At incorporation: what is automatic, and what is immediately due
Whether you incorporated a local subsidiary or registered an external company (branch), the registration work does not end when the Companies and Intellectual Property Commission (CIPC, the South African companies registry) issues your registration certificate. Three things happen — or must happen — on day one. Figures last reviewed 16 July 2026.
1. Your income-tax number arrives automatically
The South African Revenue Service (SARS) has a direct interface with CIPC: when the company is incorporated, SARS automatically generates an income tax reference number. There is no separate corporate income-tax registration to file. The company is also automatically a provisional taxpayer, which drives the twice-yearly IRP6 payment deadlines in the calendar below. Rates and structuring live on the corporate tax page.
2. Appoint the public officer — there is no grace period
Every company must appoint a public officer (SARS calls the role the registered representative): a natural person resident in South Africa who is a senior official of the company. Since 24 December 2024, when the Tax Administration Laws Amendment Act 43 of 2024 amended section 246 of the Tax Administration Act 28 of 2011, the appointment is due at formation — the old one-month window was deleted. If no appointment is made, a statutory default hierarchy applies (managing director, then financial director, then company secretary, and so on), or SARS may itself designate a suitable person.
This is the single most-missed step for foreign-owned companies, and the most expensive to miss: until the representative is activated on eFiling (SARS aims to finalise activations within 21 business days), the company effectively cannot transact with SARS — no VAT registration, no employer registration, no refunds, no tax clearance. Who can hold the role, and what to do when nobody in the group lives in South Africa, is covered in resident directors and the public officer.
3. File beneficial ownership with CIPC within 10 business days
New companies must file a beneficial-ownership (BO) declaration with CIPC within 10 business days of incorporation, disclosing the natural persons who ultimately own or control 5% or more of the company — for a foreign-owned group, that means mapping the chain of ownership all the way up to individuals. Updates are due within 10 business days of any change, and the declaration is re-confirmed with every annual return. Prepare the group structure chart and certified identity documents of the ultimate owners before incorporation — the practicalities are covered in company registration for foreigners and the wider regime in our beneficial-ownership guide.
Before you start trading
Bank account
You will need a South African bank account for almost everything that follows — VAT registration for non-resident-owned applicants generally requires one, and SARS refunds are paid only into a verified local account. Bank onboarding for foreign-owned companies is a Financial Intelligence Centre Act (FICA — South Africa's anti-money-laundering law) verification exercise on the offshore shareholders and beneficial owners, and it is the step that most often delays a market entry. Start it on day one: see opening a business bank account and our FICA guide.
VAT — compulsory above R2.3 million, voluntary from R120 000
Value-added tax (VAT) registration is compulsory once taxable supplies exceed (or will contractually exceed) R2.3 million in any 12-month period — a threshold that rose from R1 million on 1 April 2026. The application must be made within 21 business days. A business below the threshold may register voluntarily once past-12-month supplies exceed R120 000 — most inbound groups do this early to recover input VAT on setup costs.
It is compulsory for a person to register for VAT if the value of taxable supplies made or to be made, is in excess of R2.3 million in any consecutive 12 month period.
Non-resident practicalities — the South African-resident representative vendor required by section 46 of the VAT Act, the local bank account, and the separate regime for foreign suppliers of electronic services — are dealt with in VAT for foreign companies.
Customs — if you move goods
Importers and exporters register through SARS's Registration, Licensing and Accreditation (RLA) system on eFiling for importer/exporter codes. SARS's stated service level is 5 days; practitioners report one to two weeks or longer in practice. One rule catches foreign groups: a non-resident (foreign) principal cannot self-register — it must appoint a South African registered agent (a clearing agent does not qualify) and register through a Customs branch, which is why most groups make the South African entity the importer of record.
First hires: PAYE, UIF, SDL and COIDA
The moment you employ someone in South Africa, four registrations stack up on two clocks — one at SARS, one at the Department of Employment and Labour (DoEL).
Register as an employer with SARS — within 21 business days
One application (form EMP101e on eFiling) registers the company for all three payroll taxes: Pay-As-You-Earn (PAYE, employee income tax withheld at source), Unemployment Insurance Fund (UIF) contributions, and the Skills Development Levy (SDL).
According to law, an employer must register with the South African Revenue Service (SARS) within 21 business days after becoming an employer, unless none of the employees are liable for normal tax.
- UIF is 1% employer + 1% employee of remuneration, capped at R17 712 per month. SARS collects the money with PAYE — but the employee declarations (form UI-19) go separately to the UIF at the DoEL, monthly by the 7th, via uFiling. Register on the Labour side too; without the declarations, employees cannot claim benefits.
