A database per agency
Every firm gets its own database and its own deployment, built from the same release. Your book, your staff and your audit trail never share a database with another firm.
Security and POPIA
Your firm’s data never sits next to anyone else’s.
A collection firm holds some of the most sensitive information there is: names, ID numbers, addresses and debts. RevoFlow is built so that each firm’s data stays its own, is read only by those who need it, and is accounted for.
How it is protected
Six things that are true for every firm on RevoFlow.
Multi-factor sign-in
Back-office staff sign in with a second factor. People are invited by your administrator, given a role, and removed in one step when they leave.
Access scoped in the data
Each role reads only what it needs, and the rule is applied where the data lives, not by hiding buttons. An agent sees their cases; a client sees its own book.
Personal data, logged
ID numbers are masked on screen. Reading a customer’s personal information is recorded, with who read it and why.
A complete audit trail
Every command writes one audit event: the actor, the record, the before and the after. Exports are logged too, and the trail is kept for seven years.
No custody of money
RevoFlow never collects or holds money. It reads receipts and works out what they mean. Payments stay with your client and in your trust account.
Designed for South African law
The rules of collection, built in as rules.
Collection in South Africa is governed by more than one act. RevoFlow keeps the rules that come from them as dated, versioned settings, so a change in the law or in your client’s policy is a new version, not a code change.
- The Protection of Personal Information Act: operator terms, scoped access and logged reads
- Notice paths and periods per book, counted down for every case
- Prescription dates tracked, so a debt is not lost without anyone noticing
- Fee and commission rates with an effective date and an approver
- Disconnection requests re-checked when released, so nobody who paid is cut off
Questions
What your information officer will ask.
Who is the responsible party under POPIA?
Your firm, or your client, remains the responsible party for the personal information in your book. RevoFlow processes it on your behalf as an operator, under a written operator agreement.
Where is our data hosted?
Each firm’s database is hosted in a cloud region named in its operator agreement, encrypted in transit and at rest, with daily backups.
Can our client see our internal notes?
No. The client portal shows your client its own accounts, collections and reports. Staff notes, load file names and other firms’ data are never part of it.
What happens to data when we leave?
Your operator agreement sets how your data is returned to you and then deleted. Because your firm has its own database, nothing has to be untangled from anyone else’s.
Does RevoFlow supply the wording of our notices?
No. Your firm pastes in the wording your client and your attorneys have approved, and approves it in RevoFlow before the first batch. RevoFlow supplies no legal text.
Talk to us about your firm’s data.
We will walk your information officer through how RevoFlow handles personal information, and share the operator agreement.