A startup can get away with informal, undocumented processes while it figures things out. But as a business grows, that same ambiguity slows it down and creates real internal inefficiency. If any of the following sound familiar, it is time to formalise how your business actually runs.
1. You have reached a compliance tipping point
Once a business passes roughly 50 employees and around R5 million in revenue, it is no longer automatically exempt from external audits under the Companies Act’s Public Interest Score. Formal, documented processes make it far easier to demonstrate compliance with laws like the Employment Equity Act and B-BBEE requirements when that audit comes.
2. Staff are quietly working around your systems
If your team constantly needs retraining on your own tools, or starts using personal apps to get work done faster, your systems are the problem, not your people. Left unchecked, this “shadow IT” creates real security risk because you lose visibility over where company data actually lives.
3. You are deciding based on stale data
Even a week-old number counts as historic in a fast-moving business. Working from real-time information, not last month’s spreadsheet, lets you catch and correct problems while they are still small.
4. Your processes are still manually intensive
Paperwork filed away, data spread across conflicting spreadsheet versions, and email as your default workflow tool are all signs a business has outgrown its own admin. Without documented, agreed processes, every employee ends up doing things their own way, which increases risk and creates friction.
5. Your business has grown more complex than your systems
Multiple offices or remote staff running on processes built for a single small office is a mismatch that only grows more painful with time. Scalable, cloud-based systems, chosen with room to grow, avoid a costly system change later.
Frequently asked questions
At what size does a South African business lose its audit exemption?
Roughly once a business passes 50 employees and around R5 million in revenue, it typically crosses the Public Interest Score threshold that removes the audit exemption under the Companies Act.
Is using personal apps for work really a security risk?
Yes. Once company data is being created or stored in personal, unmanaged tools, the business loses visibility and control over that information.
Do small businesses really need formal systems this early?
The right time is before, not after, ambiguity starts causing real problems: unhappy customers, under-performing teams, or slowing revenue are the signal to act.
Fix one process at a time
Formalising a business does not have to happen all at once. Start with a single process, measure the impact, then move to the next.
Further reading: Build a Smarter Business: Start Using Your Data | Companies and Intellectual Property Commission for official company compliance requirements
Originally published in June 2019. Updated September 2026 to tighten this guidance from Sage on when a growing business needs formal processes. The underlying signals remain sound.
