Question 1

What is a knowledge graph?

Accepted Answer

It's a map of everything your business knows and how it connects: this client signed that contract, owes this invoice, emailed about that quote. Your AI walks the map to answer questions a search box can't, and each answer points back to the records it came from. We build one from your own email, files and systems.

Question 2

Can you build a knowledge graph from our email and files?

Accepted Answer

Yes. We connect to your email, files and systems with only the access you give, link up the clients, contracts, invoices and people they mention, and set your AI up to answer from that map. Each answer points back to the records it came from, and it all runs on a server you choose.

Question 3

How is a knowledge graph different from searching my files?

Accepted Answer

A search box finds documents that contain your words. A knowledge graph knows how things connect, so it can answer a question like which clients owe you money and also have a quote waiting. It follows the links between records and shows you the records it used.

Question 4

What is an AI operating system?

Accepted Answer

It's an AI assistant set up around your business. It's connected to your email, files and business systems, it knows how you like things done, and it does the work rather than only answering questions. Important actions wait for a person to approve them.

Question 5

Which AI model does it use?

Accepted Answer

Whichever you prefer: Claude, GPT, Gemini, Grok, or an open model such as Llama, Qwen, Gemma or DeepSeek running on your own hardware. You can mix them, and you can switch later without rebuilding.

Question 6

Is my data safe?

Accepted Answer

Your AI lives on a server you choose, and each connector only gets the access you give it. With a cloud model, only the text it's working on is sent to that provider to be processed, so we set you up on a business plan that doesn't train on your data. With an open model on your own GPU, nothing leaves your building.

Question 7

Can it run without sending anything to the cloud?

Accepted Answer

Yes. With an open model on a graphics card you own or rent, the whole thing can run on your own machine. It's a bit less capable on the hardest reasoning than the best cloud models, and for most everyday work it's more than enough.

Question 8

Do I need to know how to code or use the terminal?

Accepted Answer

No. You talk to it in plain English, on your phone, by email or in a chat window. The terminal is where it does its heavier work, and it does the typing there itself.

Question 9

What happens if an AI company changes its prices or its model?

Accepted Answer

Your skills, connectors and data belong to you and aren't tied to one provider. If a model gets worse or more expensive, we point your AI at a different one.

Question 10

Who can see what it does?

Accepted Answer

You, and anyone you give access to. Every task is logged with what it read, what it did and who approved it.

Question 11

Do you host it, or do we?

Accepted Answer

Either. We can set it up on your own server or computer and hand it over, or host and maintain it for you on ours for a monthly fee.

Question 12

What does it cost?

Accepted Answer

It depends on how many systems it connects to and how much work it takes on. After a first conversation you get a written quote, and you decide from there.

Question 13

How much can South African businesses save by switching to open source?

Accepted Answer

It depends on what you pay for today and how many people use it. Per-user licences for tools like Microsoft 365, Salesforce and Adobe are usually the biggest line. Use our Software Savings Calculator to get a ZAR estimate for your specific stack.

Question 14

Is open source software reliable enough for business use?

Accepted Answer

Yes. Linux runs most of the internet's servers and every one of the world's 500 fastest supercomputers. PostgreSQL, Nextcloud and LibreOffice are used by governments and large companies around the world. Open source software is battle-tested, peer-reviewed, and actively maintained. Often more so than proprietary alternatives whose roadmaps are driven by shareholder returns rather than user needs.

Question 15

How long does migration take?

Accepted Answer

Simple migrations (e.g., swapping Zoom for Jitsi, or Dropbox for Nextcloud) typically complete in 1-2 weeks including staff onboarding. Complex migrations involving ERP, database, or infrastructure changes run 4-12 weeks depending on data volume and custom integrations. Imbertech provides a scoped timeline upfront. Tell us what you're running and we'll estimate your migration window.

Question 16

What happens to our data during migration?

Accepted Answer

Your data stays inside your environment throughout. We perform full backups before any migration begins, migrate in a staged environment, verify data integrity before cutover, and keep rollback snapshots for 30 days post-migration. POPIA-compliant handling is included as standard on all Open Source migrations.

Question 17

Can we get professional support for open source software?

Accepted Answer

Yes. Imbertech provides ongoing support contracts covering system updates, security patches, configuration changes, and helpdesk escalation. You get enterprise-grade support at a fraction of the licensing fee. The savings stay in your business.

Question 18

What's the difference between downloading open source yourself vs Imbertech implementing it?

