Test scope, screenshots, checkpoint findings and tier rationale were supplied by an identified reviewer. Identity is retained internally unless public attribution is explicitly enabled.
Locstat
Locstat provides an enterprise graph-intelligence platform combining graph databases, analytics, machine learning and complex-event processing for fraud, AML, transaction monitoring and other data-intensive use cases.
Sandbox Africa checked the submitted evidence and promoted the verified checkpoint record. Any visible adjustment is identified rather than silently rewritten.
The official public tier and technical record below are the verified publication outcome.
Tier 2 — Market-Ready
Verified tier differs from submissionUpgrade to Tier 2 under the gated-enterprise rule. Strong current operating-product evidence supports market readiness even though access is sales-led; Tier 3 requires direct enterprise integration/security evidence.
Independent, primary-source confirmation of Locstat's inclusion in FinTech Global's 2024 FinCrimeTech50 — verified directly from the publisher's own summary document rather than the vendor's self-description. Independent corroboration of funding (€2.5M pre-Series A, named investors) and leadership across multiple business databases and press sources. A substantial, professionally built site spanning eight sectors and a full company history.
Tier 2 is not supported because no product access, interface or integration capability could be demonstrated through direct testing. Tier 0 is excluded because the evidence of a genuine, operating, well-regarded business is unusually strong and independently sourced — a real funding history, named founders, and primary-source confirmation of industry recognition from the awarding body itself, not merely the vendor's own account. The tier reflects a known, credibly corroborated product that could not be independently operated, not a judgement that the underlying technology is weak.
Verified findings and limitations
The intern verified a substantial public product and company presence plus independent industry recognition, but no self-service account, sandbox or API workflow was available for direct product operation.
The current official site describes LightWeaver as a graph intelligence platform for graph querying, analytics, AI/ML and complex-event processing in real-time data environments.
Technical buyers cannot independently inspect an API or working product before entering a sales process.
The core enterprise interface, integration path, performance characteristics and control environment were not directly tested.
What was actually assessed
Reviewed the full public site at locstat.co.za, covering Home, Technology, Solutions (across eight named sectors), Resources, About, and Contact, confirming no dead links and a substantial, professionally built structure. Independently searched for company identity, founding history and funding, cross-checking press coverage and business databases (Tracxn, Craft.co) against the vendor's own account, and identified a discrepancy in founding date between these sources and a later-reviewed third-party profile. Attempted to locate a self-serve account, trial, sandbox or API/developer documentation; none exists — the only entry point is a "chat with the experts" contact request, with no sign-in or sign-up option anywhere on the site. Located and directly verified Locstat's profile within FinTech Global's official 2024 FinCrimeTech50 summary document (page 38 of 63), confirming company details and third-party industry recognition independently of the vendor's own site. Checked the TLS certificate on locstat.co.za directly via browser inspection to confirm HTTPS configuration, and separately confirmed the presence
Edge on Windows
Business account
Locstat is reported as an enterprise B2B platform selling to banks and fintechs. Self-serve access is unlikely; expect a sales-gated or demo-request entry path
What was observed
These images formed part of the evidence pack considered during verification. Full-standard records retain the contributor's factual caption for each screenshot.
DevTools Security panel Browser DevTools Security panel for locstat.co.za, confirming the connection is secure with a valid, trusted certificate (issued by Let's Encrypt) and specifying the encryption standard used: TLS 1.3 with X25519 key exchange and AES_256_GCM cipher — a modern, strong configuration. All page resources are confirmed served securely with no mixed content. The console also logged a blocked third-party tracker (a LinkedIn ads pixel), which failed to load, likely due to a brows
FinCrimeTech50 recognition graphic
Seven checkpoint assessment
The verified result is the official public checkpoint record. For earlier-standard reviews, these findings may have been reconstructed from preserved evidence during Sandbox Africa’s 2026 audit; they are not presented as if the contributor originally completed a structured worksheet. Contributor-submitted checkpoint wording is shown only where explicit public reviewer attribution has been enabled.
Step 1 — The Existence & Accessibility Check
Checking for dead links, infinite loading screens, or "Coming Soon" landing pages masquerading as live products.
Site loads fully with extensive structure — Home, Technology, Solutions (spanning eight named sectors), Resources (news, case studies, brochures, white papers), About (story, team, partners, careers), and Contact. No dead links observed across primary navigation.
Can a user or enterprise actually sign up, or is it gated behind broken "Contact Sales" forms?
No sign-in or sign-up option exists anywhere on the site. The only entry point is a "chat with the experts" contact request to book a demo. This is a fully sales-gated model consistent with enterprise B2B fraud/analytics platforms, and comparable to DataProphet and Orca Fraud profiled earlier in this stream. Editorial proposal adjusted from fail to partial using current independent verification and the established gated-product/safety-critical rules.
Verification adjustmentStep 2 — Functional Testing (The "Try It Out" Phase)
Does the application actually do what it claims to do? (e.g. a payment gateway completing a test transaction, a logistics app's routing engine working.)
No self-serve, sandbox or demo environment exists. The only entry point is a "chat with the experts" contact request. The graph intelligence/fraud detection engine could not be exercised directly. Editorial proposal adjusted from not_assessed to partial using current independent verification and the established gated-product/safety-critical rules.
Verification adjustmentAssessing the logical flow, responsiveness, and basic accessibility of the platform.
No product interface is accessible. Only the marketing site's navigation and structure could be observed, which is not a substitute for assessing the actual analyst-facing dashboard a client would use. Editorial proposal adjusted from not_assessed to partial using current independent verification and the established gated-product/safety-critical rules.
Verification adjustmentStep 3 — Technical & Architectural Assessment
Load speeds, uptime reliability, and basic stress responses.
No product function was reachable to measure load behaviour, reliability or stress response Editorial proposal adjusted from not_assessed to partial using current independent verification and the established gated-product/safety-critical rules.
Verification adjustmentAvailability, clarity, and functionality of API documentation and webhooks.
No API reference or webhook documentation was located anywhere on the site. This is a notable gap for an enterprise AI platform positioned for financial services integration — clients evaluating a fraud detection system would typically expect to see how it connects into existing transaction infrastructure, and no such documentation is published for a prospective technical evaluator to review before a sales conversation. Editorial proposal adjusted from fail to partial using current independent verification and the established gated-product/safety-critical rules.
Verification adjustmentSSL certification, basic encryption standards, and data handling transparency.
HTTPS confirmed via a valid, currently active certificate for locstat.co.za, issued by Let's Encrypt on 2 August 2026, expiring 31 October 2026 — a standard domain-validated certificate. No organisation validation is present, which is unremarkable for a marketing site. Privacy policy and terms and conditions links are present in the footer navigation, but their content was not reviewed within this assessment's scope. Marked Partial rather than Pass because no account-level security (authentication, MFA, SSO) could be assessed, as no product access exists.
Represent Locstat?
Claiming verifies company ownership and enables a response or additional evidence. It does not permit editing of the independent review.