Google switched on an agent that can read your CRM for every Gemini user, five companies heard about breaches from their suppliers, and the procurement law fell: a week about who acts for you.

The Constitutional Court struck down the Public Procurement Act, and what a tender is bid under this month is now a question to ask, not assume. The ruling landed on 17 September. The City of Cape Town's case was that the Act was passed unlawfully, with insufficient public participation and parliamentary process, including that seven of nine provinces had no lawful final mandate to vote on it in the NCOP, and the court awarded costs against the President, the Finance Minister and the Speaker. What had not been reported by Thursday is the remedy: whether the declaration of invalidity is suspended, and for how long. If you sell to the state, every open bid and every contract awarded this year needs a line saying which rules it was evaluated under and on what date, because the judgment decides what replaces them and your file has to survive either answer. (BusinessTech, Infrastructure News)

The breach notices this week came from suppliers, not from the companies whose customers were exposed. EasyEquities and Satrix, Bidvest Bank, and the customers of insurers served by MIP Holdings, whose number TechCentral put at 45, were all notified of incidents at a third party; ITWeb adds Cell C and Alexforbes to the list, and Cartrack, itself the target of the ransomware attack reported last week, began warning customers whose data may have been exposed. Bidvest said it does not yet know which customers are affected or what was accessed, and Hollard's position was that it was not hacked, its supplier was. Under POPIA the supplier is an operator and you remain the responsible party, so the notification to the Regulator and to your customers is yours to make whatever the contract says. The question the week asks is whether you could list, today, which suppliers hold your customers' data and what each one holds. (Moneyweb, TechCabal, MyBroadband, TechCentral, ITWeb)

CIPC now refuses an email address or cellphone number that is already on another customer profile. Notice 41 of 2026 says the check runs at registration and at every profile update, with no transition period: the instruction is to use a different address or number. It lands on any accountant, company secretary or director who runs several companies' filings off one inbox, and the failure shows up at the next update rather than today. The record to make is which address and which number each entity's profile sits on, and who holds them. The self-service centres in Cape Town and Pretoria and the Durban kiosk were closed on Friday 18 September and reopen on Monday 21 September at 08:00. (CIPC)

Capitec was fined R28 million and Ninety One Assurance R6 million, over inspections that happened in 2023. Moneyweb calls it administrative non-compliance and BusinessTech calls it five financial-crime compliance failures; the rand figures agree and the framing does not. The same week Directive 12, on the submission of risk management and compliance programmes, was published in Government Gazette 55337 under section 43A(1) of the Financial Intelligence Centre Act. Who must submit, in what form and by when were not in the reporting, so read the gazette before acting on it. The point that survives either story is that a programme written years ago and never tested against what the business actually does is the one that costs money later. (Moneyweb, BusinessTech, GoLegal)

October fuel is pointing at a record, and the country holds about thirteen days of crude. The Central Energy Fund snapshot of 10 September points to petrol 95 up R2.14 a litre to R29.06, above the June 2026 record of R28.06, petrol 93 up R2.02, diesel 0.05% up R1.71 and diesel 0.005% up R2.05. Brent went back above $100 after Saudi Arabia shut its East-West pipeline and Houthi forces took ground at the Bab al-Mandeb Strait. South Africa holds about 8 million barrels at Saldanha Bay against a need of roughly 600 000 a day, which is thirteen days, or about eighteen counting Sasol's coal-based output. The snapshot is a forecast; the adjustment lands in the first week of October. (Stuff South Africa, BizNews)

A subcontract that says disputes go to mediation first cannot be skipped on the way to adjudication, even to get paid. In Superway Construction v Cape Metal Windows Servicing, a full bench of the Western Cape High Court set aside an adjudicator's award on 13 August because clause 25.4 of the subcontract said disputes were to be resolved in the first instance by mediation, and the adjudication went ahead without it. The court called mediation an indispensable jurisdictional gateway. For a subcontractor chasing a payment claim, the boilerplate clause nobody read at signing now sets the order of the steps and their cost. Read the dispute clause on every live contract before the next dispute, not after. (Werksmans)

