VoIP Buyer protection

Can you trust your VoIP provider? Run these seven checks first

Any provider can promise 99.9% uptime in a sales deck. South Africa’s public registers, the review platforms and your own contract reading let you test those promises before you sign – and most of it takes one afternoon.

7trust checks before you sign anything
2public registers: ICASA licensees and CIPC companies
8.8 hdowntime a year that a 99.9% SLA still allows
Port firstnever cancel an old service before your number moves

The short answer

How do you know if you can trust the VoIP provider quoting on your phone system?

Verify instead of believing. Check the provider’s ICASA licence and CIPC registration on the public registers, get the uptime guarantee as a written SLA, read review patterns on HelloPeter and Google, confirm security and POPIA practices, test support before you are a customer, and read the contract’s exit terms. A trustworthy provider passes all seven checks without flinching.

0
checks you can run from your desk
0
yearly downtime a 99.9% SLA permits
0
free public registers to consult
0
contract red flags to scan for
South African Business Owner Reviewing Provider Documents And A Comparison Checklist At A Desk
Every meaningful trust signal – licence, registration, SLA, review history – is checkable before you sign, from your own desk.

Why trust matters more with VoIP than with most purchases

When you sign with a VoIP provider, your inbound number, your call quality and often your call recordings all live on their platform.

A bad office chair is an annoyance. A bad phone provider is missed orders, a dead inbound number during your busiest week, and a porting fight when you try to leave. The switching cost is what separates this purchase from most others: once your number sits on a provider’s platform, leaving takes a port, and a provider that behaves badly on exit can make that slow and painful.

The good news is that South Africa makes verification unusually practical. The regulator publishes who is licensed. The companies register shows who you are actually contracting with. And two review platforms carry years of unfiltered customer history on most established providers. None of this requires the provider’s cooperation, which is exactly the point.

The principle: a trustworthy provider makes its claims easy to verify. If a claim cannot be checked anywhere, treat it as marketing, not fact.

Check 1 & 2: the licence and the company behind the quote

Two public registers tell you whether the provider legally exists and is licensed to sell you a telecoms service.

The ICASA licence

Selling a voice service in South Africa requires a licence from ICASA, the communications regulator. The class matters. An ECS licence (Electronic Communications Service) covers providers that deliver a service over networks, which includes most VoIP resellers and software-led providers. An ECNS licence (Electronic Communications Network Service) covers operators that build and run their own network infrastructure. A provider that claims to run its own national voice network should hold both; a reseller needs only the ECS. Ask for the licence number and check it against ICASA’s published licensee registers at icasa.org.za.

One nuance worth knowing: in larger groups the licence often sits with the holding company rather than the trading subsidiary quoting you. That is normal. Ask which entity holds the licence rather than assuming the worst when the trading name does not appear in the register.

The CIPC record

The CIPC company register tells you whether the company is registered and in business, how long it has actually been trading, and who its directors are. A provider claiming “15 years of experience” with a company registered 18 months ago has some explaining to do. The registered entity name should also match the name on your quote and contract – if you are quoted by one entity and contracted by another, ask why.

Verify the claim at its source

“We are fully licensed” ICASA licensee registers “Established for 15 years” CIPC company register “99.9% uptime guaranteed” Written SLA with remedies “Our customers love us” HelloPeter + Google history

Check 3: get the uptime promise in writing, then do the maths

An uptime percentage on a website is a marketing line. An uptime percentage in a signed SLA, with defined remedies, is a commitment.

Ask for the Service Level Agreement before you sign, and read three things: the guaranteed uptime figure, how downtime is measured and reported, and what you get back when the provider misses the target. An SLA with no remedy clause is a promise with no consequences.

It also pays to understand what the percentages actually permit. The difference between 99.9% and 99.5% sounds trivial and is anything but:

SLA promise Downtime allowed per month Downtime allowed per year
99.9% ≈44 minutes ≈8.8 hours
99.5% ≈3.7 hours ≈43.8 hours
99.0% ≈7.3 hours ≈87.6 hours

Beyond the number, ask how the platform is built: does the provider have redundant data centres, failover routing if a site goes down, and a status page where outages are acknowledged publicly? A provider that publishes its incident history is telling you it expects to be held to account.

Check 4: read reviews for patterns, not scores

The star rating tells you less than the shape of the complaints and how the provider answers them.

HelloPeter and Google reviews are where South African customers vent and praise. Used properly, they are the closest thing you have to references you did not have to ask the provider for. Read them with three filters:

Recency beats volume. A provider with a rough patch three years ago and clean recent history has probably fixed something. The reverse pattern – historically fine, recently flooded with complaints – is the warning sign, because it often tracks an ownership change, a platform migration or a support team cut.

Patterns beat incidents. Every provider has an angry customer somewhere. What you are looking for is the same complaint repeating: billing surprises, ports that drag for weeks, support tickets that die in a queue. Three different customers describing the same failure is data.

Customers beat prospects. Weight reviews from people who actually use the service. A one-star review complaining about a persistent cold-caller tells you about the provider’s marketing, not its service quality.

Finally, watch how the provider responds. Public, specific replies that resolve issues are a good sign. Templated apologies pasted under every complaint are not.

Check 5: security and POPIA, asked plainly

Your calls, recordings and customer data will live on this provider’s infrastructure. Ask where, and how it is protected.

Three questions cover the essentials. First, is voice traffic encrypted in transit, and is signalling protected so credentials cannot be skimmed? Second, what fraud controls exist on SIP accounts – rate limits, geographic call blocking, alerts on abnormal call spikes? Hijacked VoIP credentials running premium-rate calls overnight remain one of the most expensive things that can happen to a small business phone bill, and a good provider has controls in place before you ask. Third, where do recordings and customer data live, and for how long? Under POPIA, call recordings and customer records are personal information; the provider should be able to tell you plainly where data is stored, who can access it and what its retention policy is.

