Professional Services Agreement
Template — South Africa
An attorney-drafted Professional Services Agreement template designed specifically for South African businesses engaging or providing technology consulting, software development, systems integration, and IT advisory services. This comprehensive, legally compliant document governs scope, deliverables, milestones, intellectual property assignment, professional liability, and data protection — ensuring compliance with the Consumer Protection Act 68 of 2008, the Electronic Communications and Transactions Act 25 of 2002, the Protection of Personal Information Act 4 of 2013, and the Financial Intelligence Centre Act 38 of 2001 (FICA) where applicable.
Drafted by qualified South African attorneys
Reviewed for compliance with current legislation · Last updated April 2026
Why Your Business Needs This Agreement
Paying for Deliverables the Client Does Not Own
Under the Copyright Act Section 21(1)(c), consultants — as independent contractors — are the first owners of copyright in everything they create. Without a written IP assignment clause compliant with Section 22, the client pays for deliverables they do not own. This issue has resulted in costly disputes in South Africa, with clients discovering on project completion or consultant departure that the intellectual property vests in the consultant, not the business that funded the development.
Scope Creep Without Commercial Control
Without a formal change control process, the scope of professional services engagements tends to expand organically — the client requests "small" additions, the consultant accommodates without documenting the impact, and the project overruns its budget and timeline. When the final invoice arrives, the client disputes the additional charges, and the consultant cannot demonstrate that the additional work was authorised. A formal change request process with written approval prevents this destructive pattern.
No Transition Assistance When Consultants Leave
When a professional services engagement ends without contractual transition provisions, the departing consultant has no obligation to transfer knowledge, document the work, or assist the client in onboarding a replacement. The result is weeks or months of lost productivity as the replacement consultant reverse-engineers undocumented work. For complex technology projects, the cost of inadequate knowledge transfer can exceed the cost of the original engagement.
POPIA Liability for Uncontrolled Data Access
Technology consultants routinely access client databases containing personal information — customer records, employee data, financial information. Without contractual POPIA provisions governing the consultant's processing activities, both the client (as responsible party) and the consultant (as operator) face enforcement action by the Information Regulator. The client risks fines of up to R10 million for failing to ensure their operator is contractually bound under Section 21.
Bait-and-Switch Team Composition
Consulting firms frequently propose senior, experienced professionals during the sales process to win the engagement, then assign junior staff to deliver the work. Without contractual provisions identifying key personnel by name, requiring client approval for substitutions, and specifying minimum seniority levels, the client has no recourse when the team composition drops below what was promised.
Unclear Acceptance Criteria Leading to Payment Disputes
Without defined acceptance criteria and a formal acceptance testing process, disputes about whether deliverables are "complete" and "acceptable" are subjective and irresolvable. The consultant says the work is done; the client says it is not good enough. Without objective criteria, the dispute typically escalates to payment withholding, relationship breakdown, and potentially litigation — all of which could be avoided with clear acceptance procedures.
What is a Professional Services Agreement?
A Professional Services Agreement (PSA) is the foundational contract for any engagement where a specialist consultant, developer, or technology firm is engaged to provide defined services with specific deliverables. In the South African technology sector — where businesses routinely engage external specialists for software development, systems integration, data analytics, cybersecurity consulting, cloud migration, digital transformation, and IT advisory services — the PSA governs the entire commercial relationship between the client and the service provider. It is fundamentally different from an employment contract, a general service agreement, or a software licence: it addresses the unique risks of professional engagements, including intellectual property ownership, professional negligence liability, acceptance testing, source code escrow, and the regulatory compliance obligations that attach to technology service delivery.
The legal framework governing professional services in South Africa involves multiple intersecting statutes. The Consumer Protection Act 68 of 2008 (CPA) applies where the client qualifies as a consumer — a natural person or juristic person with annual turnover below R2 million — and imposes implied warranties of quality and fitness for purpose under Section 54. Services must be performed "in a manner and quality that persons are generally entitled to expect," and Section 56 provides a 6-month implied warranty of quality. These provisions apply regardless of what the contract says, which means technology consultants cannot simply disclaim all warranties for consumer clients.
The Electronic Communications and Transactions Act 25 of 2002 (ECTA) governs the electronic aspects of professional service engagements — including electronic delivery of reports and deliverables, digital signatures on acceptance certificates, and the legal validity of electronic records as evidence of acceptance or rejection. Section 11 confirms that agreements and communications are not invalid merely because they are in electronic form. For professional services that involve e-commerce platforms, digital products, or online service delivery, ECTA imposes additional disclosure obligations under Section 43.
