Blog

Every year, hundreds of thousands of South Africans register companies with the Companies and Intellectual Property Commission (CIPC) — and most of them overpay, wait too long, or miss the follow-up registrations that make the company actually usable. This guide walks through the real process, the real costs, and the three things you must do immediately after your registration certificate arrives.

What it costs to register a company in South Africa

A standard private company — a (Pty) Ltd — is the structure most small businesses choose. CIPC’s official fees are deliberately low so that registration is accessible:

DIY or done-for-you?

You can absolutely register yourself — the CIPC fees are low, as the table shows. What you are paying an agent for (typically R950 and up) is the admin done right the first time: name searches that pass, documents that do not bounce, and the follow-up registrations most owners forget. A rejected filing costs you weeks; a good agent costs you one small fee.

The three ways to register

• CIPC eServices — register directly on the CIPC portal. Cheapest route, but the interface is dated and errors can delay you by weeks.
• BizPortal — a simplified online channel that bundles company registration, SARS tax registration, UIF and COIDA into one flow.
• Through an agency or your bank — several SA banks offer registration when you open a business account, and agencies like ours handle the full process plus everything that comes after it.

Step-by-step: from idea to registered company

1. Reserve your company name (optional but recommended)
   Submit up to four name options in order of preference. Names are rejected if they are too similar to an existing company or trademark, so make your first choice distinctive.
2. Prepare your documents
   You need certified ID copies for all directors and incorporators, your registered business address, and a power of attorney if someone registers on your behalf.
3. File the incorporation documents
   The Memorandum of Incorporation (MOI) defines how your company runs. Most small companies use the standard short-form MOI — a custom MOI is only needed for unusual share structures.
4. Receive your COR14.3 registration certificate
   This is your company’s birth certificate: it carries your enterprise number, which you need for banking, tax, tenders and supplier accounts.
5. Open a business bank account
   Banks require the COR14.3, your MOI, director IDs and proof of address. Keep business money separate from day one — your future bookkeeper will thank you.

The three registrations most new owners forget

A CIPC certificate alone does not make your company compliant. Within weeks of registering you also need:

• SARS tax registration — your company is usually auto-registered for income tax, but you must still activate eFiling, and register separately for PAYE if you employ staff and VAT if turnover will exceed R1 million.
• Beneficial ownership filing — since 2023 you must declare who ultimately owns or controls the company, within 10 business days of incorporation. Skipping it blocks your annual returns.
• B-BBEE sworn affidavit — a free document that gives small businesses an automatic empowerment level. Without it, corporates and government departments cannot buy from you on preferential terms.

The shortcut

Our Starter Business Promotion bundles CIPC registration, SARS tax registration, beneficial ownership filing, a B-BBEE affidavit, a business profile and a 5-page website into one R6,999 package — everything above, done for you in days.

How long does it take?

With clean documents and an available name, CIPC typically issues a registration certificate within 3–7 working days. Delays almost always come from rejected names, unclear ID copies or mismatched director details. Getting it right the first time is the real speed advantage.

In May 2023, South Africa quietly introduced one of the most significant compliance changes in years: mandatory beneficial ownership (BO) filing with the CIPC. Three years on, thousands of companies still have not filed — and many only discover the problem when a bank freezes an account or a tender is rejected.

What is a beneficial owner?

A beneficial owner is the real human being who ultimately owns or controls a company — not the nominee director, the trust, or the holding company on paper. Under the General Laws Amendment Act, you must declare anyone who directly or indirectly holds 5% or more of the shares or voting rights, or who otherwise exercises control over the company.

For most small businesses the answer is simple: the founders. But even if you are the sole director and only shareholder, the filing is still mandatory.

Why South Africa made it compulsory

The change followed South Africa’s greylisting by the Financial Action Task Force (FATF). Regulators needed visibility into who actually owns companies to combat money laundering, terrorism financing and tender corruption. The BO register is the mechanism — and companies are legally required to keep it current.

The deadlines that catch people out

• New companies: within 10 business days of incorporation.
• Any change in ownership or control: within 10 business days of the change.
• Every year: the register must be confirmed or updated when you file your CIPC annual return.

The trap

CIPC will not let you file your annual return until your beneficial ownership register is up to date. Miss annual returns and your company moves towards deregistration — which can mean frozen bank accounts and lost contracts.

