Uthando
The Uthando Library · Open-source intelligence

Know what is out there. Then act.

82 hand-checked tools, 70 of them completely free, for staying safe online, checking a partner before you sign, keeping a nonprofit in good standing, and seeing what is happening to land, water and wildlife. Five free kits to start, and expert help when you need it.

Free · Print or save

Five free kits to start

Short, practical checklists you can finish today. Each one draws on the tools in this library and on South African law, checked on 7 October 2026.

Free kit 01

The 15-minute doxxing self-check

See what a stranger can find about you, before anyone else does.

For: Founders and anyone in the public eye

Open the checklist
  1. Search your full name in quotes, then with your city, your company and your phone number. Note every result that shows where you live, your number or your family.
  2. Run a reverse image search of your profile photo with Google Lens or TinEye, to find copies and fake accounts.
  3. Open Google's Results about you and ask for results that show your phone number, home address or email to be removed.
  4. Check your email addresses on Have I Been Pwned, and change any password that appears in a breach.
  5. Look at what your company and website records show about you, on CIPC and in your domain's public record. If they show a home address, ask your accountant or domain provider about using a business address instead.
  6. Scroll your public posts from the last year. Archive anything that shows your home, your children's school, your car registration or a regular routine.
  7. Turn off live location sharing you do not need, and post about an event after you leave it, not while you are there.

From the Uthando Library, uthandoafrica.com/library. Checked 7 October 2026. Not legal advice.

Free kit 02

Lock down your accounts in one evening

Most attacks start with one weak password. Close that door first.

For: Everyone, in any role

Open the checklist
  1. Install a password manager (Bitwarden has a free plan). Start with your email, your bank and your social accounts.
  2. Give each of those a long, unique password or a passkey.
  3. Turn on two-step verification with an authenticator app or a passkey. Use SMS codes only when nothing else is offered.
  4. Save the backup codes somewhere safe and offline.
  5. Check which devices are signed in to your email and social accounts, and sign out any you do not recognise.
  6. Ask your mobile network about protection against SIM swaps, such as a PIN or extra checks before your SIM can be changed.
  7. Use a separate public email address for your website and events. Keep your personal and recovery addresses private.
  8. Review which apps can see your location, camera and microphone. On an iPhone, run Safety Check.

From the Uthando Library, uthandoafrica.com/library. Checked 7 October 2026. Not legal advice.

Free kit 03

If you are being targeted: the first hour

Doxxing, harassment or image-based abuse. What to do first, in order.

For: Anyone facing online abuse now

Open the checklist
  1. If you are in danger, call SAPS on 10111. The GBV Command Centre is free and open 24 hours on 0800 428 428.
  2. Do not reply to the person targeting you, and do not delete anything yet.
  3. Capture evidence: screenshots that show the content, the account name, the link, and the date and time. Keep the links in one simple log.
  4. Report the content and the account on the platform, using its harassment, privacy or impersonation option.
  5. Secure your accounts with kit 02: new passwords, two-step verification, and sign out other devices.
  6. If intimate images are involved, StopNCII.org can help stop them spreading on partner platforms. Sharing intimate images without consent is a crime under section 16 of the Cybercrimes Act.
  7. Tell one person you trust what is happening, and agree how they will check on you.
  8. Then: a protection order at your magistrate's court under the Protection from Harassment Act, which can also order a provider to identify an anonymous harasser; a case with SAPS; and a complaint to the Information Regulator if your personal information was exposed.

From the Uthando Library, uthandoafrica.com/library. Checked 7 October 2026. Not legal advice.

Free kit 04

Check a partner before you sign

Twenty minutes with free, official sources before money or your name changes hands.

For: Founders, nonprofits and funders

Open the checklist
  1. Confirm they exist: CIPC for companies and non-profit companies, and the NPO Directorate for registered NPOs.
  2. If they promise tax-deductible receipts, look for their section 18A approval on the SARS list.
  3. Screen the names against sanctions lists: the FIC's targeted financial sanctions list, the UN consolidated list and OFAC.
  4. Check debarment lists: the World Bank's ineligible firms and National Treasury's restricted suppliers.
  5. Search court judgments on SAFLII, and the news with search operators, for example: "their name" fraud OR court.
  6. Use the Wayback Machine to see how their website and claims have changed over time.
  7. Ask for two references you can call, and for the evidence behind any number they quote.
  8. Red flags: pressure to sign fast, payments into personal accounts, numbers without sources, and reluctance to share registration details.

