Can I Update a CoC After It Has Been Registered on CoC Vault?

Why Metadata Cannot Be Changed

The Immutability Principle

The immutability of CoC Vault records is a deliberate design choice. The SHA-256 hash of the CoC PDF is a cryptographic fingerprint — if the hash could be changed after registration, the tamper-evidence property would be compromised. SARS Customs relies on the immutability of the record to verify that the CoC has not been altered.

Similarly, the metadata (reference number, issuing body, goods description, etc.) is recorded at the time of registration and cannot be changed. This ensures that the verification record accurately reflects the CoC as it was at the time of registration.

This is consistent with how other tamper-evident record systems work — blockchain-based systems, for example, are also immutable by design.

What to Do If There Is an Error

New Registration Required

If you discover an error in the metadata after registration, contact CoC Vault support immediately. Support can advise on the best course of action. In most cases, a new registration will be required — the original registration cannot be corrected.

A new registration means paying the minting fee again. The original registration will remain on the ledger but will not be used for the shipment — the new registration with the correct metadata will be the one shared with the clearing agent.

To avoid errors, review the metadata carefully before clicking "Pay and Mint." The metadata form shows all nine fields before payment — check each field against the CoC document before proceeding.

What If the CoC PDF Is Wrong?

Uploading the Correct File

If you upload the wrong CoC PDF — for example, if you accidentally upload a PDF for a different shipment — the SHA-256 hash recorded will be for the wrong file. The verification URL will resolve to a page showing the metadata for the wrong CoC.

If you discover this before paying, simply close the page and start a new registration with the correct file. If you discover this after paying, contact CoC Vault support for guidance.

To avoid this error, verify the SHA-256 hash displayed on screen before paying. The hash should match the hash of the correct CoC PDF — you can verify this by calculating the hash of the PDF independently using a SHA-256 calculator.

Prevention

How to Avoid Errors

The best way to avoid errors is to review the metadata carefully before paying. The metadata form shows all nine fields before payment — check each field against the CoC document. Pay particular attention to the CoC reference number, the HS code, and the CIF value, as these are the fields most commonly entered incorrectly.

Also verify that the correct CoC PDF has been uploaded by checking the SHA-256 hash displayed on screen. If the hash does not match what you expect, do not proceed with payment.