POPIA Request Agent
The POPIA Request Agent handles data subject access, correction and deletion requests. It verifies the requester, searches your systems for the personal information you hold, redacts third-party details and drafts the response in the form the Act requires, so your information officer reviews one complete pack instead of assembling it.
Ideal forInformation officer
The difference
From 8-15 hours per request to 30-45 minutes
Your information officer reviews a complete response pack instead of spending days assembling one.
Done by hand
8-15 hours per request
With the Vanine agent
30-45 minutes
Time returned to your team
90%
Indicative figures. We measure your own baseline in the first fortnight so the numbers you see are yours.
Deadlines met every time
Each request is logged and tracked from the day it arrives, so you respond within the time POPIA and PAIA allow.
Nothing left out, nothing extra
The agent searches every connected system for the person’s information and redacts other people’s details before anything is released.
Evidence for the Information Regulator
Every search, redaction and decision is recorded, so you can show the Regulator exactly how a request was handled.
Capabilities
Answer every data subject request within the deadline, with nothing missed.
Built for information officers, deputy information officers, privacy and legal teams at South African organisations that process personal information.
Records search
Searches your CRM, HR systems, email archives and file shares for every record that holds the requester’s personal information.
Redaction
Removes third-party personal information and privileged content before any record is released.
Response drafting
Drafts the response letter and the record of information held, in the form POPIA and PAIA require.
Identity verification
Checks the requester’s identity and authority before any information is gathered or released.
Deadline tracking
Logs every request and tracks it against its statutory deadline, with reminders before it falls due.
Request register and audit trail
Keeps a register of requests, searches, redactions and decisions for your information officer and the Regulator.
How it works
From your systems to a result you sign off
Your information officer approves every release, redaction and refusal before anything is sent.
Connect the places your personal records already live.
Requests from your privacy inbox or web form, and records from your CRM, HR systems, email archives and SharePoint. Already use something else? We connect that too.
- OpenAI Frontier
- Your own AI platform or models
- Microsoft 365 (Teams, SharePoint, Outlook, Excel)
- CRM, HR and core business systems
- Email archives, SharePoint and file shares
- Privacy request inboxes and web forms
Runs as each request is received, or on request in Teams, using the models your organisation approves.
A redacted record pack and draft response in SharePoint, with the request logged in your register.
Step by step
- 01
A data subject request arrives by email or web form.
- 02
The agent logs it and verifies the requester’s identity.
- 03
It searches your connected systems for their personal information.
- 04
It redacts third-party and privileged information.
- 05
It drafts the response and the record of information held.
- 06
Your information officer reviews and sends the response.
Deployment
Runs inside the tools your team already uses
The same agent and the same cited output, delivered three ways: through the AI assistant you have rolled out, on a model you host yourself, or inside your own software.
In the frontier assistant you already pay for
We publish the agent as an MCP server. Add it as a connector and your team calls it from the chat they use every day, with no new tool to learn.
"Find everything we hold on T. Nkosi"
- request
- DSAR-2026-114
- systems
- 5
On a model you host yourself
Run the agent on open-weight models in your data centre or private cloud. Your personal records never leave your network, which keeps POPIA and data residency straightforward.
- Llama
- Mistral
- Ollama
- or any OpenAI-compatible endpoint
Inside your own software
Trigger a run from your own workflows, and push the finished output into your ERP, GRC or reporting systems. We build the integration with your team.
- REST API
- Webhooks
- Batch jobs
- Embeddable review panel
Governed the same way, every route
Whichever way your team reaches the agent, identity, permissions and audit stay with your existing controls.
- Single sign-on through Entra ID, Okta or Google Workspace
- Reads only the documents each user is already allowed to open
- Every tool call written to an audit log you can export
How we deliver it
One agent, three ways to hold it
Start where your team already works, then take it as far into your systems as the value justifies.
DATA SECURITY & PRIVACY
Your personal records stay yours.
The agent runs inside your tenancy, reads only what each task needs, and never trains on your personal records. Every step is logged so your auditors can see exactly what it touched.
Built for regulated work.
+YOUR PERSONAL RECORDS NEVER LEAVE YOUR ENVIRONMENT
More agents
More agents we build for South African enterprises
Each one is built on the same foundation: your documents, your rules, and your people signing off.
Precision AI for Institutional Workflows
