The tour

Four regulators. One workspace. The four modules, in detail.

Komply is the South African compliance OS: SARS, website scans, B-BBEE and FSCA in one workspace, with a monthly website scan, scores that update with your records, and a digest on the 1st. Built by a CA(SA). This page walks you through what each module does, the tender-readiness page beside them, and what subscribing actually buys.

Claim my pilot seat See pricing

Komply is free for everyone during the pilot. Standard pricing applies after the pilot; the first 25 companies to sign up keep the R5,000 setup fee waived and get their first month free on a monthly plan.

Modules

The four modules

01SARS

SARS Submissions

Catch the 2026 tax-reference-number (TRN) rejection rule before SARS does.

For: Businesses filing VAT201, EMP201, EMP501, IRP6, or ITR14 returns. With Xero (on Pro; a South African organisation in rand, filing monthly or every two months), Komply adds up the VAT201 figures daily from your invoices and transactions (invoice basis).
What it does: Lists each return you add with its SARS due date (including the IRP6 and ITR14 dates), records the date you filed it (and SARS's reference number, if you add it) when you mark it submitted, and shows new SARS notices each week to owners and admins.
On Pro: Pro adds readiness scoring from the figures you enter; IRP5 cross-validation that flags the 2026 TRN-rejection rule before you file; a read-only Xero connection (a South African organisation in rand, filing monthly or every two months) that adds up the VAT201 figures daily from your invoices and transactions (invoice basis), reads the reconciliation and evidence points from Xero (what Xero marks reconciled, and your suppliers' VAT numbers) and re-reads earlier periods to catch books changed after you filed; a pre-filing check of each Xero-synced VAT201's documents (zero-rated exports, import VAT and input VAT with no attachment in Xero) and of each certificate in an EMP501's e@syFile export (UIF against its ceiling, SDL against 1% of the pay it shows, PAYE against a range from SARS's tables); VAT refunds matched to Xero deposits that reference SARS, with the 30/60/90-day escalation path (SARS follow-up, a complaint to the SARS CMO, then the Tax Ombud); EMP501 reconciliation from the figures you enter; and the verification-response tracker (a countdown to the due date) with the evidence pack, the files attached in Xero to a VAT201 period's documents, packed for eFiling's upload limits.

02Website scans

Website Scans

A scan every month, a score, and what to fix.

For: Every SA business holding customer data. Foundational — runs on every tier.
What it does: Scans your primary domain monthly for privacy-policy completeness, whether a cookie-consent banner exists, the data-subject-request (DSR) mechanism, and cross-border transfer disclosure. Findings are scored, severity-tagged, and tracked over time. The Information Regulator's enforcement notices and gov.za's POPIA notices are read weekly and shown to owners and admins in your workspace.
On Pro: Pro adds on-demand scans across up to 5 domains, one-click remediation artefact generation (privacy policy text, cookie banner code, DSR notice, Information Officer designation block), and SEO, generative-engine, performance, and accessibility and UX checks on every scan. Security and email-security checks run on every tier.

03B-BBEE

B-BBEE Scorecard

An indicative scorecard on the Amended Codes, plus, on Pro, the gap analysis your verifier won't run.

For: QSE (over R10M and under R50M) and Generic (R50M or more) entities preparing for SANAS-accredited (South Africa's national accreditation body) verification. EMEs classified automatically, with the affidavit position shown. Sector codes, such as Tourism's, set their own turnover bands.
What it does: Auto-classifies you as EME / QSE / Generic by turnover, models every scorecard element in simplified, indicative form, drops a level when a priority element misses its floor, counts ownership held through other companies (Modified Flow-Through), and lets you run year-on-year period comparisons. Six sector codes (AgriBEE, Construction, the Financial Sector Code, ICT, Property and Tourism) and the Mining Charter are scored at indicative grade, each code on its own turnover bands. B-BBEE Commission and gov.za notices are read weekly and shown to owners and admins in your workspace.
On Pro: Pro adds the gap analysis (spend levers ranked by rand per point; structural levers listed unpriced), a 3-year trajectory simulator, an evidence PDF for your verifier, and a read-only share link, with the PDF downloadable from it, that expires after 30 days.

04FSCA

FSCA Tracker

The audit-prep suite: the Internal Compliance Monitoring Programme (ICMP) report, drafted from your registers for sign-off.

For: Category I advice FSPs with 1–25 Key Individuals (KIs) and Representatives. Other categories can keep their registers in Komply; scoring follows Category I, and the ICMP report cadence follows your category.
What it does: Per-KI / per-Rep CPD ledger against the BN 194 cycle targets (sections 31 to 34). Complaints register tracked against Komply's own targets (5 working days to acknowledge, 20 to resolve), excluding SA public holidays. Conflict-of-interest register. A one-page material-change letter to the FSCA, logged when you add a representative. Debarment-check record at every new KI / Rep hire, linked to the FSCA register. FSCA notices are read weekly and shown in your workspace.
On Pro: Pro adds the audit-prep suite: a drafted annual ICMP report and its PDF for your compliance officer's review, the FAIS Ombud response bundler (chronology, narrative and evidence list), the COI Management Policy generator (5 starter templates by FSP category), and a cyber-incident log for the FSPs Joint Standard 2 of 2024 covers.

FSCA is the wedge for FSP-licensed firms. Komply Pro at R3,500/mo drafts the annual ICMP report and covers SARS, website scans and B-BBEE in the same subscription.

Tender readiness

The proofs a buyer asks for. One link to send.

Tender readiness

Tender Readiness

One page beside the four modules, on every plan; not a module of its own.

For: Any business that bids for work.
What it does: Puts your proofs of good standing side by side, with a clock on each one that expires. The SARS Tax Compliance Status, a B-BBEE certificate or sworn affidavit and the COIDA Letter of Good Standing always count; an Employment Equity certificate (s53) and your CSD registration count for government work, and your CIDB grading for public-sector construction. Komply counts the proofs that apply to you, says how many are current, and answers Tender-ready, Renew soon or Not ready. Employer records (UIF declarations, returns of earnings, EE reports and the five-year clock on your COIDA earnings records) sit beside them and don't count towards the answer.
For the buyer: One read-only link and a PDF, opened without a Komply login. Each proof shows as it stands on the day, with where its date came from; never your B-BBEE scorecard, who made an entry, or a file you uploaded. Every open and download is logged, and the link lasts 30 days unless you revoke it sooner. Komply records what you enter and looks none of it up.

Pricing

Three ways to buy.

Bundle the full Compliance OS, subscribe to a single module, or drop in for one cycle with a once-off audit pack. No contracts. Cancel any time — your access continues to the end of the current paid period.

Pricing: Starter R750 · Pro R3,500 · Enterprise R7,500 — full details on the pricing section.

Pilot

Try it on your own books.

The four modules are live, and Komply is free for everyone during the pilot: sign up with your work email and set up your workspace.

Claim my pilot seat Email for a 20-min demo

Built by Matt Owen, CA(SA), founder of Auto Alpha Advisory. Regulator notices are read every week and shown in your workspace, most with a short machine-written summary; the ruleset is updated by hand against the primary sources.