The recent expansion of South Africa’s construction blacklist, now 52 companies barred from state contracts after Minister Dean Macpherson confirmed 12 new restrictions in early 2026, is a stark reminder for procurement teams: relying on surface checks is not enough.
State databases and regulatory action expose only part of the risk picture. Procurement departments must adopt rigorous non-financial due diligence to avoid reputational, operational, and legal fallout from doing business with tainted suppliers or their rebranded proxies.
Why this matters to procurement
- Blacklisting restricts access to government contracts, can trigger bank refusals or the withdrawal of finance, and signals governance failures that endanger private-sector relationships.
- Contractors frequently attempt to evade restrictions by changing names or creating affiliated entities; the real risk often sits with individuals and networks, not just company names.
- While the Database of Restricted Suppliers, CIDB records, and provincial restriction committees provide critical information, the lists may be fragmented and not capture related parties, subsidiaries, or offshore structures.
- POPIA permits publication of company names in the public interest, but personal data on directors must be handled lawfully and proportionately during investigations.
What procurement teams should do, practical due diligence steps.
- Check authoritative registries first: Query the National Treasury Database of Restricted Suppliers for the supplier and any linked entities, including the industry databases that are very often considered public information.
- Go beyond entity name checks: Screen beneficial owners, directors, and related parties (including previous trading names) to detect rebranding and shell structures.
- Verify past performance and contract history: Request and validate references, check completion certificates, retentions, and dispute/arbitration records.
- Conduct integrity and adverse media screening: Search for corruption allegations, regulatory action, tax disputes, litigation, and media reports in local and international sources.
- Perform site visits and operational verification: Confirm existence of offices, plant, staff, and capability claims; validate supply chain resilience and subcontractor lists.
- Scrutinise subcontractors and JV partners: Ensure downstream parties are screened to avoid indirect exposure to blacklisted networks.
- Use enhanced checks for high-value or strategic contracts: Deploy forensic vendor due diligence, director-level interviews, and legal opinion where risk is material.
- Embed contractual protections: Include blacklist warranties, termination for misconduct, audit rights, disclosure clauses, and sanctions compliance covenants.
- Monitor continuously: Apply periodic rescreening and transaction monitoring during contract execution to catch emerging risks early.
POPIA considerations
- Balance transparency with privacy: Treat personal director data securely and process it on lawful grounds (consent, legal obligation, or public interest) while logging processing rationale.
- Keep audit trails: Document checks, sources, and decisions to demonstrate proportionality and lawful processing if challenged.
iFacts provides tailored non-financial due diligence for any company wanting to do business in South Africa:
- Comprehensive entity and director screening (including beneficial owner tracing and historic trading names)
- Database of Restricted Suppliers & industry database checks and cross-jurisdiction searches
- Adverse media, litigation, and regulatory screening
- Operational verification: site checks, reference validation, and supplier capability assessment
- Continuous monitoring and rescreening during contract life cycles
- POPIA-compliant processes and consent documentation to protect your procurement practice
The recent growth of the construction blacklist underscores a simple truth: procurement risk is now intelligence work, but it should not be limited only to that industry. Procurement teams must verify who they contract with at ownership, director and operational levels, not just by company name.
Robust nonfinancial due diligence, embedded into your supplier lifecycle and backed by specialist partners such as iFacts, protects projects, balance sheets, and reputations in a market where rebranding and syndicate behaviour are commonplace.