ClickFix has gone mainstream, and this week the fake page arrived through HBO Max's own advertising account on Reddit. Attackers hijacked the account and ran ads pointing to fake HBO Max pages with CAPTCHA-style prompts that told visitors to paste a command into Command Prompt, PowerShell or Terminal; the command installed infostealers after passwords, active sessions and wallets. Reddit paused the ads three days after a user flagged them. Ars Technica's read is that users have been so worn down by interstitials and endless CAPTCHAs that a ridiculous instruction no longer reads as one. The control for a business of forty is a sentence, not a product: nobody pastes a command a website gave them, and anyone who did says so the same hour. (Ars Technica, TLDR InfoSec)

Salesforce went down worldwide on 16 September, and Google Drive was out for 37 minutes the same day. Salesforce blamed increased load on a core system component; the effect was delays, errors and access failures across regions. Neither outage is unusual and that is the point: a business that runs its customer list and its documents on two platforms has an afternoon a year where both are gone. The useful question is what the sales desk does for three hours with no CRM, and whether the answer is written down or is a printed list from last month. (TLDR IT)

Advertising is moving inside the AI answer, and one provider has already tried it and stopped. OpenAI announced Sponsored Agents, where clicking an ad in ChatGPT starts a conversation with a business's own agent, alongside AI-assisted ad creation and HubSpot and Shopify integrations. Google is testing sponsored answers inside Gemini conversations. Perplexity tested sponsored conversations and discontinued them. For a South African operator the meaning sits on both sides of the counter: if your customers ask a chatbot which supplier to use, the answer can now be bought, and whether your own price list is one a machine can read has a price on it. (TLDR AI, Stuff South Africa)

Software licensing is moving off the seat and onto the meter. The read from Dreamforce is that enterprise software is being reached through agents and conversational interfaces rather than screens, and the bill is following: agent usage, calls and consumption pricing in place of a predictable per-seat figure, with buyers gaining flexibility and losing cost predictability. A separate essay argues software got dearer as AI got cheaper because scope grew and inference is metered. For forty staff the next CRM quote will have two lines, the seats and the meter, and the question to ask before signing is what is metered, per what, and with what cap. (TLDR IT)

Revolut handed over customer records to fraudulent requests that arrived from a genuine government email domain. The exposed records included identity and contact details, passports or driving licences, and possibly verification selfies, statements and transaction histories. Revolut says a limited number of customers were affected and that it notified them, the agency, the police and regulators. A request from a real domain is not proof of a real request. Any business that answers subpoenas, SARS queries or police requests by email needs a second channel to confirm the sender before the file goes out. (TLDR InfoSec)

The EU's watermarking rules give systems already on the market until December 2026, and text under about 150 words is exempt. Google already marks with SynthID and Anthropic has said future Claude models will carry Google's open-source SynthID-Text, so the mark arrives here whether or not any South African law asks for it. New research this week found that watermarking changes which tools a model calls and how well it holds its guardrails under an adversarial prompt. The 150-word line and the December date come from two education academics reading the EU Code of Practice, republished by Stuff, not from the regulation, so treat them as a reading until confirmed. The consequence stands either way: a tender response drafted in a mainstream model will carry a mark, a two-line WhatsApp will not, and the mark cannot tell writing from editing, so keep the edit record. (Stuff South Africa, Ars Technica)

Gemini in Google Workspace now connects to Salesforce, HubSpot, Asana, Monday, QuickBooks, Mailchimp and Atlassian Rovo, and the connectors are on by default. The integrations run over MCP from Gmail, Docs, Drive, Sheets and Chat for every user with Gemini access, and administrators can restrict them by domain, organisational unit or group. For a business of forty on Workspace this changes something today whether or not anyone decided it: the model can read the CRM record under the user's existing permissions. Xero and Sage are not on the list, so the accounts connector is QuickBooks only. The translation below takes this one through. (TLDR IT)