Accepted Answer

The software is free either way. The difference is the implementation quality and ongoing security posture. A misconfigured Nextcloud or Jitsi server is a liability, not an asset. Imbertech handles hardening, POPIA-compliant configuration, backups, monitoring, and staff training so your investment works.

Question 19

Does open source software receive security updates?

Accepted Answer

Yes, and often faster than proprietary vendors. Because the code is public, security researchers worldwide find and report vulnerabilities promptly. Projects like Linux, PostgreSQL, and Nextcloud have dedicated security teams and patch release processes. Imbertech's managed service includes automated patch management so you're always current.

Question 20

Is open source software POPIA compliant?

Accepted Answer

The software itself doesn't determine POPIA compliance. The configuration and data handling practices do. Self-hosted open source solutions are often the best path to POPIA compliance because data stays on servers you control, in South Africa. Imbertech configures all migrations with POPIA requirements as standard. Learn more about our Compliance service.

Question 21

Why is self-hosted software better for POPIA compliance?

Accepted Answer

POPIA requires you to know where personal information is stored and who has access to it. With SaaS tools like Salesforce or Google Workspace, your data sits on foreign servers under foreign jurisdictions. Self-hosted software puts data on South African infrastructure you own, with access controls you define. That makes it far easier to demonstrate POPIA accountability to the Information Regulator.

Question 22

What is a POPIA Information Officer?

Accepted Answer

Every South African organisation that processes personal information must appoint an Information Officer (IO), typically the CEO or a designated senior employee. The IO is responsible for POPIA compliance, must register with the Information Regulator, and is personally accountable for breaches. Imbertech helps you establish the role, document responsibilities, and build the policies and procedures the IO needs.

Question 23

What are the penalties for POPIA non-compliance?

Accepted Answer

The Information Regulator can issue fines up to R10 million and/or impose prison sentences of up to 10 years for responsible parties. Beyond regulatory penalties, data breaches require mandatory notification to affected parties. The reputational damage often exceeds the direct fine. Proactive compliance implementation is far cheaper than breach remediation.

Question 24

Do I need ISO 27001 certification?

Accepted Answer

ISO 27001 is not legally required in South Africa, but it's increasingly required by enterprise clients, government tenders, and international partners as a condition of doing business. It also provides a structured framework that satisfies most POPIA technical safeguard requirements. Imbertech can assess your current posture and advise whether certification is worth pursuing for your specific market.

Question 25

What does Imbertech's compliance service include?

Accepted Answer

Our Compliance service covers POPIA gap analysis, Information Officer setup and registration, policy and procedure documentation, privacy notice drafting, data mapping and processing records, staff awareness training, and ongoing compliance monitoring. We scope each engagement to your organisation's size and risk profile.

Question 26

What open source software replaces Microsoft 365?

Accepted Answer

LibreOffice (documents, spreadsheets, presentations), Nextcloud (file sharing, cloud storage, calendar, contacts), OnlyOffice (collaborative editing), and Roundcube or Sogo for email. Used together, these cover 95% of Microsoft 365 use cases at a fraction of the cost. See pricing comparisons in our Savings Calculator.

Question 27

What replaces Salesforce?

Accepted Answer

SuiteCRM is the leading open source Salesforce alternative. Full CRM with leads, opportunities, accounts, contacts, campaigns, and reporting. It's used by thousands of businesses globally and runs on infrastructure you own. Imbertech handles migration of existing Salesforce data and configures custom workflows to match your sales process.

Question 28

What replaces VMware vSphere after the Broadcom price increases?

Accepted Answer

Proxmox VE is the leading open source hypervisor replacement. It provides full KVM virtualisation, LXC containers, clustering, live migration, high availability, and a full web UI. Zero licensing cost. Many South African businesses are migrating to Proxmox after Broadcom's acquisition of VMware resulted in 3-10x price increases. Our Open Source migration team specialises in VMware-to-Proxmox transitions.

Question 29

What replaces Microsoft SQL Server?

Accepted Answer

PostgreSQL handles the vast majority of SQL Server workloads, including stored procedures, triggers, full-text search, JSON, partitioning, and replication. For simpler workloads, MariaDB is another strong option. Both are production-ready, ACID-compliant, and actively maintained. Imbertech manages schema migration, query optimisation, and application compatibility testing.

Question 30

What replaces Zoom for SA businesses?