From the Uthando Library, uthandoafrica.com/library. Checked 7 October 2026. Not legal advice.

Free kit 05

Nonprofit compliance at a glance

The South African filings and rules most often missed, on one page.

For: NPOs, NPCs and PBOs in South Africa

Open the checklist
  1. Registered NPOs: send the narrative report, financial statements and accounting officer's report within nine months of year end.
  2. New office-bearers: tell the NPO Directorate within one month.
  3. NPOs that give money or provide services outside South Africa must be registered (since April 2023).
  4. Approved PBOs: file the IT12EI return with SARS every year.
  5. Section 18A receipts: show your SARS reference number, the donor details SARS requires, and a unique receipt number.
  6. Non-profit companies: file the CIPC annual return, with the beneficial ownership or effective control declaration.
  7. POPIA: a privacy notice wherever you collect personal information, and an information officer registered with the Information Regulator.
  8. If personal information is lost or accessed without authority, notify the Information Regulator and the people affected as soon as reasonably possible.

From the Uthando Library, uthandoafrica.com/library. Checked 7 October 2026. Not legal advice.

Work with us · Quoted on request

When you need an expert to do it with you

Three services that turn the tools on this page into answers. Tell Thando what you need, privately, and Uthando replies with a quote.

Quoted on request

Founder Safety Audit

For founders and public-facing leaders, especially women, who want to be visible without being findable.

  • A private search of your public footprint: what a stranger could piece together about your home, phone, family, routines, old accounts and leaked passwords.
  • A short written risk summary, ranked by what matters most.
  • Removal and privacy requests drafted for you, ready to send.
  • A one-hour session to lock down your accounts and devices with you.
  • A ten-minute monthly routine to stay ahead.
Ask for a quote
Quoted on request

Partner Due Diligence

Before you sign with a funder, supplier, nonprofit or company.

  • Registration and standing: CIPC, the NPO register, PBO and section 18A status.
  • Screening against sanctions and debarment lists: FIC, UN, OFAC, UK, EU, World Bank and National Treasury.
  • Court records and news coverage, in South Africa and abroad.
  • A check of their public claims against the evidence behind them.
  • A short brief with every source linked, and a clear red, amber or green view.
Ask for a quote
Quoted on request

NPO Compliance Check

For nonprofits that want to stay in good standing, and show funders that they are.

  • The status of your NPO, PBO and section 18A records.
  • Your CIPC annual return and ownership filing, if you are a non-profit company.
  • POPIA basics: privacy notice, information officer registration and a plan for a data breach.
  • Your website's disclosures and your donation receipts.
  • A dated checklist of what is due, and when.
Ask for a quote

Private by design: safety enquiries never go to an AI, nothing about you is ever published, and your file is deleted when the work is done if you ask. Read the Uthando Safety Protocol.

28 tools

Stay safe online

For founders and anyone leading in public, especially women, who face doxxing, harassment and image-based abuse more often.

Threat modelling and planning

FreeGlobal

Security Planner (Consumer Reports)

Answer a short quiz and get a personalised, prioritised list of steps for securing your accounts, devices and personal data.

For: Anyone starting out with online safety

FreeGlobal

Surveillance Self-Defense (EFF)

Plain-language guides to threat modelling, encryption, phone and account security, with scenario guides for different at-risk groups.

For: Anyone wanting practical, tool-by-tool security guidance

FreeGlobal

Data Detox Kit (Tactical Tech)

A step-by-step kit for tidying your digital privacy and security through small, doable actions, available in many languages.

For: Anyone wanting a gentle, self-paced privacy clean-up

Accounts and devices

FreeGlobal

Signal

Free, nonprofit-run messaging app with end-to-end encryption for chats, calls and groups, and no advertising or tracking.

