POPIA Compliance

Your SA customer data
stays in South Africa.

NexusHost keeps all data in South African data centres. We make POPIA compliance straightforward for your business.

Request a Data Processing Agreement →

What you need to know

POPIA and your website hosting.

The Protection of Personal Information Act (POPIA) requires South African organisations to protect personal information collected through their websites — names, email addresses, phone numbers, and payment details.

Hosting your data in South Africa is the simplest way to stay compliant. NexusHost does not replicate SA customer data to offshore locations without your explicit instruction.

Six things NexusHost does for your POPIA compliance

🇿🇦
SA data residency — Johannesburg

All data stored exclusively in South Africa. No offshore replication without your explicit instruction.

🔐
Encryption at rest and in transit

AES-256 at rest. TLS 1.3 for all data in transit. Free SSL on every plan, auto-renewed.

📄
POPIA Data Processing Agreement (DPA)

Available on request at no charge within 2 business days. Required to demonstrate your data processor handles data appropriately.

🛡️
Access controls

NexusHost staff cannot access your data without your permission.

🔔
Breach notification within 72 hours

In the event of a security incident, we notify you within 72 hours — aligned with POPIA requirements.

🗑️
Data deletion on account closure

All data securely deleted within 30 days of account closure, with written confirmation.

Compliance at a glance

frameworkPOPIA compliant
data_locationSA only (JHB)
encryption_restAES-256
encryption_transitTLS 1.3
dpa_availableYes — on request
breach_notificationWithin 72 hours
Need a DPA?

Request your POPIA Data Processing Agreement. We'll send it within 2 business days at no charge.

Request DPA →

Note: This page provides general information about NexusHost's hosting infrastructure and is not legal advice. For specific POPIA compliance questions, consult a qualified legal practitioner.