Record Keeping Rules
For decades, South African business record-keeping meant a shoebox of faded receipts handed to a weary accountant at year-end. Today, most business owners have moved to digital: we scan, we email, we upload our financial lives to the cloud. That convenience has brought a new, less visible risk though: the "set and forget" mentality.
You probably know that the South African Revenue Service (SARS) requires financial records to be kept for 5 years. What surprises a lot of business owners is that dropping a PDF into a digital folder doesn't, on its own, count as compliant record-keeping. Cloud infrastructure can fail, folders can get corrupted, and software subscriptions can lapse, taking historical data down with them.
As a business owner, you're legally responsible for keeping your financial history safe. If SARS requests supporting documentation during a routine eFiling verification, "my accountant lost the file" or "my cloud drive locked me out" won't hold up as a defence. It's worth stepping back and treating document storage with the same seriousness as customer data.
Under the Tax Administration Act, the basic rule is that records must be kept for 5 years from the date you submit the relevant return. That covers invoices, bank statements, ledgers, and cash books. There are some nuances worth knowing, though.
If you buy a property or equipment, the retention period for Capital Gains Tax (CGT, the tax on the profit when you eventually sell the asset) runs longer. You need to keep the original purchase documentation for 5 years from the date you dispose of the asset, not the date you bought it. Under the Companies Act, foundational documents like your Memorandum of Incorporation (MOI) and share register need to be kept for the life of the company plus 7 years after it's deregistered.
Employee records, including PAYE deductions and employment contracts, also get close scrutiny. In any tax dispute, the burden of proof sits entirely with the taxpayer. If SARS challenges your bi-annual provisional tax (IRP6) estimates or declared business expenses, your defence depends on how legible, accessible, and accurate your documents are. A properly compliant archive is your first line of defence against a drawn-out audit.
Good compliance depends on good process. Moving away from manual data entry and using cloud technology helps, but only if it's set up properly. We often see business owners storing documents across fragmented silos: an email inbox here, a desktop hard drive there, some in Xero or QuickBooks.
Optical Character Recognition (OCR) tools like Dext or Hubdoc are worth setting up. They pull data from your invoices and push both the data and the source document into your accounting software, creating a single digital paper trail.
Redundancy matters too. Is your primary cloud storage (Google Drive, OneDrive, Dropbox) backing up automatically, and have you actually tested it? Try a "fire drill": locate a specific supplier invoice from three years ago. If it takes more than five minutes to find, your filing process needs work. It's also worth checking your processes align with the Protection of Personal Information Act (POPIA), so sensitive employee and client data stays behind access-controlled systems.
It's tempting to see record-keeping as pure administrative burden, a cost the government makes you carry. Looked at differently, though, clean record-keeping drives profitability and cash flow directly.
Take the Value-Added Tax (VAT) Act as an example. If your business is VAT registered, you can claim back the VAT on allowable business expenses. Lose a valid tax invoice for a R115,000 equipment purchase, and you forfeit the right to claim back that R15,000 in VAT. Poor record-keeping costs real rands. Missed tax deductions also inflate your net profit on paper, which means a higher income tax bill.
From a revenue angle, clean and organised data feeds into accurate financial statements and models. You can't build a realistic budget or set growth targets on incomplete historical data. Sorting out your document management gives your management accounts real-time, trustworthy figures to work from.
Beyond basic compliance, here's how to build a document process that actually holds up:
If you're planning to scale, secure bank financing, or bring in equity investors, your record-keeping goes under a microscope during due diligence. Financiers treat administrative hygiene as a proxy for management competence. If an investor asks for a specific historical supplier contract or proof of a past capital expense and you can't produce it, confidence in your leadership drops fast. Funding-ready businesses aren't scrambling for documents, they can grant access to a well-structured, compliant data room. Clean records support a stronger business valuation.
Running a South African business comes with real administrative weight, and you don't have to work through the Tax Administration Act or cloud infrastructure decisions alone. DIY compliance often leads to costly mistakes, missed deductions, and stressful run-ins with SARS. A registered tax practitioner or virtual CFO can structure this for you, freeing you up to focus on revenue and growth instead of paperwork.
Need expert tax and accounting support? The Compliance Clinic helps South African businesses stay compliant, reduce tax liabilities, and grow with confidence. Contact us today: Contact us | View our services: Services
A brief from the lead partner — what changed at SARS this month, one practice note, one decision-trigger to watch. Unsubscribe in one click.
