Built for South African accounting, tax & company-secretarial practices
FIC logoINFOREG logo
Compliance pack

FICA, POPIA and governance filings, evidenced

FIC registration and goAML, the Information Regulator, NPO annual reports, trusts at the Master's Office, professional-body renewals and Stats SA surveys.

What it does

One engine, tuned for this regulator

For the obligations nobody bills for

Recurring governance work — risk reviews, registrations, annual reports — gets the same owner, checklist and reminder treatment as a tax return.

Client onboarding checklist

Each client carries an onboarding checklist for items such as the engagement letter, FICA verification, POPIA consent and beneficial ownership, so you can see at a glance who is incomplete.

Dates calculated, not typed

Due dates come from each client's year-end, VAT category, incorporation date or certificate expiry — rolled off weekends and public holidays — and are scheduled 13 months ahead.

A checklist on every filing

Each obligation opens with the working steps and the documents you need from the client, an owner, a status, comments and the submission reference once it is filed.

Reminders that escalate

Staff are reminded as the date approaches and daily once it is overdue; client reminders are optional per firm. Every reminder is logged, and nothing is sent twice.

Registration numbers and expiry dates

Keep the client's reference numbers, certificates and expiry dates for this regulator in one place, with a health status for anything about to lapse.

How it works

From client profile to filed return

Switch the pack on

It is included in your plan or added as a monthly add-on from Settings → Plan & modules.

Pick the services per client

The product suggests the services that fit the client's entity type, registrations and employees; you confirm.

The calendar fills itself

Obligations are generated 13 months ahead and topped up automatically as time moves on.

Work, file, close

Tick off the checklist, record the reference number, attach proof and mark it submitted.

What is tracked

26 services across 6 bodies, straight from the live catalogue

This is the actual list inside the product, with the rule each due date is calculated from. It is maintained centrally, so when a rule changes every firm gets the update.

Financial Intelligence Centre (FICA, goAML)www.fic.gov.za
4 services
ServiceHow oftenHow the due date is worked out
FIC goAML registrationRegister the accountable institution and compliance officer on goAML. Once-off Within 90 days of commencing business as an accountable institution.Administrative sanctions.
RMCP annual review, screening and trainingReview the Risk Management and Compliance Programme, employee screening (Directive 8) and FICA training. Annual Practice control: annual review.Sanctions up to R50m for legal persons.
FIC Risk and Compliance ReturnSubmit the RCR when called for by FIC directive. Annual Per FIC directive - 2026 window 4 May to 30 June / 31 July depending on sector [verify each year].Administrative sanctions under s62E.
FIC regulatory reports (CTR / STR / TPR)File cash threshold, suspicious transaction or terrorist property reports. Event-driven CTR within 3 business days; STR within 15 days; TPR within 5 days.Criminal and administrative sanctions.
Information Regulator South Africa (POPIA / PAIA)inforegulator.org.za
4 services
ServiceHow oftenHow the due date is worked out
Information Officer registrationRegister or update the Information Officer and deputies on the eServices portal. Once-off On appointment and on any change.
PAIA manual and POPIA compliance reviewReview the PAIA manual, privacy notices and POPIA compliance framework. Annual Practice control: annual review; manual must be kept up to date.Fines / enforcement notices.
PAIA annual report (s32 / s83(4))Annual report on access-to-information requests for the year to 31 March. Annual Portal open 1 May to 30 June each year.Enforcement action against the body / Information Officer.
Security compromise notification (s22)Notify the Regulator and data subjects of a security compromise. Event-driven As soon as reasonably possible after discovery.
Department of Social Development - NPO Directoratewww.npo.gov.za
3 services
ServiceHow oftenHow the due date is worked out
NPO annual narrative and financial reportAnnual report to the NPO Directorate (enable manually for NPCs and trusts registered as NPOs). Annual Within 9 months after financial year-end.Non-compliant status and deregistration.
NPO change of office-bearers / constitutionNotify the Directorate of changes. Event-driven Within one month of the change.
NPO registrationRegister a nonprofit organisation. Once-off Once-off.
Master of the High Court (trusts)www.justice.gov.za/master
5 services
ServiceHow oftenHow the due date is worked out
Trust registration (J401, J417, J405)Register an inter vivos trust with the Master. Once-off Once-off.
Trustee changes / amended Letters of AuthorityAppoint or remove trustees and obtain new Letters of Authority. Event-driven Event-driven; trustees may not act without authority.
Trust beneficial ownership register lodgementLodge or update the BO register on the Master's portal. Event-driven Since 1 April 2023; update whenever BO information changes.Fine up to R10m and/or 5 years imprisonment.
Trust BO register annual reviewAnnual review of the beneficial ownership and accountable-institution registers. Annual Practice control: annual review.
Trustees' annual meeting and resolutionsApprove AFS, distributions and s7C loan interest by resolution. Annual Practice control: within 6 months after year-end.
SAICA, SAIPA, SAIT, CIBA, IRBA, ECSA, SACAP, LPC and SARS practitioner statuswww.saica.org.za
9 services
ServiceHow oftenHow the due date is worked out
SAICA annual fees and CPD declarationCA(SA) membership fees and annual CPD reflective declaration. Annual Fees invoiced for the calendar year, due January [verify]; CPD declaration annually.Suspension of membership.
SAIPA annual fees and CPDProfessional Accountant (SA) fees and CPD (120 hours over 3 years). Annual Membership year January to December [verify].
SAIT annual fees and tax CPDSAIT membership and minimum 15 tax CPD hours. Annual Membership year January to December; CPD by 31 December [verify].Loss of tax practitioner status.
CIBA annual fees and CPDCIBA membership renewal and CPD. Annual Membership year January to December [verify].
IRBA annual fees and returnsRegistered auditor annual fees, individual and firm annual returns. Annual IRBA year starts 1 April [verify due date].Registration lapses.
ECSA / SACAP annual fees and CPDEngineering and architectural professional registration fees and 5-year CPD cycle. Annual Annual fees per council [verify].
SARS tax practitioner status checkConfirm RCB membership, personal tax compliance and PR number status. Annual Practice control: annual check; practitioners must stay tax compliant and RCB-registered.Deregistration as tax practitioner.
LPC trust account audit and Fidelity Fund certificateAttorneys' trust account audit report and annual FFC application. Annual Audit report within 6 months of the February year-end; FFC applied for annually.May not practise without an FFC.
Professional membership renewal (generic)Track any professional membership or practising certificate expiry. Annual Per professional body.
Statistics South Africa business surveyswww.statssa.gov.za
1 service
ServiceHow oftenHow the due date is worked out
Stats SA business surveyComplete compulsory Stats SA surveys (QFS, AFS, QES, monthly surveys). Quarterly Per questionnaire due date - typically within a month after the period [verify].Offence under the Statistics Act.

Statutory rules are summarised for planning; always confirm against the regulator's current notice. You can add your own services to any client alongside these.

Good to know

Questions about Governance & AML Pack

Each service carries a statutory rule — a day of the following month, an offset from the client's financial year-end, the anniversary of incorporation plus business days, fixed calendar dates, the client's VAT category, or the expiry date of a registration. The engine applies the rule to the client's profile and moves dates that land on a weekend or a South African public holiday. You can always override a single due date by hand.
Yes. Add your own service with its own frequency and due-date rule under Compliance → Service Catalogue. It appears on the same calendar, gets the same reminders and can carry its own checklist and required documents.

Try Governance & AML Pack with your own clients.

Every trial includes all the modules in the plan you pick. No card required.