For South African law firms

Vet a client for FICA in minutes, not an afternoon.

One secure link takes your client through intake, identity verification and screening, and leaves you a decision-ready file with the audit trail already written. Built for South African law firms, from the four-attorney practice up.

Two ways to run it: Verify and Comply.

TNThandeka Nyembesubmitted 27 Jun 2026
Pending
RISK, FIRM RMCP v3Advisory
Medium46 / 100
Politically exposed person+30 pts
SANCTIONSAdvisory
UN · 0OFAC · 1 possibleEU · not screened
A human attorney decides, never Onvett
Why Onvett exists

A four-attorney firm carries the same duties as a hundred-attorney firm.

South African law firms are accountable institutions under FICA. The duties are real, personal to the firm, and enforced.

Today most firms discharge them by hand: chasing certified copies, retyping ID numbers, checking sanctions lists one name at a time. Hours per client, and the smaller the firm, the fewer people there are to absorb it. There is rarely a compliance department.

Onvett was built around the Act itself, around POPIA, and around the FIC’s guidance, so that doing the work produces the evidence as a by-product. Your firm still complies. Onvett carries the workload and shows the trail.

FIC Act ss21 to 21H, s28, s29 · GN 7A · POPIA
How it works

One link in, one decision-ready file out.

Invite the client, let intake and screening run, read an advisory rating scored against your own risk policy, then record your decision. The annexure and the audit trail are written as you go.

Onvett client review screen: step rail, client details, advisory snapshot, sample data
The real review screen, on sample data
NEW CLIENT INVITEOne-time link
Client name
Thandeka Nyembe
Email
t.nyembe@example.co.za
Send intake link
Secure link issued, single use, expires in 7 days
Sample case, fictional data
AUDIT LOG, APPEND-ONLYImmutable
09:14:02Intake link issued, single use, expires in 7 days
Your next matter can open FICA-ready.
One client, one link, one review. No card required to explore.
Start vetting clients
Which one you need

Verify onboards a client lawfully. Comply keeps the firm lawful.

The dividing line is the Act’s, not ours. Due diligence duties bite when a client relationship starts. The risk-programme, employee, monitoring and reporting duties run continuously, whether a new client arrives or not.

Three questions, and the answer picks itselfNothing is sent anywhere
Should every client be re-screened automatically when the sanctions lists change?
Do you need employee screening and training records?
Do you file a Risk and Compliance Return?
Onvett VerifyPay per client vetted

Onboard a client lawfully. One secure link, every check your risk policy requires, and a decision-ready file at the end of it.

For firms that want every new client screened, verified and documented properly at take-on.

Secure one-time intake links for individuals, companies, trusts and partnerships
SA ID validation, Home Affairs verification, biometric selfie match and CIPC lookup
Sanctions and PEP screening with per-list status
Your RMCP uploaded, critiqued and frozen, then every rating traced back to it
Attorney decision recorded, annexure generated, audit trail written
No monthly fee. From R56 per client vetted, invoiced monthly.
See Verify
Onvett ComplyPer seat, per month

Keep the firm lawful. Everything in Verify, plus the duties that run whether a new client arrives or not.

For firms that want their whole ongoing FICA practice carried: re-screening when lists change, employee screening, periodic reviews, registers and returns.

Everything in Onvett Verify, at 15 percent lower per-client rates
Ongoing monitoring: every client re-screened when the sanctions lists change
Business risk assessment, risk policy governance and training records
Employee screening per Directive 8 of 2023, with competence and integrity records
Cash threshold register, Risk and Compliance Return worksheet, retention clocks
R350 per fee-earner seat and R200 per support seat, per month.
See Comply
What each product carriesVerifyComply
At client take-on
Secure one-time intake links and adaptive forms
SA ID validation, Home Affairs, biometrics and CIPC lookup
Sanctions and PEP screening
Advisory risk rating against your own frozen RMCP
Annexure, decision record and audit trail
Ongoing, firm-level
Re-screening every client when the sanctions lists changeNot included
Employee screening, training and policy governance recordsNot included
Periodic review of client information and ratingsNot included
Cash threshold register and Risk and Compliance Return worksheetNot included
Business risk assessment, retention clocks and storage disclosureNot included
Comply includes everything in Verify, at per-client rates 15 percent lower.Full feature lists: Verify · Comply
Built around the law

Three sources, and every feature answers to one of them.

