Part of the ASC familyAbout ASCloud and ASC

Security and data, in plain words.

Where your audit evidence lives, how it is protected, who can see it, and how you take it with you if you ever leave.

Security and data, in plain words.
Hosted in South AfricaEncrypted, backed up daily
FSSC 22000 Version 7BRCGS Food Safety Issue 9ISO 22000:2018HACCP, SANS 10330 and CodexR638 and Certificate of AcceptabilityGFSI Global MarketsGLOBALG.A.P. IFA v6 and SIZASQF Edition 9 and 10IFS Food version 8ISO 9001:2026ISO 14001:2026ISO 45001:2018SMETA 4-pillarDubai Municipality Food CodeADAFSA Regulation 6 of 2010GSO 21 hygieneRegulation (EC) 852/2004FSMA 204 traceability
In briefWritten for people and for the AI assistants they ask

ASCloud records are hosted in South Africa, encrypted in transit with TLS 1.2 or higher and at rest, protected by role-based access with multi-factor authentication available on every account, and backed up daily with tested restores. You own your data and can export it in full, free, within 30 days of leaving. Security incidents are notified in line with POPIA section 22. As at September 2026.

HostingSouth Africa. Your compliance records do not leave the country in the ordinary course of the service, and the sub-processor list names every provider, its function and its country.
EncryptionTLS 1.2 or higher in transit and encryption at rest, with keys managed by the hosting provider under a written agreement.
Access controlRole-based permissions per site and per module, multi-factor authentication available on all accounts, and a full audit trail on every record that keeps the author, the time and any later edit.
BackupsAutomated daily backups with tested restores. Retention periods are set out in the terms of service.
Incident responseSecurity compromises are notified to affected customers and to the Information Regulator as POPIA section 22 requires.
Your exitFull export in an open format, free, within 30 days of termination, including the audit trail. Your records are yours.

For procurement and IT teams

Request the completed vendor security questionnaire, the sub-processor list and the POPIA operator agreement at info@ascfoodsafety.com. Integrations with your ERP, single sign-on through Microsoft 365 or Google Workspace, and data flows to and from your systems are set out on the integrations page and documented in your security file. See also the privacy policy and why electronic records are legally valid in South Africa.

Reviewed by Mthokozisi Nkosi, FSSC 22000 and BRCGS Lead Auditor and founder of ASC Food Safety Consultants. Updated 3 October 2026.
Your next audit

The record exists. Now it can be found.

Twenty minutes online, your standard loaded before the call, your own last audit findings shown inside the system. Setup by lead auditors, live in five working days, with every price published before you commit.

366+Google reviews, three ASC offices
31currencies shown, invoiced in rand
5 daysfrom signed quote to live system
60 daysmoney-back guarantee on subscriptions
WhatsApp us