Accepted Answer

Jitsi Meet (self-hosted) provides HD video conferencing with screen sharing, recording, and breakout rooms. No per-host or per-participant licensing. For organisations needing POPIA-compliant video communications, self-hosted Jitsi on South African infrastructure is significantly better than any US-based SaaS alternative.

Question 31

What replaces FortiGate firewall?

Accepted Answer

pfSense CE and OPNsense are enterprise-grade open source firewalls with stateful packet inspection, VPN (IPsec, OpenVPN, WireGuard), IDS/IPS, traffic shaping, and VLAN support. Both are actively maintained and widely deployed in business environments. Hardware appliances range from small offices to data centre deployments.

Question 32

What replaces SolarWinds / Datadog for monitoring?

Accepted Answer

Zabbix combined with Grafana provides full network and infrastructure monitoring: autodiscovery, SNMP polling, alerting, dashboards, and long-term metrics storage. No licensing cost. For log management and SIEM, Wazuh (open source) covers what Datadog's security products do. See our Cybersecurity service for managed monitoring options.

Question 33

What should I do if my business has been hacked?

Accepted Answer

Isolate affected systems immediately. Disconnect from the network but do not power off (this preserves forensic evidence). Contact Imbertech's incident response team via our contact page. Do not attempt to clean systems yourself; this can destroy evidence needed for insurance claims or legal action. POPIA requires notification to the Information Regulator within a reasonable timeframe if personal information was compromised.

Question 34

What is EDR and does my business need it?

Accepted Answer

Endpoint Detection and Response (EDR) is advanced security software that monitors endpoints (laptops, servers, workstations) for malicious behaviour in real time. It goes far beyond traditional antivirus. If your business handles financial data, personal information, or has remote workers, EDR is now considered baseline security. Imbertech deploys Wazuh, an open source EDR platform that matches commercial tools like CrowdStrike at a fraction of the cost. Learn more on our Cybersecurity page.

Question 35

What is a vulnerability assessment?

Accepted Answer

A vulnerability assessment systematically scans your IT environment (servers, workstations, network devices, web applications) to identify known security weaknesses before attackers do. Imbertech uses OpenVAS / Greenbone for authenticated internal scanning and delivers a prioritised remediation report with business-risk context, with severities mapped to business risk, beyond a raw CVE dump.

Question 36

How does Wazuh compare to paid EDR like CrowdStrike or SentinelOne?

Accepted Answer

Wazuh provides comparable threat detection capabilities to commercial EDR platforms: log analysis, file integrity monitoring, vulnerability detection, active response, and SIEM integration. The difference is cost. CrowdStrike runs R500-R1,500 per endpoint per month. Wazuh is open source with no per-agent licensing. For most South African SMEs and mid-market businesses, Wazuh properly configured and monitored delivers equivalent protection at 80-90% lower cost.

Question 37

What does a penetration test involve?

Accepted Answer

A penetration test (pentest) simulates a real attacker trying to compromise your systems. Imbertech's process: scoping call to define targets and rules of engagement, reconnaissance, vulnerability identification, controlled exploitation, evidence collection, and a detailed report with findings ranked by business impact plus remediation guidance. We offer network, web application, and social engineering assessments. Tell us what you need tested and we'll scope it within 24 hours.

Question 38

How much does a data breach cost in South Africa?

Accepted Answer

IBM's 2026 Cost of a Data Breach report puts the global average at US$4.99 million per breach. The cost includes forensic investigation, legal fees, regulatory fines (up to R10 million under POPIA), mandatory breach notification, credit monitoring for affected individuals, and the hardest one to quantify: reputational damage. Cyber insurance helps, but premiums are climbing and policies increasingly require evidence of security controls before they'll pay out. Prevention is cheaper than cleanup by every measure. Get a vulnerability assessment before it becomes an incident report.

Question 39

What's the difference between a vulnerability scan and a penetration test?

Accepted Answer

A vulnerability scan is automated. Software like OpenVAS or Nessus scans your systems against a database of known vulnerabilities and generates a report. Fast, broad, but shallow. A penetration test is manual. A human attacker (us) tries to exploit those vulnerabilities, chain them together, and demonstrate real business impact. We follow PTES (Penetration Testing Execution Standard) methodology and test against OWASP Top 10 for web apps. Think of it this way: a vuln scan tells you the lock is weak. A pentest shows you someone walking in.

Question 40

Do small businesses need penetration testing?

