Registering an External Company in South Africa (Form CoR 20.1) [2026]

What an external company actually is

An external company is South Africa’s version of what most jurisdictions call a branch registration. It is not a new company. It is the foreign company itself — the entity incorporated in Delaware, London, Amsterdam or anywhere else — recorded on the South African companies register kept by CIPC (the Companies and Intellectual Property Commission, South Africa’s company registrar). The Companies Act 71 of 2008 defines it in one line:

That definition drives everything else on this page. Registration does not incorporate anything: the foreign company keeps its own legal personality, its home-country constitution and its home-country governance. Crucially, an external company is also not a “company” for the purposes of most of the Companies Act, because the Act defines a company as a juristic person incorporated in terms of this Act. The Supreme Court of Appeal confirmed this squarely:

The practical consequence: no Memorandum of Incorporation (MOI — the constitutional document of a South African company), no South African board requirements, no Companies Act audit or annual financial statements, and no access to South African business rescue. If you are still weighing whether a branch or a locally incorporated subsidiary suits your entry better, start with subsidiary vs branch — this page assumes the branch route and covers the registration itself.

The section 23 trigger: register within 20 business days

The registration duty sits in section 23(1). Once a foreign company first begins to conduct business in South Africa, the clock runs — and it is a short one: 20 business days. Figures last reviewed 16 July 2026.

Note what the clock runs from: first conducting business — not from signing a lease, appointing advisers or any incorporation-style formality. For many groups the trigger date is the day the first South African employee’s contract is signed, long before an office opens. Which brings us to the real question: what counts as “conducting business”? Section 23(2) answers it with two deeming triggers — and the test is deliberately narrow and investor-friendly:

In plain terms, there are only two ways in:

• The employment trigger (s 23(2)(a)). One employment contract with someone working in South Africa is enough, on its own and immediately. There is no six-month grace and, as you will see below, the carve-outs do not shield this limb. If your first hire lands before your entity decision does, the registration duty may already exist — see employment law for foreign employers.
• The course-of-conduct trigger (s 23(2)(b)). A pattern of activity inside South Africa, sustained over at least six months, that would lead a reasonable person to conclude you intend to do business here continually. Occasional sales trips, one-off projects and pure cross-border selling from abroad generally fall short.

The courts have not yet given definitive guidance on where the six-month course-of-conduct line falls in edge cases, so grey-zone fact patterns deserve advice rather than assumption.

What does not count: the s 23(2A) carve-out checklist

Section 23(2A) is the provision most overseas boards actually need. It lists activities that do not, by themselves, make a foreign company an external company — even if they continue for years. Here are the actual words:

As a checklist, a foreign company may — without registering — safely:

• hold shareholder or board meetings in South Africa, and run its internal affairs from here;
• open and maintain South African bank and other financial accounts;
• maintain a local office or agency for transferring or registering its own securities;
• lend, borrow, or take mortgages and other security over South African assets;
• collect debts and enforce security through South African courts; and
• acquire an interest in any South African property — including buying immovable property outright.

Two limits matter. First, the carve-outs qualify only the course-of-conduct limb (s 23(2)(b)): they give no protection against the employment trigger. A foreign company holding board meetings in Cape Town owes CIPC nothing; the day it signs one South African employment contract, it owes CIPC a CoR 20.1. Second, the shield applies where the listed activity is the sole ground — a carve-out activity combined with genuine trading on the ground does not launder the trading.

A warning about CIPC’s own website. At the time of writing, CIPC’s foreign-company page presents several of these carve-out activities — bank accounts, board meetings, acquiring debts and security, property — as activities that will be regarded as conducting business. That is the opposite of what section 23(2A) says. The Act governs; quote the statute, not the summary.

How to register: Form CoR 20.1 on CIPC e-Services

Registration is a filing, not an application for permission. The mechanics come from regulation 20 of the Companies Regulations, 2011:

The filing fee is R400, and since 29 September 2025 the filing is online-only through the CIPC e-Services portal — the old email channel no longer accepts external-company registrations (CIPC Practice Note 4 of 2025). Under the current CIPC requirements, the document pack you should have certified, translated and ready is:

• a board resolution approving the South African registration, plus a mandate authorising whoever files;
• a certified copy of the certificate of incorporation and of the constitutional documents (the MOI equivalent), certified in the country of incorporation;
• certified English translations of any document not in an official South African language;
• certified passports or identity documents of the directors and of the local representative (certifications not older than three months);
• the company’s securities register (an upload CIPC now requires at registration);
• physical and postal addresses of the principal office inside and outside South Africa (the South African address is validated electronically); and
• full details and signed consent of the South African person appointed to accept service of documents — who, per the practice note, “may only be a natural person and the physical and postal address must be within South Africa”.

No name reservation is needed: CIPC carries the foreign company’s existing name onto the register. On approval CIPC issues a registration certificate (Form CoR 20.2) with a unique registration number. CIPC’s published service standard for the CoR 20.1 itself is 2 working days from tracking, provided your CIPC customer code is funded — but budget realistically for one to three weeks end-to-end once certification, notarisation, translation and courier of the foreign documents are included (a practitioner estimate, not an official figure). Registration also does not finish the job: SARS (the South African Revenue Service) registrations, a public officer and bank onboarding under FICA (the Financial Intelligence Centre Act) follow — see tax and employer registrations.