For: Anyone needing private messages and calls

FreeGlobal

Coalition Against Stalkerware

Explains what stalkerware is, how to spot it and how to act safely if you find it, with advice written for survivors.

For: People who fear their phone is monitored

FreeGlobal

Safety Check (Apple iPhone)

Built-in iPhone feature that reviews who can see your location and data, and lets you reset all sharing at once.

For: iPhone users reviewing who can see their data

FreeGlobal

Digital First Aid Kit

Guided checklist that helps you diagnose a digital emergency, such as a compromised account or harassment, and find specialist help.

For: People facing a hacked account or digital attack

Free tierGlobal

Have I Been Pwned

Check whether your email address appears in known data breaches and sign up for alerts if it turns up in a new one.

For: Anyone checking for leaked emails and passwords

Free tierGlobal

Bitwarden

Open source password manager that creates and stores strong, unique passwords and passkeys across your devices.

For: Anyone reusing weak passwords across accounts

Doxxing and data removal

FreeGlobal (includes South Africa)

Google: Results about you

Google tool that scans search results for your phone number, home address or email, alerts you, and lets you request removal from Google Search.

For: Google account holders worried about being doxxed

FreeGlobal

Google: Remove my private info from Search

Google's policy page and request form for removing search results that expose contact details, ID numbers or doxxing content. The page stays online.

For: Targets of doxxing and leaked personal details

Free tierUS, Canada, Australia, New Zealand, South Africa

Optery

Scans data broker and people-search sites for your details and removes them; the free plan gives exposure reports and self-service opt-outs.

For: People wanting their details off broker sites

Data-broker removal works mainly in the US and a few other countries; check coverage for South Africa.

Mainly US (also UK, Canada, Australia); not listed for South Africa

DeleteMe

Paid subscription run by Abine that finds and removes your details from data broker and people-search sites, then keeps re-checking.

For: People in the US wanting ongoing broker removal

Covers mainly US data brokers.

US, Canada, UK, EU, Switzerland, Norway, Iceland, Liechtenstein; not South Africa

Incogni

Paid service that sends removal requests to data brokers and people-search sites on your behalf; not offered in South Africa.

For: People in the US, UK, EU or Canada

Covers the US, Canada, the UK and Europe; not South Africa.

Image-based abuse

FreeGlobal

StopNCII.org

Makes a digital fingerprint of your intimate image on your own device so participating platforms can find and remove copies.

For: Adults whose intimate images are shared or threatened

FreeGlobal

Take It Down (NCMEC)

For images taken before you turned 18: makes a fingerprint of nude or sexual images so participating platforms can remove them.

For: People pictured in images taken before age 18

For images taken when the person was under 18.

Harassment support

FreeGlobal (US publisher; legal parts reference US law)

Online Harassment Field Manual (PEN America)

Guide to preparing for and responding to online abuse: account and footprint security, documentation, reporting, self-care and legal considerations.

For: Writers, journalists and public voices facing online abuse

FreeGlobal

How can I feel safe online? (Chayn)

Trauma-informed guide written with survivors covering harassment, account access, image-based abuse, location tracking and scams, with practical steps.

For: Survivors of online abuse and the people helping them

FreeGlobal

Digital Security Helpline (Access Now)

Round-the-clock technical help, in ten languages, for civil society groups facing digital security incidents such as account compromise; eligibility is checked first.

For: Activists, journalists and human rights defenders

FreeGlobal (helplines across Africa, Asia, Europe, Latin America)

Feminist Helplines Index

Searchable directory of feminist helplines that support people facing tech-facilitated gender-based violence, matched by region, language and need.

For: Women and LGBTQIA+ people facing online abuse

South Africa: help and legal routes

FreeSouth Africa

Reporting online crime to SAPS (ISPA guide)

Step-by-step guidance on opening a case at a police station, asking for the cybercrime division and getting a CAS number to follow up.

For: Anyone laying a criminal complaint

FreeSouth Africa

Information Regulator: POPIA complaints

Lodge a complaint through the Regulator's online portal if an organisation has misused, leaked or refused to correct or delete your personal information.

