PAIA manual
Adiabat (Pty) Ltd, registration number 2026/726535/07. Last updated 25 October 2026.
This is the manual of Adiabat (Pty) Ltd under section 51 of the Promotion of Access to Information Act, 2000 (PAIA), as amended by the Protection of Personal Information Act, 2013 (POPIA). It describes the records Adiabat holds, how to ask for access to them, and how Adiabat processes personal information.
1. The company
- Name: Adiabat (Pty) Ltd, a private company
- Registration number: 2026/726535/07
- Physical and postal address: 6 Lingfield Way, Edgemead, Cape Town, 7441, South Africa
- Telephone: +27 62 299 0106
- Email: admin@adiabat.co.za
- Website: adiabat.co.za
2. The head and the Information Officer
The head of Adiabat, and its Information Officer under PAIA and POPIA, is Dr Wian Strydom, director, who can be reached at the addresses above. Adiabat has appointed no deputy Information Officer.
3. The Regulator’s guide
The Information Regulator has published a guide on how to use PAIA and POPIA, as section 10 of PAIA requires. It is available in each official language on the Regulator’s website, inforegulator.org.za, and from the Regulator at Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; telephone 010 023 5200; email enquiries@inforegulator.org.za. A copy may also be inspected at Adiabat’s address during business hours.
4. Records available without a request
Adiabat has published no notice under section 52 of PAIA. These records are available on this website without a request: the description of DraftSolver and its plans, the terms of service, the privacy policy, the refund policy, How we handle your data, and this manual.
5. Records kept under other laws
Adiabat keeps records, where they apply to it, under:
- the Companies Act, 71 of 2008;
- the Income Tax Act, 58 of 1962, the Tax Administration Act, 28 of 2011, and the Value-Added Tax Act, 89 of 1991;
- the Basic Conditions of Employment Act, 75 of 1997, the Labour Relations Act, 66 of 1995, the Employment Equity Act, 55 of 1998, the Unemployment Insurance Act, 63 of 2001, the Skills Development Levies Act, 9 of 1999, and the Compensation for Occupational Injuries and Diseases Act, 130 of 1993;
- the Electronic Communications and Transactions Act, 25 of 2002, the Consumer Protection Act, 68 of 2008, and POPIA;
- the Copyright Act, 98 of 1978, the Patents Act, 57 of 1978, and the Trade Marks Act, 194 of 1993.
6. The records Adiabat holds
| Subject | Records |
|---|---|
| The company | Memorandum of incorporation, registration documents, the securities register, directors’ resolutions and minutes |
| Finance and tax | Accounting records, invoices and statements, bank records, tax returns and assessments |
| Customers and applicants | Requests sent on the website, applications and their decisions, accounts, orders, support correspondence and contracts |
| Customers’ engineering data | The cases, runs, results and files an organisation keeps in DraftSolver, held for it under the terms of service |
| The product | Source code, models, the Handbook, validation records, designs and documentation |
| Suppliers and operators | Agreements, data processing terms, invoices and correspondence |
| People | Employment contracts, payroll, leave and tax records, where Adiabat employs people |
| Systems | Usage records, server logs, error reports and security records |
| Legal | Agreements, intellectual property registrations and correspondence |
A record being listed does not mean that access to it will be given; access is decided under Part 3 of PAIA.
7. How Adiabat processes personal information
Purposes
Adiabat processes personal information to answer enquiries and the requests sent on its website; to vet applications and provide DraftSolver; to take payment and keep accounting and tax records; to keep its systems secure; to improve its product and set its plans and prices; to send news to people who have asked for it or are customers; to employ people; and to comply with the law.
Categories of data subjects and their information
| Data subjects | Personal information |
|---|---|
| People who visit the website or send a request | Name, work email address, organisation, country, role, intended use, survey answers, messages, a salted hash of the IP address |
| Applicants and users of DraftSolver | Name, work email address, organisation, job title, country, intended use, role, sign-in records, usage records, problem reports and the emails the app sent; for students, the course or degree and the supervisor’s or lecturer’s name and work email address |
| Customers’ contacts for billing | Name, email address, the organisation, the plan bought and the transaction’s status; for orders Adiabat invoices itself, the billing address, tax numbers, invoices and payment records (card details are held by Paddle) |
| Suppliers and operators | Names and contact details of their people, and agreements |
| Employees and contractors, where there are any | Identity and contact details, contracts, pay, tax and bank details |
| Juristic persons | Names, registration details, addresses and the contact details of their representatives |
Recipients
Personal information is shared with the operators listed in the privacy policy (Cloudflare, Hetzner, Backblaze, Amazon Web Services, Auth0, Migadu, Sentry and Paddle), with professional advisers, and with authorities where the law requires it.
Transfers across the border
Most processing takes place in the European Union. Paddle processes in the United Kingdom, Migadu in Switzerland, and Cloudflare on its global network. Each transfer meets section 72 of POPIA, as the privacy policy describes.
Security
Traffic is encrypted in transit with TLS; backups are encrypted before they leave the server; administration is done over a private network with keys; passwords are held by the sign-in provider; tokens are stored as hashes; each organisation’s data is kept apart from every other’s; and error reports are cleaned of personal and engineering data. How we handle your data describes these measures.
8. How to ask for access
- Use Form 2 of the Regulations Relating to the Promotion of Access to Information, 2021, which is available from the Regulator’s website or from the Information Officer, and send it to the Information Officer at admin@adiabat.co.za or Adiabat’s address.
- Give enough detail for the record to be identified, say how you want access (a copy, an inspection, or another form), and give your contact details. If you ask for someone else, show your authority to do so.
- Section 50 of PAIA requires the record to be needed to exercise or protect a right, and the request to say which right.
- A request is subject to the request fee and access fees prescribed in Annexure B of the 2021 Regulations. The Information Officer will tell you the fees that apply, and whether a deposit is payable, before the work is done.
- Adiabat decides a request within 30 days of receiving it, and may extend that by up to 30 days as section 57 of PAIA allows, telling you why.
- Access may be refused only on the grounds in Chapter 4 of Part 3 of PAIA, among them the protection of another person’s privacy, of a third party’s commercial or confidential information, and of Adiabat’s own trade secrets and commercial information.
- If you disagree with a decision, you may complain to the Information Regulator within 180 days, or apply to a court.
9. Personal information about you
A request for your own personal information may also be made under section 23 of POPIA, as the privacy policy explains, and corrections under section 24 using Form 2 of the Regulations Relating to the Protection of Personal Information, 2018.
10. This manual
This manual is published on this website and may be inspected at Adiabat’s address. A copy is given free of charge; a printed copy may carry the copying fee prescribed by the Regulations. Adiabat updates the manual when its particulars or its processing change.