Built around FICA
The client due diligence, screening and record-keeping duties of the Act, feature by feature, with the section each one answers to.
FIC Act ss21 to 21H, s28, s29
Built around POPIA
Explicit consent captured with the record, data minimisation in what the form asks, and South African data residency.
POPIA, ss11, 19, 72
Built around the guidance
Guidance Note 7A and the FIC directives, read as the specification: what a programme must contain, and what evidence it must leave.
GN 7A · Directives 8 of 2023, 11 of 2026
POPIA-aligned data handlingEncrypted in transit and at restSouth Africa residencyImmutable audit trail
Slot reserved: first client firm reference
Pricing

A quiet month costs you nothing.

Verify has no subscription at all. Comply adds a monthly seat and takes 15 percent off every per-client rate. One itemised invoice at the end of each month, either way.

Onvett VerifyNo monthly fee
fromR56per client vetted
Banded by how many people in the ownership chain get screened, so simple clients stay cheap.
No subscription and no minimum. A quiet month costs nothing.
One flat fee per client covers screening, risk scoring and the annexure.
One itemised invoice at the end of each month.
Verify rates in full
Onvett ComplySubscription
R350per fee-earner seat, per month
Support seats are R200. Per-client rates sit 15 percent below Verify, from R47,60.
Everything in Verify, plus the continuous duties and their evidence trail.
Seats billed whole, never pro-rated, and counted from your own user list.
Client fees and checks appear as separate lines on the same monthly invoice.
Comply rates in full

Rates read live from the firm settings. Verification checks are billed separately, at cost plus a small markup, and only when one actually runs, so you never pay for a check we did not do.

FAQ

The reasons firms say no, answered.

Verify onboards a client lawfully: intake, identity, screening, an advisory rating against your own policy, and the annexure. Comply keeps the firm lawful: everything in Verify, plus the duties that run without a new client, like re-screening when the sanctions lists change, employee screening, periodic review, registers and returns. Verify is priced per client vetted. Comply is a monthly seat, and its per-client rates are 15 percent lower.

Every client file leaves Onvett as documents you keep: a firm-branded FICA annexure and a screening certificate, both downloaded into your own matter file at the time of the decision. The record a regulator asks for lives in your filing system, not only in ours.

There is nothing to migrate. Your existing files stay exactly where they are, and the next client you open uses an Onvett link. Firms start with one matter, not a rollout.

Upload the one you have. Onvett reads it, reports the gaps against a FICA requirement catalogue, and lets your compliance officer fix the wording before you approve and freeze a version. Scoring only runs against a frozen version, so you always know which policy produced a rating.

The rating is advisory and the attorney records the decision, so the decision on the file is the firm’s. The precise wording of this answer is a founder and compliance-advisor decision, not a design one.

Onvett produces the same record a manual file would, with a time-stamped trail of who did what. What may be claimed about acceptance is a founder and compliance-advisor decision, not a design one.

Never. The rating and the screening results are advisory and labelled as such. An attorney records every decision, and nothing is ever auto-approved, auto-blocked or auto-rejected.

No. Cash threshold reports and the Risk and Compliance Return are filed by your firm, through the FIC’s own channels. Onvett keeps the register, runs the three-working-day clock and pre-fills the worksheet.

Named parties are screened against the UN Consolidated list, the US OFAC SDN list and the EU Consolidated list, using fuzzy matching with similarity scores. Each list reports its own status, and a list we could not reach is flagged as not screened, never shown as a clean pass.

No. Clients receive a secure one-time link by email and complete a single intake form with no login. The link expires after use and cannot be reused or guessed.

Data is encrypted in transit and at rest and stored in South Africa, with explicit client consent. Onvett is multi-tenant by design: each firm sees only its own clients, policy and brand, with no cross-firm visibility.

Open your next matter FICA-ready.

Onboard your first client in minutes. No card required to explore.