Templates
South African compliance templates you can start from today
Pick a document, fill in your details and download it. These are starting points written for South African law. They are not legal advice, so have an attorney review them before you rely on them.
HR and employment
Employment Contract (BCEA, permanent or fixed-term)
A written employment contract that includes the particulars an employer must give an employee under section 29 of the Basic Conditions of Employment Act: hours, pay, leave, notice, and a description of the work.
HR and employment
Leave Policy (South Africa)
A workplace leave policy that sets out annual, sick, family responsibility, maternity, parental, adoption and commissioning parental leave, and how to apply for and record leave, aligned with the Basic Conditions of Employment Act.
HR and employment
Disciplinary Code and Procedure
A disciplinary code and procedure for a South African employer, with informal correction, formal warnings, a fair hearing and appeal, built on the principles of the 2025 Code of Good Practice: Dismissal.
HR and employment
Grievance Procedure
A simple, fair grievance procedure that lets an employee raise a complaint about their treatment at work, with clear steps, time limits, confidentiality and protection from victimisation.
Health and safety
Health and Safety Policy
A written occupational health and safety policy, signed by the chief executive and displayed at work, setting out responsibilities, risk assessment, training, incident reporting and consultation under the Occupational Health and Safety Act.
Privacy and data
Acceptable Use Policy (IT and Internet)
A policy that tells employees how they may use company devices, email, internet and accounts, with rules on passwords, personal use, monitoring and consequences, written to work with POPIA and the Cybercrimes Act.
Privacy and data
Information Security Policy
A practical information security policy that sets out how your business protects information: access control, passwords, encryption, backups, devices, suppliers, incidents and training, in support of POPIA section 19.
Contracts
Mutual Non-Disclosure Agreement (South Africa)
A two-way confidentiality agreement for two South African businesses that will share confidential information while they explore a deal or work together. Fill in the details, download it, and have an attorney review it.
Contracts
One-Way Non-Disclosure Agreement (South Africa)
A confidentiality agreement where one party shares information and the other promises to protect it. Typical for a supplier, contractor, investor or prospective employee who needs to see your information.
Privacy and data
POPIA Privacy Notice (Website and Customers)
A plain-language privacy notice for a South African business that collects personal information from customers and website visitors. Covers what you collect, why, who sees it, how long you keep it and what rights people have under POPIA.
Privacy and data
Information Officer Appointment Letter (POPIA)
A letter that records who your Information Officer (and optional deputy) is under POPIA and what they are responsible for. Keep it as evidence and use it when you register with the Information Regulator.
Privacy and data
Data Breach Response Plan (POPIA)
A short internal plan that says who does what when personal information is lost, stolen or accessed by the wrong person. It covers contain, assess, notify and learn, including telling the Information Regulator and affected people.
Privacy and data
Employee POPIA Acknowledgement and Notice
A notice that tells employees what personal information you hold about them and why, plus their acknowledgement of their own duties when handling personal information at work. Useful evidence for POPIA.
Privacy and data
PAIA Manual (Private Body)
The manual that a private business must have under the Promotion of Access to Information Act. It tells people what records you hold, how to ask for access, and includes the POPIA information about how you process personal information.
Privacy and data
Operator (Data Processing) Agreement under POPIA
A written agreement between a business that decides why personal information is processed (the responsible party) and a supplier that processes it on its behalf (the operator), such as a payroll, hosting or software provider.
Contracts
Independent Sales Agent Agreement (South Africa)
An agreement for a self-employed person who sells your products for commission only and decides their own hours and methods. It records that the agent is independent, how commission is earned and paid, what they may and may not do when they market for you, and how personal information is handled.
Contracts
Independent Contractor Agreement (South Africa)
A services agreement for a self-employed person or small business that does work for you but is not your employee. It covers the work, payment, independence, confidentiality, ownership of what they create, personal information and how either side can end it.
Contracts
Confidentiality and IP Assignment Agreement (South Africa)
A short agreement where a contractor, agent or consultant promises to keep your information confidential and assigns to you the rights in what they create for you. Useful when you already have a services arrangement and need the confidentiality and ownership terms in writing.
Privacy and data
Direct Marketing Policy (South Africa)
An internal policy for how your business, its staff and any sales agents contact people for marketing: when consent is needed, what every message must include, how opt-outs are recorded and honoured, and how contact lists are sourced and kept.
Compliance forms
B-BBEE Exempted Micro Enterprise Sworn Affidavit (General)
Fills in a sworn affidavit that an exempted micro enterprise (annual revenue of R10 million or less) uses to show its B-BBEE status instead of a verification certificate. Answer a few questions, print it, and sign it in front of a Commissioner of Oaths.
Keep every policy current and acknowledged
ComplianceDesk tracks your policies, evidence and deadlines for South African and international frameworks.