Skip to main content
010 447 2445Contact
Arke Technologies home
Request a hardware quoteTalk to us
Arke Technologies home
Directors review printed figures at a boardroom table beneath a chart on screen.

How to choose an IT company in South Africa: international, local or specialist

Choosing among international IT companies in South Africa, large local ICT groups and specialist managed service providers comes down to fit: the scope you need, the evidence behind the service, and the terms on which you can leave. This Arke Technologies guide compares the options and lists the questions to ask before you sign.

Request an IT assessmentSee the selection criteria
Insights

How to choose an IT company in South Africa: international, local or specialist

Last reviewed: September 2026, 15 min read

Choosing among international IT companies in South Africa, large local ICT groups and specialist managed service providers comes down to fit: the scope you need, the evidence behind the service, and the terms on which you can leave. This Arke Technologies guide compares the options and lists the questions to ask before you sign.

Last reviewed: September 2026, 15 min read

On this page

The short answer

  • Decide what you are buying first: a managed service, a project, products, or a mix. The right IT company follows from that answer.
  • Size is not the same as fit. The biggest IT companies suit national rollouts and very large contracts; a specialist often suits an organisation that wants one accountable team that knows its systems.
  • Buy on evidence, not brochures: a sample SLA, a sample monthly report, security controls you can audit, and procurement documents on request.
  • Agree the exit before you sign. Your organisation should own its data, admin credentials and documentation, whoever runs the IT.

What does an IT company do?

What an IT company does, in one sentence: it designs, supplies, runs and secures the technology other organisations depend on, so that their people can get on with their work. Few IT companies do all of it. Most specialise in some of these kinds of work:

  • Support and operations: a service desk, device and server management, monitoring, patching and backup.
  • Security: assessments, penetration tests, email and endpoint protection, and incident response.
  • Infrastructure: networks, Wi-Fi, firewalls, cabling, servers, cloud platforms and data centre space.
  • Software: administration of platforms such as Microsoft 365 and Google Workspace, custom development and systems integration.
  • Supply: hardware, software licences and connectivity.
  • Advice: IT strategy, budgets, governance and board reporting, often through a virtual CIO.

Ask what IT does in a company and you get the same list seen from the inside: an in-house IT function does some of this work itself and buys the rest from IT companies. The most common way to buy it is a managed service, explained in our guide to what managed IT services are.

Committee members read papers at a long table with desk microphones.

What is an ICT company?

The ICT company definition adds communication to information technology. An ICT company supplies, builds or runs information and communication technology for other organisations: computers, software and data, and also the networks, connectivity and telephony that link them. The ICT company meaning matters in procurement, because public-sector tenders and supplier databases usually say ICT rather than IT, and one bid may cover both.

ICT company examples include:

  • telecommunications operators and internet service providers;
  • systems integrators and managed service providers;
  • software developers and software-as-a-service (SaaS) companies;
  • hardware manufacturers, distributors and resellers;
  • data centre and cloud operators.

ICT company products range from devices, servers and network equipment to software licences, fibre and mobile connectivity and online platforms, usually sold with the services to install, run and support them. Arke Technologies is an ICT company in that full sense. We run managed IT, cybersecurity, cloud, network, software and AI work; we supply hardware through Server Hub, our IT hardware division; and we connect business fibre and LTE through Fibre Boyz, our connectivity division. We are a member of the Internet Service Providers' Association of South Africa (ISPA) and bound by its Code of Conduct.

International IT companies in South Africa, local groups and specialists compared

International IT companies in South Africa are the local subsidiaries and branches of global technology, consulting and outsourcing firms. They compete with large South African ICT groups, the business divisions of telecoms operators and specialist managed service providers. Each suits a different buyer.

International IT companiesLarge South African ICT groupsTelecoms operators' business divisionsSpecialist managed service providers
Typical strengthsGlobal methods and tooling; vendor relationships at global level; capacity for multinational contractsA national footprint; breadth across many services; the balance sheet for very large contractsConnectivity, mobile and network services bundled with ITDirect access to the people who run your systems; quicker decisions; one accountable team
Watch forStandard global contracts that are hard to change; support queues or decisions that may sit offshore; fees that may be linked to the US dollarSeveral business units, so you may deal with more than one divisionIT services that come second to the connectivity lineDepth that varies widely between firms; continuity if key people leave
Often suitsMultinationals standardising across countriesNational rollouts and very large tendersOrganisations buying connectivity firstOrganisations whose estate fits within one provider's capacity, and that value responsiveness and written evidence over scale
Ask themWhere is our data hosted, and who is our escalation contact in South Africa?Which division owns our contract, end to end?Who supports the IT, not just the line?Who covers when your key people are away, and whose tooling do you run?

No category is best for everyone. A multinational standardising across many countries may need a global firm. A municipality needs a supplier that can produce its CSD registration, tax compliance status and B-BBEE documents, and support reporting under the MFMA. A school needs a supplier that understands learner data and a governing body's budget. Decide which category fits, then shortlist within it.