Ongoing obligations after registration

An external company’s maintenance burden is deliberately light — but it is not zero, and the items below are the ones that lapse in practice.

A registered office, continuously

Section 23(3) requires every external company to “continuously maintain at least one office in the Republic” and to register that office’s address — initially on the CoR 20.1, and afterwards by filing a notice of any change. It must be an office the company itself genuinely maintains: the courts and CIPC have said a third party’s address used purely for convenience (your attorney’s or accountant’s, for example) does not qualify, and since March 2024 CIPC asks for proof of the address in the company’s or a director’s name when registering an external company. A serviced office in the company’s own name works. Changes to the registered office, directors, name or constitutional documents must be notified to CIPC within the regulation 30(7A) windows — director and constitutional-document changes within 10 business days; a registered-office move at least 10 business days before the change.

The annual return: Form CoR 30.3

The CoR 30.3 is a confirm-or-update form — registered office, directors, the person accepting service, home jurisdiction — with no financial statements attached. The fee is scaled to South African turnover (Companies Regulations, Table CR 2B):

Miss the return and the consequences compound: CIPC may put the registration on the deregistration track after two successive annual returns go unfiled (s 82(3)) — and for a branch, deregistration undermines the South African registration on which bank accounts and licences rest.

A resident public officer for SARS

This is the Tax Administration Act’s public officer requirement, and it applies to a branch just as it does to a subsidiary. For foreign groups with no senior South African resident, it is the single most common practical blocker — the workarounds and the related (widely misunderstood) “resident director” question are covered in resident directors and the public officer.

Beneficial ownership: file it

CIPC requires external companies to file beneficial-ownership declarations — annually and when the information changes. Its user guidelines, webinar FAQs and e-Services filing platform all expressly include external companies (a May 2025 CIPC Q&A puts it directly: “If a foreign entity is registered as an external company in terms of the Companies Act, then the Companies Act, Beneficial Ownership requirements apply”), and since 1 July 2024 the annual-return hard stop blocks filing until the declaration is on record. There is a credible technical argument that the statutory filing provisions attach only to locally incorporated “companies” and were never extended to external-company annual returns — but it is untested, and CIPC enforces the requirement in practice. Until the point is legislatively clarified or judicially decided, file (see beneficial ownership).

What registration does (and does not) change

If the missing ring-fence troubles you — it imports the group’s worldwide exposure into South African litigation and insolvency — the answer is usually to incorporate a South African subsidiary instead.

Does registration create a permanent establishment?

No — not by itself, in either direction. Registration under section 23 is a company-law disclosure obligation owed to CIPC. A permanent establishment (PE) — the threshold at which South Africa may tax a foreign enterprise’s business profits — is a tax question, decided under the Income Tax Act 58 of 1962 read with the applicable double taxation agreement (DTA), typically by asking whether there is a fixed place of business here or a dependent agent concluding contracts. Neither test refers to the other: a CIPC certificate is not a PE determination, and staying unregistered is no defence to one.

What is true is that the facts overlap heavily. South African employees and a sustained in-country course of business are exactly what both tests look at — so a company that has just crossed the section 23 line has usually crossed, or is close to crossing, the PE line on the same facts. Treat the registration moment as the moment to run the tax analysis: corporate tax for foreign-owned companies covers PE risk, the 27% rate and treaty relief, and VAT for foreign companies covers the separate VAT-registration triggers (compulsory registration at R2.3 million of taxable supplies in any consecutive 12 months).

If you do not register: the s 23(6) mechanics

The Act’s enforcement path is deliberate and staged — harsher in reputation than in text. Here is the provision:

Unpacked, the sequence is:

1. Three months’ grace. CIPC may not issue a compliance notice until the foreign company has been active, unregistered, for three months.
2. A discretionary compliance notice. Even then, CIPC may (not must) issue a notice giving 20 business days to register — failing which the notice may require the company to cease carrying on business in South Africa.
3. Exposure only on defiance. Failing to satisfy the notice is what creates legal exposure. CIPC must then choose one route (s 171(7)): apply to court for an administrative fine — capped at the greater of 10% of the company’s turnover for the period of non-compliance and R1 million (s 175, regulation 163) — or refer the matter to the National Prosecuting Authority (NPA), where failing to satisfy a compliance notice is an offence (s 214(3)) punishable by a fine, imprisonment of up to 12 months, or both (s 216(b)). It may not pursue both for the same notice.

Two things the Act does not do. Non-registration is not, in itself, an offence. And it does not invalidate anything: your South African contracts remain binding and enforceable — the 2008 Act contains no invalidity sanction. That said, do not read the measured mechanics as making registration optional. The real-world costs of staying unregistered arrive earlier and hurt more: banks decline or stall onboarding, counterparties’ due diligence flags you, licences and tenders assume a CIPC registration, and once CIPC does engage you are negotiating from the back foot. For a duty that costs R400 and a two-day turnaround, the risk trade is not close.

Frequently asked questions

The questions overseas boards and their advisers ask most about external company registration — more in the hub-wide Doing Business in South Africa FAQ.