Build a Supplier-Ready Business Document Pack

A business can have the skills, equipment and experience to deliver a contract and still struggle to complete the supplier onboarding process.

The problem is often administrative rather than operational.

A registration number may be incorrect. The preferred contact details on the supplier database may be outdated. A tax compliance status may need attention, or a required certificate may have expired.

These issues can delay onboarding and create unnecessary pressure when a quotation or procurement opportunity needs a response.

On 28 October 2026, the South African Revenue Service (SARS) published its new Supplier Onboarding and Management External Standard, effective from 27 October 2026.

The standard establishes a framework for prospective and existing suppliers who intend to register with SARS. It sets out relevant requirements involving the Central Supplier Database (CSD), CIPC and SARS tax registrations.

It also emphasises the importance of keeping supplier information accurate and current.

This makes November a useful time for small businesses to review their supplier records and prepare a structured document pack before an opportunity arises.

The objective is not to collect every document a government department might ever request. It is to understand the records that apply to your business, keep them current and make them easy to retrieve.

What is a supplier-ready document pack?

A supplier-ready document pack is an organised collection of business information and supporting documents that can be used during supplier registration, onboarding and procurement processes.

It usually contains two broad categories of information:

Registration and compliance information

These records help identify the business and establish whether the relevant registrations and compliance requirements have been met.

Capability and commercial information

These documents explain what the business provides, what it can deliver and why a prospective buyer should consider it.

They serve different purposes.

A company registration record may establish the identity of the legal entity, while a company profile explains its services and experience.

Neither should be confused with a tender response, which must address the specific requirements of an individual procurement opportunity.

1. Understand the new SARS supplier standard

SARS published the Supplier Onboarding and Management External Standard on 28 October 2026.

Its effective date is 27 October 2026.

The standard is intended to explain the mandatory pre-registration requirements for suppliers registering on the SARS Supplier Database.

It covers relevant requirements involving:

• CIPC registration for formally constituted legal entities.
• National Treasury's Central Supplier Database.
• SARS registration for applicable tax types.
• Other statutory or regulatory registration authorities where relevant.

The standard also explains that information which is inconsistent, invalid or non-compliant may prevent supplier registration, cause delays or result in exclusion from procurement processes.

An important distinction is that the document specifically describes supplier onboarding with SARS. It should not be treated as a universal checklist for every private-sector buyer, municipality or government department.

Individual procurement opportunities can have additional requirements.

However, the standard provides a useful reason for businesses that want to supply public-sector organisations to review their underlying registration information.

Read the SARS Supplier Onboarding and Management External Standard before relying on an older supplier checklist.

2. Prepare your legal entity information

The first part of a supplier pack should establish exactly who is providing the goods or services.

The information required depends on the legal form of the supplier.

For a registered company, relevant records may include:

• Company registration number.
• Registered business name.
• Current director information.
• Legal entity status.
• Registered and operating addresses.
• Authorised representatives.

For other supplier types, the relevant registration authority and supporting information may differ.

The SARS standard identifies several legal entity types, including companies, sole proprietors, partnerships, joint ventures, trusts and non-profit organisations.

For example:

Do not assume that a sole proprietor needs the same company documents as a private company.

Equally, do not use an old registration document if the business's legal status or particulars have changed.

Keep the information consistent across the CSD, SARS and other relevant registration systems.

3. Maintain an accurate Central Supplier Database profile

The Central Supplier Database is an important part of public-sector supplier registration.

National Treasury describes the CSD as a central source of supplier information for organs of state.

The database verifies supplier information with institutions such as SARS and the Companies and Intellectual Property Commission.

The official CSD registration guidance identifies information that may be required, depending on the supplier type.

This includes:

• Identification or company registration information.
• Industry classification.
• Supplier contact information.
• Address information.
• Bank account information where relevant.
• Tax information where relevant.
• Director or member information.
• Commodities supplied.
• Relevant accreditations.
• B-BBEE information.

One particularly important detail is the accuracy of commodity information.

The CSD uses the goods and services recorded on a supplier's profile to help procurement officials identify potential suppliers.

A business should select the commodities that accurately represent what it can provide.