POPIA applies whenever the consultant processes personal information during the engagement — which is common in technology consulting, where the consultant may access client databases, handle customer records, work with employee data during HR system implementations, or develop applications that process personal information. Section 21 of POPIA requires a written operator agreement governing the consultant's processing activities, including security measures under Section 19 and breach notification under Section 22.
For consultants providing services to financial institutions, accountable institutions, or in the financial advisory space, FICA imposes additional customer due diligence and reporting obligations. Professional bodies — such as the Institute of Information Technology Professionals South Africa (IITPSA), the South African Institute of Chartered Accountants (SAICA), and the Engineering Council of South Africa (ECSA) — may impose professional standards, continuing education requirements, and ethical obligations that the agreement should acknowledge and incorporate.
This attorney-drafted template covers every critical area: scope of services and deliverables with acceptance criteria, project governance and reporting, fees and payment terms, intellectual property assignment with Copyright Act compliance, acceptance testing and warranty, data protection and POPIA compliance, professional liability and insurance, confidentiality and non-solicitation, limitation of liability with CPA-compliant carve-outs, and dispute resolution. Whether you are a technology consultancy delivering projects to enterprise clients, a startup engaging a development partner, or a business commissioning digital transformation services, this agreement provides the legal foundation your professional engagement requires.
Who Needs This
Want early access to the Professional Services Agreement template?
We'll email you the moment early access opens
Under the Copyright Act Section 21(1)(c), technology consultants own the copyright in all deliverables they create as independent contractors — without a written IP assignment under Section 22, the client does not own what they paid for
The CPA Section 54 requires that professional services be performed in a manner and quality that people are generally entitled to expect — creating a minimum competence standard that cannot be disclaimed for consumer clients
POPIA Section 21 requires a written operator agreement whenever a consultant processes personal information on behalf of a client — non-compliance can result in fines of up to R10 million under Section 109
The CPA Section 56 provides a 6-month implied warranty of quality from the date services are completed — this warranty is mandatory for consumer clients and cannot be excluded by contract
Professional indemnity insurance is not legally mandated for most technology consultants in South Africa, but is a commercial best practice and increasingly a contractual requirement imposed by enterprise clients
Key Clauses Included
This Professional Services Agreement template covers 12 essential sections, each drafted by South African attorneys.
Scope of Services & Deliverables
Detailed description of the professional services to be performed, specific deliverables with measurable acceptance criteria, project milestones and timelines, dependencies on the client (access, data, personnel, decisions), and the process for defining additional scope through formal change orders. Each deliverable is defined by what it must accomplish, not merely what activities the consultant will perform — ensuring clarity on outcomes rather than inputs.
Project Governance & Reporting
Establishes the project management methodology, steering committee composition and meeting frequency, status reporting cadence and format, escalation procedures for issues and risks, key personnel commitments from both parties with named individuals, and the decision-making authority at each governance level. Defines the roles of project sponsor, project manager, and subject matter experts on both sides of the engagement.
Fees, Expenses & Payment Terms
Fee structure — fixed-price for defined deliverables, time-and-materials with agreed rate cards, or hybrid arrangements with fixed-price milestones and T&M for additional scope. Covers daily and hourly rates for different seniority levels, expense reimbursement policies (travel, accommodation, subsistence at actual cost or agreed per diems), invoicing schedules aligned with milestones or monthly cycles, payment terms (typically 30 days from invoice), late payment consequences including interest and suspension rights, and VAT treatment at 15% under the Value-Added Tax Act 89 of 1991.
Intellectual Property Assignment
Comprehensive IP assignment transferring ownership of all custom deliverables to the client upon payment. Addresses the Copyright Act Section 21(1)(c) issue — confirming that the consultant, as an independent contractor, is the first owner of copyright in their work and that express written assignment under Section 22 is required. Preserves the consultant's pre-existing IP (methodologies, frameworks, tools, reusable components) through a broad, irrevocable, royalty-free licence. Requires disclosure of open-source components with their respective licences. Addresses moral rights under Section 20 of the Copyright Act.
Acceptance Testing & Warranty
Defines the acceptance testing procedures — including the testing environment, test scripts or criteria, the acceptance period (typically 10-15 business days per deliverable), the format for acceptance or rejection notices with specified defect descriptions, deemed acceptance provisions, and defect classification (critical, major, minor). Establishes the warranty period (typically 90 days post-acceptance) during which the consultant must remediate defects at no additional cost, and defines the warranty exclusions (defects caused by client modifications, third-party software, or use outside documented specifications).