What you need to file

• Full names, ID or passport numbers, and dates of birth of each beneficial owner
• Residential addresses and contact details
• The nature and extent of ownership (share percentage or type of control)
• A securities register or share register reflecting the ownership structure
• Certified ID copies, no older than three months

What happens if you do not file

Beyond blocked annual returns, non-compliance increasingly has teeth: banks are required to verify beneficial ownership for FICA, and an outdated register can delay or freeze business accounts. State and corporate procurement portals also check compliance status. A R550 filing is cheap insurance against all of it.

Included free in our Starter Promotion

We file beneficial ownership for every new company we register — a R550 value, included at no charge in the R6,999 Starter Business Promotion, along with CIPC registration, tax registration and your B-BBEE affidavit.

Ask a room of South African small business owners about B-BBEE and you will hear two myths: that certification costs tens of thousands of rand, and that it only matters for big companies. Both are wrong. If your annual turnover is below R10 million, a single sworn affidavit — signed in front of a commissioner of oaths for free — is all the “certification” you need.

How the levels work for small businesses

The B-BBEE codes divide small businesses into two categories with simplified rules:

Why your level matters commercially

Large companies and government departments earn points on their own scorecards by buying from empowered suppliers. A Level 1 supplier gives a buyer 135% procurement recognition — meaning every rand spent with you counts as R1.35 on their scorecard. That is a genuine competitive weapon: at equal price and quality, the Level 1 supplier wins.

• Level 1: 135% procurement recognition (100% black-owned EME)
• Level 2: 125% recognition (at least 51% black-owned EME)
• Level 4: 100% recognition (all other EMEs)

How to complete the affidavit correctly

1. Use the official DTIC or CIPC template
   Buyers increasingly reject affidavits on outdated or non-standard templates. Use the current Department of Trade, Industry and Competition format.
2. Fill in every field
   Enterprise name, registration number, physical address, financial year, turnover declaration and black ownership percentage. Blank fields are the most common rejection reason.
3. Sign before a commissioner of oaths
   Any police station, bank, attorney or post office can commission it — usually free. The affidavit is invalid without the commissioner’s stamp and signature.
4. Renew it every 12 months
   An affidavit is valid for one year from the date of signing. Diarise the renewal; an expired affidavit can void a tender award.

Common mistakes that get affidavits rejected

Using last year’s turnover, signing before completing all fields, declaring an ownership percentage that contradicts your CIPC records, or submitting a photocopy where an original is required.

Done for you

Every company registered through our Starter Business Promotion receives a correctly completed, commissioner-ready B-BBEE sworn affidavit (worth R750) as part of the R6,999 package — plus the CIPC registration, tax registration and beneficial ownership filing it depends on.

“How much for a website?” is the South African business equivalent of “how long is a piece of string?” — but that answer helps nobody. After more than a decade building sites for South African businesses, here is an honest breakdown of what you should expect to pay, and what you should get for it.

The real price ranges in 2026

The ongoing costs people forget to budget for

• Domain name: around R150–R250 per year for a .co.za
• Hosting: R50–R500 per month depending on traffic and performance needs
• Professional email: often bundled with hosting, otherwise R30–R100 per mailbox per month
• Maintenance and updates: R350–R1,500 per month for security updates, backups and small changes — or pay per incident when something breaks
• SSL certificate: free with good hosts, otherwise a few hundred rand per year

The cheapest website is often the most expensive

A R2,500 site that loads slowly, breaks on mobile and never ranks on Google costs you customers every single day. Price the outcome — enquiries, sales, credibility — not just the build.

What actually drives the price

• Custom design vs templates — templates are faster and cheaper; custom design converts better and differentiates you
• Copywriting — professional words that sell are a separate skill from development
• Functionality — bookings, payments, member areas and integrations each add build time
• Content volume — five pages versus fifty is a different project
• SEO foundations — proper structure, speed and metadata baked in at build time, not bolted on later

How to compare quotes properly

Never compare headline prices. Compare what is included: Is the domain and first year of hosting in the price? Who writes the copy? Is there training or a handover? What happens — and what does it cost — when you need a change in month three? A transparent itemised quote beats a cheap lump sum every time.

The best-value website deal in South Africa

Our Starter Business Promotion includes a custom 5-page website plus a free .co.za domain, 12 months of hosting with professional email, CIPC registration and more — R19,899 of value for R6,999, with just a 30% deposit to start.