Google also shipped Workspace skills: a prompt, rules, templates and reference material packaged so Gemini runs the same procedure the same way each time. Teams edit a skill like a document; central governance and Admin console distribution are described as coming. For forty staff this is the quote follow-up or the job-completion note done identically by everyone, which is worth having. The catch is that the rate card inside a skill is a copy, and copies drift, so whoever owns the price list owns the skill too. (TLDR IT)

Salesforce in Claude is in beta on every paid Claude plan, with 38 skills and the seller's existing Salesforce permissions. It brings accounts, opportunities and pipeline into Claude for account research, call prep, pipeline review and CRM updates, and it reaches South Africa because a paid Claude plan does. It changes something only if you run Salesforce, and the line to remember is that the plugin's permissions are the seller's permissions: if those are wider than they should be, so is the model's view of your customers. (TLDR Founders)

Claude Docs and Slides produce an editable document or presentation you can present from Claude or download as PowerPoint or PDF. Pro and Max plans get it over the next few weeks, Team and Free after, and enterprise administrators get at least 30 days' notice before anything changes; Cowork and chat are merging into one Claude at the same time. For forty staff it is the client proposal from a one-page brief this afternoon, and the rule that makes it safe is that every number in the deck comes from the rate card, because a deck that looks finished with a made-up figure on slide six is worse than no deck. (TLDR AI)

HubSpot added central control over which apps and AI connectors can be installed, by whom, with access to what. Admins can require approval, use narrower OAuth scopes, restrict MCP access to company-provisioned accounts, read app activity logs, and get a warning when deactivating a person who owns an integration. That last one is the feature for a small business: the automation that quietly stops working three weeks after somebody's last day because it was running on their login. If you run HubSpot, open the new settings and see who owns what. (TLDR IT)

Google Workspace has a built-in migration from Microsoft 365, and it stops at ten users. The setup workflow discovers Microsoft users and moves mail, OneDrive files, calendars, contacts and tasks, with automated migration currently limited to ten Microsoft accounts. For a business of forty that is a pilot team, not the company, and a move of that size is a records decision before it is a licensing one. If you have wanted to run one team on Workspace for a quarter to see, though, the cost of trying just fell to an afternoon. (TLDR IT)

Meta released a WhatsApp Business MCP server so AI coding agents can do the setup, message templates, testing and troubleshooting of an integration. TechCrunch reported the launch; what it covers and whether a business without a developer can use it at all was not in the reporting, so treat it as something a provider can now do for you faster rather than something to install. What it confirms is that the template is the unit of WhatsApp for business. Our guide to the API and what it costs here went up on 17 September: marketing messages about R0.62 apiece, utility and reply messages about R0.15 from 1 October, at R16.24 to the dollar. (TechCrunch) Read →

What shipped. On 17 September Google switched on connectors from Gemini in Workspace to Salesforce, HubSpot, Asana, Monday, QuickBooks, Mailchimp and Atlassian Rovo, reachable from Gmail, Docs, Drive, Sheets and Chat. The admin detail is the item: third-party connectors are enabled by default for every user who has Gemini access. An administrator can turn them off by domain, organisational unit or group. Nobody has to turn them on.

What it costs. Nothing new on the invoice. It sits inside the Workspace plan that already includes Gemini, and this issue does not put a rand figure on that plan because none was confirmed this week. The cost is elsewhere. A customer record now leaves the CRM for a model every time somebody asks Gemini about a deal from Gmail, and that is a POPIA decision the business makes once, as an administrator, rather than one each user makes forty times a day without knowing it.

What it means for forty staff here. Most businesses this size on Workspace have no administrator in the sense Google means; there is a person with the admin login. That person now owns a live decision. The pattern underneath is not new: a Deloitte survey of UK workers, not South African ones, found 63% have used generative AI for work, 31% without their employer's knowledge and 17% paying for a tool themselves. The connector release moves the question from what staff bring in to what the platform switched on.

