yes. The RMCP is structured into the nine areas Directive 12 sets out, drafted section by section, approved, versioned, filed on schedule and attested by staff, with a coverage view linking it to your obligations and controls.
What is FIC Directive 8 and how does GovernIQ help?
Directive 8, issued by the Financial Intelligence Centre on 31 March 2023, obliges accountable institutions to screen employees for competence and integrity before appointment and then on a risk cycle. GovernIQ runs this as a recurring programme with sweeps, rescreening and declarations, and DocuFii offers Directive 8 screening packages.
Can it produce goAML reports?
Yes. GovernIQ generates goAML XML in the FIC’s own schema, ready to upload to the FIC portal, with a record of every filing made. It also covers SARB FinSurv reporting for authorised dealers with limited authority.
Does it cover FAIS compliance?
Yes. It includes a representative register, fit and proper declarations and outcomes, CPD tracking, FSP licences and debarment.
Can we start with one module?
Yes. Modules are switched on per organisation, so you switch on only the domains you need and add the rest later without migration.
See what your first ninety days look like
We will walk through your obligations, modules and roles, and show GovernIQ running on a sample register.