Data Protection & POPIA Compliance
Comprehensive POPIA provisions addressing the consultant's obligations when processing personal information during the engagement. Defines the responsible party (client) and operator (consultant) roles under Section 1. Establishes the documented processing instructions, security measures under Section 19 (including encryption, access controls, and audit logging), breach notification procedures under Section 22, sub-contractor management, cross-border transfer safeguards under Section 72, and the return or destruction of all personal information upon project completion. Addresses test data management and the use of production data in development environments.
Professional Liability & Insurance
Professional indemnity insurance requirements — specifying the minimum coverage amount (typically R2-10 million depending on project value), the policy type (claims-made or occurrence), the obligation to maintain coverage for at least 12 months post-project, and the requirement to provide proof of insurance before commencing services. Also addresses public liability insurance, cyber liability insurance where the consultant handles sensitive data, and the consultant's general duty of care — to perform services with the skill, care, and diligence that a reasonably competent professional in their field would exercise.
Confidentiality & Non-Solicitation
Mutual confidentiality obligations protecting each party's proprietary information, trade secrets, customer data, and commercial affairs. Defines confidential information broadly, specifies the permitted uses (only for performing the services), establishes the standard of care, and provides for the return or destruction of confidential information on termination. Includes mutual non-solicitation provisions — preventing each party from soliciting the other's employees for a specified period (typically 12-24 months) — with carve-outs for responses to general advertising and unsolicited approaches.
Limitation of Liability
Caps the consultant's aggregate liability at the total fees paid under the agreement in the 12 months preceding the claim (or the total project value for fixed-price engagements). Excludes indirect, consequential, and special damages — including lost profits, lost data, business interruption, and reputational damage. Includes mandatory carve-outs for matters that should not be subject to the cap: wilful misconduct, gross negligence, death or personal injury, IP infringement indemnities, confidentiality breaches, and POPIA violations. Where the CPA applies, ensures compliance with Sections 51 and 61 regarding mandatory consumer protections.
Change Control Process
Formal process for managing changes to the scope, timeline, or budget of the engagement. Requires the requesting party to submit a written change request describing the proposed change, the reason for the change, and the expected impact on deliverables, timeline, and fees. The consultant provides an impact assessment within a defined timeframe. Both parties must approve the change in writing before work on the changed scope commences. This process protects both parties from scope creep and ensures commercial clarity.
Term, Termination & Transition
Defines the engagement term, termination for convenience with the required notice period (typically 30-60 days), termination for cause (material breach, insolvency, persistent poor performance), and comprehensive transition provisions. Upon termination, the consultant must deliver all completed and in-progress deliverables, transfer all IP as assigned under the agreement, provide specified days of transition assistance, document the work completed and the status of in-progress items, and cooperate with any replacement consultant engaged by the client.
Dispute Resolution & Governing Law
Specifies South African law as the governing law and establishes a structured dispute resolution process. Begins with informal resolution between the parties' project managers, escalates to negotiation between senior executives, proceeds to mediation under AFSA rules, and culminates in binding arbitration for disputes that cannot be mediated. Includes provisions for technical expert determination where disputes involve the quality or functionality of deliverables, and for urgent interim relief through the High Court to protect IP, confidential information, or prevent irreparable harm.
South African Law Compliance
Consumer Protection Act 68 of 2008
The CPA applies where the client qualifies as a consumer — a natural person or juristic person with annual turnover below R2 million. Section 54 requires that services be performed "in a manner and quality that persons are generally entitled to expect" and "in a timely manner." Section 56 provides a 6-month implied warranty of quality from the date the services are completed. Section 48 prohibits unfair, unreasonable, or unjust contract terms — which may affect broad warranty disclaimers and limitation of liability clauses. Section 22 requires that terms be in plain language. These provisions are mandatory and cannot be excluded by contract where the CPA applies.
Electronic Communications and Transactions Act 25 of 2002
ECTA governs the electronic aspects of professional service delivery. Section 11 confirms the legal validity of electronic agreements and communications. Section 15 confirms that electronic records satisfy legal requirements for written documents — relevant to IP assignment under Copyright Act Section 22. Section 43 imposes disclosure obligations on service providers who operate through websites or online platforms. For technology consultants delivering services that involve electronic commerce, Section 43 requires disclosure of the provider's full legal name, physical address, registration number, and contact details.
