Starting a Business in South Africa: Essential Legal Documents Checklist

The Companies and Intellectual Property Commission (CIPC) is the national regulator responsible for company registrations in South Africa. Before you can open a business bank account, register for tax, or enter into contracts in your company's name, you need a valid CIPC registration.

Types of Business Entities

The Companies Act 71 of 2008 provides for several types of entities, each with different legal implications:

• Private Company (Pty) Ltd - The most common business entity. Limited liability, separate legal personality, can have 1-50 shareholders. This is the recommended structure for most small and medium businesses.
• Personal Liability Company (Inc) - Directors are jointly and severally liable for debts incurred during their tenure. Typically used by professional practices such as law firms, accounting firms, and medical practices.
• Non-Profit Company (NPC) - Incorporated for a public benefit objective. Income and property are not distributable to members or directors except as reasonable compensation.
• External Company - A foreign company conducting business in South Africa must register as an external company within 20 business days of beginning activities.
• Sole Proprietor - Not registered with CIPC. The individual trades in their own name with no separation between personal and business liability. Simplest to set up but offers no liability protection.

Registration Process and Costs

The CIPC registration process involves reserving a company name (R50 online or R75 manually), followed by filing the incorporation documents including the Memorandum of Incorporation (R125 online or R175 manually). The total cost for a standard online registration is approximately R175. Processing typically takes 1-5 business days for online applications, though delays of up to 30 days are not uncommon.

Upon successful registration, CIPC issues a registration certificate and assigns an enterprise number. You will need these documents to open a business bank account, register with SARS, and enter into contracts.

The Memorandum of Incorporation (MOI) replaced the old Memorandum and Articles of Association under the Companies Act 71 of 2008. It is a mandatory document - no company can be incorporated without one. The MOI defines the rights, duties, and responsibilities of shareholders, directors, and the company itself.

Standard vs Customised MOI

CIPC provides a standard MOI (CoR15.1A) that satisfies the minimum requirements of the Companies Act. This is sufficient for simple single- shareholder companies with straightforward governance needs. However, a customised MOI is strongly recommended when your company has multiple shareholders, different share classes, specific director appointment procedures, or particular governance requirements.

What the MOI Covers

• Company name, registration number, and type
• Authorised share capital, classes of shares, and rights attaching to each class
• Director appointment, removal, and powers
• Meeting procedures, quorum requirements, and voting thresholds
• Restrictions on share transfers and pre-emptive rights

The MOI is a public document filed with CIPC. Anyone can request a copy. This is one reason why sensitive commercial arrangements - such as valuation methods, exit terms, and restraint of trade provisions - should be in a separate shareholders agreement rather than the MOI.

While the MOI establishes the constitutional framework for your company, it is a public document with limitations. A shareholders agreement is a private, confidential contract that governs the relationship between shareholders and addresses critical scenarios the MOI and Companies Act leave unresolved.

Key provisions typically covered in a shareholders agreement include deadlock resolution mechanisms, pre-emptive rights on share transfers, tag-along and drag-along rights, exit mechanisms and share valuation methods, funding obligations and capital calls, restraint of trade and non-competition clauses, dividend policies, and confidentiality obligations.

You need a shareholders agreement the moment your company has more than one shareholder. Equal shareholdings (50/50) are particularly dangerous without deadlock provisions, as the Companies Act provides no mechanism for resolving disputes between shareholders with equal voting power.

The Basic Conditions of Employment Act (BCEA) requires every employer to provide employees with written particulars of employment. While a verbal agreement is technically valid, operating without a written contract exposes your business to significant risk at the CCMA and Labour Court.

Types of Employment Contracts

• Permanent employment contract - For indefinite-period employees. Must include particulars required by Section 29 of the BCEA: job title, remuneration, working hours, leave entitlements, and notice periods.
• Fixed-term contract - For a specified period or project. Section 198B of the Labour Relations Act limits fixed-term contracts for employees earning below the BCEA threshold to three months unless justifiable reasons exist.
• Part-time employment contract - Part-time employees are entitled to the same benefits as full-time employees on a pro rata basis under Section 198C of the LRA.

