CIPC is deregistering CCs, and what else quietly expires

Something in your business expires this year and nobody owns the date. That is the ordinary version of what CIPC has just published in its extreme form: a section 82 notice naming companies and close corporations being deregistered for unfiled annual returns. Certificate expiry tracking in South Africa exists because of the gap between those two sentences.

The deregistration is not the interesting part. The mechanism behind it is.

What CIPC published

CIPC has issued Publication 2026-1508, a notice in terms of section 82 of the Companies Act relating to annual return deregistration of companies and close corporations.

The names sit in a document you download from that page rather than on the page itself, and no date is shown against the publication. Open it and look for your own entity.

The shape of the thing is not in doubt. An obligation that recurs annually, a filing that did not happen, and an administrative consequence that arrives without anybody phoning you first.

A deregistered entity cannot contract, cannot bank normally and cannot bid. For a business that supplies a corporate or the state, it is also the fastest possible way to fail a supplier vetting check, because the counterparty checks CIPC status automatically and nobody reads the reason.

The annual return is the easiest compliance item in South African business to complete and one of the most commonly missed. It is missed for exactly one reason, which is that it belongs to a date rather than to a person.

The same week, a second lesson

CIPC also published Notice 41 of 2026, confirming an eServices update that now rejects a duplicate email address or cellphone number already attached to another customer profile.

Read that as an operations item and not an IT one. Plenty of small businesses run their CIPC profile, their accountant's profile and a second entity's profile off one email address and one cellphone number, usually the owner's. That arrangement now breaks at registration or at a profile update.

It is a small change with a familiar consequence. The credential that ties you to a regulator was shared, undocumented, and held by one person, and the day it stops working is the day you need it.

What else expires on a date nobody owns

Write the list for your own business and it is longer than you expect.

• The annual return, and the tax clearance status
• The letter of good standing from the Compensation Fund
• B-BBEE certificate or sworn affidavit
• Sector registrations such as PSIRA, or a licence for a regulated trade
• Public liability cover and vehicle insurance
• Lease renewals and their notice periods
• Vehicle licence discs and roadworthy certificates
• Employee competency certificates, first aid, forklift, firearm
• Software licences and domain names
• Bank mandates and signing authority after somebody leaves

Each of those has a date. Almost none of them has a person, a reminder or a place where the current certificate is filed, and the ones that do usually have all three in the head of the office manager.

That is not a compliance problem yet. It becomes one on a single day, usually when a customer asks for the document before releasing a payment.

An asset register with dates in it

The artefact that fixes this is boring and cheap, which is why nobody builds it.

It has five columns.

• What the thing is
• Which entity, vehicle or person it attaches to
• The expiry date
• The named person responsible for renewing it
• Where the current certificate lives, meaning a link or a folder rather than a drawer

Add one rule and it starts working: the reminder fires before the lead time, not on the day. A tax clearance takes longer than you remember, and a letter of good standing depends on returns being up to date. A reminder on the expiry date is a reminder that you are already late.

Add a second rule and it survives: the register is the only place the certificate lives. If the current copy is also on a laptop and in an email thread, three versions exist and the one somebody sends to a customer will be the old one.

Most businesses already have somewhere to put this. Accounting packages carry documents, job systems carry compliance fields, and shared drives carry folders. Connecting the register to the systems that already know when a vehicle was licensed or an employee was certified, so the dates maintain themselves rather than being retyped, is the work Zorah does. The register is worth having even before that, on a spreadsheet, today.

The reinstatement arithmetic

There is a cost argument here for anybody who thinks this is administrative fussiness.

A missed annual return costs a filing fee and a penalty. A deregistration on top of it costs the reinstatement process, the time of whoever runs it, and the period during which the entity cannot transact normally.

Reinstatement is a form CoR40.5 and a R200 filing fee, which sounds trivial until you read the rest. You have to prove the entity was trading when it was deregistered, usually with bank statements spanning that date, or that it owns immovable property, or produce a court order. Then every outstanding annual return has to be filed before the reinstatement is complete.

The tender you could not bid for during that window does not appear on any invoice, which is why this cost is always understated.

Set against that, the register takes an afternoon to build and about ten minutes a month to maintain. There is no version of this arithmetic where the register is the expensive option.

What to do on Monday

Check your own CIPC status first, at the source rather than from memory, and check the annual return filing date for every entity you own including the dormant one.

Then write the five-column list for the ten obligations you can name without research. The tenth one is usually the one that catches you. Put it where the asset and compliance side of the business can see it. If you run a security company juggling PSIRA registrations and competencies, start with the certificates a client can ask for at the gate.