Programme open Meditech Studio: Bio-Ventures Residency
Compliance Studio

Make regulation, evidence and controls part of the build pathway.

Public pathways explain the compliance work ventures may need before pilots, procurement and regulated-market entry. Assessments and evidence remain inside authenticated workspaces.

4active pathways
ObligationsEvidenceControlsReadiness
Compliance pathways

Understand the evidence and control domains that may apply.

This public view is educational and operationally descriptive; it is not legal advice.

South Africa

Meditech Compliance Pathway

Health data, patient safety and clinical validation readiness.

health datapatient consentclinical validationmedical device classificationAI safety
South Africa

FinTech Compliance Pathway

Financial services, KYC, consumer protection and data security readiness.

KYC/AMLconsumer protectionpaymentscreditfinancial advicedata security
South Africa

GovTech Compliance Pathway

Public-sector data, procurement and citizen-service readiness.

public procurementcitizen datarecords managementaccessibilityauditability
South Africa

Climate & Infrastructure Compliance Pathway

Infrastructure safety, IoT governance and public-asset risk readiness.

IoT datainfrastructure safetyenvironmental compliancemunicipal procurementincident reporting
Published obligations

Examples of what readiness may require.

high

Personal information processing map

Document what personal information is collected, why it is collected, where it is stored and who can access it.

Evidence requiredData map, privacy policy, consent or lawful-basis notes, data subject request process.
Build requirementCreate data export, deletion/request workflow and audit trail where relevant.
high

Security and incident response baseline

Maintain basic security controls, access control, logging and incident response procedures before enterprise pilots.

Evidence requiredSecurity policy, incident response plan, access control overview, architecture diagram.
Build requirementAdd role permissions, logs, backup process and incident reporting workflow.
critical

Regulated activity assessment

Assess whether the product performs or enables payments, credit, insurance, investment, advice or other regulated financial activities.

Evidence requiredRegulated activity memo, customer disclosures, KYC/AML process if applicable.
Build requirementAdd customer verification, disclosure, complaints and audit logs where applicable.
critical

Health data and safety review

Assess patient data, consent, clinical workflow risk and safety implications before health-sector pilots.

Evidence requiredConsent model, patient data flow, clinical validation plan, safety risk register.
Build requirementAdd consent capture, clinical review markers, safety incidents and data minimisation controls.
high

Public-sector deployment assurance

Prepare evidence for public procurement, citizen data handling, accessibility, accountability and records management.

Evidence requiredProcurement documents, accessibility notes, records process, citizen data handling policy.
Build requirementAdd audit logs, records export and accessibility checks.
high

Infrastructure safety and incident readiness

Assess field deployment, asset monitoring, incident reporting and public infrastructure risk.

Evidence requiredSafety case, incident process, data flow map, deployment safeguards.
Build requirementAdd incident flags, alert escalation and maintenance logs.
Operational readiness

Move from public guidance into a controlled assessment.

Authenticated users can map obligations, evidence, control owners, gaps and build requirements against their venture, product or pilot.