Additional HR Documents

Beyond the employment contract itself, every employer should have a disciplinary code and procedure (essential for fair dismissal processes at the CCMA), a grievance procedure, a comprehensive leave policy covering annual leave, sick leave, family responsibility leave, and maternity leave, and a workplace policy handbook covering acceptable conduct, IT usage, and health and safety.

A Non-Disclosure Agreement (NDA) is a legally binding contract that establishes a confidential relationship between parties. For new businesses, NDAs are critical when sharing business plans with potential investors, engaging vendors or service providers who will access proprietary systems, discussing partnerships or joint ventures, or hiring employees who will have access to trade secrets.

There are several types of NDA to consider: employee NDAs (often included as a clause in the employment contract), vendor and supplier NDAs (protecting information shared during commercial relationships), and investor NDAs (protecting business plans and financials shared during fundraising). Each serves a different purpose and should be tailored to the specific relationship.

Whether you are providing services or engaging service providers, a written service agreement protects both parties by clearly defining the scope of work, payment terms, timelines, and responsibilities. Without one, disputes over deliverables, quality, and payment become difficult and expensive to resolve.

A service agreement should address the scope of services (what is and is not included), payment terms (rates, invoicing schedule, late payment penalties), service levels (response times, uptime commitments, quality standards), liability limitations (caps on damages, exclusion of consequential loss), and termination provisions (notice periods, termination for cause, handover obligations).

For ongoing relationships, consider using a Master Services Agreement (MSA) with individual Statements of Work (SOWs) for each project. This structure allows you to negotiate the overarching terms once and then define project-specific details in each SOW.

The Protection of Personal Information Act (POPIA) came into full effect on 1 July 2021. It applies to every organisation that processes personal information of South African data subjects - which means virtually every business. Non- compliance can result in fines of up to R10 million, imprisonment, and civil claims from affected individuals.

Required POPIA Documents

• Privacy Policy - A public-facing document explaining what personal information you collect, why, how it is processed, and the rights of data subjects.
• PAIA Manual (Section 51) - Required under the Promotion of Access to Information Act. Describes what records your business holds and how they can be accessed. Every private body must have one regardless of size.
• Data Processing Agreements - Required when you share personal information with third parties (operators) who process it on your behalf, such as payroll providers, cloud hosting companies, or marketing platforms.
• Consent Forms - Where processing relies on consent as the lawful basis, you need clear, specific consent forms for customers, employees, and other data subjects.
• Information Officer Registration - Every responsible party must register an information officer with the Information Regulator. By default, the head of the organisation (CEO or managing director) is the information officer.

Every South African company must register with the South African Revenue Service (SARS) for income tax. Depending on your turnover and whether you have employees, additional registrations are required. Failure to register timeously can result in penalties, interest, and criminal prosecution.

Beyond company registration and tax compliance, certain industries require specific licences, permits, or registrations before you can legally trade. Operating without the required licence can result in criminal charges, fines, and forced closure. Research your industry requirements before commencing operations.

• Liquor Licence - Required for any business selling or distributing alcohol. Applied for through the provincial liquor authority. Processing can take 3-12 months.
• Health and Safety Permits - Food businesses require certificates of acceptability from the local municipality. Health establishments need registration with the Department of Health.
• Financial Services (FSCA) - Financial service providers, including insurance intermediaries and investment advisors, must be licensed by the Financial Sector Conduct Authority under the FAIS Act.
• Construction (CIDB) - Construction contractors must register with the Construction Industry Development Board. CIDB grading determines which projects you can tender for.
• Import/Export Permits - Customs registration with SARS is required for importers and exporters. Certain goods require additional permits from ITAC (International Trade Administration Commission).
• Environmental Authorisations - Activities listed under NEMA (National Environmental Management Act) require environmental impact assessments and authorisation before commencement.