01 · Jurisdiction
Republic of South Africa
Dedicated hardware on South African soil, owned by a South African company, governed by South African law. POPIA applies. The keys live where the data lives.
Coming late 2026
An instrument, signed and timestamped. South African hardware, South African law, encryption built for the decade ahead.
Signed · Willem Dieter Herbst · Herbst Group (Pty) Ltd
Charter, in brief
Sovereign runs in South Africa, on dedicated hardware, owned by a South African company, governed by South African law. The keys live where the data lives. We carry the compliance burden so the customer carries their work.
01 · Jurisdiction
Dedicated hardware on South African soil, owned by a South African company, governed by South African law. POPIA applies. The keys live where the data lives.
02 · Encryption
LUKS2 with AES-256-XTS at rest. X25519+ML-KEM-768 hybrid post-quantum key exchange in transit. Designed for the threat model that arrives, not the one that left.
03 · Audit
The audit log cannot be edited, only appended. Its head is anchored daily to a neutral, public timestamp authority. Notification within twenty-four hours, not seventy-two, and it cannot be backdated.
Commitment 4
Every data access, every schema change, every key rotation, written once and never again.Foundational Charter · Commitment 4
In Flight
The audit log signs itself, every minute, and anchors to a neutral public timestamp once a day. The feed below is illustrative; production runs the same shape.
Audit log
Live · illustrative
Willem Dieter Herbst