Choosing an IT company in Pretoria in 2026 rests on evidence you can check before signing: severity-based SLA targets, a signed POPIA operator agreement, compliance maturity that survives public-sector and regulated-client scrutiny, verifiable accreditations, and a documented exit path. This guide is for Tshwane business owners, financial directors and operations managers comparing IT support providers across Pretoria, Centurion, Menlyn, Hatfield and the wider Gauteng North corridor.
Key takeaways
- Pretoria buyers more often sell into government, parastatals, universities and regulated bodies, so your IT provider's own compliance posture becomes part of your bid pack.
- Under POPIA, an IT provider processing personal information on your behalf is an operator, and section 21 of the Act requires a written agreement with defined safeguards.
- Expect roughly R650–R1,600 per user per month for fully managed IT support in Tshwane, with the range set by scope rather than by suburb.
- Pretoria and Johannesburg are one delivery region: a Gauteng-based provider can hold a genuine on-site attendance window for Centurion and Menlyn, so insist that it is written down.
- Ask for the evidence pack early: SANAS-accredited ISO/IEC 27001:2022 certificate number and scope, B-BBEE certificate, vendor partner status and last quarter's SLA performance.
The short version
The right IT company in Pretoria publishes measurable SLA targets, signs a POPIA operator agreement, can produce compliance evidence on demand, covers Tshwane addresses on site within a stated window, and writes clean exit terms. Compare price last, across identically scoped quotes.
What is different about IT support in Pretoria
Compliance is a commercial requirement, not a nice-to-have
Tshwane's buyer base skews towards government departments, state-owned entities, universities, research bodies and professional firms serving them. Those relationships pull compliance into your supply chain. Expect to be asked about information security certification, data residency, subcontractor disclosure, B-BBEE status and breach-notification processes. A provider that treats these as procurement noise will slow your bids down.
POPIA maturity should be demonstrable
The Protection of Personal Information Act is enforced by the Information Regulator, which has been active on enforcement notices since 2023. Ask your provider to walk you through the operator agreement, the register of who can access what, how access is revoked when an engineer leaves, and what the 72-hour-style notification workflow looks like in practice. Documented process beats a compliance claim on a website.
On-site cover across Tshwane is realistic
Pretoria sits inside the same delivery region as Johannesburg, roughly 60 kilometres from Sandton. A Gauteng provider can genuinely commit to on-site attendance in Centurion, Menlyn or Hatfield. The test is whether the SLA names your addresses and states a window per severity level, and whether after-hours call-outs are inside the retainer or billed separately.
Power, connectivity and the usual Gauteng realities
Load-shedding and municipal outages remain design inputs. Specify UPS runtime for the comms room, whether the generator feeds it, LTE or secondary-fibre failover, and documented behaviour for VoIP and Microsoft 365 during an outage. On the last mile, Openserve, Vumatel and Frogfoot cover most of the metro, with business services from Vox, MTN Business and Seacom on top.
Comparing Pretoria IT quotes fairly
| What to compare | Weak answer | Strong answer |
|---|---|---|
| SLA | "Best-effort support" | Severity targets plus last quarter's achieved performance |
| Compliance pack | "Ask us if needed" | Certificate numbers, scope statements and B-BBEE certificate up front |
| POPIA | "We are compliant" | Signed operator agreement with named breach-notification workflow |
| On-site | "We cover Gauteng" | Named Tshwane addresses with an attendance window per severity |
| Security | Antivirus and firewall | Monitoring, patch evidence, tenant-wide MFA, tested restores |
| Exit | 90-day notice, no detail | Documented offboarding, data export, tenant ownership confirmed |
Normalise scope before comparing rands. Our breakdown of what IT support costs a South African business lists the line items that move the number.
What Tshwane businesses actually pay
Fully managed support for a 20 to 250 seat business typically runs R650–R1,600 per user per month, covering the service desk, patching, endpoint protection, Microsoft 365 administration and backup. Co-managed cover, where an internal IT person keeps day-to-day work and the provider supplies escalation, security and projects, sits at about R350–R700 per user per month. Ad-hoc support runs R650–R950 per hour. Licences, hardware, migrations and cabling are separate lines in any credible proposal.
Other regions
Comparing providers elsewhere in South Africa? See our guides for Johannesburg, Cape Town and Durban.
How BroadVision helps
BroadVision is a Gauteng-based South African IT partner operating since 2000, supporting Pretoria and Centurion businesses with the same delivery team that covers Johannesburg. Our Managed IT Services run to defined SLA targets with monthly reporting and a signed POPIA operator agreement, Strategic IT Services covers governance, roadmap and the compliance evidence your bids require, and Cloud & Software handles Microsoft 365 and Azure estates. Start with a scoped assessment through our contact page.
FAQ
How much does IT support cost in Pretoria?
Roughly R650–R1,600 per user per month for a fully managed contract, R350–R700 per user per month for co-managed cover, and R650–R950 per hour for ad-hoc work. The variance comes from scope: after-hours cover, security monitoring, backup retention and on-site attendance move the figure far more than the suburb does. Compare only after normalising user counts, devices and exclusions across quotes. BroadVision itemises scope line by line under Managed IT Services.
Do I need an IT provider based in Pretoria specifically?
No, you need one that contractually covers Tshwane addresses. Pretoria and Johannesburg sit inside a single delivery region roughly 60 kilometres apart, and most incidents are resolved remotely anyway, so bench strength, escalation staffing and documentation quality matter more than the provider's street address. What must be written down is the list of covered addresses and the on-site attendance window per severity. BroadVision covers Pretoria and Centurion with the same Gauteng delivery team under Managed IT Services.
What compliance evidence should I ask an IT provider for?
A SANAS-accredited ISO/IEC 27001:2022 certificate number with its scope statement, a valid B-BBEE certificate, vendor partner status verifiable in the Microsoft or Cisco partner directory, a signed POPIA operator agreement, and a documented breach-notification workflow naming who notifies the Information Regulator and when. If you bid for public-sector or regulated work, request this pack at first meeting, because procurement will ask for it later anyway. BroadVision supplies the evidence pack during proposal as part of Strategic IT Services.
How does POPIA affect an IT provider serving Pretoria clients?
It makes them an operator. Section 21 of the Act requires a written agreement obliging the operator to maintain appropriate, reasonable security safeguards over personal information processed on your behalf, and you remain the responsible party throughout. In practice that means documented access control, revocation when engineers leave, encryption and backup handling, and an agreed notification path to the Information Regulator. BroadVision signs a POPIA operator agreement as standard through Managed IT Services.
What SLA targets are reasonable in Gauteng?
A 15–30 minute response on business-down incidents, resolution targets defined separately per severity, and an on-site attendance window stated for your address, usually within four business hours for a P1 in the Gauteng metro. Response without resolution is not a service, so weight the resolution clock more heavily when comparing. Ask for achieved performance against target for the previous quarter in writing. BroadVision reports monthly SLA performance to clients under Managed IT Services.
What should the exit clause say?
That you own your Microsoft 365 tenant and domain, that documentation is handed over in a usable format, that backup data is exportable, and that the notice period and any offboarding fee are fixed at signature. Providers confident in their service write generous exit terms, which is why that page predicts the relationship better than the pricing page does. Check it before you compare cost. BroadVision keeps tenant ownership and documentation with the client. See Strategic IT Services.