FAQs

This page collects answers to questions the MzansiXchange team is asked most often. Click on any question to expand the answer. If a question is not covered here, please get in touch via the Contact page.

About MzansiXchange

What is MzansiXchange?

MzansiXchange is South Africa’s national data exchange initiative, led by the National Treasury. It provides shared, governed infrastructure that enables government departments to exchange data with each other securely, in line with clear standards and a rights-based legal framework. It is a foundational element of South Africa’s Digital Public Infrastructure and a priority reform under Operation Vulindlela. See What is MzansiXchange? for a fuller introduction.

What problem does MzansiXchange address?

At its core, MzansiXchange addresses the long-standing challenge of fragmented data silos across government. By enabling interoperability between departments, it supports effective planning, evidence-based policymaking, accurate reporting, and the delivery of more efficient public services. See Public value.

Is MzansiXchange a database or data warehouse?

No. MzansiXchange is a federated exchange rather than a centralised data store. It does not store or retrieve any citizen or departmental data. Data remains with the department that owns it and is exchanged peer-to-peer through Security Servers under approved Data Sharing Agreements. The central component acts as a secure facilitator that establishes the standards and trust framework for data flows between authorised entities. See The federated data exchange model.

Is there a useful analogy for what MzansiXchange does?

A helpful analogy is to think of MzansiXchange as the digital national rail system for government information. It provides the secure “tracks” and the shared “rules of the network” that allow data to move between departments, while each department remains the owner of the data it puts into the system.

What are the core principles of MzansiXchange?

The model is built on three foundational principles:

  • Data ownership. Government departments and institutions retain full ownership and control of their data.

  • Authorised access. Data owners decide who may access their information and for what specific operational or legislative purpose, within the framework agreed for each Data Sharing Agreement.

  • Distributed security. By avoiding a centralised repository of data, MzansiXchange eliminates a single point of failure and creates more resilient national infrastructure.

These design principles sit alongside the rights-based commitments set out in the Code of Principles.

What benefits does MzansiXchange bring to the state?

MzansiXchange is designed to support several outcomes:

  • Reducing fiscal leakages. Verification across departments helps identify and prevent fraud and inefficiency in areas such as social grants and procurement.

  • Efficiency gains. Eliminating duplicate data collection and manual processing generates operational savings.

  • Evidence-based policy. Better-integrated data supports more accurate national planning and reporting.

  • Enabling digital services. Standardised infrastructure underpins the modern digital services that the public increasingly expects.

  • Whole-of-government integration. Supporting a move from a fragmented, department-by-department approach toward a more integrated digital ecosystem.

Who operates MzansiXchange?

The National Treasury hosts MzansiXchange. The Pilot Governing Committee (PGC) is the interim governance and oversight body during the pilot phase, supported by the Legal and Governance Task Team. An independent Advisory Board provides strategic and ethical oversight. Day-to-day delivery is structured around four task teams. See Roles and stakeholders and Governance bodies.

Who provides high-level political leadership?

The Digital Transformation agenda within which MzansiXchange sits is overseen by:

  • The Inter-Ministerial Committee (IMC), which provides high-level political leadership and strategic oversight to ensure that the Digital Transformation Roadmap’s objectives are met across government.

  • The Inter-Departmental Working Group (IDWG), which coordinates alignment between state institutions to ensure that rollout of the Roadmap is practical, secure, and meets the operational needs of departments.

How does MzansiXchange relate to MyMzansi and Operation Vulindlela?

MzansiXchange is the foundational Data Exchange workstream within South Africa’s Roadmap for Digital Transformation of Government, under Operation Vulindlela. The Roadmap is a joint initiative of the Presidency and National Treasury, and it has four pillars: Data Exchange (MzansiXchange), Digital Identity, Digital Payments, and Digital Services.

Participating in MzansiXchange

Who may join MzansiXchange?

During the pilot phase, MzansiXchange is being tested with a strategic group of foundational members in defined use cases. Participation is voluntary, time-bound, and requires commitment to the legal and governance framework agreed for the pilot. Following the pilot, a phased onboarding approach will broaden participation. See Get Involved.

May any government department opt in during the pilot phase?

Not at this stage. During the current pilot phase, participating institutions have been strategically selected to test the system in real-world scenarios. This controlled environment allows the technology, security protocols, and governance framework to be refined before broader rollout. Once the pilot has concluded and the system is bedded down, other government departments and entities will be onboarded in a phased approach.

What does it mean to be a Pilot Member?

A Pilot Member is an institution that has signed the Membership Agreement with the PGC, agreeing to participate in MzansiXchange under the terms of the pilot framework. Membership does not automatically authorise data sharing — specific data flows require a completed Impact Assessment and a signed Data Sharing Agreement. See Pilot phase and Membership and data-sharing instruments.

Is participation in MzansiXcahnge compulsory?

During the pilot phase, participation is voluntary. The pilot is a structured opportunity to test the framework with willing members. In the longer term, the legislative and policy framework that will follow the pilot is expected to consider the question of mandatory participation for designated organs of state.

Ho long does onboarding take?

Onboarding timelines vary depending on the readiness of the prospective member and the complexity of the proposed use case. The most efficient path is for a member with mature ICT infrastructure, a well-defined use case, and engaged senior stakeholders. The MzansiXchange team supports members throughout in order to keep timelines as predictable as possible.

The Pilot

When does the pilot run?

The pilot runs from 1 October 2025 to 30 September 2026 — twelve months in total. It follows a period of intensive design, due diligence, and technical prototyping to ensure the system is fit for South Africa’s specific context. See Pilot phase.

What is being tested during the pilot, and by whom?

