How long is the free trial, and do I need a credit card?

The trial runs for 14 days with full access to your chosen edition — no credit card required. You can convert to a paid plan or walk away at the end.

Why not just build a safety app with an AI tool?

You can generate a form in a weekend — but not the OHS Act, COIDA, Employment Equity, POPIA and R638 requirements encoded correctly, kept current, and wired into controlled documents, verified signatures and an audit trail. SHIELDos gives you that statutory depth, maintained for you, at a fraction of what one compliance failure costs.

Is SHIELDos compliant with South African law?

Yes — it is purpose-built for South African legislation: the OHS Act 85/1993, Employment Equity Act, BCEA, LRA, COIDA, POPIA and NEMA, with ISO 45001, 14001 and 9001 alignment built into the records and reports.

We are a South African group with sites in other countries — can they run on SHIELDos too?

Yes. The core system — incidents, risk assessments, inspections, training, documents, contractors and environmental management — is ISO-aligned and country-neutral, so sites outside South Africa run on the same platform, with group and division reporting on top. South African entities keep the full statutory pack: OHS Act, COIDA, Employment Equity, B-BBEE and POPIA.

Can we import our existing staff and records?

Yes. A guided onboarding wizard and bulk spreadsheet import bring in staff, branches, departments, assets and training records, and our team helps with larger migrations.

Does it work on phones and in the field?

Yes — the platform is fully mobile, including field capture, sign-on-glass signatures and offline inspections that sync automatically when you are back online.

Do we have to take every module?

No. Modules work standalone or together, and plans are sized to your organisation. Start with what you need — like OHS and training — and switch on more as you grow.

Who owns and can access our data?

You do. Each organisation's data is isolated per tenant, and the platform is POPIA-aligned with a Data Processing Agreement and full access auditing.

A fully integrated and comprehensive Operating and Compliance system in One Platform.

Terms and Conditions

Including the Data Processing Agreement and POPIA disclosures

Last updated: 11 September 2026

1. Acceptance of these Terms

These Terms and Conditions ("Terms") govern the use of the SHIELDos platform ("the Service") provided to subscribing organisations. Every customer accepts these Terms — including the Data Processing Agreement and the POPIA disclosures — during initial sign-up, when creating an account or when accepting an invitation to join an organisation's workspace. By creating the account you confirm you are authorised to act for the organisation, or that you are joining as its user, and that you accept these Terms on its behalf or for yourself respectively. If your organisation has signed a separate written agreement with us, that agreement prevails where it conflicts with these Terms.

2. The Service

We provide a multi-tenant cloud platform for occupational health & safety, human resources, quality, compliance and related management functions. Each organisation's data is stored in a logically isolated workspace, accessible only to that organisation's users, subject to clause 3.

3. Platform access & support (break-glass access)

As a multi-tenant platform, SHIELDos technical personnel (including the platform owner) may, where reasonably necessary, access your organisation's data solely for the purposes of:

providing support that you or your organisation has requested;
onboarding, configuration and data-import assistance;
investigating a suspected security incident or service failure; and
complying with a legal obligation or a lawful request made under South African law.

Such access is limited to the minimum data necessary for the purpose. Every switch of a platform operator into your organisation's workspace is recorded in a tamper-evident log with the operator's identity and a server timestamp, visible to your organisation's administrators under Data Protection → Platform Access. We will never use your organisation's data for our own commercial purposes, will not read unrelated records while providing support, and will notify your designated administrator of any access not preceded by a support request, where practicable.

4. Roles & data ownership

Your organisation remains the owner of the personal information it processes through the Service and acts as the responsible party under the Protection of Personal Information Act 4 of 2013 ("POPIA"). SHIELDos processes that information on your behalf as an operator under the Data Processing Agreement in clause 5. On termination, your data is returned or deleted in accordance with that agreement.

5. Data Processing Agreement

Operative between SHIELDos (operator) and the subscribing organisation (responsible party). This agreement is accepted at signup and governs all processing performed through the Service.

5.1 Scope and instructions

The operator processes personal information only on the responsible party's documented instructions, as given through the responsible party's configuration and use of the Service, including the modules, retention rules and user permissions configured by the responsible party's administrators.