Selecting every available category simply to increase the number of possible opportunities can create problems.

If the business is not equipped to supply a particular commodity, selecting it may result in enquiries that it cannot fulfil.

The same principle applies to delivery locations.

A supplier operating from Maboloka, Soshanguve, Centurion or surrounding areas should maintain accurate information about the locations it can genuinely serve.

Do not select locations or delivery areas merely because they appear commercially attractive.

Accurate information helps procurement officials identify relevant suppliers and helps the business avoid responding to unsuitable enquiries.

Keep your preferred contact details current

The CSD allows supplier information such as contact details and addresses to be maintained.

Check that the preferred contact information is still correct.

If a former employee's email address remains the preferred contact, an important procurement notification could go unnoticed.

If the business has moved or changed its authorised representative, update the relevant records.

The CSD states that registration is complete once a supplier number and a 36-digit Unique Registration Reference Number have been assigned.

Keep the registration report and reference information in the supplier document pack.

4. Keep your SARS tax information in order

Tax registration and tax compliance are important parts of supplier readiness.

The new SARS standard identifies applicable tax registrations, including:

• Income Tax.
• Value Added Tax, where applicable.
• Pay As You Earn, where applicable.

A business should confirm that its registrations reflect its actual circumstances.

Do not assume that every business needs every tax registration.

Where a third party needs to verify the business's Tax Compliance Status, SARS provides a Tax Compliance Status PIN.

The business can request its status through SARS eFiling or the SARS Online Query System.

The PIN allows an authorised third party to verify the current tax compliance status.

SARS explains that the result reflects the taxpayer's status at the date and time the PIN is used. This means it is not simply a permanent certificate of compliance that can be relied upon indefinitely.

See the official SARS guide to requesting a Tax Compliance Status and how third parties verify it.

A practical approach is to review the business's tax position regularly and know how to obtain a current PIN when an authorised buyer requests verification.

Never assume that an old printout or screenshot proves the business's current status.

5. Prepare the relevant B-BBEE documentation

B-BBEE documentation may form part of supplier onboarding or a procurement submission.

Depending on the business and the applicable requirements, this may be a valid certificate or a sworn affidavit.

The correct document depends on factors such as:

• Annual turnover.
• Ownership.
• Applicable B-BBEE codes.
• Industry or sector requirements.
• The procurement opportunity's specific conditions.

Do not assume that every small business qualifies for the same affidavit route.

The B-BBEE Commission's frequently asked questions explain the general treatment of different enterprise categories and the evidence required for relevant recognition levels.

Businesses should also check whether an applicable sector code changes the requirements.

Keep the following information organised:

• Current certificate or affidavit, where applicable.
• Relevant ownership information.
• Supporting records required for the applicable process.
• Expiry or review date.
• Details of the issuing or commissioning process.

Do not alter ownership percentages or turnover information to obtain a more favourable status.

A sworn affidavit is a formal declaration and should accurately reflect the business's circumstances.

6. Verify your banking information

Supplier banking information deserves particular attention.

The new SARS standard states that suppliers must ensure that bank account details on the CSD are accurate and verified.

It also states that SARS will make payments only to bank accounts verified through the CSD and will not accept alternative or manually supplied banking details.

This is an important reason to check the preferred bank account on the supplier profile before onboarding begins.

Keep a controlled record of:

• Bank name.
• Account holder.
• Account type.
• Account number.
• Relevant verification status.
• Date last reviewed.

Where a buyer requests additional banking evidence, provide only the information required through the buyer's approved process.

Be cautious of unexpected messages requesting changes to banking details.

A fraudulent supplier-bank-detail change can redirect payments away from the legitimate business.

If a request arrives unexpectedly, verify it through a trusted contact method rather than relying on the contact details in the message itself.

7. Create a professional company profile

Registration information establishes the identity of the supplier.

A company profile explains the business.

This is one of the most useful documents a small business can prepare because it helps prospective buyers understand what the organisation actually offers.

A practical company profile may include:

Business overview

A short explanation of the business, its purpose and the goods or services it provides.

Products and services

A clear list of what the business can supply.

Experience and capability

Relevant completed projects, previous contracts, technical skills and operational experience.

