POPIA and data residency
This document is being finalised with an attorney.
It will cover two things: where Gitza stores and processes data, for every account, and the operator agreement Gitza signs with Enterprise customers under the Protection of Personal Information Act.
The short version is the one the home page already makes. POPIA does not forbid hosting your repositories offshore. What it does is put the burden on you, under section 72, to justify the cross-border transfer that offshore hosting is, and that is a burden with no upside for a South African business whose customers, staff and auditors are all here. Keeping the data in the country removes the question rather than answering it.
That is context, not legal advice, and this page should not be used for a compliance assessment. If you need something specific for yours, email hello@gitza.co.za and we will tell you what we can commit to and what we cannot.