Accepted Answer

Yes. Small businesses are attacked because they tend to have weaker defences, and attackers care about your vulnerabilities, not your revenue. A pentest for an SME environment typically costs R25-60K, which is small next to the cost of a breach. See our full cybersecurity service breakdown.

Question 41

What security monitoring should my business have at minimum?

Accepted Answer

At bare minimum: EDR on all endpoints (we deploy Wazuh), a properly configured firewall with IDS/IPS (pfSense or OPNsense), centralised log collection, and automated alerting for suspicious activity. That covers 80% of common attack vectors. Beyond that, add vulnerability scanning on a quarterly schedule, email security (DKIM, DMARC, SPF configured correctly), and security awareness training for staff. Phishing is still the number one entry point. All of this can be done with open source tools at a fraction of what CrowdStrike, Fortinet, and Proofpoint charge.

Question 42

What does an analytics engagement look like?

Accepted Answer

We map what you currently measure (and what you should be), connect the sources (CRM, accounting, ops, marketing), set up the data warehouse, build dashboards in Metabase or Superset, and train your team to read and trust them.

Question 43

Do we have to move our data to a new system?

Accepted Answer

Only the parts that need to be unified for reporting. Source systems stay where they are. We pipe extracts into a clean warehouse so dashboards run on consistent definitions and don't slow down your live systems.

Question 44

Can the dashboards refresh automatically?

Accepted Answer

Yes. Daily, hourly, or real-time depending on the source and what you need to see. We set up the schedule, the alerts on failed refreshes, and the audit trail of when each table updated.

Question 45

What is RAG and why should I care?

Accepted Answer

RAG stands for Retrieval-Augmented Generation. In plain terms: instead of an AI guessing at answers, it searches your actual documents first and answers based on what it finds. Your policies, manuals, contracts, knowledge base - all searchable in natural language. Staff ask a question, get the right answer with a link to the source document. No hallucinations. No outdated information. Learn more on our AI page.

Question 46

Can AI run on our own servers without sending data to OpenAI?

Accepted Answer

Yes. We deploy private LLMs using Ollama, vLLM, or cloud instances you control. Your data stays inside your network. That matters most for businesses handling sensitive information - financial data, medical records, legal documents, or anything covered by POPIA. Full AI capability with zero data leakage.

Question 47

We tried a chatbot and nobody uses it. What went wrong?

Accepted Answer

Probably one of three things: it was trained on generic data (not yours), it hallucinated answers and lost trust, or it wasn't integrated into existing workflows. A chatbot that sits on your website answering generic questions is a novelty. A chatbot trained on your actual knowledge base, embedded in your support system, and connected to your ticketing - that's a tool people use because it saves them time.

Question 48

How much does AI integration cost?

Accepted Answer

It depends on how many systems it connects to and how much work it takes on. A single automated workflow costs less than an AI wired into your whole client pipeline. After a free scoping call you get a written quote, so you know the number before you commit. Contact us.

Question 49

What's the difference between an AI chatbot and an AI agent?

Accepted Answer

A chatbot answers questions. An agent does work. A chatbot tells you what's in an email. An agent reads the email, extracts the data, updates your CRM, generates a response, and flags exceptions for human review. Agents execute multi-step tasks autonomously. We build both, but the real ROI is in agents.

Question 50

Will AI replace my employees?

Accepted Answer

Almost certainly not. What it will do is make them faster. AI handles the repetitive, time-consuming parts of their job: summarising documents, extracting data from emails, generating first drafts, triaging support tickets. Your people then focus on the work that requires human judgement, relationships, and creativity. Most businesses that deploy AI well don't reduce headcount. They increase output per person and stop hiring for roles that shouldn't exist in the first place.

Question 51

What tools do you use to build AI solutions?

Accepted Answer

It depends on the problem. For RAG pipelines: LangChain or LlamaIndex for orchestration, ChromaDB or Qdrant for vector storage, and embedding models from OpenAI or locally via Hugging Face. For self-hosted LLMs: Ollama for local inference, vLLM for production-scale serving. For agents: LangGraph, CrewAI, or custom Python with FastAPI. We pick the stack based on your data sensitivity, budget, and performance requirements. No vendor lock-in on any of it.

Question 52

Is our company data safe when using AI?

Accepted Answer

That depends entirely on how it's deployed. If you paste sensitive documents into ChatGPT, that data may be used for training. If we deploy a private LLM on your infrastructure using Ollama or vLLM, your data stays inside your network. For cloud-hosted AI, we configure data processing agreements and ensure POPIA compliance. The right architecture depends on your data classification. Book a 30-minute data sovereignty consultation and we'll map it out.