People and resources

A brief description of the team, equipment, facilities and other resources available to deliver the work.

Operating area

A realistic explanation of where the business can deliver goods or provide services.

Contact information

The correct business contact details and the person authorised to respond to enquiries.

Supporting evidence

Relevant references, photographs, project summaries, licences, accreditations or certificates where appropriate.

Keep the profile factual.

If the business is newly established, it should not invent a project history or claim experience it does not have.

It can instead explain the qualifications, skills and resources available to the business.

8. Organise capability evidence

A company profile is a summary. Capability evidence helps support its claims.

Depending on the business, this could include:

• Project completion records.
• Customer references.
• Product catalogues.
• Service specifications.
• Professional qualifications.
• Industry registrations.
• Relevant licences.
• Insurance documentation.
• Health and safety documentation.
• Equipment or resource lists.
• Quality-management records.

Not every supplier needs every item.

A consulting business will have different evidence from a construction contractor, manufacturer or transport provider.

The business should identify which documents are relevant to its industry and the types of contracts it intends to pursue.

A capability pack should make it easy for a prospective buyer to establish whether the business can deliver the required work.

9. Understand SARS's supplier registration process

The new SARS standard describes a two-step supplier registration process.

This is particularly important for businesses intending to become registered suppliers with SARS itself.

It should not be assumed that every other public-sector buyer uses precisely the same portal or activation procedure.

Step 1: Establish the required registrations

The standard identifies prerequisites that include:

• An active CSD registration.
• Active CIPC registration details for relevant formal legal entities.
• Registration with the appropriate authority where CIPC registration is not applicable.
• A valid SARS Income Tax number.
• VAT and PAYE registrations where applicable.

Successful CSD registration results in a supplier number, also known as an MAAA number.

Step 2: Register with SARS as a supplier

The SARS standard describes a registration process that uses the supplier's:

• MAAA number.
• Company registration number.
• Income Tax number.

Once the initial supplier registration succeeds, SARS generates a supplier number and sends account-registration information to the preferred contact email address recorded on the CSD.

The supplier then creates an administrator user for the SARS eProcurement Portal.

Final activation

The standard further explains that suppliers must submit an activation email to SARS with the subject line:

Activate ePortal Registration

It identifies the following supporting documents for that process:

• The latest Comprehensive CSD Registration Report.
• A valid and certified B-BBEE certificate or sworn affidavit, where applicable.

SARS reviews the information and activates the supplier account where the requirements have been met.

These steps are specific to the SARS process described in its new standard. Businesses should consult the current document and portal instructions rather than relying on an older third-party checklist.

10. Keep the document pack organised

A collection of documents is not particularly useful if nobody can find the correct version when it is needed.

Create a logical folder structure.

For example:

Supplier Documents/ ├── 01-Business-Registration/ ├── 02-CSD/ ├── 03-Tax-Compliance/ ├── 04-B-BBEE/ ├── 05-Banking/ ├── 06-Company-Profile/ ├── 07-Capability-Evidence/ └── 08-Tender-Specific/

Use clear filenames.

Examples include:

company-registration-details.pdf comprehensive-csd-report.pdf tax-compliance-status-record.pdf bbbee-affidavit-2026.pdf company-profile.pdf project-reference-example.pdf

The filename should identify the document without exposing unnecessary personal information.

If a document has an expiry date, record it in a simple register.

This helps prevent a business from discovering that an important document has expired only when it is needed.

11. Protect sensitive supplier information

A supplier pack may contain sensitive business and personal information.

Examples include:

• Director identification documents.
• Bank account details.
• Tax information.
• Ownership records.
• Contact details.
• Signatures.
• Supporting financial documents.

Do not distribute the entire folder whenever someone asks for one document.

Instead:

• Restrict access to authorised employees.
• Use secure storage.
• Share only the documents required.
• Verify the identity of the recipient.
• Avoid sending sensitive records through unverified channels.
• Remove access when an employee or contractor no longer needs it.
• Keep a record of important document disclosures.

POPIA section 19 requires appropriate, reasonable technical and organisational safeguards for personal information.