What blocks it locally. Xero and Sage are not on the connector list, so for most South African books the accounts side is QuickBooks only, and the CRM side needs Salesforce or HubSpot. The connector also inherits the platform's availability: Salesforce was down for much of 16 September, so on that afternoon the connector was too. And the record it reads is only as good as the field somebody typed. An agent asking HubSpot which customers are late gets the answer the invoice field holds.

What to do about it. Open the Admin console before Monday. List which third-party connectors are on (all of them, by default), decide per group which stay on, and write one line per connector saying what it may read. That page is the first entry in the walkthrough below, and it takes less time than explaining afterwards why a customer's record was in a model nobody had approved.

1. Open three months of bank and card statements. List every software subscription and every supplier that receives data from you. Who holds your data starts with who you pay.

2. Add the ones nobody pays for. Free tiers, trials, and the tools staff pay for themselves. Ask each team lead for one line; the answer will be longer than expected.

3. Beside each, write what it holds. Customer names, staff pay, bank details, vehicle locations, or nothing. One or two words.

4. Mark the ones that can act, not only store. Send an email, make a payment, change a record. Draw a line under those.

5. For every one that can act, write who switched it on. Then write who can switch it off. Where both answers are the same person, note who else could.

6. Open every admin console you have and write down what is on by default. Workspace, HubSpot, the accounting package. Do not change anything yet; record it.

7. Find the breach clause in each supplier's contract. Does the supplier have to tell you, and within how many hours. Write none where there is none.

8. Circle every supplier holding customer data with no clause. Those are the rows this week's notices came from.

9. Put one name and a review date on the page. Ninety days out, in that person's calendar.

10. Send it to whoever would answer the Information Regulator. A list only the admin has read is a list that works only while the admin is in the building.

Forecast on the days customers actually take, not on the terms. SME South Africa's cash flow piece has the line worth keeping: if you keep forecasting payment at 30 days and the real average is 43, use 43. Its worked example is a business opening the month with R85 000, expecting R120 000 in and R128 000 out, where the month turns entirely on which week the R100 000 lands. Track the date money reaches the bank against the invoice date, per customer, and the forecast starts telling the truth.

Tag every payroll line now as in or out of a severance calculation. SME South Africa reproduces the Government Notice 691 of 2003 list: housing allowance, car allowance (unless it is only for getting to work), cash payments, employer medical, pension and provident contributions, funeral-scheme contributions and accrued leave count as remuneration; tools allowances, relocation, tips, share schemes, discretionary profit share, entertainment and education allowances do not. One week per completed year of service. The tag costs nothing while nobody is being retrenched and is the number nobody can produce once someone is.

Adopt the copyeditor rule for anything with your name on it. Thomas Ptacek's rule, via Simon Willison: you may not use a single word a model suggests. Use it to fact-check, spell, punctuate and occasionally find a synonym, and never to supply a phrase. For a tender cover letter or a quote's terms the reason is the record, not taste: the document stays yours, and the watermark question above stops mattering.

The cheap model never gets anything with a price, a date or a name in it. Across 50 pull requests OpenAI's cheaper model found 69 verified bugs for $0.20 and its capable one found 92 for $5.66, and the cheap one found fewer than half as many security bugs. A routed workload in a separate guide cost 11% of sending everything to the best model. Route the routine work to the cheap tier, keep the expensive one for the second kind, and write the rule down so the saving does not quietly become the risk.

Start the complaint file the day the first complaint arrives. The CCMA upheld the dismissal of a 22-year employee at Wits for sustained bullying because the record existed: multiple dated complaints from junior staff, a written policy aligned to the 2022 Code of Good Practice on harassment, evidence that training was withheld while performance was criticised, a counselling referral, and a pattern rather than an incident. Her denial counted as aggravating. A business of forty has none of that in one place; five records, with dates, is the whole file.