One managed platform to keep compliance current
Managed Occupational Health and Safety Act compliance for South African employers. Start with the APP that fits your immediate pressure.
GRC Shop gives South African businesses one central operating layer for compliance. Activate the APP that fits your needs now, then expand over time without rebuilding the record, workflows or visibility. Software handles the tracking, reminders and paperwork; qualified people own the review and sign-off.
B-BBEE Exempt Micro Enterprise (EME) · Reg. 2025/768856/07
Live record
One managed operating layer keeps obligations, workflows, evidence and visibility current.
One App per Domain
Start with one compliance domain, then add more APPs without rebuilding the model.
Continuous oversight
Internal changes, specialist input and regulatory updates keep the record live over time.
Centralised and live
One live compliance record replaces fragmented files, scattered updates and version confusion.
Continuous oversight
Reviews, actions, renewals and follow-through stay active after the first setup.
Remote model built to scale
National reach, tighter turnaround and less cost drag than visit-heavy delivery models.
Controlled cost and control
Clients keep visibility and approvals without carrying the full admin burden internally.
What clients see every day: live compliance status, fine-risk exposure and exactly what needs attention.
One operating layer for compliance
Centralise records, actions, evidence and approvals in one managed environment. The platform keeps every active APP connected so the compliance record stays visible and current.
The Platform is not just where you start. It is the integration layer that connects every APP you add. One record. One place. No disconnected systems.
Central record
It keeps the compliance record live across documents, actions, evidence, permissions, reviews and renewals, not just at setup but continuously.
APP-based domains
Each APP covers one compliance domain with its own workflows, documents and obligations, all running inside the same managed environment.
Explore the compliance apps: OHS · POPIA · Labour · FICA / AML · CIPC · SARS
Client control
Client approvals stay where needed. Outside advisors can contribute when needed. The master record still stays centralised and visible.
Traditional models fragment ownership
Files, updates and responsibilities get split across email threads, folders, consultants and internal teams.
Updates get lost between events
Injuries, appointments, renewals, staffing changes and regulatory updates keep moving, even when the documentation pack is already "done".
Many businesses lack in-house capacity
Most businesses do not have the time, systems or specialist coordination needed to keep compliance current on an ongoing basis.
Remote by design. Built to stay active.
GRC Shop is delivered remotely by design so the service can respond faster, keep process control tighter and support clients across South Africa without travel drag.
National reach without travel drag
More clients, more consistency, less time lost to logistics and scheduling friction.
Structured records beat ad-hoc files
The operating system becomes the source of truth, and documents are outputs of that system.
Better unit economics
The model scales by process, product and platform, not only by adding more consultants.
Questions before you start
What you can check before you talk to us
We are early and we would rather be checkable than impressive. Everything below is either published on this site or verifiable independently, so you can form a view without taking our word for anything.
The OHS service is live, not a demo
The occupational health and safety app is in service and carrying real statutory obligations. The screenshots on this site are the actual client portal, not mockups: the fine exposure position, the compliance status, the appointment letters and the registers.
See what it managesOur workings are published, with the section behind them
Five free compliance checklists covering POPIA, Labour, FICA, CIPC and SARS, plus an OHS Act guide. Every item carries the section of the Act or the regulation it comes from, so you can check us against the primary source rather than against our confidence.
Read the checklistsWe publish where the market gets it wrong
The widely repeated ratio of one health and safety representative per 20 employees is not what the Act says. We set out the correct position, with the subsection, because a provider who repeats the market version will compute your shortfall wrongly.
See the thresholdsOur own compliance is on the table
02X (Pty) Ltd t/a GRC Shop, registration 2025/768856/07, verifiable at CIPC. Our PAIA manual, our public POPIA policy and our B-BBEE Exempt Micro Enterprise certificate are all published and downloadable, not available on request.
Read the PAIA manualA named person signs off
Software handles the tracking, the reminders and the paperwork. A qualified person owns the review and the sign-off, and that person is named, with credentials you can verify against the professional bodies that issued them.
Who signs off, and the credentials behind itWe say what stays with you
We surface the obligation, the evidence and the gap. You decide on remediation and you remain the party the regulator holds responsible, because that is how the statutes are written and no service agreement changes it. Anyone promising otherwise is overselling.
How the split worksProfessional indemnity cover is in place
We carry professional indemnity insurance for the compliance work we do. Written confirmation of cover is available on request, and we confirm it in writing before any engagement starts.
Why there are no testimonials on this page. Our client relationships are confidential, and we will not publish a quote we do not have written consent for, or one we wrote ourselves. When a client is willing to be named and quoted, their words will appear here and nobody else’s will. In the meantime, the checkable things above are a better basis for a decision than a paragraph in quotation marks.
WHO STANDS BEHIND YOUR COMPLIANCE
Registered professionals, not a faceless app
GRC Shop is run by 02X (Pty) Ltd, a registered South African company. Qualified people build the work, review it, and sign it off. Software handles the tracking, reminders and paperwork; people own the accountability.
Registered company
02X (Pty) Ltd t/a GRC Shop. Registration 2025/768856/07. B-BBEE Exempt Micro Enterprise.
Qualified sign-off
Founder Philip de Witt: Chartered Management Accountant (ACMA, CGMA), MBA from the UCT Graduate School of Business, and an ISO 45001:2018 occupational health and safety qualification from the SABS.
Chartered finance and governance
A CA(SA) chartered accountant on our team keeps the financial and governance controls sound.
POPIA and PAIA
Your information is handled under POPIA, and our PAIA manual is published and available on request.
Qualified people own the review and sign-off on the compliance work we produce for you. Meet the founder.
Get started with the right setup
Tell us where the biggest compliance pressure is right now. We will review the context, share your Platform link, and guide you to the APP or APPs that fit your business, location and risk profile.