Where a third party processes personal information on behalf of the business, the business should also consider the applicable operator requirements under POPIA.

Read the Protection of Personal Information Act when establishing how supplier records and personal information should be protected.

12. Separate your supplier pack from your tender response

This distinction can save a business considerable time.

A supplier pack contains information that can be reused across suitable onboarding processes.

A tender response is prepared for a specific procurement opportunity.

A tender may request additional information such as:

• A project methodology.
• A delivery schedule.
• A technical proposal.
• A pricing schedule.
• Specific declarations.
• Proof of professional registration.
• Evidence of required experience.
• A signed returnable document.

The supplier pack does not replace these requirements.

Always read the individual procurement document and confirm which information must be submitted, in what format and by what deadline.

Do not assume that being registered on the CSD guarantees eligibility for a particular contract or that registration alone results in an award.

A practical supplier-readiness checklist

Before pursuing supplier opportunities, check that:

• The business's legal registration information is correct.
• Director or member details are current where applicable.
• The CSD profile is active and complete.
• Preferred contact details are monitored.
• Commodity selections accurately represent the business.
• Delivery locations are realistic and current.
• Bank details are accurate and verified.
• Applicable tax registrations are in place.
• Tax compliance can be verified when required.
• Relevant B-BBEE evidence is current.
• The company profile reflects actual capabilities.
• Supporting project evidence is organised.
• Accreditations and licences are current where applicable.
• Sensitive documents are stored securely.
• Expiry and review dates are recorded.
• Tender-specific requirements are checked separately.

Business documentation:

If your business needs to review how its documents are organised and presented, start with a Mogen assessment to discuss your current requirements.

Frequently asked questions

Is CSD registration required for public-sector suppliers?

The new SARS external standard states that organisations and individuals intending to supply goods or services to organs of state must register on the National Treasury CSD. Suppliers should also check the specific requirements of the procurement opportunity.

Does CSD registration guarantee that I will receive a tender?

No. Registration provides supplier information for procurement processes. It does not guarantee that a business qualifies for a particular opportunity or will be awarded a contract.

Do all businesses need a B-BBEE affidavit?

No. The appropriate evidence depends on the business's circumstances and the applicable B-BBEE requirements. Some businesses may require a certificate or other verification. Check the relevant codes and procurement conditions.

Is a Tax Compliance Status PIN a permanent certificate?

No. SARS explains that a third party using the PIN sees the taxpayer's status at the date and time of verification. Businesses should maintain their tax affairs and provide a current PIN when required.

Does the new SARS supplier standard apply to every department?

The published standard specifically describes supplier onboarding with SARS. It also states the CSD requirement for suppliers intending to provide goods or services to organs of state. Other departments and buyers may have their own onboarding and tender-specific procedures.

Can a sole proprietor register as a supplier?

Yes. The CSD and SARS standard recognise individuals and sole proprietors as potential suppliers. Their registration information differs from that required for formally incorporated companies.

Explore current offers:

Visit the Mogen promotions page to review currently published offers before planning your next business documentation project.

Conclusion

Supplier readiness is not simply about having a company registration certificate saved on a computer.

It involves maintaining accurate registration information, keeping tax and other applicable compliance records current, ensuring that the CSD profile reflects the business correctly and preparing evidence of what the organisation can actually deliver.

The new SARS Supplier Onboarding and Management External Standard gives businesses a timely reason to review these arrangements.

Start with the records that apply to your legal entity. Confirm your CSD information, review tax compliance, organise relevant B-BBEE evidence and prepare a factual company profile supported by capability documents.

Keep the information secure and establish a regular review process.

When an onboarding request or procurement opportunity arrives, a well-organised supplier pack can help the business respond more confidently and avoid preventable administrative delays.

Sources

• SARS: Supplier Onboarding and Management External Standard, effective 27 October 2026
• SARS: Announcement of the Supplier Onboarding and Management External Standard, 28 October 2026
• National Treasury: Central Supplier Database Registration Guidance
• SARS: How to Request Your Tax Compliance Status
• SARS: How to Verify Tax Compliance Status
• B-BBEE Commission: Frequently Asked Questions
• South African Government: Protection of Personal Information Act 4 of 2013