Regulatory compliance for small businesses in South Africa

Most sole traders and small business owners do not fail at regulatory compliance because they ignore it. They fail because it is scattered across four or five different bodies, each with its own deadlines, and none of them send you a single combined reminder. Here is what compliance actually covers, what it costs to get wrong, and why the deadlines themselves are usually the real problem.

What "regulatory compliance" actually means day to day

For a one-person or ten-person business, compliance is not a legal department's problem. It is a handful of recurring obligations that sit on top of running the business itself: filing and paying tax on time, keeping your company registration current, deducting and paying over UIF and PAYE if you employ anyone, holding whatever license your specific trade requires, and handling client and staff personal information the way the law expects. None of these are optional because the business is small. Most of them apply from the day you register, or the day you hire your first employee.

What makes it hard is not the individual rule, it is that each obligation belongs to a different authority, on a different cycle, with its own portal and its own penalty structure. SARS does not know or care what CIPC needs from you this month, and CIPC will not warn you that a SARS deadline is coming up in the same week.

The obligations that apply to most SA small businesses

The exact list depends on your entity type and whether you employ staff, but for most sole traders and small companies it includes:

→Income tax and provisional tax. Two provisional payments a year for most sole traders and companies, plus the annual return. Missing a provisional deadline triggers interest and, if the underpayment is large enough, a penalty on top of it.
→VAT, if you are registered. Bi-monthly VAT201 returns with their own submission and payment dates, separate from income tax entirely.
→PAYE and UIF, if you have employees. Monthly EMP201 submissions, plus the twice-yearly EMP501 reconciliation. Late or incorrect PAYE is one of the more aggressively penalised categories at SARS.
→CIPC Annual Return. Every registered company and close corporation must file this every year within the window tied to its own registration date, not the calendar or financial year. Miss it for long enough and CIPC can start the process of deregistering the company.
→CIPC Beneficial Ownership filing. A newer requirement that has to be current before CIPC will even accept your Annual Return. See our guide to Beneficial Ownership filing for how that deadline actually works.
→Industry-specific licensing. A food business needs a health certificate from the local municipality, a security company needs a PSIRA registration, an importer needs SARS customs clearance. These renew on their own schedules, entirely outside SARS and CIPC.
→POPIA. If you hold client, supplier, or staff personal information, which almost every business does, you are expected to handle it lawfully and securely, whether or not you have ever registered anything with the Information Regulator.

What it actually costs to get wrong

None of these penalties are theoretical. A late provisional tax payment attracts interest immediately, and can attract an underestimation penalty on top of it if the estimate was too low. Late or outstanding PAYE is charged a 10% penalty on the amount due, plus interest, and repeated non-compliance can trigger a SARS audit. A company that misses its CIPC Annual Return for two years running risks being flagged for deregistration, which does not just cost a fine, it can mean the company legally ceases to exist while you are still trading under its name. None of this requires bad intent. It usually just requires a date that slipped past while you were busy running the business the compliance rules exist to protect.

The actual problem is not the rules, it is the calendar

Ask most small business owners which SARS or CIPC obligations apply to them and they can usually answer correctly. Ask them what is due in the next thirty days across all of those obligations at once, and the answer gets shaky fast. That is because every one of these deadlines lives in a different system: a SARS eFiling reminder here, a CIPC email there, a note in a diary for the municipal license renewal, nothing at all for the PSIRA certificate that only your admin person remembers. A missed deadline is rarely a missed rule. It is a missed reminder.

What we are building: a single compliance calendar

We are building a SARS and CIPC deadlines calendar into SortedNexus, targeting release by the end of September 2026. The idea is simple: instead of tracking provisional tax dates, VAT201 due dates, PAYE submission dates, and your CIPC Annual Return window separately, they sit in one place, tied to your actual business, so you see what is coming up next without having to remember which portal to check.

It will be a free tool, unlimited, the same as our VAT calculator and our other free calculators, because deadline awareness is not something we think should sit behind a paywall. It fits the same pattern as the rest of the toolkit: the compliance data on the calendar is only as useful as the invoicing, VAT, and cash flow records already sitting in your account, so the calendar becomes another view onto the same numbers you are already tracking, not a separate system to maintain.

What to do while you wait

A calendar helps once it exists. Until then, the same discipline still applies:

→Know your provisional tax dates before the tax year starts, not when the first one is a week away. Our guide to provisional tax covers both payment dates and how to calculate what you owe.
→Check your CIPC Annual Return window against your actual registration date, not the calendar year, and confirm your Beneficial Ownership filing is current first.
→Keep the underlying numbers accurate as you go, rather than reconstructing a year of invoices and expenses the week before a return is due. A Starter or Pro plan keeps your invoicing, cash flow, and expense records current automatically, so whatever return comes next has clean numbers behind it.
→Put every renewal date, licensing or otherwise, in one place you actually check, even if that place is a shared calendar for now.

Get the accounts ready now

Clean invoicing and cash flow records make every compliance deadline easier to meet, calendar or not. Start with three free invoices a month, no account needed, or move to Starter for the full toolkit.

See plans →Create an account →

Sources

Disclaimer: This article is for general information only and does not constitute legal, tax, or accounting advice. Laws, penalties, and deadlines change, and the calendar feature described above is planned but not yet released. Consult a registered tax practitioner or accountant for advice specific to your situation.