South Africa runs on WhatsApp — it is the country’s most-used app by a wide margin, and for many customers it is the only channel they actually answer. But business pricing on WhatsApp is confusing: the app is free, the Platform is not, and Meta changed the billing model again in 2025. Here is what you actually pay.

First, the free option: the WhatsApp Business App

The free Business App suits very small businesses: one phone, a catalogue, quick replies and labels. But it cannot be shared across a team, cannot automate beyond basic away messages, cannot integrate with your website or CRM, and broadcasts to large lists are limited. Growing businesses hit its ceiling quickly.

The WhatsApp Business Platform (API): how billing works

The Platform — accessed through an official Business Solution Provider — unlocks team inboxes, chatbots, template campaigns, CRM integration and the verified green tick. Meta bills per message, with rates depending on the message category and the recipient’s country. For South African numbers, the ballpark rates are:

The cost secret: get customers to message you first

When a customer initiates the conversation, your replies within the 24-hour service window are completely free. Click-to-WhatsApp ads, website chat buttons and QR codes all open free windows — a smart setup can run thousands of conversations a month for almost nothing.

What providers add on top

Business Solution Providers charge their own platform fees on top of Meta’s rates — typically a monthly subscription plus a small per-message markup. Compare the total cost: a provider with a low subscription but a high markup costs more at volume than one with a flat fee. And beware unofficial “bulk WhatsApp” tools — they violate Meta’s terms and get numbers banned, sometimes permanently.

Is it worth it? Do the maths

• WhatsApp messages see open rates above 90%, versus roughly 20% for email
• A R0.70 marketing message that converts one in fifty recipients costs R35 per sale — compare that to your cost per click
• Automated utility messages (reminders, confirmations) cut no-shows and “where is my order?” calls, saving staff time
• Service conversations are free, so your customer support channel effectively costs nothing at the message level

We set it up properly

Our WhatsApp for Business solution handles Meta verification, template approval, chatbot flows and CRM integration on the official Platform — compliant, measurable, and designed to keep you inside free service windows wherever possible.

For twenty years, digital marketing had one commandment: rank on Google’s first page. That commandment is being rewritten. AI Overviews now sit above the organic results, and a growing share of searches — on Google, ChatGPT, Perplexity and Copilot — are answered directly by AI, without the user ever clicking a website. The question is no longer just “do you rank?” but “does the AI cite you?”

What changed in search

• AI Overviews answer the query at the top of Google, pushing organic links further down the page
• A majority of searches on mobile now end without any click at all — the answer is consumed on the results page
• Buyers increasingly start research inside ChatGPT or Perplexity instead of a search engine
• These AI systems name and recommend specific businesses — and they can only recommend businesses whose information they can find, parse and trust

SEO and GEO: the difference

The crucial point: GEO does not replace SEO — it builds on it. The same fundamentals (a fast, crawlable, authoritative site) feed both. But traditional SEO alone leaves the AI layer untouched.

What makes AI engines cite a business

• Direct, factual answers to specific questions — the kind of content that can be quoted verbatim
• Structured data (schema markup) that tells machines exactly what your business is, does and charges
• Consistent entity information: same name, services and details across your site, Google Business Profile and directories
• Demonstrated expertise: original guides, real pricing, local case studies — content AI cannot get elsewhere
• Freshness: regularly updated pages signal that information is current and safe to cite

Why this matters more in South Africa

Local competition in AI answers is still thin. Businesses that structure their content for AI now will own the citations for years — the same way early SEO adopters owned Google in 2010.

Where to start

Audit the questions your customers actually ask — in search consoles, sales calls and WhatsApp threads. Publish clear, structured answers to each one. Add schema markup. Keep your business details consistent everywhere. That is the GEO foundation, and it compounds: every answer you publish is another chance to be the business the AI recommends.

We do both

Our AI SEO & GEO service optimises for Google rankings and AI citations in one strategy — content, schema, entities and authority, measured in both positions and mentions. This article is itself an example of the approach.

Put yourself in your customer’s shoes. Two quotes arrive for the same job: one from [email protected], one from [email protected]. Same price, same promises — but one of them looks like an established business and the other looks like it might disappear after the deposit. In South Africa, where WhatsApp scams have made everyone suspicious, your email address is a trust signal you control completely.

