Running a compliant organisation in South Africa takes more than health and safety management. Corporate governance, labour legislation, data protection, and — for registered non-profits — NPO and donor reporting obligations all carry real legal and reputational risk when left unmanaged. AOAL Consulting Services (B-BBEE Level 1) provides practical, correctly-scoped business compliance services to organisations across South Africa, including registered NGOs, non-profit companies, and small and medium businesses that need dependable compliance support without the overhead of a large consulting firm.
Our business compliance offering covers four areas: corporate governance and company secretarial support, labour and employment law compliance, POPIA and data protection compliance, and NPO and donor compliance. These sit alongside our separate SHEQ (occupational health, safety, environmental and quality) services, for organisations that need both under one roof.
Every engagement starts with a Compliance Health Check — a focused, once-off diagnostic that identifies your organisation’s actual compliance gaps before you commit to any further scope of work.
Corporate Governance & Company Secretarial Services
Good governance is what keeps a board — and a company — out of trouble. We help organisations meet their obligations under the Companies Act 71 of 2008 and apply King IV governance principles in a way that’s proportionate to a non-profit or small business, not written for a JSE-listed group.
- CIPC annual compliance health checks
- Beneficial ownership (BO) register filing
- MOI and constitution alignment reviews
- Board and trustee governance frameworks
- Statutory secretarial support — minutes, resolutions, and register maintenance
Labour & Employment Law Compliance
Employment disputes and labour inspections are two of the most common ways a compliant-looking organisation gets caught out. We help you get ahead of BCEA, LRA, and Employment Equity Act obligations before they become a CCMA referral.
- BCEA and LRA compliance audits
- HR policy suite development — disciplinary, grievance, and leave policies
- Employment Equity compliance and annual reporting
- Skills development and SETA compliance
- CCMA dispute readiness reviews
POPIA & Data Protection Compliance
Non-profits handle some of the most sensitive personal information there is — donor records, beneficiary details, and often data belonging to vulnerable groups. We help organisations meet their POPIA obligations without turning data protection into a full-time job for someone who doesn’t have the capacity for one.
- Information Officer registration support
- PAIA manuals, including the reduced-form version smaller organisations qualify for
- Data protection policy suites
- Breach response plans and data subject request procedures
- POPIA training for staff and volunteers
NPO & Donor Compliance Services
Registered non-profits carry compliance obligations that most general business consultants simply don’t cover — from NPO Act annual reporting to the donor and funder due-diligence expectations that have sharpened since South Africa’s 2025 exit from the FATF grey list.
- NPO Act registration and annual compliance support
- Donor and grant compliance frameworks
- AML/CTF self-assessment and sanctions screening policies for bank and donor due diligence
- Non-profit constitutional compliance reviews
How Our Compliance Engagements Work
We structure engagements around three models, and most organisations start with the first:
- Compliance Health Check — a focused, once-off diagnostic across the areas most relevant to your organisation.
- Project-Based Implementation — building out a specific policy suite, registration, or governance framework.
- Ongoing Retainer — continuous secretarial, reporting, or advisory support aligned to your compliance calendar.
Free virtual gap analysis
Not sure where your compliance stands?
Most companies don’t know where to start with their legal register. AOAL offers a free virtual gap analysis — no cost, no obligation.
Frequently Asked Questions
What is business compliance, and how is it different from SHEQ compliance?
Business compliance covers the legal and governance obligations that apply to how an organisation is run — company secretarial duties, labour law, data protection, and (for non-profits) NPO and donor reporting. SHEQ compliance covers occupational health, safety, environmental, and quality management. Many organisations need both, but they’re distinct disciplines with different legislation behind them.
Does our NGO need to register an Information Officer under POPIA?
Yes. POPIA requires every organisation that processes personal information — including registered NPOs — to appoint an Information Officer and register them with the Information Regulator. There’s no exemption for non-profits.
What compliance obligations apply specifically to registered NPOs in South Africa?
Registered NPOs must submit an annual narrative report and financial statements to the NPO Directorate within nine months of their financial year-end, notify the Directorate of office-bearer changes, and keep their constitution aligned with NPO Act and PBO requirements. Organisations with foreign donors are also increasingly expected to show anti-money-laundering and counter-terrorist-financing due diligence.
How much does business compliance consulting cost?
It depends on how many of these areas apply to your organisation and how much groundwork is already in place. Rather than quoting a number that doesn’t fit your situation, we start every new client with a Compliance Health Check, which gives us — and you — an accurate, evidence-based scope before any further cost is agreed.
Is AOAL B-BBEE compliant?
Yes. AOAL Consulting Services (Pty) Ltd is a B-BBEE Level 1 contributor.
Get Started
Book a Compliance Health Check to find out where your organisation actually stands — and what to prioritise first.
Contact us to arrange a discussion.