For: People whose data an organisation mishandled

FreeSouth Africa

Women's Legal Centre

Cape Town feminist legal centre that gives free legal advice to women who cannot afford a lawyer, and takes test cases on women's rights.

For: Women needing free legal advice, especially on violence

FreeSouth Africa

Legal Aid South Africa

State-funded legal advice and representation for people who pass a means test, in civil, family and criminal matters, with a toll-free advice line.

For: People who cannot afford a lawyer

FreeSouth Africa

Film and Publication Board: complaints

Regulator's online complaint form for content that breaks the Films and Publications Act, such as private sexual images shared without consent.

For: Victims of non-consensual sharing of sexual images

23 tools

Check before you sign

Registers, sanctions lists and records for checking a funder, supplier, nonprofit or company before you work with them.

South Africa: registers and regulators

FreeSouth Africa

SARS list of approved section 18A organisations

SARS list of organisations approved to issue section 18A donation receipts, with name and status. SARS says the list is not updated in real time.

For: Donors and funders checking an NPO's section 18A status

SARS notes the list is not updated in real time.

FreeSouth Africa

National Treasury restricted suppliers and tender defaulters report

Treasury list of suppliers and people barred from government contracts, with reason, period and who imposed the restriction. Covers fraud, corruption and non-performance.

For: Checking a supplier or contractor before signing

It names individuals: check it, but do not copy or republish entries (POPIA).

Free tierSouth Africa

CIPC eServices company search

CIPC's official search for South African companies by name, number or director ID. Basic lookups are free; certified disclosure documents carry a fee.

For: Confirming a company or NPC is registered and in business

Sanctions and watchlists

FreeSouth Africa

FIC targeted financial sanctions (TFS) list

South Africa's own sanctions list, run by the Financial Intelligence Centre, with search, downloads and numbered notices of new listings and changes.

For: Screening partners, donors and suppliers against South African sanctions

FreeGlobal

UN Security Council Consolidated List

Single list of every person and entity under UN Security Council sanctions, downloadable as PDF, XML or HTML, with a separate search portal.

For: Baseline sanctions check that applies in South Africa

FreeGlobal

OFAC Sanctions List Search

US Treasury tool for searching the SDN list and other US sanctions lists, with fuzzy matching that catches misspelt names.

For: Organisations handling US dollar funds or US donors

FreeUnited Kingdom

UK Sanctions List

Official UK list of sanctioned people, entities and ships with search and downloads. The older OFSI consolidated list closed on 28 January 2026.

For: Screening names against UK sanctions

FreeGlobal

EU Sanctions Map

Interactive map of EU sanctions regimes and their legal acts. For checking a name, the EU's consolidated financial sanctions list is the better source.

For: Seeing which EU sanctions apply to a country

Free tierGlobal

OpenSanctions

Search across hundreds of sanctions lists, watchlists and politically exposed person records in one place, updated daily.

For: Quick first-pass screening of names

Free for non-commercial use. Business use, including screening for clients, needs a paid licence.

Aid and spending transparency

FreeSouth Africa

eTenders Publication Portal

Government portal listing tenders from public bodies at all levels of government, including awarded, closed and cancelled ones, plus procurement plans.

For: Researching public tenders and awards in South Africa

FreeGlobal

IATI d-portal

Browser tool for exploring aid projects published to the IATI standard: funders, partners, budgets and spending. Covers only what donors choose to publish.

For: Seeing how a donor funds work in Africa

Companies and ownership

FreeGlobal

ICIJ Offshore Leaks Database

Searchable database of offshore companies, trusts and people drawn from leaked files such as the Panama and Pandora Papers. Records run to 2020.

For: Checking whether a person or company appears in offshore leaks

Appearing in it is not evidence of wrongdoing.

Free tierGlobal

OpenCorporates

Large searchable database of company registry data from over 140 jurisdictions. South African records are historical, so use CIPC for current facts.

For: Tracing foreign companies linked to a funder or supplier

Free for personal, journalism, NGO and academic use. Commercial use needs a paid key. South African data is limited, so use CIPC.

