Skip to main content
Komply

Guides

The South African compliance stack, explained.

Plain-language guides to POPIA, B-BBEE, SARS, and FSCA — what the law actually requires of a business like yours, and how to prove you meet it.

Featured · Guide · 11 min read

SARS compliance: the complete tax guide for South African businesses

Every tax an SA business actually deals with — income tax, provisional tax, PAYE, and VAT — what each one requires, when it's due, and what SARS charges when you miss. Including the 2026 changes that moved the goalposts.

Read the guide →

Guide · 9 min read

COIDA registration and the Letter of Good Standing: a guide for SA employers

If you employ anyone, you must register for COIDA — the state workplace-injury cover run by the Compensation Fund. What it is, who's in (domestic workers included), the annual Return of Earnings, the personal liability if you skip it, and how to get the Letter of Good Standing tenders demand.

Guide · 10 min read

EME, QSE or Generic? Which B-BBEE scorecard applies to your business

Your entire B-BBEE obligation is decided by one number — annual turnover. Under R10m you're an EME (an affidavit, no scorecard); R10–50m a QSE; over R50m Generic. What each tier requires, the priority-element traps, and how to prove your level.

Guide · 11 min read

Do you need an FSP licence? The FSCA & FAIS guide for South African businesses

Most businesses don't need an FSP licence — but if you give financial advice or act as an intermediary, the FSCA and FAIS apply in full. Who's in scope, the licence categories, fit-and-proper and CPD, the conduct rules, penalties, and what the COFI Bill will change.

Guide · 11 min read

POPIA compliance: the complete guide for South African businesses

Everything an SA business needs on POPIA — the eight conditions, the Information Regulator, penalties, and how to build a compliance programme that actually holds up.

Guide · 10 min read

B-BBEE levels explained: the scorecard, the five elements, and how to climb

What a B-BBEE level actually means, how the 109-point scorecard earns it, why one weak priority element quietly costs you a whole level, and the cheapest ways to climb.

POPIA · 6 min read

POPIA Section 19: what “appropriate security safeguards” requires

POPIA §19 doesn't give you a checklist — it gives you a test. Here's what “appropriate, reasonable technical and organisational measures” actually means for your business.

Regulatory map · 8 min read

POPIA vs B-BBEE vs SARS vs FSCA: the South African compliance stack explained

Four regulators, four rulebooks, one business. A clear map of POPIA, B-BBEE, SARS, and FSCA — what each requires, who it applies to, and where they intersect.

Checklist · 5 min read

Is your website POPIA-compliant? A practical checklist

A practical, no-fluff checklist to check whether your website meets POPIA's basic requirements — privacy policy, cookie consent, data subject rights, and more.