02X · Founder
Philip de Witt
Founder and Managing Director, 02X
Philip de Witt founded 02X to build what regulated South African businesses were missing: focused, app-based, human-supervised compliance ventures that replace visit-heavy specialists with one managed platform. 02X's first venture, GRC Shop, is live, and more are in the research stage.
02X is founder-led by an operator, not a marketer. Philip brings more than 19 years of experience in financial governance, risk and executive leadership. As Acting CFO, he took a healthcare group to a Cape Town Stock Exchange listing in 13 months and under budget. He has led SAP and cloud transformations and delivered audit and cost turnarounds across healthcare, logistics, direct selling and high-growth start-ups. That same governance-grade discipline shapes how 02X designs and runs each venture.
The 02X approach
The 02X approach is deliberately unfashionable. We tackle the registers, the returns, and the audits that regulated businesses cannot avoid, building one venture at a time, proving the operating loop, and scaling only when it is sound.
Why a finance background, for a compliance business
Compliance failure is a financial event before it is a legal one. An administrative penalty that recurs monthly on an unfiled return, a deregistration that removes a company juristic personality, an inspection that finds no records: each of these lands on the balance sheet, and each is the predictable end point of an administrative process nobody owned.
A management accounting and audit background is useful here for a specific reason. It is training in evidence: what a control is, what proves the control operated, what an assurance provider will accept, and what a reconstruction after the fact is actually worth. That is the same question a Department of Employment and Labour inspector, an Information Regulator compliance monitoring request or a SARS verification asks, in different words.
How the sign-off model works
Every GRC Shop client engagement runs on a stated division of responsibility. The platform carries the tracking, the reminders, the registers and the document production. A qualified person reviews and signs off the compliance position. The client owns the remediation decision and remains the party the regulator holds accountable, because no service agreement can move a statutory duty off the employer.
That division is stated deliberately rather than left implied. A service that claims to take compliance off a client hands is either overpromising or misunderstanding the statutes, and in both cases the client finds out at the worst possible moment.
Credentials
- ACMA, CGMA (Chartered Management Accountant, CIMA)
- MBA, University of Cape Town Graduate School of Business
- BCom (Honours) in Accounting, University of South Africa
- BCom, Stellenbosch University
- RE1 and RE5 Regulatory Examinations, FPI
- ISO 45001:2018 Occupational Health and Safety Management Systems, Understanding and Implementation (SABS Training Academy)
Selected experience
- Founder and Managing Director, 02X and GRC Shop
- Head of Finance and Operations, TC Direct (South Africa and the wider SADC region)
- Acting CFO, iHealthcare Group (Cape Town Stock Exchange listing)
- Group Financial Manager at Solid State Power (Bidvest), IsoClear, IsoPharm and Lonrho Logistics