Frequently Asked Questions

Is GRC Shop a consultancy or software?

Both. We provide managed compliance as a service. Our AI agents do the document and tracking work; our human team supervises and handles the judgment calls. Clients pay one monthly fee and get the platform plus the work done.

Are you remote-only?

Yes. We don't visit sites unless something genuinely requires it (a serious incident investigation, for example). Everything is done remotely with structured uploads, video walk-throughs and live chat.

What does this replace?

For most South African SMEs, this replaces the need to hire a senior OHS or compliance specialist. You get a managed platform plus our team on a predictable monthly subscription. You save the time too: instead of personally chasing registers, renewals and audit prep, the platform tracks it and our team keeps it current.

Are you POPIA compliant?

Yes. Our Information Officer is registered, and our POPIA policy is publicly available on the Resources page. Data is hosted with reputable cloud providers under POPIA-compliant cross-border transfer mechanisms.

What about my existing OHS / compliance work?

We import what you have, fix what's outdated, and put the rest on the platform. You don't lose history.

What exactly does GRC Shop do?

GRC Shop is an outsourced occupational health and safety compliance service for South African employers. We take on your duties under the Occupational Health and Safety Act 85 of 1993: statutory appointments and their letters, the registers you must keep, certificate and expiry tracking, incident reporting timelines and the evidence an inspector asks for. The work is done remotely, supervised, and tracked in an app you can log into. Every appointment and register is traced to the section or regulation that requires it.

Which compliance areas are actually available today?

Occupational health and safety only. POPIA, labour, CIPC, SARS and FICA are on our roadmap and are not services you can buy from us today. The checklists we publish for those areas are free guides, not products.

Do you replace our safety officer, or work alongside one?

Either. Where there is no internal capacity we carry the administrative load end to end. Where you already have a safety officer or an appointed section 16(2) person, we run the register, the paperwork and the reminders underneath them so their time goes to the site rather than the filing.

What happens to the appointments we already have in place?

They are loaded as they are. We do not void existing appointments. We record each one, check whether a signed letter and a valid certificate exist for it, and show you which seats are actually covered and which only look covered on paper.

How fast do you respond?

Within two business days on any enquiry or request through the site.

What does an inspector actually ask for?

In practice, evidence rather than intentions: the appointment letters and the acceptance signatures, the training certificates behind them, the health and safety committee minutes, the incident records and the inspection registers. Our published OHS Inspection Register sets out the items and the section of the Act or regulation behind each one.

Where do your statutory requirements come from?

Each item in our published register carries the section of the Act or the regulation behind it. Where a figure is our operating practice rather than an explicit legal ratio, we say so on the page rather than presenting it as the law. When we get something wrong we publish the correction with a date.