PAIA manual

Who we are

bAInk is a service by CalC8 (Pty) Ltd, a private company in South Africa. bAInk connects an organisation’s bank accounts and accounting systems, keeps them in step and helps people approve payments.

Contact details for access requests

Information officer: Jayan Kistasami, who is also the head of CalC8 (Pty) Ltd for PAIA.

Email: jayan.kistasami@calc8.co.za.

Postal and street address: CalC8 (Pty) Ltd, 205 Kenneth Kaunda Road, Durban North, Durban, KwaZulu-Natal, South Africa.

The Information Regulator’s guide

The Information Regulator publishes a guide on how to use PAIA and POPIA, as section 10 of PAIA requires. It is available in every official language on inforegulator.org.za and from the Regulator’s office:

Information Regulator, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Email enquiries@inforegulator.org.za.

Records available without a request

Anyone can read these on baink.co.za without making a request: the privacy notice, the terms of use, this manual and the descriptions of the service.

Records we keep because the law requires it

Where they apply to us, we keep records under these laws: the Companies Act 71 of 2008, the Income Tax Act 58 of 1962, the Tax Administration Act 28 of 2011, the Value-Added Tax Act 89 of 1991, the Electronic Communications and Transactions Act 25 of 2002, the Protection of Personal Information Act 4 of 2013 and the Promotion of Access to Information Act 2 of 2000.

Records we hold

• Company records: incorporation documents, the share register and directors’ resolutions.
• Financial and tax records: accounting records, bank statements and tax returns.
• Customer records: account and organisation details, the bank and accounting data customers connect, payment instructions and approvals, and support correspondence.
• Supplier records: contracts and correspondence with our hosting, email, backup and other service providers.
• Security and operations records: audit logs, security logs and backup records.

A record being listed here does not mean access to it will be granted. Each request is decided under PAIA.

How we process personal information

Purpose. We use personal information to provide the service our customers ask for: connecting their systems, showing their financial activity, applying their payment approval rules and keeping the service secure. We also use it to run the company and meet our legal duties.

People and information. Customer users: names, email addresses, roles, sign-in and security records. People in customers’ financial data, such as payees and counterparties: names, bank account details, amounts and references. Suppliers and their contacts: names, contact details and contract and payment details.

Who receives it. The banks and accounting systems a customer connects, the AI provider a customer chooses (only what a question needs), our hosting, email and backup providers, and authorities when the law requires it.

Information sent outside South Africa. Our emails are sent through a service in the European Union, and encrypted backup copies are stored in the European Union. The European Union’s General Data Protection Regulation gives protection at least as strong as POPIA, as section 72 of POPIA requires.

Security. We encrypt stored credentials and backups, require two-step sign-in, keep audit and security logs, and limit staff access to what their work needs.

The privacy notice has more detail, including how to access, correct or delete your own personal information under POPIA.

How to make a request

1. Complete Form 2, “Request for access to record”, from the Information Regulator’s PAIA forms page. We can also send you a copy.
2. Email it to the information officer, or post or deliver it to the address above.
3. Describe the record clearly, say how you want access (for example, a copy by email) and, if you ask on someone else’s behalf, include proof that you may act for them.
4. Say which right you want to exercise or protect and why you need the record for it, as section 53 of PAIA requires.

We will tell you our decision within 30 days. We may extend this once, by up to 30 days, in the cases section 57 of PAIA allows, and we will tell you why.

Fees

A request fee of R140 applies, except for a request for your own personal information. Further fees for searching for, preparing and copying records may apply, as set out in the PAIA Regulations, 2021. We will tell you the amount before we do the work and may ask for a deposit.

Why a request may be refused

PAIA lets or requires us to refuse access in some cases, for example to protect another person’s privacy, a third party’s or our own commercial information, confidential information, legally privileged records or the safety of people and property. If we refuse, we will tell you why and how to challenge the decision.

If you disagree with our decision

You can complain to the Information Regulator or apply to a court within 180 days of our decision.

Where to find this manual

This manual is on baink.co.za/paia and is available at our address above. Last updated 11 October 2026.