The Compliance ClinicAdvisory · Compliance · Accounting
← All insights
Compliance

The eFiling Access SOP: Who Actually Controls Your Tax Profile?

16 Jul 2026 · 3 min read · Doctor

The eFiling Access SOP: Who Actually Controls Your Tax Profile?

Who actually controls your SARS eFiling profile? If a former bookkeeper's cellphone still receives the OTP, you don't control your own tax affairs, and that's a real operational vulnerability worth fixing today, not eventually.

Why outsourcing access is riskier than it looks

Many SME owners treat tax compliance as something best left entirely to an external accountant, including the login itself. But if you can't access your own eFiling profile, you can't verify your compliance status, track VAT refunds, or confirm provisional returns were actually submitted correctly. That blind spot hits your cash flow directly, and it becomes acute the moment a relationship with an external party sours or they become uncontactable during something time-sensitive, like a funding application needing a Tax Clearance Certificate.

Retaining control isn't about doing your own tax filings, it's about holding the keys to your own house while still letting someone else drive.

Building the access SOP

Log into eFiling and check the User Rights section to confirm you, the business owner, are listed as primary administrator. Update contact details so the OTP goes to a device or email the company actually owns, not a personal number belonging to whoever set the profile up originally. A dedicated business email alias, forwarding to both you and your current accountant, protects continuity if your team changes.

Your accountant should be linked as an authorised user or registered tax practitioner requesting a mandate you approve, not as the profile owner. Schedule an annual review of access rights across eFiling, your banking platforms, and your cloud accounting software, all in the same pass.

Why this connects to your broader financial planning

Blind spots in your eFiling data create blind spots in your forecasting. Accurate financial modelling depends on understanding the timing of statutory cash outflows, and if you can't see your own eFiling statements, that timing is a guess. Regaining visibility lets you anticipate provisional tax hits and provision for them properly, protecting your working capital from sudden liquidity crunches.

Actionable roadmap

Audit current access today. Check the User Rights section and confirm the primary administrator is you.

Update all contact details. Route OTPs to a company-owned device or email, not a personal number.

Formalise your accountant's access as a mandate. They request it, you approve it, you remain the owner.

Schedule an annual access review. Cover eFiling, banking and accounting software in one recurring check.

Frequently asked questions

What if my previous accountant won't release my eFiling profile?

You can initiate a transfer directly through eFiling. If they don't release it within the stipulated timeframe, SARS transfers it to you automatically once you pass security verification.

Can I still use a tax practitioner if I hold primary access?

Yes, and it's the recommended setup. You hold administrative rights, and your practitioner operates under a shared mandate you've approved.

How does this actually protect my cash flow?

Direct access lets you monitor VAT refund status in real time and respond quickly to SARS requests, without waiting on a third party to relay information.

Conclusion

Control of your own eFiling profile isn't optional admin, it's a foundational piece of running your business without unnecessary risk. Audit it, update it, and review it annually. For more on protecting your compliance infrastructure, see our blog.

Need expert tax and accounting support? The Compliance Clinic helps South African businesses stay compliant, reduce tax liabilities, and grow with confidence. Contact us today | View our services

The dispatch · monthly

One email a month.
Worth opening.

A brief from the lead partner — what changed at SARS this month, one practice note, one decision-trigger to watch. Unsubscribe in one click.

One email, monthly. No tracking pixels. POPIA-compliant.