Question 53

How long does it take to see ROI from AI?

Accepted Answer

For document search (RAG): staff save time from the first day they use it. For workflow automation agents: typically 4-8 weeks to build and deploy, with measurable ROI within 2-3 months. The key metric isn't the AI itself. It's hours reclaimed per employee per week, multiplied across your team. A single agent that saves 10 people 3 hours each per week pays for itself in under 6 weeks.

Question 54

Can I get an AI for personal use, not just for my business?

Accepted Answer

Yes. Personal AI is the same idea sized for one person: a photo of your fridge becomes tonight's dinner, a gym week that adapts when something's sore, reminders that find you at the right place or time.

Question 55

Is a personal AI private, or does someone else see my data?

Accepted Answer

It runs on your phone or a server you choose, including one we set up for you. Your photos, calendar and messages stay there unless you ask it to send something out.

Question 56

Do we need to know how to code?

Accepted Answer

No. You type what you want in plain English and the AI does the typing and the technical steps. Training teaches you to ask well and to check its work, not to write code.

Question 57

Does this cover the scams AI can now write?

Accepted Answer

Yes, one module. AI can write a very convincing fake invoice or a message that sounds exactly like your CEO. We show your team what to check before they act on one, and how to verify a request that feels urgent.

Question 58

Can we learn to run AI on our own computers instead of a subscription?

Accepted Answer

Yes. We show you an open model running on your own hardware next to a subscription model, with the setup, cost and speed trade-offs in front of you, so your team chooses with real information.

Question 59

Why not just use WordPress or Wix?

Accepted Answer

You can. But here's what happens: WordPress needs constant plugin updates, gets hacked regularly if not maintained, and loads slowly without expensive hosting. Wix locks you into their platform - you can't export your site. Both are fine for a personal blog. For a business that needs performance, security, and the ability to grow, custom code on modern frameworks (React, Next.js) is a better investment. You own everything and nobody can raise your prices.

Question 60

How much does a website cost?

Accepted Answer

A landing page or marketing site: R15-30K. A full company website with multiple pages, contact forms, and SEO: R30-60K. A web application (customer portal, dashboard, booking system): R50-150K depending on complexity. E-commerce: R40-100K depending on product count and integrations. We quote per project, not per hour. You know the cost before we start.

Question 61

Do you build e-commerce stores?

Accepted Answer

Yes. Self-hosted stores using Medusa, Saleor, or WooCommerce. Full product management, inventory sync, payment gateways (Payfast, Peach, Stripe), and order management. The difference from Shopify: no monthly platform fee, no percentage per transaction, full customisation, and you own the codebase. Your margins stay yours.

Question 62

Will you maintain the site after launch?

Accepted Answer

Yes. We offer monthly maintenance plans covering hosting, SSL certificates, uptime monitoring, backups, security patches, performance tuning, and content updates. We stay with the build well past go-live. Most of our clients stay on a maintenance plan because it's cheaper than fixing things after they break.

Question 63

Can you migrate our existing website?

Accepted Answer

Yes. WordPress, Wix, Squarespace, whatever you're on. Full content migration, SEO preservation (redirects, meta data, sitemaps), domain transfer, and email continuity. Zero downtime if we plan it properly. Your Google rankings carry over. Get a free website audit.

Question 64

How do I know if a process can be automated?

Accepted Answer

If someone on your team is copy-pasting between systems, exporting spreadsheets to email them to someone else, manually entering the same data in two places, or following a checklist they do the same way every time, that process can almost certainly be automated. The bigger question is whether it should be. We look at frequency (how often it happens), time cost (hours per week), error rate (how often mistakes creep in), and staff frustration. If a task scores high on three of those four, it's a strong automation candidate. Send us your most tedious workflow and we'll tell you if it's worth automating.

Questions South African businesses ask about their own AI, and everything behind it.

Your own AI operating system12 answers

Open Source Software7 answers

POPIA & Compliance6 answers

Specific Software Replacements7 answers

Cybersecurity9 answers

Analytics & Dashboards3 answers

Artificial Intelligence14 answers

Websites & Web Development5 answers

Development & Automation4 answers

Working with Imbertech5 answers

Process, Costs & Change Management10 answers

Ask us directly. The answer goes here next.