!
Watch out: a provider that cannot answer the POPIA question crisply has not thought about it. Vague answers about data handling now become your compliance problem later.

Check 6: test support before you are a customer

Support quality on the sales call is the best it will ever be. Test the ordinary channels instead.

Before signing, contact the provider’s standard support line or email with a real technical question, and note three things: how long the response took, whether a human with technical knowledge answered, and whether you could reach them through more than one channel. A provider whose pre-sales support is already slow is showing you the honeymoon version of the relationship.

Ask practical questions too: what are the support hours, and what happens after hours? Is there an escalation path with names, or a ticket queue with no owner? For businesses that depend on on-site infrastructure, does the provider have technicians in your region, or does every physical issue mean a courier and a wait? Boots on the ground matter when something breaks at month-end.

Check 7: the exit test – how do they behave when customers leave?

A provider that makes leaving easy is safer to join. Porting behaviour is the cleanest trust signal there is.

South African number portability rules give you the right to take your number with you, and the process is initiated by the provider you are moving to, not the one you are leaving. Before you sign, ask two questions: “If I leave in two years, what does porting my numbers away involve?” and “Do you charge a port-away fee?” A clean answer is a provider planning to keep you with service. A defensive answer, or a fee designed to sting, tells you how the relationship ends before it starts.

The same rule protects you on the way in: when you move to the new provider, never cancel the old service before the port completes. A cancelled number can be lost rather than ported. Any provider worth trusting will sequence this for you without being asked.

Five contract red flags

The contract is where sales-deck promises either become commitments or quietly disappear.

Long lock-ins dressed as discountsA 36-month term with a punitive early-exit penalty shifts all the risk to you. Month-to-month or 12 months is common in this market; longer needs a reason.
Auto-renewal with a narrow escape windowContracts that quietly renew for another full term unless you cancel within a small window are designed to catch you sleeping.
No published rate cardIf per-minute rates, top-ups and once-off fees are not in writing, your “fixed” monthly cost is not fixed.
Hardware rental that never endsRenting handsets can make sense; renting them indefinitely at a price that exceeds their value within a year does not. Ask for the buy-out figure.
SLA promises missing from the contractIf the uptime guarantee from the proposal does not appear in the signed agreement with remedies attached, it does not exist.

A trustworthy provider makes its claims easy to verify and its customers easy to keep – without a lock-in doing the keeping.

WhichVoIP editorial view

Close-Up Of A Person Reviewing A Service Agreement At A Desk Beside A Phone And Laptop
The SLA and exit clauses are the two pages worth reading twice – they decide what happens when something goes wrong.

Our verdict

Trust in a VoIP provider is checkable, not a gut feel. The licence and company registers confirm who you are dealing with. The SLA converts an uptime claim into a commitment with consequences. Review history shows you how the provider behaves under pressure, and the porting questions show you how it behaves when customers leave. No single check is decisive; the pattern across all seven is. A provider that volunteers its licence number, hands over the SLA without being chased and answers the exit questions plainly is showing you how it operates.

Our recommendation: run all seven checks on every provider quoting you, score them side by side, and only then compare pricing. A cheap quote from a provider that fails three checks is not cheap.

Ready to shortlist providers that pass the checks?

Tell us what your business needs and get matched with vetted South African VoIP providers, or compare them side by side first.

Get quotes from vetted providers
Compare VoIP providers

Frequently asked questions

How do I check if a VoIP provider is licensed in South Africa?
Ask the provider for its licence number and licence class, then check it against ICASA’s published licensee registers at icasa.org.za. Resellers and software-led providers need an ECS licence; operators running their own network infrastructure hold an ECNS licence as well. In larger groups the licence may sit with the holding company, so ask which entity holds it.
What uptime guarantee should a VoIP provider offer?
Look for 99.9% or better, in a written SLA with defined remedies. The percentage matters: 99.9% still allows roughly 44 minutes of downtime a month, while 99.5% allows nearly four hours. An uptime figure that appears on the website but not in the signed agreement is marketing, not a commitment.
Are HelloPeter and Google reviews reliable for choosing a VoIP provider?
They are useful if you read patterns rather than scores. Weight recent reviews over old ones, look for the same complaint repeating across different customers, and discount reviews from people who were never customers. How the provider responds publicly to complaints is as informative as the complaints themselves.
What security features should a business VoIP provider have?
Encrypted voice traffic, protected SIP credentials, and fraud controls such as rate limits, geographic call blocking and alerts on abnormal call spikes. The provider should also answer POPIA questions plainly: where call recordings and customer data are stored, who can access them, and how long they are retained.
What are the red flags in a VoIP contract?
Long lock-in terms with punitive exit penalties, auto-renewal clauses with narrow cancellation windows, missing rate cards, open-ended hardware rental, and SLA promises that appear in the proposal but not in the signed contract. Any one of these shifts risk from the provider to you.
Can I keep my phone number if I leave a VoIP provider?
Yes. South African number portability rules let you port your number to a new provider, and the new provider initiates the process. Never cancel the old service before the port completes, because a cancelled number can be lost. Asking a provider about its port-away process before you sign is one of the best trust tests available.

Keep reading

How to choose the best VoIP provider
Number porting: keep your number when you switch
Compare South African VoIP providers
Independent provider reviews

Sources: ICASA licensing framework and number-portability regulations (icasa.org.za); CIPC company register; POPIA; SLA arithmetic from stated percentages. Verified 5 June 2026.

Now hiring Hire your AI receptionist