Funders and grants

FreeUnited Kingdom

360Giving GrantNav

Search of grants published by UK funders in the 360Giving format, showing who gave how much to which organisation.

For: Checking a UK funder's giving history and past grantees

FreeSouth Africa

Trialogue Knowledge Hub

South African corporate social investment research, with an NPO directory and the 2025 Business in Society Handbook (free online after a short sign-up form).

For: Understanding South African corporate funders and CSI trends

Free tierUnited States

Candid

Database of nonprofits and foundations, mainly US, with profiles and grants data. The free plan is limited; full profiles and grants need a paid plan.

For: Researching US foundations and nonprofits that fund or partner

Basic search is free; full profiles and grants data need a paid plan.

Adverse media and courts

FreeSouth Africa

SAFLII

Free database of South African court judgments and other legal materials, including the Constitutional Court, Supreme Court of Appeal and several High Courts.

For: Finding court cases involving a company, NPO or person

FreeGlobal

GDELT Project

Free, open index of global news in many languages. Its DOC API searches the last three months of coverage and suits technical users.

For: Scanning recent news about a person or organisation

FreeGlobal

Google search operators

Google's own help page on search shortcuts such as quotation marks, site:, minus signs, filetype: and before:/after: dates, useful for targeted checks on names.

For: Anyone running manual adverse media checks

FreeGlobal

Wayback Machine

The Internet Archive's free store of past versions of web pages, useful for seeing what a website once claimed or whether pages were removed.

For: Checking a partner's website history and past claims

31 tools

See what is happening to the planet

Satellite, biodiversity, emissions and supply-chain data anyone can use to see change on the ground and test claims.

Land, forests and fire

FreeGlobal

Copernicus Browser

Browse and download recent Sentinel satellite images by place and date, with tools to compare dates and make timelapses.

For: Checking land, water or damage events from space

FreeAfrica

Digital Earth Africa

Free satellite-based maps and analysis tools for Africa, covering cropland, water bodies, coastlines and vegetation.

For: Anyone mapping land and water change in Africa

Free tierGlobal

Google Earth Engine

Cloud platform for analysing decades of satellite data with code. Free for noncommercial research, education, nonprofit and news use, not for paid work.

For: Researchers and nonprofits with some coding skill

Free for research, education and nonprofit work; paid work for clients needs a commercial plan.

Oceans and water

FreeGlobal

Global Fishing Watch

Map of fishing vessels and other ship activity at sea, built from satellite tracking signals and imagery, with downloadable data.

For: Checking claims about illegal or unreported fishing

FreeGlobal

WRI Aqueduct

Free tools that map water stress, drought, flood risk and pressure on food supply, today and under future climate scenarios.

For: Farms, firms and councils judging water risk

FreeGlobal

JRC Global Surface Water Explorer

Map showing where surface water has appeared, shrunk or vanished over about 40 years, using Landsat satellite images.

For: Checking lakes, rivers, dams and wetland changes

Biodiversity

FreeGlobal

Protected Planet (World Database on Protected Areas)

Official global database and map of protected areas and other conservation areas, updated monthly from governments and communities.

For: Checking whether land is formally protected

Free for non-commercial use; commercial use needs written permission.

FreeGlobal

iNaturalist

Community platform where people photograph plants and animals and others help identify them; sightings are searchable on maps.

For: Naturalists, land managers, anyone verifying a sighting

FreeGlobal

eBird

Large public database of bird sightings from the Cornell Lab, with maps, hotspot lists and species records to explore.

For: Birders, guides, anyone checking bird records

Climate, emissions and energy

FreeGlobal

Climate TRACE

Independent satellite and AI-based estimates of greenhouse gas emissions from individual facilities and sources worldwide, free to browse and download.

For: Checking company and country emission claims

FreeGlobal

Our World in Data

Charts and explainers on energy, climate, land use and other global trends, with downloadable data and clear sources.

For: Anyone needing sourced numbers for a claim or report

FreeGlobal

Global Energy Monitor

Public trackers of coal, oil, gas, renewable and heavy-industry plants and projects worldwide, with maps and downloadable data.