- SDL is 1% of payroll, payable only once annual remuneration will exceed R500 000 annual payroll. The levy flows to a Sector Education and Training Authority (SETA) matched to your industry code.
- The monthly rhythm starts immediately: the EMP201 return and payment are due within 7 days after each month end, alongside the UI-19.
COIDA — within 7 days of commencing business
The Compensation for Occupational Injuries and Diseases Act 130 of 1993 (COIDA) is South Africa's statutory workers'-compensation scheme — private insurance does not replace it. Under section 82(1A), an employer commencing business must furnish the Compensation Commissioner with a return of estimated earnings within 7 days of commencement (DoEL guidance applies this from the first hire). Thereafter an annual Return of Earnings is filed each season (earnings assessed up to a cap of R668 000 per year per employee from 1 March 2026), and paying the resulting assessment keeps the company's Letter of Good Standing current. That letter matters commercially: mines, construction sites, factories and many private counterparties will not let your staff on site — or sign your contract — without it. Mining/metals and construction employers register with a licensed mutual (Rand Mutual Assurance or FEM) instead of the Fund.
Employment terms, dismissal law and the other duties that arrive with the first hire are covered in employment law essentials; visas for relocating founders and staff in work visas and immigration.
Sector licences — and killing the municipal-licence myth
South Africa has no general business licence. What it has is a short municipal list and a layer of sector regulators. Start with the trigger-list: if none of these describes you, no licence stands between incorporation and trading.
| If you do this… | Regulator | What you need |
|---|---|---|
| Lend money or extend credit under the National Credit Act | NCR (National Credit Regulator) | Credit-provider registration — the threshold is nil, so it can catch even some intra-group lending into South Africa |
| Give financial advice or intermediary services, distribute insurance, manage assets, or provide crypto-asset services | FSCA (Financial Sector Conduct Authority) | A financial services provider (FSP) licence, with fit-and-proper key individuals — budget months, not weeks |
| Provide telecoms or broadcasting services | ICASA (Independent Communications Authority of South Africa) | Class-licence registration or an individual licence; ownership and control rules apply — check before structuring |
| Provide private security services | PSiRA (Private Security Industry Regulatory Authority) | Registration of the business and all executives; the sector is heavily restricted for foreign-controlled companies (a 2014 Amendment Act restricting foreign ownership was signed in 2021 but had not been brought into force as at mid-2026) |
| Manufacture or distribute medicines, medical devices or health products | SAHPRA (South African Health Products Regulatory Authority) | Product registration plus site licences for manufacture, wholesale or distribution |
| Bid for public-sector construction work | CIDB (Construction Industry Development Board) | Contractor registration and grading (levels 1–9) |
| Make, distribute or sell liquor | National Liquor Authority (the dtic) / provincial liquor boards | National licence for macro-manufacture and distribution; provincial licence for retail and on-consumption |
(The dtic is the Department of Trade, Industry and Competition. Manufacturers establishing a site should also check whether any listed activity under the National Environmental Management Act (NEMA) requires environmental authorisation before construction begins.)
The municipal “business licence” myth
A persistent piece of folklore says every South African business needs a municipal trading licence. It does not. Under the Businesses Act 71 of 1991, a licence is required only for the short list of businesses in Schedule 1:
The carrying on of business by the sale or supply to consumers of— (a) any foodstuff in the form of meals for consumption on or off the business premises; or (b) any perishable foodstuff.
Note — Item 2 of Schedule 1 adds the remaining licensed trades: saunas and health baths, massage, escort agencies, three or more gaming machines, three or more snooker tables, night clubs and discotheques, cinemas and theatres, and adult premises. Food hawking is also listed. Nothing else on the statute book requires a general municipal licence to trade.
So a software company, a distributor or a consultancy needs no municipal licence at all. What every premises-based business does need is the correct municipal zoning and land-use rights for its premises — and food premises additionally need a Certificate of Acceptability from municipal environmental health under regulation R638 before handling food, which is separate from the trading licence.
Always-on duties: POPIA, PAIA and B-BBEE
Register your Information Officer, and adopt a PAIA manual
The Protection of Personal Information Act 4 of 2013 (POPIA, South Africa's data-protection law) applies to effectively every company. Its head is by default the Information Officer (delegable to a locally based deputy), and the officer must be registered with the Information Regulator before starting in the role:
Officers must take up their duties in terms of this Act only after the responsible party has registered them with the Regulator.