What a free address actually says

• “This business might not be registered” — corporates and government buyers check
• “This invoice might be fraudulent” — free addresses are the scammer’s tool of choice, so spam filters treat them harshly
• “There is no team here” — info@, sales@ and accounts@ suggest departments, even if one person answers them all
• “I am not planning to be around” — nobody invests in a domain for a business they expect to fold

The deliverability problem nobody mentions

It is not just perception. Properly configured business email sits on a domain with SPF, DKIM and DMARC records — the technical signatures that tell receiving mail servers your messages are genuinely from you. Free addresses are constantly impersonated by scammers, which means your real invoices are one spam-filter update away from the junk folder. A quote that lands in spam is a sale that never happens.

What it costs — honestly

One address, many faces

You do not need a mailbox per person per role. Aliases are free: sales@, accounts@ and info@ can all deliver to one inbox while presenting a professional front. Set them up once and every customer touches a “department”.

Set it up in under an hour

1. Register your domain
   A .co.za costs around R150 a year. Match it to your registered company name as closely as possible.
2. Choose your hosting or email provider
   If you have a website, email is often bundled with your hosting. Otherwise choose a standalone email plan.
3. Create your mailboxes and aliases
   Start with you@ plus aliases like info@ and accounts@ pointing to it.
4. Configure SPF, DKIM and DMARC
   Ask your provider — good hosts do this for you. This step is what keeps your invoices out of spam folders.
5. Connect your devices
   Add the account to your phone and Outlook or mail app via IMAP, so everything stays in sync.

Free for a year with our Starter Promotion

The Starter Business Promotion includes 12 months of professional email on your free .co.za domain — set up, configured for deliverability, and ready on your phone and laptop from day one.

The day your CIPC certificate arrives, most new owners think the paperwork is done. In reality, your relationship with SARS is just beginning — and the pieces are separate, with separate triggers. Miss one and you will find out at the worst possible moment: when a client asks for a tax clearance certificate before paying you.

Income tax: automatic, but not finished

When CIPC registers your company, the details flow to SARS and the company is normally registered for corporate income tax automatically. But “registered” is not “operational”: you still need to activate eFiling, link the company to your profile, and file returns every year — even if the company traded zero rand. Dormant companies that skip returns accumulate penalties quietly.

PAYE: the moment you employ anyone

The day you pay your first employee — including a director drawing a salary — you must register as an employer for PAYE, UIF and SDL. This is not automatic. Registration happens through eFiling or at a SARS branch, and monthly EMP201 declarations follow. Many owner-managed companies trip here: the director takes “drawings” for months, then discovers those drawings were salary all along.

VAT: R1 million, or strategically earlier

• Compulsory registration: when your taxable turnover exceeds R1 million in any consecutive 12 months
• Voluntary registration: possible from R50,000 in turnover — worth it if your clients are VAT vendors (they claim your VAT back, so your prices stay competitive) or if you have large start-up expenses to claim against
• The trap: once registered you must charge, collect and pay over VAT — with bi-monthly returns. Never register voluntarily if your clients are mostly consumers who cannot claim it back

Tax clearance: your licence to get paid

Government departments and most corporates require a Tax Compliance Status (TCS) pin before they will award work or pay invoices. The pin is generated on eFiling in minutes — but only if every return is filed and every debt is settled or arranged. Companies that neglected their filings discover this at tender stage, when fixing it takes weeks they do not have.

The sequence that saves you pain

CIPC registration → activate eFiling → open the business bank account → register beneficial ownership → register for PAYE the day you hire → register for VAT when the numbers say so. Each step depends on the one before it.

What good bookkeeping buys you

Every registration above becomes painless when your records are clean from day one: separate bank account, every invoice and expense captured, payroll run properly. The businesses that fear SARS are the ones reconstructing a year of transactions from bank statements the night before a deadline.

Start compliant, stay compliant

Our Starter Business Promotion includes SARS tax registration with your CIPC company registration — plus beneficial ownership filing and a B-BBEE affidavit — so your company starts life fully compliant, not catching up.

Every South African business owner has a loadshedding story. Fewer realise their website has them too. When the grid drops, the question is not whether your site stays online — it is whether your hosting provider planned for the grid to drop. The difference between those two answers is your revenue during Stage 6.