For: Checking energy project and fossil fuel claims

Supply chains and accountability

FreeGlobal

InfluenceMap (LobbyMap)

Scores how companies and industry bodies lobby on climate policy, so you can compare what they say with what they push for.

For: Checking corporate climate promises against lobbying

Needs a free registration.

FreeGlobal

Trase

Maps agricultural supply chains from farm to buyer, showing deforestation risk linked to traders, regions and importing countries.

For: Buyers, journalists, campaigners tracing commodity sourcing

FreeGlobal

Environmental Justice Atlas (EJAtlas)

Map and database of environmental conflicts, such as mines, dams and land disputes, documented by researchers and activists.

For: Researchers, journalists, communities tracing local impacts

FreeGlobal

Business and Human Rights Resource Centre

Searchable archive of company profiles, news and allegations of corporate harm to people and the environment.

For: Journalists, investors, communities researching a company

Free tierGlobal

Open Supply Hub

Open map of factories and other production sites worldwide, searchable by name, address or company, with data shared by many contributors.

For: Buyers and researchers checking where goods are made

South Africa: environmental data

FreeSouth Africa

SANBI Biodiversity GIS (BGIS)

South African national biodiversity maps and spatial data, used for land-use and conservation planning.

For: Planners, consultants and conservation groups in South Africa

FreeSouth Africa

Red List of South African Plants

Look up the conservation status, range map and threats for South African plant species.

For: Botanists, planners, anyone checking a plant's status

FreeSouth Africa

SAEON Data Catalogue (Open Data Platform)

Searchable catalogue of South African environmental and earth observation datasets published by SAEON and its partners.

For: Researchers and analysts needing local environmental data

FreeSouth Africa

CSIR GreenBook

Climate risk profiles for South African municipalities, with projections to 2050 and suggested adaptation actions.

For: Municipalities, planners, anyone assessing local climate risk

Verification and research craft

FreeGlobal

InVID-WeVerify verification plugin

Browser extension for checking images and videos: reverse image search, video frame extraction and forensic filters.

For: Journalists, fact-checkers, researchers verifying media

FreeGlobal

Bellingcat Online Investigations Toolkit

Curated, searchable list of open-source research tools sorted by task, with cost, difficulty and limits for each.

For: Journalists, researchers, beginners learning open-source investigation

FreeGlobal

Google Fact Check Explorer

Search past fact-checks from many publishers by keyword, or by image, to see if a claim is already debunked.

For: Anyone checking whether a claim is already debunked

FreeAfrica

Africa Check

Independent African fact-checking organisation: read checks of public claims, with guides and data pages for South Africa and other countries.

For: Anyone checking claims about South Africa and Africa

Free tierGlobal

TinEye

Reverse image search that finds where else a picture appears online, including older or edited versions.

For: Checking where a photo came from

Free for non-commercial use, with daily search limits.

South Africa · The law

Your rights when you are targeted online

The laws that protect you from harassment, threats, hacking and image-based abuse, and the routes they open. Each links to its source.

Protection from Harassment Act 17 of 2011: protection order

Lets you ask a magistrate's court for an order stopping someone's harassment, including online contact. No lawyer is needed, and breaching the order is a crime.

Source ↗

Protection from Harassment Act, section 4: identifying an anonymous harasser

If the harassment is electronic and the sender is unknown, the court can order a service provider to hand over identifying details such as name and address.

Source ↗

Cybercrimes Act 19 of 2020, section 16: intimate images

Sharing an intimate image of someone, real or simulated, without consent is a crime: a fine, up to three years in prison, or both. In force since 1 December 2021.

Source ↗

Cybercrimes Act, sections 14 and 15: threats and incitement by message

Messages that threaten a person or group with violence or property damage, or incite others to harm them, are crimes: a fine, up to three years in prison, or both.

Source ↗

Cybercrimes Act, sections 2, 3 and 7: hacking, interception and stolen passwords

Accessing someone's account or device without permission, intercepting their data, or using their passwords to commit crime are offences, with maximum prison terms of five to ten years.

Source ↗

Cybercrimes Act, sections 20 to 23: court orders against harmful messages (not yet in force)

Would let a court order people to stop sharing harmful messages or intimate images, and order providers to remove them. Still awaiting a start date when last checked, January 2026.

