Cyber insurance built for South African tech businesses.

A South African cyber policy typically covers breach response, forensic investigation, POPIA regulator notification, legal costs, ransomware, business interruption from a cyber event, and third-party liability claims from leaked customer data.

For a 10–20 person tech firm, cyber cover typically starts around R850–R2,400 per month. Premiums scale with turnover, data volume, and revenue exposure.

Yes. A well-scoped cyber policy pays for POPIA regulator notification, defence costs, and civil claims from affected data subjects. Confirm the policy explicitly names POPIA and the Information Regulator.

Yes. Cloud provider responsibility is limited to their infrastructure. Your obligations to customers under POPIA, and losses from ransomware or social engineering, remain on your business.

Reputable SA policies cover ransomware negotiation, restoration and, where legal, the ransom payment itself — usually with a specific sub-limit. Always check that limit is high enough for your business.

SA cyber policies typically exclude known unpatched vulnerabilities you failed to remediate, prior known incidents, contractual penalties, loss of future profits beyond the interruption sub-limit, hardware replacement, war and state-backed attacks, and fraud committed by your own directors.

Underwriters price on annual turnover, the volume and sensitivity of personal information you hold, your industry, prior claims, and controls such as MFA, backups, endpoint detection and incident response plans. Strong controls can reduce a premium by 20–40%.

For most SA small businesses it is one of the cheaper commercial covers relative to the exposure — often R850–R2,400 per month for a 10–20 person firm, against breach response costs that routinely exceed R1M.