Alongside it sits the Promotion of Access to Information Act 2 of 2000 (PAIA): every private body — even a one-person company — has needed a PAIA manual since 1 January 2022, when the long-standing small-company exemption lapsed. The manual goes on the website and is kept at the principal place of business. POPIA administrative fines run to R10 million, so an EU-style privacy programme is not enough on its own — the South African-specific duties are covered in our POPIA guide.
B-BBEE — not compulsory to trade, but hold the affidavit
Broad-Based Black Economic Empowerment (B-BBEE) is not a licence to trade, but public procurement, many sector licences and large corporate supply chains score it. An entity with annual turnover of R10 million or less is an Exempted Micro Enterprise (EME): a simple sworn affidavit, valid for 12 months, gives it automatic Level 4 status — it costs nothing and takes minutes, so there is rarely a reason not to hold one. How the scorecard really bites, and the equity-equivalent route for multinationals, is in B-BBEE for foreign-owned companies.
The first 90 days at a glance
For a new subsidiary that starts hiring immediately, the deadlines fall roughly like this:
| When | Action |
|---|---|
| Day 0 | Incorporate at CIPC; income-tax number auto-issued; sign the public-officer appointment resolution; start the bank-account (FICA) process |
| Within 10 business days | File the CIPC beneficial-ownership declaration |
| Days 1–21 | Activate the registered representative and eFiling; register as employer (EMP101e: PAYE/UIF/SDL) within 21 business days of the first hire; check municipal zoning for premises |
| Within 7 days of the first hire | COIDA estimated-earnings return to the Compensation Fund; UIF registration on uFiling (DoEL side) |
| Days 21–45 | VAT registration (voluntary or compulsory); customs RLA codes if importing or exporting; adopt the PAIA manual and register the Information Officer |
| Days 45–90 | First EMP201 and UI-19 cycles (by the 7th of the month after first payroll); B-BBEE EME affidavit; Tax Compliance Status PIN; CSD registration if selling to government; SETA and bargaining-council confirmation; lodge any sector-licence applications |
The recurring annual calendar
Once trading, the company settles into a fixed compliance year. Two clocks matter most — and they are unrelated: the CIPC annual return runs off the incorporation anniversary, while the SARS tax return runs off the financial year end. Filing one does not satisfy the other.
The CIPC annual return is now a bundle
Every company (and every external company) files an annual return under section 33 of the Companies Act 71 of 2008, within 30 business days of its anniversary, with a fee scaled by turnover (currently R100 to R3,000; more when late). Since 2023 it is no longer a quick form:
When filing the Annual Returns, the company or close corporation MUST also file its latest Beneficial Ownership Declaration as well as its Audited Financial Statements (AFS) or Financial Accountability Supplement (FAS).
Audited companies file annual financial statements (AFS) in iXBRL (a machine-readable digital format); everyone else files the short Financial Accountability Supplement (FAS). A compliance checklist is completed as part of the e-Services filing flow — answer it accurately, as false answers are an offence. And since 15 April 2024 CIPC applies a hard stop: the annual return cannot be filed on any CIPC platform unless the beneficial-ownership declaration is up to date.
Miss two, and the company is deregistered
Deregistration will be automatically triggered by the CIPC when two or more successive Annual Returns are outstanding.
The full year, for a typical February year-end subsidiary
| When | Obligation |
|---|---|
| Monthly, by the 7th | EMP201 return and PAYE/UIF/SDL payment to SARS; UI-19 declaration to the UIF; VAT201 per your cycle (eFiling: last business day of the month) |
| Incorporation anniversary + 30 business days | CIPC annual return + beneficial-ownership confirmation + AFS (iXBRL) or FAS + compliance checklist. (External companies file the lighter CoR 30.3 confirm-or-update return instead, with no financial statements attached — see external company registration.) |
| 1 April – 31 May | EMP501 annual employer reconciliation, with IRP5/IT3(a) employee certificates |
| 1 April – 30 June | COIDA Return of Earnings (DoEL labels seasons by earnings year: the 2025 season ran 1 April – 30 June 2026), then pay the assessment to refresh the Letter of Good Standing |
| 30 April | Workplace Skills Plan / Annual Training Report (WSP/ATR) to your SETA — unlocks the 20% mandatory grant of SDL |
| 31 August | First provisional tax payment (IRP6) for a February year end |
| 21 September – 31 October 2026 | EMP501 interim reconciliation |
| By 15 January | Employment equity report — designated employers only (50 or more employees); the online window opens 1 September |
| 28/29 February | Second provisional tax payment (IRP6); financial year end |
| Within 12 months of year end | ITR14 company income tax return (late returns attract recurring monthly administrative penalties) |
| Rolling 12 months | B-BBEE affidavit or certificate renewal; Tax Compliance Status PIN; PAIA manual and Information Officer review |
One 2026 wrinkle on the EMP501: SARS's reconciliation notice requires valid employee income-tax reference numbers “where applicable” and warns of penalties and delays, and payroll providers report that from the February 2026 tax year certificates cannot be created or submitted with outstanding numbers — so get every employee's tax number captured at onboarding, including inbound assignees.
