Why can't I just get the CoC from CCIC and email it to SARS myself?
The Question Stated Plainly
It might seem straightforward to simply obtain your Certificate of Conformity (CoC) from the issuing inspection body, such as CCIC, and then forward it via email to the South African Revenue Service (SARS). However, the process for customs clearance, particularly under the Pre-Shipment Verification of Conformity (PVoC) programme, involves specific requirements that a standard PDF email cannot fulfill. This article clarifies why a direct email submission of a CoC is not an acceptable method for SARS Customs verification.
Regulatory Framework for CoC Verification
The PVoC programme, as outlined in Government Gazette No. 54374 (20 March 2026), mandates the submission of a verifiable Certificate of Conformity for regulated goods entering South Africa. The core principle behind this requirement is to ensure that imported products meet specified safety, quality, and environmental standards before they reach the local market. A critical aspect of this regulatory framework is the integrity and authenticity of the CoC itself. SARS Customs requires assurance that the document presented for clearance has not been altered or tampered with since its original issuance by the inspection body.
Furthermore, the Customs and Excise Act, specifically Section 101, imposes a stringent requirement for the retention of import-related documentation for a period of five years. This legal obligation extends beyond mere storage; it necessitates secure, verifiable, and readily accessible records. An email archive, while providing a form of storage, typically lacks the robust security and tamper-proof mechanisms required to meet this statutory retention standard.
The Specific Answer: Beyond a Simple PDF
The fundamental issue with simply emailing a CoC as a PDF to SARS lies in the absence of a tamper-proof chain of custody. A PDF document, once sent via email, can be easily modified without leaving an evident trace of alteration. This vulnerability undermines the very purpose of the PVoC programme, which is to guarantee the conformity of goods through an unassailable document.
To address this, the PVoC system relies on advanced cryptographic methods. Specifically, a SHA-256 hash is generated for each official CoC. This hash acts as a unique, cryptographic fingerprint of the document. Any alteration, no matter how minor, to the CoC document would result in a completely different SHA-256 hash, immediately indicating that the document's integrity has been compromised. This cryptographic signature provides an irrefutable proof that the document is unaltered from its original state.
Instead of an emailed PDF, SARS Customs utilizes a verification URL. This URL allows customs officials to instantly access and verify the authenticity and current status of a CoC directly from the issuing authority's secure database. This process enables SARS to check the document in seconds, confirming its validity and ensuring it matches the original record, without needing to request the physical original or rely on potentially altered digital copies. This method provides the necessary level of security and verifiability that a simple email attachment cannot.
In essence, while emailing a PDF might seem convenient, it fails to meet the stringent requirements for document integrity, verifiable chain of custody, and secure long-term retention mandated by South African customs regulations. The system is designed to prevent fraud and ensure compliance, necessitating a more robust verification mechanism than email can provide.