What actually happens when the power goes off

Your website lives on a server in a data centre. A serious data centre treats grid power as a convenience, not a dependency: instant UPS battery failover, then diesel generators with days of fuel and refuelling contracts. A weak one has a UPS and a prayer — fine for a two-hour slot, dangerous in a four-hour Stage 6 window, catastrophic in a multi-day outage.

And it is not just the server. Your customers’ connections drop too: fibre goes down when the street’s distribution power fails, and mobile networks degrade as tower batteries drain. The businesses that trade through loadshedding are the ones whose sites load fast on a weak mobile connection.

The questions to ask any hosting provider

• Which data centre hosts my site, and what is its power redundancy? (Look for UPS plus generators, not “backup power”)
• What uptime do you guarantee — and what did you actually deliver during the worst loadshedding months?
• Where are your servers? Local servers mean faster loads for SA visitors; offshore-only hosting adds latency on every click
• Are backups off-site and automated? Power events corrupt data; a same-day restore should be standard
• If my email is hosted with you, does it stay up too? Losing email during loadshedding is losing your business phone line

The hidden cost of cheap hosting

A R30/month hosting special that drops during Stage 6 costs you every enquiry, sale and email sent in that window. Reliable hosting is not an IT luxury in South Africa — it is business continuity planning.

Performance is your loadshedding strategy

When your customers are on battery-saving mobile data and congested towers, a heavy site simply does not load. Caching, image compression and lean code are not technical vanity — they are how your site keeps selling while your competitor’s spins. A site that loads in two seconds on a degrading 3G connection wins the evening.

Built and hosted for South African reality

Our WordPress hosting runs in top-tier facilities with generator-backed power, automated off-site backups and performance tuned for local networks — and our maintenance plans keep your site lean enough to load on the worst connection your customer has.

If your website has a contact form, you are processing personal information. If you send marketing emails, use analytics, or take bookings online, you are doing it at scale — and the Protection of Personal Information Act (POPIA) has applied to you, in full, since July 2021. The good news: for most small business websites, compliance is a short, concrete checklist.

Does POPIA really apply to small businesses?

Yes. POPIA has no small-business exemption. Every “responsible party” — any business that decides why and how personal information is processed — must comply. Names, email addresses, phone numbers and ID numbers all count as personal information. Your contact form collects three of those before lunch.

The six requirements most websites fail

1. Publish a POPIA-compliant privacy policy
   Not a template from the internet — a policy that actually names what you collect, why, who you share it with, and how people can contact your information officer.
2. Get consent before marketing
   Newsletter checkboxes must be opt-in, not pre-ticked. Existing customers can be marketed to about similar products; bought lists and scraped addresses cannot.
3. Secure what you collect
   HTTPS (the padlock) is the floor, not the ceiling. Form submissions, stored enquiries and customer records must be protected with access controls and up-to-date software.
4. Only keep what you need
   POPIA requires minimality: collect what the purpose needs, keep it only as long as needed, then delete. That enquiry from 2019 should not still be in your inbox archive.
5. Handle access requests
   Anyone can ask what information you hold about them, and demand correction or deletion. You need a process, not a panic.
6. Report breaches
   If personal information is compromised — a hacked site, a leaked spreadsheet — you must notify the Information Regulator and affected people as soon as reasonably possible.

Cookies, analytics and WhatsApp buttons

• Analytics and tracking cookies need disclosure, and users should be able to refuse non-essential tracking
• Embedded third-party tools (chat widgets, pixels, maps) send visitor data offshore — your policy must say so
• A WhatsApp click-to-chat button is fine; adding every person who messages you to a broadcast list is not — that needs separate opt-in
• Contact form submissions emailed to you are personal information at rest in your mailbox — protect that mailbox

The fines are real

POPIA allows administrative fines up to R10 million and, for some offences, criminal liability. But the everyday risk is more mundane: a complaint to the Information Regulator, a lost customer who asked a question you could not answer, or a corporate client’s compliance checklist you fail.

Compliance is a sales feature

A visible, honest privacy posture wins business. Corporate procurement increasingly asks suppliers about POPIA compliance; being able to answer confidently — policy, security, processes — moves you up the shortlist. Treat compliance as part of your credibility, not just your legal defence.

Websites built compliant from the start

Every website we build ships with HTTPS, a proper privacy policy structure, consent-correct forms and minimal-data design — and our CRM solutions keep customer data POPIA-compliant long after launch.