Tax Compliance Status and the tender pack
South Africa replaced paper tax-clearance certificates with the electronic Tax Compliance Status (TCS) system. On eFiling you request a “Good Standing” TCS PIN (the separate “Tender” option was discontinued) and give the PIN to the counterparty, who sees your live compliance status — one late return or unpaid EMP201 flips it to non-compliant in real time. This is why the monthly rhythm above matters commercially, not just legally.
A foreign-owned company chasing government or big-corporate work in 2026 typically needs the full pack: the TCS PIN, the COIDA Letter of Good Standing, registration on the Central Supplier Database (CSD) for public-sector work, a B-BBEE certificate or affidavit, and — for employers with 50 or more employees — an employment equity compliance certificate under section 53 of the Employment Equity Act. Broader compliance themes across the business are collected in our compliance hub, and the rest of this hub's answers live in the Doing Business in South Africa FAQ.
Frequently asked questions
Only income tax is automatic: SARS generates an income tax reference number through its interface with CIPC when the company is incorporated, and BizPortal can bundle UIF, Compensation Fund and a B-BBEE affidavit at incorporation. Everything else is manual — appointing and activating the public officer on eFiling, the CIPC beneficial-ownership filing within 10 business days, VAT, PAYE/UIF/SDL employer registration, customs codes, Information Officer registration, and the Labour-side UIF and COIDA follow-through.
- Public officer: at formation — no grace period (since 24 December 2024).
- CIPC beneficial ownership: within 10 business days of incorporation.
- Employer registration (PAYE/UIF/SDL): within 21 business days of becoming an employer.
- COIDA estimated-earnings return: within 7 days of commencing business.
- VAT: within 21 business days of exceeding (or contracting to exceed) R2.3 million.
- CIPC annual return: within 30 business days of each incorporation anniversary.
- ITR14: within 12 months of financial year end.
Almost certainly not. There is no general trading licence in South Africa. Under the Businesses Act 71 of 1991 only Schedule 1 activities need a municipal licence — chiefly selling or supplying meals or perishable foodstuffs, certain listed health and entertainment premises (saunas, massage, night clubs, cinemas, three or more gaming machines), and food hawking. A software company, an importer, a consultancy or a manufacturer needs no Businesses Act licence at all. What every premises-based business does need is the correct municipal zoning or land-use rights, and food premises separately need a Certificate of Acceptability before handling food.
CIPC assumes the company is dormant. Deregistration is automatically triggered once two successive annual returns are outstanding, and final deregistration strips the company of legal personality — banks, SARS and counterparties may refuse to deal with it, and contracts and property are imperilled. Reinstatement (form CoR 40.5) works retrospectively, as the Supreme Court of Appeal confirmed in Newlands Surgical Clinic v Peninsula Eye Clinic [2015] ZASCA 25, but it is slow and requires filing all arrear returns, beneficial-ownership declarations and financial statements.
Partially. BizPortal (run by CIPC) can bundle company registration with an income tax number, a bank account referral, a B-BBEE affidavit, UIF and Compensation Fund registration and a domain name in one flow. But it does not cover the public officer appointment, VAT, PAYE/SDL employer registration, customs codes, Information Officer registration or any sector licence — those remain separate processes with their own deadlines. For larger investors, the InvestSA One Stop Shop (the dtic) helps coordinate registrations and permits across agencies, but it coordinates rather than replaces them.
Only if they live in South Africa. The public officer (SARS calls the role the registered representative) must be a natural person resident in South Africa who is a senior official of the company; if no senior official is resident, another suitable person approved by SARS may be appointed. Since 24 December 2024 the appointment is due at formation, with no grace period. If nobody is appointed, a statutory default hierarchy applies, or SARS may itself designate a suitable person. Until the representative is activated on eFiling, the company effectively cannot transact with SARS at all — see resident directors and the public officer.