South Africa · Johannesburg, Cape Town · UTC+2
Close on time in South Africa.
A month-end that doesn't slip. We step in as operators: a two-week assessment, then we map the work, set the controls and automate what shouldn't be manual, in the systems you already run. The people you meet stay on your work from the first day to the last.
Finance and process redesign for 50–500 person companies in South Africa: month-end held by a few spreadsheets, quotes slowed by email, accounting beside warehouse and job-costing systems.
We got a security questionnaire.
A big customer sent it. A 200-question security review stands between you and a contract. We collect the evidence once and keep it current, so the next questionnaire takes a day.
Example Questionnaire turnaround: 10 days → 1 day
See all use cases02 · What we see in South Africa
What we see in South Africa
Month-end still runs on exports and one person's macros.
Many mid-sized firms run Sage or Xero beside a warehouse or job-costing system, joined by CSV exports and the few people who understand the spreadsheets. Month-end slips whenever one of them is on leave.
Quotes wait in inboxes.
Requests arrive by email and WhatsApp in every format, and a salesperson rebuilds each one in the ERP before pricing it. Customers wait days for an answer a competitor sends the same afternoon.
Bigger customers ask for proof of control.
Larger customers and banks now send security questionnaires and ask about ISO 27001 before they sign. Answering means finding evidence spread across inboxes and shared drives, usually in a rush.
03 · Local rules we design for
Local rules we design for
SARS e-invoicing: proposed, phased from 2030
On 17 August 2026, SARS published its VAT modernisation consultation paper, with comments due by 16 October 2026. It proposes five phases: preparation from 2026, a voluntary pilot with large taxpayers around 2029, and mandatory phased adoption from 2030. Nothing is final until regulations are published. Fixing supplier and item data takes years in some firms.
KPMG: South Africa public consultation on e-invoicing and digital reporting(opens in a new tab) · as of Oct 9, 2026
POPIA: breaches reported through the Information Regulator's portal
Since 1 April 2025, security compromises under POPIA must be reported through the Information Regulator's eServices portal, and email reports are no longer accepted. There is no low-risk exemption. Each automation that copies personal information into spreadsheets and inboxes widens what you might have to report.
Covington, Inside Privacy: South Africa introduces mandatory e-portal reporting for data breaches(opens in a new tab) · as of Oct 9, 2026
04 · Where we usually start
Where we usually start
Ready for ISO 27001 and customer due diligence
We scope what matters, write the controls with your team and set up evidence that collects itself, so the next questionnaire takes days, not weeks. We get you ready; an accredited certification body certifies.
Tools: Microsoft 365 · Google Workspace
Reconciliations that run overnight
Bank feeds, debtors and creditors are matched against the ledger every night instead of once a month. Finance opens a short list of exceptions in the morning, each with its evidence attached.
Tools: Sage Intacct · Xero · Syspro · Acumatica
Quotes drafted from email and WhatsApp requests
An AI step reads each request, pulls stock and pricing from the ERP, and drafts a quote that a salesperson approves before it goes out.
Tools: Outlook · WhatsApp Business · Syspro · Sage 300
05 · How we work with South African teams
How we work with South African teams
- We are remote-first, working from Switzerland and Portugal, and travel to Johannesburg or Cape Town for on-site weeks. There is no Devvion office in South Africa.
- We've run this at scale in large enterprises and bring it down to your size. Forward-deployed means our engineer works inside your business, not from a ticket queue.
- South Africa is on UTC+2: level with Switzerland in summer and one hour ahead in winter. We work in English and document each system so your team can change it without calling us.
- The contracting party is Devvion Inc., a Delaware company. Where a local rule needs an approved provider or a SARS platform, we connect your ERP to it; we are not the provider.
06 · Questions South African buyers ask us
Questions South African buyers ask us
Can you help us without building automation?
Devvion's business consulting in South Africa often stops before any code. We assess, map the process, write the SOPs, controls and KPIs, and prepare you for ISO 9001 or 27001. Automation is a later step, with us, with someone else, or not at all.
What about POPIA and the other local rules?
Devvion handles the systems side of POPIA: mapping personal information, limiting who sees it and logging what each automation touches; legal reading stays with your information officer. For the other rules listed on this page, we work from the dates and sources shown, and treat a proposal as final only once regulations are published.
Do you work with Sage, Xero and Syspro?
Devvion works with the systems South African mid-sized firms already run, including Sage, Xero, Syspro and Acumatica. We would rather connect what you have than replace it, unless the assessment shows a replacement is cheaper.
Are you ISO 27001 consultants in South Africa?
Devvion gets South African companies ready for ISO 27001: data flows mapped, controls written, evidence collected automatically. Devvion holds no ISO certification and does not issue one; an accredited certification body does.
How do engagements start, and how long do they run?
Devvion opens each South African engagement with a paid two-week assessment that ends in a maturity score per process and a ranked list of fixes. If you carry on, the fee is credited. Consulting then runs 4 to 12 weeks and engineering 6 to 16.
Will AI replace our admin staff?
Devvion's work in South Africa removes repetitive steps, not roles. Most of what we build is plain automation; AI goes only where someone reads and judges. Teams usually put the freed hours into customer work and analysis.
07 · Contact
See what month-end really costs you.
Two weeks inside your operation, the hours on paper, and the first fixes agreed with your team.