Security and privacy
How Mzansi Tenders keeps your payments, documents and personal information safe.
Payments
Every payment happens on PayFast's secure payment page, a South African payment gateway that meets the card industry's PCI DSS security standard. Your card number goes straight to PayFast. Mzansi Tenders never sees, receives or stores card details. You can pay by card or instant EFT, and monthly memberships can be cancelled from your Account page at any time.
A secure connection
The whole site runs over HTTPS: everything between your browser and us is encrypted. Look for the padlock in your browser's address bar.
Logging in
You log in with your email and a password of at least 10 characters with letters and numbers. When you choose one, we check it isn't a common password or one leaked in a known data breach (using Have I Been Pwned: only the first 5 characters of a one-way hash of it leave our server, never the password). We never store your password itself: only a salted one-way hash (PBKDF2-SHA256), so even we can't read it. Repeated wrong passwords are slowed down, password reset links work once and expire after 1 hour, and sessions end after 30 days or when you log out.
Your documents and details
Details you give for a service (for example director names and ID numbers for a company registration) are used only to complete that service, by us and the registration partner doing the work. Documents we deliver are stored privately and can only be downloaded by the account that ordered them.
Your rights under POPIA
You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email Business@mzansitenders.co.za. You may also complain to the Information Regulator (inforegulator.org.za).
Check us yourself
Don't just take our word for it. These independent services test this website for anyone, at any time:
- Security Headers: how well the site protects visitors in their browser
- Mozilla Observatory: web security best practice
- SSL Labs: the strength of our HTTPS encryption
- Google Safe Browsing: whether Google has seen anything harmful on the site
- Sucuri SiteCheck: a malware and blocklist scan
Documents you upload
We accept PDFs, photos and office files only, and check that each file really is what its name says. PDFs that try to launch a program or carry one inside them, and Word or Excel files with macros, are refused. Our AI then reads each business document to check it is the one asked for, readable and current, and tells you if something needs fixing. Your files are private to your account.
Report a security problem
If you find a security issue, email Business@mzansitenders.co.za. We reply within one business day.
Who we are
Mzansi Tenders, a trading name of TSH Textiles (Pty) Ltd · Registration number 2022/874086/07
84 Lush Condos, Elaleni Coastal Estate, Ballito, 4420
Business@mzansitenders.co.za
Independent commercial service. Not affiliated with, endorsed by, or acting on behalf of any government department, state-owned enterprise or certification body.