Review POPIA-sensitive clauses without sending data anywhere.
Redline flags the clauses in a contract that engage the Protection of Personal Information Act, and it does so on your own computer, so personal information stays with your firm.
The POPIA exposure in a commercial contract is rarely in one place. Data-processing terms, cross-border transfer clauses, operator appointments, and breach-notification duties are spread across the agreement and easy to miss on a fast read. Redline segments the contract and flags the clauses that touch POPIA, with the section each one engages and the rule that caught it.
Where POPIA shows up in a contract.
- Responsible-party safeguards (s19). Security-measure obligations and how the contract allocates them between the parties.
- Operator obligations (s20 and s21). Where the counterparty processes personal information on your behalf, and whether the written mandate and security terms POPIA requires of an operator are present.
- Cross-border transfer (s72). Clauses that move personal information outside South Africa, and the conditions attached to them.
Each flag links to SAFLII and the Government Gazette so you can read the primary source. The statute text inside Redline is paraphrased for contract-review use and frozen at each release.
No new operator in your processing chain.
Sending a contract full of personal information to a cloud review service can add another operator to your processing chain, and another cross-border transfer to account for. Redline avoids that question by design. The contract is read and scored on the lawyer's own computer, so reviewing it does not hand personal information to a third party or move it offshore.
Your firm stays the responsible party for the personal information in its contracts, and the review leaves no copy on someone else's server.
Your firm stays the responsible party.
Redline is designed so your firm remains the responsible party for the personal information in its contracts. The application runs on the device and does not handle that information on your firm's behalf. Contracts are read, scored, and stored locally, encrypted on disk, and nothing is uploaded. Where full-disk encryption is on, FileVault on macOS or BitLocker on Windows, the data sits behind both layers.
Activation is a one-time online step, and each time the app opens it makes a brief licence check. Both send only a licence id and a device identifier, never a contract or its contents. Between those checks Redline works offline, and it keeps working when you are offline for a while.
Redline's POPIA flags are a review aid. They are not a compliance certification and not legal advice. Verify the current wording of any section on SAFLII or in the Government Gazette before relying on it.
Related reading: how the analysis runs entirely on-device, and contract review for South African legal teams.
Test it on a contract of your own.
Send a contract you would like to test it on, and we will run it on a demo licence before discussing seats.