Built for South Africa: BCEA 45-Hour Overtime Engine • SARS 15% VAT QR • Yoco & Ozow Ready
South African Labor & Tax Compliance Engine

Engineered for South African BCEA, SARS & POPIA Regulations.

Running an automotive workshop in South Africa carries heavy regulatory obligations. ChAile Workshop OS enforces labor laws and tax standards into every job card and invoice automatically.

BCEA 45-Hour Overtime Engine

Under Section 9 of the Basic Conditions of Employment Act (BCEA), normal work time cannot exceed 45 hours in any week. ChAile tracks mechanic labor timers and requires digital authorization before overtime thresholds are breached, protecting you from CCMA penalties.

Automated Weekly Overtime Caps • 1.5x / 2.0x Rates

SARS 15% VAT QR Invoicing

Generate compliant South African tax invoices displaying workshop CIPC number, SARS VAT number, itemized part vs. labor breakdown, and a verifiable digital signature QR code required for corporate tax deductions and 5-year statutory retention.

Verified 15% VAT Calculations • 5-Yr Audit Ready

POPIA Act & Cryptographic Shredding

Customer ID numbers, phone numbers, and vehicle registration papers are protected with AES-256 multi-tenant partition isolation. When customers request erasure under POPIA, customer PII is cryptographically shredded while retaining tax ledgers for SARS.

POPIA Right-to-Erasure • Information Officer Ready

OWASP API Top 10 & PostgreSQL RLS

Zero-Trust multi-tenant isolation with PostgreSQL Row-Level Security (RLS) locked at the database layer via workshop_id. UUIDs eliminate Broken Object Level Authorization (BOLA/IDOR), and search-path locked functions prevent injection.

Zero-Trust Database Isolation • NIST SP 800-63B

Cloudflare Bot Defense & Turnstile

Incoming requests are analyzed at the network edge with Cloudflare Bot Management. Credential stuffing and automated scrapers are challenged or blocked before reaching workshop databases, and AI web scrapers are blocked at the edge.

20/hr Login Rate Limits • Frictionless CAPTCHA

PCI-DSS Level 1 & Dual-Verification

All card transactions and instant EFTs are routed through PCI-DSS Level 1 certified gateways (PayFast, Ozow, Yoco, Peach Payments). Webhooks undergo mandatory HMAC-SHA256 signature checks, IP allowlisting, and server-to-server validation.

Server-to-Server Origin Checks • Anti-Replay Nonce
Legal & Cybersecurity Architecture

Why Generic Workshop Software Fails in South Africa

Overtime & Weekend Work Rules

International apps do not understand Saturday 1.5x overtime rates or Sunday 2.0x rates under South African automotive sectoral determinations. ChAile logs exact multipliers automatically.

Valid Corporate Tax Invoicing

South African corporate fleet managers will reject generic "receipts". ChAile generates formal Tax Invoices with CIPC registration numbers, SARS VAT IDs, and PO lock fields.

Protect Your Workshop with Compliant Software

Start your 14-day free trial today. Run BCEA-compliant labor tracking, SARS-ready invoicing, and OWASP-grade security immediately.