Promotion of Access to Information Act 2 of 2000
Section 51 Manual
AlloBTeQ (Pty) Ltd, trading as SORMALITICS
1. Purpose of this manual
PAIA gives effect to the constitutional right of access to information. This manual explains what records AlloBTeQ (Pty) Ltd holds and how to request access to them.
It is also the point of contact for requests under the Protection of Personal Information Act 4 of 2013 (POPIA), including requests by data subjects to access, correct or delete their personal information.
2. Particulars of the private body
| Registered name | AlloBTeQ (Pty) Ltd |
| Trading name | SORMALITICS |
| Registration number | 2023/270245/07 |
| Entity type | Private company (profit company), registered with the Companies and Intellectual Property Commission (CIPC) |
| VAT number | Not registered for VAT |
| Physical address | Anrickle Place, Kiaat Street, Noordwyk, Midrand, Johannesburg, 1687, South Africa |
| Postal address | Anrickle Place, Kiaat Street, Noordwyk, Midrand, Johannesburg, 1687, South Africa |
| Telephone | +27 (0)67 921 1947 |
| Website | https://sormalitics.com |
| Information Officer | Brian Mthembu |
| Information Officer email | brian.mthembu@allob.co.za |
| Registration with the Regulator | 2026-065021, registered 23 August 2026 |
| Deputy Information Officer | None appointed |
3. The Regulator's PAIA Guide
The Information Regulator has published a guide, under section 10 of PAIA, on how to use the Act. It is available in all official languages.
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
PO Box 31533, Braamfontein, Johannesburg, 2017
Telephone: 010 023 5200
General: enquiries@inforegulator.org.za
PAIA complaints: PAIAComplaints@inforegulator.org.za
Website: inforegulator.org.za
4. Records held, by category
Listing a category does not mean every record in it is automatically available — the grounds of refusal in Chapter 4 of PAIA may apply. See section 6.
4.1 Company and statutory records
Founding documents, share register, director records, minutes, statutory returns, tax registrations and returns, insurance policies.
4.2 Financial records
Accounting records, annual financial statements, bank records, supplier and customer invoices, payment processor records, payroll and employee tax records.
4.3 Employee and HR records
Contracts of employment, personnel files, payroll records, leave records, disciplinary records, training records, recruitment records.
4.4 Customer and user records
Account records, subscription and billing records, support correspondence, and the documents users create through the SORMALITICS platform.
4.5 Technical and security records
System and application logs, audit logs, security monitoring records, incident records, backup records, source code and technical documentation.
4.6 Supplier and subprocessor records
Agreements with service providers, subprocessor records, procurement records.
Note on platform content
Where a practitioner or business user uploads information about their own clients or employees, AlloBTeQ acts as an operator under POPIA and processes that information on that user's instructions. A person seeking access to such records should approach the user who uploaded them — the responsible party — rather than AlloBTeQ. We will assist that responsible party in responding. See our Data Processing Agreement.
4.7 Records held under other legislation
Records kept under, among others: the Companies Act 71 of 2008; the Income Tax Act 58 of 1962; the Tax Administration Act 28 of 2011; the Value-Added Tax Act 89 of 1991; the Basic Conditions of Employment Act 75 of 1997; the Labour Relations Act 66 of 1995; the Unemployment Insurance Act 63 of 2001; the Skills Development Levies Act 9 of 1999; the Compensation for Occupational Injuries and Diseases Act 130 of 1993; POPIA; and the Electronic Communications and Transactions Act 25 of 2002.
4.8 Records available without a formal request
The following are published on our website and need no PAIA request: Terms of Service, Privacy Policy, Cookie Policy, Refund Policy, Data Processing Agreement, pricing, and this manual.
5. How to request access
- Complete the prescribed Form C (Request for Access to Record — private body), available from the Information Regulator's website.
- Send it to the Information Officer at the address in section 2.
- Provide enough detail to identify the record, and identify the right you are seeking to exercise or protect and why the record is required for that purpose.
- State how you wish to be informed of the outcome, and in what form you want access.
- If you are requesting on someone else's behalf, attach proof of your authority.
Fees
- A request fee is payable by a requester other than a personal requester, before the request is processed.
- An access fee may be payable for search, preparation, reproduction and postage.
- A personal requester — someone requesting a record about themselves — pays no request fee.
- A deposit may be required where preparation is expected to exceed six hours.
Amounts are those prescribed in the Regulations in force at the time of the request. We will tell you the amount before proceeding.
Timeframe
A decision within 30 days of receipt, extendable by a further 30 days in the circumstances PAIA allows. You will be notified in writing of any extension.
If access is refused
You will be given written reasons and told what remedies are available. You may complain to the Information Regulator, or apply to a court.
6. Grounds for refusal
PAIA requires refusal in some cases and permits it in others. The grounds most likely to apply to us:
- Unreasonable disclosure of personal information about a third party (s63)
- Commercial information of a third party — trade secrets, or information that could harm their commercial or financial interests (s64)
- Information supplied in confidence, where disclosure could prejudice future supply (s65)
- Information that could endanger a person's life or safety, or prejudice the security of property or a system (s66) — this includes our security architecture and system logs
- Legally privileged records (s67)
- Our own confidential commercial information, including source code (s68)
- Research information of a third party or of AlloBTeQ (s69)
Access may still be granted where the public interest override in section 70 applies.
7. Requests under POPIA
Data subjects have rights under POPIA that are separate from PAIA:
| Right | Section | How to exercise |
|---|---|---|
| Confirmation of what we hold, and access to it | s23 | Form 2, or the self-service export in your account |
| Correction or deletion | s24 | Form 2, or your account settings |
| Object to processing | s11(3) | Form 1 |
| Object to direct marketing | s69 | The unsubscribe link, or write to us |
| Complain to the Regulator | s74 | complaints.IR@inforegulator.org.za |
Self-service
Account holders can export their data and request deletion from within the product — see the Privacy Policy. Deletion carries a 30-day grace period, after which personal working data is deleted and financial and payroll records are anonymised rather than deleted, because tax and company law require the underlying record to be retained.
8. Availability and review
This manual is available:
- On this page, at sormalitics.com/legal/paia
- At our physical address during business hours
- By email from the Information Officer on request
- In printed form, on payment of the prescribed reproduction fee
It is reviewed at least annually, and whenever there is a material change to the records we hold or to our processing.
Compiled in terms of section 51 of the Promotion of Access to Information Act 2 of 2000.
AlloBTeQ (Pty) Ltd · Registration 2023/270245/07