Two checks matter more with international firms. First, B-BBEE: groups owned offshore often have a different B-BBEE profile from South African firms, sometimes earning ownership points through equity-equivalent programmes, so check the level on the certificate or sworn affidavit of the entity that will contract with you. Second, data: section 72 of POPIA restricts transfers of personal information out of South Africa, so ask where your data, your backups and the provider's management tools are hosted.

Why a list of IT companies in South Africa is only a starting point

A list of IT companies in South Africa is easy to find: directories, industry rankings and published tender awards all produce one. Rankings of the biggest IT companies in South Africa usually measure revenue, headcount or market value, and by those measures the largest IT companies are the local arms of global firms, JSE-listed ICT groups and the telecoms operators' business divisions. None of those measures tells you who will answer your service desk, how a critical fault is handled late on a Friday, or what happens to your data when the contract ends.

Managed services work the same way. Rankings of the largest managed service providers, or a top 10 managed service providers list, usually reflect revenue, headcount or the publisher's own criteria. The biggest managed service providers bring capacity and breadth; the top managed service providers for your organisation are the ones that fit your scope and can prove their service in writing. Big IT companies and small ones both disappoint when the fit is wrong, and the top IT companies for you are the ones whose evidence survives your questions.

Treat any list of managed service providers, or an ICT company list from an industry body or a supplier database, as a long list. Add referrals from organisations like yours, then shortlist on evidence using the steps below.

How to choose an IT company: eight steps

  1. Define the outcome and the scope

    List what must never stop, what you run (users, devices, servers, sites, cloud services and key applications) and where the gaps are. The answers decide whether you need a managed service, a project or both.

  2. Choose the model

    fully managed, co-managed alongside your own team, or project work. Our guide to managed IT vs in-house IT compares them.

  3. Shortlist three to six providers in the category that fits.

  4. Send one brief to all of them, with the same scope, user count, term and exclusions, so the proposals compare like for like.

  5. Score the written answers against the criteria below, weighted for your risks.

  6. Check the evidence

    a sample monthly report, reference calls with organisations like yours, and the procurement documents your policy requires.

  7. Negotiate the SLA and the exit, not only the price

    priority definitions, reporting, change control, and the handover of data, credentials and documentation.

  8. Plan the transition

    an onboarding timetable, a handover from your current provider and the date on which responsibility passes.

Prices vary widely, and scope explains most of the difference; our guide to how much managed IT services cost in South Africa shows how to compare quotes like for like.

The criteria that separate IT companies

Weight these for your organisation. A hospital, a municipality and a school will not weight them the same way.

CriterionWhat good looks likeEvidence to ask for
ScopeA written scope that matches your estate, with exclusions listedA proposal written against your brief
Service levelsIncidents prioritised by business impact, for example P1 (critical outage) to P4 (low-impact request), with response and resolution targets agreed for your organisationA sample SLA and a recent performance report
Governance and reportingA monthly service review, a named service lead, an escalation path and change controlA sample monthly report and an escalation matrix
Security and accessRemote sessions approved and logged; least-privilege admin accounts; controls aligned with a recognised framework such as ISO/IEC 27001 or the NIST Cybersecurity FrameworkThe access policy and a sample session log
Data protectionA written operator agreement under POPIA, with data locations namedThe contract clauses and the hosting locations
People and skillsCertified technicians, with cover for leave and turnoverWho will do the work, and their certifications
ToolingMonitoring, ticketing and remote access the provider can explain and account forA demonstration
CommercialsA fee per user or per device for a defined scope, with projects quoted separatelyA price schedule showing exclusions and annual adjustments
Procurement complianceB-BBEE status, tax compliance, CSD registration and company documentsThe documents themselves
Continuity and exitYour organisation owns its data, credentials and documentation, with a contracted handoverThe exit clause

For the security row, our guides to what cyber security involves and ISO 27001 certification explain the frameworks. Note that "aligned with ISO 27001" and "ISO 27001 certified" are different claims, so ask which one a provider means.

Red flags when choosing an IT company

  • No written SLA, or service promises that live only in a brochure.
  • Exclusions you discover on the first invoice, such as on-site visits, after-hours work or licence administration billed separately.
  • Shared or provider-held admin accounts, so you cannot reach your own systems without the provider.
  • Remote-access tools nobody can account for, with sessions that are neither approved nor logged.
  • Your domain, or your Microsoft 365 or Google Workspace tenant, registered in the provider's name rather than your organisation's.
  • No sample report, or reports that count tickets without saying what changed.
  • Procurement documents that arrive late or not at all, which can stall a public-sector award.
  • Automatic renewal with no exit clause, or a handover charged at whatever rate applies on the day.

