Our Privacy Policy explains what MartialQA does with personal information. This page explains how we comply with South Africa's Protection of Personal Information Act (POPIA) while doing it.
Last updated: August 2026
The Protection of Personal Information Act, 2013 (POPIA) is South Africa's data protection law. It sets out conditions that organisations must meet when they process personal information, gives people rights over information held about them, and is enforced by the Information Regulator of South Africa. MartialQA is POPIA compliant. This page explains what that means in practice, rather than reproducing the Act itself.
POPIA distinguishes between a responsible party, which decides why and how personal information is processed, and an operator, which processes personal information on a responsible party's instructions. MartialQA performs both roles, depending on the information involved.
When customers submit calls, chats, emails, recordings, transcripts, knowledge-base content and employee QA information, the customer generally determines why that information is being processed. The customer is therefore generally the responsible party, and MartialQA acts as its operator. We process that information on the customer's instructions to provide services such as transcription, conversation analysis, quality-assurance scoring, reporting, coaching, and dispute and review functionality.
MartialQA separately acts as a responsible party where it determines the purpose of processing itself: MartialQA account information, business and billing contacts, sales enquiries, support communications, website usage, security logs, authentication information, and administration of the MartialQA service.
This distinction also appears in our Privacy Policy, which describes what we collect and why in more detail.
POPIA sets out eight conditions for lawful processing. Here is how each connects to MartialQA's actual practices:
MartialQA maintains a privacy and security programme overseen by its registered Information Officer.
Customer content is processed only as necessary to provide and support MartialQA, and according to our customer's instructions.
Calls, chats, emails and related information are processed for defined quality-assurance purposes such as transcription, scoring, reporting and coaching. They are not repurposed for unrelated commercial uses.
MartialQA does not use customer content to train its own general-purpose machine-learning models, and requires its AI providers not to use customer content for model training. See our Responsible AI page.
Customers retain control over the information they submit and can correct information within the platform where functionality allows.
MartialQA publicly explains its processing practices through this page and our Privacy Policy, Data Processing Addendum, Subprocessors page, Security page and Responsible AI page.
Appropriate access controls, tenant separation, encryption, monitoring, vulnerability management, incident response and security testing are described in detail on our Security page.
MartialQA assists customers in responding to access, correction, objection and deletion requests involving customer content. Where MartialQA acts as the responsible party, individuals can contact us directly using the details below.
MartialQA's Information Officer oversees our privacy compliance programme and the handling of requests relating to personal information.
Information Officer: Darren Swartz
Email: security@martialqa.co.za
Address: The Colosseum, Foyer 3, 1st Floor, Century Way, Century City, Cape Town, 7441, South Africa
Our Information Officer is registered with the South African Information Regulator.
If you believe MartialQA has processed your personal information unlawfully, you can contact our Information Officer using the details above, or lodge a complaint with the Information Regulator of South Africa.