For NDPC-licensed Data Protection Compliance Organisations
Your whole client portfolio. One dashboard. CAR filings that build themselves.
A workspace per client — processing register, subject requests, a 72-hour breach log and an evidence trail — and one console across all of them. The Compliance Audit Return assembles from what is already in the file, before 31 March.
Free for the first year, per licence. No card, no checkout — the pilot cohort is capped at 15 firms.
Federal Republic of Nigeria
Nigeria Data Protection Commission
Portfolio · client 14
Register complete · 2 open requests
- DCMI level
- EHL
- CAR due in
- 212 days
- Evidence head
- sha256:9e4c…a1f7
351
Data Protection Compliance Organisations licensed by the NDPC. We do not compete with them — we equip them.
31 March
the annual deadline for the Compliance Audit Return, which UHL and EHL controllers may only file through a licensed DPCO (GAID art. 10(7), 10(14)).
72 hours
to notify the NDPC of a personal data breach, counted from becoming aware of it (NDPA s. 40(2)).
UHL · EHL · OHL
the three levels of major importance. Two of them file a return; OHL renews its registration instead (GAID art. 9(2)-(3)).
Figures from the NDPC published GAID 2025 — the transcription, its retrieval date and its hash are in docs/sources. Pending review by Nigerian counsel.
What a firm gets
One console, one workspace per client, one filing season
Portfolio console
Available
Every client on one screen, worst first: register status, open and overdue subject requests, breaches past the notification window, and what each return could not yet state. Counts only — client records stay inside each client own workspace.
Per-client workspace
Pilot
Its own register, subject requests, breach log and evidence trail, isolated by row-level security. Subject requests run end to end; the register and breach workflows are in build.
CAR generator
In build
The return assembled from what is already in the client file, exported and timestamped, with the filing tracked. Today the console counts down to the deadline and names what is missing; nothing assembles or files a return yet.
DCMI classifier
Pilot
UHL, EHL and OHL from the NDPC own Schedule 7 — named sector types and bounded volume bands — deciding which obligations apply. Where the level turns on Schedule 7 four-factor test, it says so instead of guessing.
Evidence trail
Available
A hash-chained, append-only log per client. The application database role has no UPDATE or DELETE on it, so history is corrected by writing a correcting event, never by editing one.
Your licence, protected
We are a tool, not a DPCO. We hold no licence, file nothing on our own account, and never come between your firm and its client. Your name is on the return; ours is on the software.
A capability marked "in build" is not sold and opens no subscription. It is listed because a firm choosing a platform for the 2027 season needs to know what is coming, not because it exists today.
Free self-assessment
Your exposure under NDPA 2023 + GAID 2025, in 20 questions
Twenty obligations, one per question, in plain business language. At the end: your score, your priorities and a remediation plan — no sign-up to answer.
Do you keep a written, up-to-date list of every file holding customer, employee or partner data (the processing register)?
The pilot
Free for a year. Then only for clients you are actually paid for.
The adoption risk sits with us, not with your firm. If a client organisation never becomes an active paying client, it never appears on an invoice.
Year one, free
Per NDPC licence, for the whole first year — including the clients you onboard during it. Nothing is invoiced before month thirteen.
Then per active paying client
A monthly rate for each client organisation your firm actually bills. No clients, no invoice.
Fifteen firms
The pilot cohort is capped, so that onboarding is done properly and the rate is set with the firms paying it.
The rate is not set. It will be agreed with the pilot cohort rather than announced to it, so no figure appears here — quoting one now would turn a number still being decided into one you would rightly hold us to.