LedgerAI: POPIA & GDPR Audit

LedgerAI gives compliance teams a verifiable audit of record and a live data sovereignty control plane in one native iOS and macOS app. In version 1.5 the questions you ask about regulated and financial data are answered on your device. ON-DEVICE SOVEREIGNTY Regulated and financial questions now run on Apple's on-device Foundation Models. Your prompts and your workspace numbers never leave your phone. No cloud round trip. No third party model to trust. A new Sovereignty Profile in Settings puts you in control. Strict keeps every answer on this device. Balanced lets a heavy question escalate to Apple's Private Cloud Compute, inside Apple's trust boundary, never to an outside cloud. Open adds an external cloud fallback for non sensitive, public questions only. Regulated content never reaches an external cloud on any profile. Every reply carries a small indicator showing where it was answered, so the privacy posture is never a guess. The on-device path needs an Apple Intelligence capable device. Older devices keep LedgerAI's existing private routing. SOVEREIGNSWITCH SovereignSwitch is LedgerAI's data sovereignty control plane, built around POPIA s72 and GDPR Chapter V transfers. Data Residency Control. Declare the boundaries your data must stay within. LedgerAI monitors every data store and vendor and flags anything moving outside. Sovereignty Ladder. Map your position across five maturity levels, from Uncontrolled to Sovereign, and see what is missing at each. Cross Border Transfer Flagging. Before data crosses a declared border, LedgerAI checks for a legal mechanism: adequacy decision, standard contractual clauses, binding corporate rules or a POPIA s72 authorisation. Items without one are blocked, not just flagged. Vendor Register. A live register of every vendor and sub processor that touches your data, with residency, purpose and transfer mechanism. Signed into every Audit Pack. THE AUDIT OF RECORD Every Audit Pack is cryptographically signed. LedgerAI hashes each section with SHA-256, signs it on your device after a Face ID or Touch ID check, and records the signing time. Packs chain together, so your 12 month history is verifiable. The vendor register and sovereignty score are in every signed pack. Anyone can verify a pack at ledgerai.quantyx.co.za/verify. Drag the PDF into the browser. The verifier runs client side and reports signature, signer, signing time and chain integrity. No upload, no account needed. AUDIT TRAIL Every action inside LedgerAI is recorded in an append only, hash chained log that self detects tampering. Time travel lets you see your exact posture at any past date. AI COPILOT, ON DEVICE Ask the Copilot about your obligations, controls or sovereignty posture. Answers run on Apple's on-device Foundation Models, cite the exact article or clause, and are aware of your SovereignSwitch state. DRIFT DETECTION Every Monday, LedgerAI compares your current state against your last attested pack and surfaces claims that have weakened. Residency drift and score changes are in the weekly report. FRAMEWORKS COVERED EU AI Act, GDPR, POPIA, ISO 42001, FSCA AI governance guidelines, plus POPIA s72 and GDPR Chapter V transfer rules. NATIVE ON EVERY APPLE PLATFORM iOS, iPad, Mac, Apple Watch. Widgets show your live posture and score. Siri and App Intents query your status hands free. Built with SwiftUI, not a web wrapper. FREE, EVERY FEATURE Every framework, SovereignSwitch, the Copilot and the signed Audit Pack are free. No subscriptions, no in-app purchases, no feature paywalls. Same open access as the web. PRIVATE BY DESIGN Your data is never sold. No advertising trackers. The Copilot answers regulated questions on device. When you sign in, your workspace syncs across your own devices. Protect the app with Face ID. Built for compliance officers, legal teams and founders who need traceable answers to hand an auditor, not a dashboard.