Source ↗

Protection of Personal Information Act 4 of 2013 (POPIA)

Gives you rights to ask an organisation to correct or delete your personal information, to object to its use, and to complain to the Information Regulator.

Source ↗

Films and Publications Act 65 of 1996, section 18F: private sexual photographs and films

Prohibits sharing private sexual photos or films of someone without their consent and with intent to harm them; the Film and Publication Board takes complaints.

Source ↗

Domestic Violence Act 116 of 1998, as amended by Act 14 of 2021

Protection orders for people in domestic relationships, including current or former dating partners. Amendments in force since April 2023 extend harassment to electronic communication, including repeated contact and tracking.

Source ↗

A summary in plain English, checked on 7 October 2026. It is not legal advice: Legal Aid South Africa and the Women's Legal Centre, listed above, can advise you.

South Africa · Nonprofits

Nonprofit rules at a glance

Registration, reporting, tax, privacy and anti-money-laundering rules for NPOs, NPCs and PBOs, each from its official source.

NPO registration

Registering with the Department of Social Development's NPO Directorate is free and voluntary for most NPOs. Since 2023 it is compulsory for NPOs that donate outside South Africa or provide humanitarian, charitable, religious, educational or cultural services there.

Applies to: NGOs, community-based and faith-based organisations that are not organs of state

Source ↗

NPO annual reporting

A registered NPO sends the Director a narrative report, annual financial statements and an accounting officer's report within nine months of its financial year end. The Directorate also expects constitutional and administrative changes to be reported.

Applies to: All NPOs registered under the Nonprofit Organisations Act

Source ↗

NPO office-bearers and disclosure

Registered NPOs give the Director details of their office-bearers, control structure and governance. Unrehabilitated insolvents and people barred from being company directors cannot serve as office-bearers. New office-bearers' details are due within one month.

Applies to: Registered NPOs

Source ↗

NPO non-compliance and deregistration

DSD sends written notices to NPOs with overdue reports, giving 30 days to respond, and cancels the registration of those that do not. Organisations can appeal. The process was phased over 6 to 12 months from late 2024.

Applies to: Registered NPOs with missing annual reports or other breaches of the Act

Source ↗

PBO approval and annual return

SARS approves public benefit organisations for tax exemption, separately from NPO registration. An approved PBO files an IT12EI return each year so SARS can check it stays within the limits of its approval.

Applies to: Non-profit companies, trusts and associations carrying on public benefit activities

Source ↗

Section 18A receipts

Only section 18A-approved organisations may issue deductible donation receipts. Receipts show the SARS reference number and, since 1 March 2023, extra donor details and a unique receipt number. Most donors can deduct up to 10 per cent of taxable income.

Applies to: PBOs holding section 18A approval, and their donors

Source ↗

POPIA: telling people how you use their data

When an organisation collects personal information, people must be told what is collected, who collects it, why, whether supplying it is voluntary, any law requiring it, and any transfer abroad. A privacy notice is the usual way to do this.

Applies to: Any organisation that handles personal information, including NPOs

Source ↗

POPIA: information officer

Every public and private body has an information officer, by default its head. The officer must be registered with the Information Regulator through its eServices portal before taking up duties under POPIA.

Applies to: All public and private bodies, including NPOs and NPCs

Source ↗

POPIA: security compromises

If personal information is accessed or lost without authority, the responsible party notifies the Information Regulator through its eServices portal and the people affected. This is due as soon as it is reasonably sure a compromise occurred.

Applies to: Any organisation that processes personal information

Source ↗

FIC Act and NPOs

The FIC's guidance (PCC 41, December 2019) says NPOs are not accountable institutions, so they have no FIC reporting duty. Sanctions rules still bind them, and suspected terrorist financing is reported to SAPS under POCDATARA.

Applies to: NPOs and NPCs; accountable institutions dealing with them follow their own FIC duties

Source ↗

2022 AML law and its NPO changes

Act 22 of 2022 amended the NPO Act, Companies Act and FIC Act. Its NPO changes (compulsory registration for cross-border NPOs, more disclosure) mostly began on 1 April 2023; other sections began on 31 December 2022.