5.2 Categories of data

The Service processes staff and contractor records (identifiers, employment, training, disciplinary and incident records), supplier records, health and safety data, and related compliance information. Medical surveillance, biometric and disciplinary information constitutes special personal information (POPIA s26) and receives the strictest handling: restricted access, access audit logging, and no secondary use.

5.3 Confidentiality

The operator treats all processed personal information as confidential, binds its personnel to confidentiality, and does not disclose it to third parties except as instructed, or as required by law.

5.4 Security measures

The operator maintains appropriate, commercially reasonable technical and organisational measures (POPIA s19), including logical tenant isolation with row-level access control, encryption in transit, authenticated access with per-role permissions, audit logging of sensitive-record access, and operator break-glass access logging visible to the responsible party's administrators (clause 3).

5.5 Sub-processors

The operator engages sub-processors (including hosting and platform infrastructure providers) under written agreements imposing data-protection obligations no less protective than this agreement. The operator maintains a list of sub-processors and gives the responsible party notice of material changes, during which the responsible party may object on reasonable grounds.

5.6 International transfers

Personal information may be hosted or processed outside the Republic of South Africa. Transfers out of the Republic are made only under the conditions permitted by POPIA s72, as disclosed in clause 6.6.

5.7 Security compromise notification

The operator notifies the responsible party's designated administrator of any security compromise affecting its data as soon as reasonably practicable, with sufficient detail for the responsible party to meet its own POPIA s22 notification obligations.

5.8 Data subject requests

Where a data subject exercises POPIA rights (ss23–24) through the responsible party, the operator provides reasonable assistance and access to the relevant data held in the Service.

5.9 Audit and records

The responsible party may request evidence of the operator's compliance with this agreement, including extracts of the platform access log for its organisation and records of processing performed through the Service.

5.10 Return and deletion

On termination of the subscription, the responsible party may export its data; the operator securely deletes or de-identifies the responsible party's data within an agreed period, subject to legal retention obligations.

6. POPIA disclosures & Privacy Notice

6.1 Who we are

For account and billing information of subscribing organisations, SHIELDos acts as the responsible party under POPIA. For personal information your organisation loads into its workspace, your organisation is the responsible party and SHIELDos acts as its operator (clause 4).

6.2 Information we collect

Account data (name, email, role, authentication details); organisation data entered into the modules by your users (which may include special personal information — see clause 5.2); and technical data (audit logs, timestamps, device information) needed to run and secure the Service.

6.3 Purpose and lawful basis

Personal information is processed only to provide, support, secure and bill for the Service (POPIA s11). We do not sell personal information and do not use your organisation's data for our own purposes.

6.4 Access and disclosure

Only your organisation's users can access its workspace, plus the limited platform support access in clause 3, which is logged and visible to your administrators.

6.5 Data subject rights

Data subjects may exercise their POPIA rights (access, correction, deletion, objection) through their organisation's Information Officer, or through us where SHIELDos is the responsible party.

6.6 Cross-border transfers (POPIA s72)

Your data is hosted on cloud infrastructure that may process and store information outside the Republic of South Africa. We transfer personal information out of the Republic only where one of the s72 conditions is met — most typically: the recipient being bound by law or contract (including this agreement) to provide substantially similar protection with enforceable rights and effective remedies; consent of the data subject or responsible party, which is captured at signup; or the transfer being necessary for performance of the contract between the data subject and your organisation. You may contact us for an account of the categories of recipients and the countries involved.

6.7 Retention and security

Account data is retained while the subscription is active and deleted or de-identified on account closure. The security measures in clause 5.4 apply throughout.

6.8 Information Officer

Queries under this clause may be directed to the subscribing organisation's Information Officer, or to SHIELDos as operator, which will route the query to the responsible party.

7. Availability & changes

We aim for continuous availability but do not guarantee uninterrupted service; scheduled maintenance is communicated in advance where practicable. We may update these Terms and will notify your organisation's administrator of material changes — continued use after notice constitutes acceptance of the updated Terms.

8. Governing law

These Terms are governed by the laws of the Republic of South Africa.

Questions about these Terms? Contact your account manager or raise a support ticket from within the platform.