Skip to content
Book a demo

Solution · GovernIQ

GRC software that proves the control worked

Deis GovernIQ is governance, risk and compliance software built around South African law, for risk and compliance teams in regulated financial services: it links every risk to its controls, tests and evidence, and covers an RMCP under FIC Directive 12, FIC Directive 8 employee screening, goAML reporting and FAIS fit-and-proper. It runs in Deis cloud (Azure South Africa North), on Deis infrastructure or in your own environment.

Platform:GovernIQ

The problem

Compliance fails in the gaps between the spreadsheets

Where the time goes

  • A risk lives in one workbook, the control that mitigates it in another, the test result in an inbox and the evidence in a folder nobody can find at audit.
  • The RMCP sits in Word, and the obligations register was last reviewed two cycles ago.
  • Reports such as goAML submissions are assembled by hand each cycle.

How GovernIQ solves it

One connected record, with a hash-chained audit trail

  • Risks, controls, tests, evidence, incidents, obligations and cases reference each other in one system.
  • An RMCP structured into the nine areas of Directive 12, drafted, approved, versioned and attested by staff.
  • goAML XML produced in the FIC’s own schema, ready to upload to the FIC portal.
  • Modules switched on per organisation, so you start with what you need.

What your compliance team gets

Five domains in one system

Risk, compliance, financial crime, conduct and people share one organisation record, one obligation set and one evidence trail.

  • Risk register, KRIs, risk appetite, heat maps and controls testing with evidence requests
  • Obligations register, compliance calendar, policy library and attestations
  • UBO determination, AML cases with four-eyes control, goAML reports and SARB FinSurv
  • FAIS representative register, fit and proper, CPD and declarations
  • FIC Directive 8 employee screening with sweeps and rescreening

Illustrative visual. Figures are not from a real client.

Illustrative example of a GovernIQ residual-risk heat map next to a list of control tests and their status.

Illustrative · sample data

How it works

Your first ninety days, in four steps

  1. 1 · Organisation profile

    Tell GovernIQ who you are and how you are regulated, then choose the modules you need.

  2. 2 · Roles and users

    Invite your team with built-in or custom roles. Two-factor sign-in is enforced by default.

  3. 3 · Obligations and policies

    Load your obligations, then generate and approve policies and run attestation campaigns.

  4. 4 · Go live

    Start testing controls, collecting evidence and filing returns, with a full audit trail behind every decision.

Integration and hosting

Your registers and evidence, under your control

Per-tenant AES-256-GCM encryption with Azure Key Vault, Microsoft Entra SSO and two-factor sign-in by default. A partner API with scoped keys and outbound webhooks connects GovernIQ to your other systems.

Maker-checker applies to AML dispositions, alert closure, Directive 8 assessments and policy approval. Runs in Deis cloud (Azure South Africa North), on Deis infrastructure, or in your own environment. Live checks still call the official sources.

Pricing

Priced to your modules and users

GovernIQ is priced to the modules and users you need. Tell us which domains you want to run and we will confirm a quote after a short scoping call.

Related

Related solutions

Related reading

FAQ

Questions about governance, risk and compliance

Does GovernIQ support an RMCP under Directive 12?

Yes. The RMCP is structured into the nine areas Directive 12 sets out, drafted section by section, approved, versioned, filed on schedule and attested by staff, with a coverage view linking it to your obligations and controls.

What is FIC Directive 8 and how does GovernIQ help?

Directive 8, issued by the Financial Intelligence Centre on 31 March 2023, obliges accountable institutions to screen employees for competence and integrity before appointment and then on a risk cycle. GovernIQ runs this as a recurring programme with sweeps, rescreening and declarations, and DocuFii offers Directive 8 screening packages.

Can it produce goAML reports?

Yes. GovernIQ generates goAML XML in the FIC’s own schema, ready to upload to the FIC portal, with a record of every filing made. It also covers SARB FinSurv reporting for authorised dealers with limited authority.

Does it cover FAIS compliance?

Yes. It includes a representative register, fit and proper declarations and outcomes, CPD tracking, FSP licences and debarment.

Can we start with one module?

Yes. Modules are switched on per organisation, so you switch on only the domains you need and add the rest later without migration.

See what your first ninety days look like

We will walk through your obligations, modules and roles, and show GovernIQ running on a sample register.

Chat on WhatsApp (opens WhatsApp in a new tab)