Applies to: NPOs that operate or give money abroad; all registered NPOs for the disclosure rules

Source ↗

Pending: 2026 AML amendment bill (B15-2026)

The bill would let the NPO Director impose administrative sanctions, appealable to an Arbitration Tribunal, and raise maximum NPO Act penalties to R1 million or five years in prison. It also amends FICA and the Companies Act. Not yet law.

Applies to: Registered NPOs, accountable institutions and companies

Source ↗

NPC annual return (Companies Act)

Every company, including a non-profit company, files an annual return with CIPC each year, with a fee based on turnover. CIPC allows 30 business days after it falls due, and starts deregistration when two returns in a row are outstanding.

Applies to: Non-profit companies (NPCs) registered with CIPC

Source ↗

NPC beneficial ownership filing

Companies file a beneficial ownership declaration with their annual return, which CIPC has strictly enforced since 1 July 2024. NPCs with members file a members' register; NPCs without members declare who has effective control. The register is not public.

Applies to: Non-profit companies (NPCs)

Source ↗

What an NPC is (Companies Act)

A non-profit company is formed for a public benefit or other object listed in Schedule 1 of the Companies Act, and generally may not pay out income or property to incorporators, members or related persons, apart from limited exceptions.

Applies to: Non-profit companies (NPCs)

Source ↗

Checked on 7 October 2026. Rules change: always confirm with the source, and with your accountant or lawyer. Not legal or tax advice.

Words that matter

Name it to act on it

The terms platforms, courts and support services use. Using the right word gets a report to the right place faster.

Doxxing (also doxing)
Publishing someone's private details, such as a home address or phone number, so that others can find, harass or threaten them. Source
Technology-facilitated gender-based violence (TFGBV)
Violence or abuse aimed at someone because of their gender that is carried out, helped or made worse by digital tools such as phones, apps and social media. Source
Non-consensual intimate image abuse (NCII) or image-based sexual abuse
Sharing, or threatening to share, an intimate photo or video of someone without their consent, including images that have been faked or edited to look like them. Source
Cyberstalking
Repeated online or phone-based contact or monitoring that may look harmless on its own but together leaves the person frightened or distressed. Source
Stalkerware
Spy software or devices, often put in place by someone close to the target, that secretly track a person's phone activity and movements. Source
Account takeover
When someone else gains control of your online account, for example through a stolen password, and can then act as if they were you. Source
Impersonation
Setting up a fake account or profile in someone's name or likeness to damage their reputation or stir up abuse against them. Source
Threat model
A short assessment of what you need to protect, who might target you, how likely and how damaging an attack would be, and what you will do about it. Source
Digital footprint
The trail of information about you left online, both what you choose to post and what is collected automatically as you browse. Source
Data broker
A company that gathers personal details about people, often without dealing with them directly, and sells or licenses that data, including to people-search sites. Source
Personally identifiable information (PII)
Any information that can identify a person, alone or when combined with other details, such as a name, ID number or address. Source
Deepfake
A fake image, audio clip or video made with AI to look authentic, showing someone saying or doing things they never did. Source
Sextortion
Blackmailing someone with a nude or sexual image or video of them, usually to demand money or more images. Source
Harassment (South African legal meaning)
Conduct the person knows or ought to know causes harm or fear of harm, such as following, watching, unwanted messages or unwelcome sexual attention. Source
Personal information (POPIA)
South Africa's legal term for information about an identifiable person, including ID numbers, addresses, phone numbers, location data and online identifiers. Source
How this library works

Chosen with care

Seen a broken link, or a better tool? Tell Thando.

01

Checked by hand

Every tool was checked on 7 October 2026. Tools that had closed or been renamed were removed or updated.

02

Free first

Free tools are listed before paid ones, and every limit on free or commercial use is noted.

03

No paid placements

No one pays to be listed, and Uthando earns nothing from these links. Being listed is not an endorsement either way.

04

Safety first

Help routes come before tools. If you are in danger, call SAPS on 10111 or the GBV Command Centre on 0800 428 428.