Governance and procurement checks for boards, public bodies and schools

  • Departments, public entities and municipalities buy within the PFMA or the MFMA. Suppliers need to be registered on the Central Supplier Database and tax compliant, and bids usually require standard bidding documents (SBD forms, or MBD forms for municipalities). See PFMA, MFMA and ICT procurement and our CSD registration guide.
  • Governing bodies stay accountable. King V, which replaced King IV for financial years starting on or after 1 January 2026, places the governance of data, information and technology with the governing body (Principle 10, successor to King IV's Principle 12), whoever runs the IT. It also asks boards to manage the risks of outsourced technology services, including minimum requirements for the assurance a provider gives on its controls. See technology governance under the King Code.
  • Schools should check how a provider protects learner and parent data under POPIA, which sets stricter conditions for children's personal information (sections 34 and 35), and whether it can work to the governing body's budget and approval cycle; see IT for schools and education.
  • B-BBEE recognition follows the contracting entity's level: a Level 1 contributor gives buyers 135% procurement recognition.

ICT companies in Africa: working across borders

Many organisations run operations in more than one country, and many ICT companies in Africa support them across borders. If yours does, check four things: whether the provider has people where yours are, whether it knows each country's tax and company-registration systems, whether its contracts and data handling respect each country's privacy law (POPIA in South Africa), and whether support works in your time zone.

Arke Technologies (Pty) Ltd has its head office in Greenstone Hill, Johannesburg. Our team builds with SARS and CIPC interfaces.

Where Arke Technologies fits

Arke Technologies (Pty) Ltd is a South African ICT company for mid-sized and large organisations, public bodies and schools. The company has traded since 2017, first as Fibre Boyz, an internet service provider, and took the Arke Technologies name in September 2026 as it expanded into managed IT, cybersecurity, software, AI and cloud. Put us through the same test as anyone else; this is what you would find:

  • One contract and one accountable team across managed IT, cybersecurity, cloud, networks, software, systems integration, AI and business software, with hardware from Server Hub and connectivity from Fibre Boyz.
  • Our own tooling. Remote access runs on our own platform, built on open-source RustDesk with a management system we own, on our own servers in Johannesburg, and every session is approved and logged. Monitoring checks each computer every 15 minutes and logs faults as tickets automatically.
  • An SLA written for your organisation. Incidents are prioritised from P1 to P4, with response and resolution targets matched to the business impact of downtime, and you receive a monthly service review and report.
  • Procurement documents on request. We are a Level 1 B-BBEE contributor (sworn affidavit available on request). Our CSD supplier number, SARS tax compliance status and company documents are available on request, and we complete SBD forms, or MBD forms for municipalities, when a bid requires them. See company facts.
  • A clean exit. You own your data, credentials and documentation, and we hand them over in an orderly way if you leave.

Start with managed IT services, or see how we work with enterprises and government and the public sector.

Related services

Related guides

Get our guides by email

Plain, sourced guides for the people who decide on and buy technology, sent to your inbox.

Topics (optional)

Leave these clear to receive everything.

By signing up, you agree that Arke Technologies (Pty) Ltd may email you guides and updates. Every email includes an unsubscribe link. Read our privacy notice.

Frequently asked questions

What does an IT company do? Show answer

An IT company designs, supplies, runs and secures the technology other organisations depend on. That can mean running a service desk, managing devices and servers, securing networks and cloud services, building or integrating software, supplying hardware and licences, or advising a board on IT strategy. Most IT companies specialise, so match the provider to the work you need done.

What is an ICT company? Show answer

An ICT company supplies, builds or runs information and communication technology: computers, software and data, plus the networks, connectivity and telephony that link them. Telecoms operators, internet service providers, systems integrators, managed service providers and software houses are all ICT companies. Public-sector tenders usually say ICT, so one bid may cover both IT and communications services.

Which is the biggest IT company in South Africa? Show answer

It depends on the measure, because revenue, headcount and market value each produce a different ranking. By revenue, the biggest IT companies in South Africa are generally JSE-listed ICT groups, the business divisions of telecoms operators and the local arms of global technology firms. Size suits national rollouts; for most organisations, fit and evidence matter more.

Should we choose an international IT company or a South African one? Show answer

Choose an international IT company when you need one standard across many countries, and a South African provider when you want decisions, data handling and escalation close to home. Either way, check the B-BBEE level of the entity that will contract with you, where your data and the provider's management tools are hosted, and who your escalation contact in South Africa is.

What should an IT company's contract include? Show answer

The contract should fix the scope, the priority levels with their response and resolution targets, the exclusions, the on-site policy, the price per user or per device, and the term. It should also set reporting and service reviews, escalation and change control, POPIA operator obligations, and an exit clause that returns your data, admin credentials and documentation.

How long does it take to switch IT companies? Show answer

Two things set the pace: the time the new provider needs to document your systems, collect credentials and install monitoring, and the notice period in your current contract, which fixes the earliest date responsibility can pass. At Arke Technologies the timetable is set in the proposal after discovery and assessment, and responsibility passes on an agreed date, area by area where that lowers the risk.

Put us to the same test

Ask us the questions in this guide and compare our written answers with anyone else's. Call 010 447 2445 or email info@arketechnologies.com, or read more insights and guides.

Request an IT assessment