Protection of Personal Information Act 4 of 2013
POPIA applies whenever the consultant accesses or processes personal information during the engagement. Section 21 requires a written operator agreement governing the consultant's processing activities. Section 19 requires "appropriate, reasonable technical and organisational measures" to secure personal information. Section 22 mandates notification of security compromises to the Information Regulator and affected data subjects "as soon as reasonably possible." For technology consulting engagements that involve system implementations, data migrations, or application development, the consultant will almost certainly process personal information — making POPIA compliance provisions essential.
Copyright Act 98 of 1978
The Copyright Act governs intellectual property ownership in the deliverables. Section 21(1)(c) vests copyright in the author — which is the consultant, not the client, for work created by independent contractors. Section 21(1)(d) only applies to employees. Section 22 requires that copyright assignment be in writing signed by the assignor. Without an express IP assignment clause compliant with Section 22, the client does not own the copyright in custom deliverables they paid for. Section 20 addresses moral rights — the right to claim authorship and object to distortion of the work — which cannot be assigned but can be waived.
Financial Intelligence Centre Act 38 of 2001
FICA applies when professional services are provided to or by accountable institutions (banks, insurance companies, investment firms, estate agents, and certain other regulated entities). FICA requires customer due diligence, the verification of client identities, reporting of suspicious transactions, and compliance with targeted financial sanctions. For technology consultants working with financial institutions on system implementations, data migrations, or regulatory compliance projects, FICA compliance may be a contractual requirement imposed by the client. The PSA should include representations regarding FICA compliance where applicable.
South African businesses are lining up for My-Contracts — be first in when we launch
Create Your Professional Services Agreement in Minutes
Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.
Define the scope, deliverables, and acceptance criteria
Document the specific services to be performed, each deliverable with measurable acceptance criteria, project milestones and timelines, and the dependencies on both parties. This detailed scope definition forms the foundation of the entire agreement and determines the payment triggers, the acceptance testing process, and the change control baseline.
Establish the commercial model and payment terms
Agree on the fee structure (fixed-price, time-and-materials, or hybrid), the rate cards for different seniority levels, the invoicing schedule, and the payment terms. For fixed-price engagements, link payments to milestone acceptance. For T&M engagements, agree on timesheet submission procedures and approval processes. Specify the expense reimbursement policy and the VAT treatment.
Customise the IP, confidentiality, and data handling provisions
Complete the intellectual property assignment clause, ensuring it covers all types of deliverables and complies with Copyright Act Section 22 requirements for written assignment. Document any pre-existing IP the consultant will use. Address POPIA compliance for data access during the engagement. Establish confidentiality obligations and non-solicitation terms appropriate to the relationship.
Negotiate liability and insurance provisions
Agree on the liability cap, the exclusions for indirect damages, and the carve-outs for matters that should not be capped. Specify the minimum professional indemnity insurance requirements and the run-off period after the engagement ends. Ensure CPA compliance for consumer clients. Establish the mutual indemnification obligations.
Execute and commence the engagement
Have both parties sign the agreement, verify insurance certificates, set up the project governance structure (steering committee, status reporting, escalation contacts), and commence the engagement with a formal kick-off meeting. Establish the change control process, the acceptance testing workflow, and the communication channels to be used throughout the project.
Frequently Asked Questions
A Professional Services Agreement is a contract that governs the engagement of a specialist consultant or firm to provide defined services with specific deliverables. Unlike an employment contract, it establishes an independent contractor relationship — the consultant controls how and when the work is performed, uses their own tools and methodologies, bears their own business risk, and is responsible for their own tax obligations. In South Africa, the distinction is critical because SARS and the Department of Employment and Labour apply substance-over-form tests. Under LRA Section 200A, if the relationship resembles employment in practice — the client controls the work, the consultant works set hours, the client provides tools — it may be reclassified as employment regardless of the contract label. A properly drafted PSA structures the engagement to demonstrate genuine professional independence, with deliverable-based scope, milestone-based payment, and clear autonomy provisions.
What You Get With This Template
Drafted specifically for South African professional services — compliant with the CPA, ECTA, POPIA, the Copyright Act, and FICA where applicable
Comprehensive IP assignment clause addressing the Copyright Act Section 21 ownership issue, with Section 22-compliant written assignment
CPA-compliant warranty and liability provisions calibrated for both consumer and B2B engagements
Full POPIA operator agreement provisions for consultants who access or process personal information during the engagement
Formal change control process to prevent scope creep and ensure commercial clarity on additional work
Detailed acceptance testing procedures with defined criteria, defect classification, and deemed acceptance provisions
Key personnel provisions with named individuals, substitution approval rights, and minimum seniority commitments
Comprehensive transition assistance provisions ensuring smooth handover on termination, including knowledge transfer and documentation