Audit SA code for POPIA compliance — PII handling, consent flags, data residency, and DSAR endpoint requirements.
