Picture a long weekend. You finally have a quiet Saturday to catch up on a client proposal or review your management accounts, so you sit down with your laptop and realise your financial models, contracts and payroll files are all sitting on a desktop back in a locked office. If you can't pull up your latest trial balance or tax documents from your dining room table, your business infrastructure is holding you back. A documented cloud access SOP is what fixes this, and it protects far more than convenience.
South African legislation is specific about how long you need to keep records and how securely you need to store them. Under the Companies Act, financial records must be kept for a minimum of seven years, and SARS requires five years of record-keeping under the VAT Act and Income Tax Act. Physical files or a single local hard drive expose you to real risk from fire, theft or hardware failure. Moving to a secure cloud environment keeps records for your IRP6 provisional tax, PAYE reconciliations and Capital Gains Tax calculations safely archived for as long as the law requires. The Protection of Personal Information Act (POPIA) also requires reasonable technical measures to secure personal data, and reputable cloud providers build in encryption and automated backups that get you most of the way there. You can review the current record-keeping requirements on the SARS website.
A business where staff email files back and forth, ending up with files like "Budget_v4_FINAL_Amended.xlsx", is wasting real time. Moving to Microsoft 365, Google Workspace or cloud accounting software like Xero creates a single source of truth, but buying the subscription is only half the job. Your Cloud Access SOP needs to spell out the rules: a clear folder structure (Finance, HR, Operations, Sales) so anyone can find what they need quickly, a consistent file naming convention such as YYYY-MM-DD_ClientName_DocumentType, defined access permissions so junior staff aren't browsing the executive payroll folder, and a firm rule against saving company data to a personal desktop or local drive. Document it once, and onboarding new staff becomes a matter of assigning permissions and handing over the SOP rather than a manual handover process.
Time lost chasing a file is money lost. If a client needs an urgent proposal on a Friday and someone has to drive to the office on a Saturday to retrieve a template, you're losing billable hours and risking the relationship. There's also a hard cost to on-premise infrastructure: hardware, IT maintenance, cooling and security. Shifting to cloud computing swaps that unpredictable capital cost for a predictable monthly subscription. Cutting a R5,000 monthly server maintenance bill alone adds R60,000 a year straight to your bottom line, on top of removing the delays that cost you deals.
Audit your critical files. Start with management accounts, CIPC statutory documents, active client contracts and current projects. Don't try to move a decade of archives in one go.
Choose your platform. Microsoft OneDrive or SharePoint and Google Drive both work well for storage. Confirm your accounting is on Xero or Sage, and consider a tool like Dext for receipts and supplier invoices.
Build the folder hierarchy first. Set it up before you move a single file, and configure access permissions immediately so sensitive financial data stays restricted.
Draft the SOP. Write down the naming conventions and the no-local-saving rule, then share it with your team as soon as possible.
Test it properly. Upload a batch of critical files, disconnect from the office network, and confirm you can access, edit and save from a mobile hotspot or home Wi-Fi.
The Companies Act requires a minimum of seven years, while SARS requires five years of records under the VAT Act and Income Tax Act. Cloud storage makes meeting both far more reliable than physical filing.
No, but it does require reasonable technical security measures for personal information. Reputable providers with encryption and automated backups make compliance far more achievable than local storage.
Buying the subscription without documenting an SOP. Without clear folder structure, naming conventions and access rules, a cloud system can end up just as disorganised as a filing cabinet.
A well-documented cloud access SOP protects your compliance position, removes hours of administrative friction, and converts unpredictable IT costs into a manageable monthly expense. It's also one of the clearest signals of operational maturity when a lender or investor starts asking questions about how your business actually runs.
Need expert tax and accounting support? The Compliance Clinic helps South African businesses stay compliant, reduce tax liabilities, and grow with confidence. Contact us today | View our services
A brief from the lead partner — what changed at SARS this month, one practice note, one decision-trigger to watch. Unsubscribe in one click.