The pilot is testing the platform’s ability to support different methods of data sharing — including real-time verification, bulk data transfer for analytics and research, and open-access data products — across five use case themes. Day-to-day delivery is driven by four dedicated task teams: Legal & Governance, Infrastructure & Development, Organisational Readiness & Integration, and Standards. See Pilot phase and Roles and stakeholders.

Who are the priority pilot members?

The pilot involves a strategic group of foundational members. Real-time verification use cases involve the South African Social Security Agency (SASSA), the Department of Home Affairs (DHA), the Department of Social Development (DSD), and the National Student Financial Aid Scheme (NSFAS). Bulk and operational analytics use cases involve the National Treasury — specifically the Office of the Accountant General (OAG), the Office of the Chief Procurement Officer (OCPO), and the Secure Data Facility (NT-SDF). Open access and sub-national use cases involve Statistics South Africa, SEAD-SA, the City of Tshwane, and the City of Cape Town. See Current and past use cases.

How will the success of the pilot be measures?

Success is being measured against four areas: operational efficiency, technical robustness, institutionalisation and readiness, and governance and trust. Progress is captured through the Monitoring, Evaluation, and Learning framework and reported in six-monthly Pilot Viability Reports. The ultimate measure of success is whether the pilot generates the technical, legal, and operational evidence needed to support a permanent national data exchange. See Monitoring, evaluation and learning.

Why does the pilot use dummy data first?

Dummy data sequencing enables the governance protocols, access controls, and Data Sharing Agreements to be tested in practice before any real data subject is exposed to risk. It also lowers the institutional barrier to participation, as departments may engage in the pilot without immediate live-data exposure. Real data exchange may proceed only once the PGC has confirmed that the conditions for live data have been met.

How many citizens will be onboarded during the pilot?

MzansiXchange does not onboard individual citizens — its participants are government institutions. Citizens are the primary beneficiaries: because departments are connected through MzansiXchange, citizens may eventually find that their applications are processed faster and that they no longer have to provide the same information to multiple government offices.

What happens after the pilot?

The pilot is generating the technical, legal, and operational evidence base for a permanent national data exchange. Following the pilot, MzansiXchange is expected to scale into a fully distributed federated network, supported by a permanent governance framework grounded in enabling legislation, with broader integration into the wider Digital Public Infrastructure ecosystem. The long-term goal is to establish a permanent statutory body and formal legislative framework to oversee MzansiXchange. See Roadmap.

Data, security, and POPIA

Is my department's data safe?

Data on MzansiXchange is protected by a multi-layered security architecture: encryption in transit and at rest, mutual TLS, PKI-based identity, fine-grained access controls, and full audit logging. Importantly, data is not centralised; it remains with the department that owns it. See Security and access controls.

What security features are built into MzansiXchange?

Key security features include:

  • Encryption. All data is encrypted both at rest and in transit.
  • Secure access. Only authorised, certified departmental Security Servers can access data through the network.
  • Digital signatures and audit logs. Every transaction is digitally signed and logged, creating a verifiable record of who accessed what data and when.
  • Identity and access management. Multi-factor authentication and role-based access control are required for administrative and privileged actions.

See Security and access controls.

What standards and technology underpin MzansiXchange?

To ensure all departments can interoperate, MzansiXchange is built on:

  • X-Road, a globally recognised, open-source data exchange technology used by leading digital nations including Estonia, Finland, and Iceland.

  • Defined data and metadata standards that establish clear rules for data quality, format, and consistency, so that shared data is accurate and usable.

  • Open-source foundations, which avoid vendor lock-in and ensure that the South African government retains full control of its digital infrastructure.

A dedicated Standards Task Team is responsible for developing and maintaining these standards through the pilot. See Standards and interoperability.

Does MzansiXchange comply with POPIA?

MzansiXchange is designed to operate within and uphold POPIA, and to extend beyond POPIA’s baseline where the specific risks of a national data exchange require additional protections. Because there is no central storage, data sovereignty remains with the original department, which is the responsible party under POPIA. Data is exchanged only for authorised purposes set out in each Data Sharing Agreement. See POPIA and privacy.

What happens to data once it has been shared?

Data shared through MzansiXchange may only be used for the specific purposes set out in the Data Sharing Agreement for that flow. The Data Provider remains the responsible party for the data under POPIA, and the Data Consumer becomes a responsible party in respect of any subsequent processing for its own purposes. See Membership and data-sharing instruments.

May MzansiXchange be used for surveillance or law enforcement?

No. MzansiXchange is designed for service delivery, planning, policy, research, and compliance use cases serving the public interest. The framework explicitly limits data flows to specific, agreed purposes. Repurposing data accessed through MzansiXchange for purposes other than those agreed in the relevant Data Sharing Agreement is not permitted, and protecting against scope creep is one of the explicit design principles of the initiative.

What MzansiXchange means for citizens

What does MzansiXchange mean for an ordinary citizen?

For most citizens, the effects of MzansiXchange will be felt indirectly through improvements in how government services are delivered:

  • The “Enter Data Once” principle. Citizens should not need to provide the same documents — such as ID copies or proof of residence — to multiple departments. Once the state holds the information, it can be verified securely across the network in line with the agreed lawful basis for each flow.
  • Faster service delivery. Whether applying for a social grant, a student loan, or another government service, wait times should reduce as the back-office verification happens in seconds rather than days or weeks.
  • A more transparent and accountable government. A modern, well-governed exchange supports better service delivery and clearer accountability about how public information is used.

See Public value.

What is the "Enter Data Once" principle?

The Enter Data Once principle — also known internationally as the Once Only Principle — is the idea that citizens should provide their information to government once, and government departments should reuse it securely thereafter, in line with the relevant legal framework. It reduces administrative burden on citizens, improves the accuracy of government records, and is a foundational design idea behind digital governments internationally. See Public value.